Your privacy matters to us. This policy explains exactly what personal data mega88 collects, why we collect it, how we protect it, and the rights you hold over your own information.
Last Updated: January 1, 2026These six principles summarize how mega88 handles your personal data. The full legal text follows in the detailed policy sections below.
All data transmitted between your device and the mega88 platform is protected with TLS 1.3 encryption. Sensitive data at rest — including payment details and identity documents — is encrypted using AES-256 standards.
mega88 collects only the personal data that is strictly necessary to operate your Account, process transactions, comply with KYC obligations, and deliver the Services. We do not collect data for its own sake.
mega88 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing is limited to operational partners who are contractually bound to our privacy standards.
You have the right to access, correct, or request deletion of your personal data at any time by contacting our support team. We will respond to all verified data requests within 30 days of receipt.
mega88 uses cookies and similar technologies to ensure the platform functions correctly, remember your session preferences, and improve your overall experience. We do not use third-party advertising cookies.
Your data is not held indefinitely. mega88 applies defined retention schedules: Account data is retained for the duration of the Account plus five years; KYC documents are retained for seven years to meet regulatory requirements.
This Privacy Policy applies to all personal data processed by mega88 in connection with the operation of the online gaming platform at https://mega88.beer. By creating an Account or otherwise using the platform, you acknowledge that you have read and understood this policy. If you do not agree to its terms, you should not use our Services.
In this Privacy Policy, the following terms have the meanings set out below:
This Privacy Policy applies to all Personal Data collected by mega88 through:
This policy does not apply to third-party websites or services that may be referenced on the platform. We encourage you to review the privacy policies of any third-party service you access independently.
mega88 acts as the data controller for all Personal Data described in this policy. This means we determine the purposes and means of processing your data and are responsible for ensuring that processing is carried out lawfully and transparently.
mega88 collects Personal Data across several categories, described in the table below. We collect only what is necessary for the stated purpose.
| Data Category | What We Collect | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, national identity number (KTP), gender | Account registration, KYC verification, age confirmation (21+), fraud prevention |
| Contact Data | Email address, phone number, residential address in Indonesia | Account communications, transaction notifications, customer support, marketing (with consent) |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, etc.), e-wallet account IDs (OVO, DANA, GoPay, etc.), transaction history | Processing deposits and withdrawals, reconciling payments, detecting suspicious financial activity |
| KYC Documents | Scanned copy of KTP, proof of address, selfie with ID | Identity verification, anti-money-laundering compliance, preventing underage gambling |
| Gameplay Data | Bet history, game sessions, betting patterns, deposit/withdrawal frequency, bonus claims | Account management, responsible gaming monitoring, dispute resolution, bonus abuse detection |
| Technical Data | IP address, browser type and version, device identifiers, operating system, time zone (WIB / WITA / WIT), screen resolution | Platform security, fraud detection, technical troubleshooting, session management |
| Communication Data | Live chat transcripts, email correspondence with support, feedback survey responses | Customer service delivery, quality assurance, training, complaint resolution |
Important: You are required to provide Identity Data, Contact Data, Financial Data, and KYC Documents to open and maintain an Account. If you decline to provide this data, mega88 will be unable to register your Account or process withdrawals. All other data categories are collected automatically or on an optional basis.
mega88 processes your Personal Data for the following specific purposes:
To create, maintain, and secure your Account; to authenticate your identity when you log in; to process changes to your Account details; and to communicate important Account-related information such as password resets and Account closure confirmations.
To accept and credit deposits from your chosen payment method (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja); to process withdrawal requests; to reconcile payment confirmations; and to maintain an accurate transaction ledger for your Account.
To verify that you are at least 21 years of age and a resident of Indonesia; to confirm your identity in accordance with applicable anti-money-laundering standards; to detect and prevent fraudulent use of payment instruments; and to comply with legal obligations imposed by Indonesian financial authorities.
To allow you to place bets on sports markets (including football, badminton, e-sports, and MotoGP), play live casino games with Evolution Gaming and other providers, spin slot titles from Pragmatic Play and Pocket Games Soft, participate in togel draws, and access all other features of the mega88 platform.
To monitor betting patterns for signs of problem gambling; to enforce deposit limits, loss limits, and session time restrictions that you set through your Account dashboard; to process self-exclusion requests; and to respond to responsible gaming support inquiries.
To answer your questions via live chat and email; to investigate and resolve technical issues, payment disputes, and gameplay queries; to conduct quality assurance reviews of customer service interactions; and to train support staff.
To detect automated bot activity, multi-accounting, collusion, and bonus abuse; to block login attempts from high-risk IP addresses; to investigate suspected money laundering or other unlawful use of the platform; and to enforce the Prohibited Conduct provisions of the Terms & Conditions.
To send you promotional emails about new bonuses, seasonal campaigns (Idul Fitri, Chinese New Year, Indonesian Independence Day), and exclusive VIP offers — only if you have opted in to marketing communications. You may withdraw consent at any time via the unsubscribe link in any promotional email.
To analyze aggregated, anonymized usage data to identify which games and features are most popular; to test new interface designs; to optimize loading times and reduce technical errors; and to inform our product development roadmap.
Under applicable data protection principles, mega88 must have a lawful basis for processing your Personal Data. The table below maps our processing activities to their legal basis:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and administration | Contractual necessity: required to perform the contract between you and mega88 as set out in the Terms & Conditions. |
| Transaction processing (deposits & withdrawals) | Contractual necessity: required to execute your instructions and settle financial obligations. |
| KYC verification | Legal obligation: required to comply with anti-money-laundering and responsible gaming laws applicable in Indonesia. |
| Fraud prevention and platform security | Legitimate interest: protecting the integrity of the platform, preventing financial crime, and safeguarding all users. |
| Customer support delivery | Contractual necessity: required to fulfill our obligation to provide support as part of the Services. |
| Responsible gaming monitoring | Legal obligation & legitimate interest: meeting our duty of care to protect vulnerable users and prevent gambling harm. |
| Marketing communications | Consent: sent only to users who have opted in; you may withdraw consent at any time. |
| Platform improvement and analytics | Legitimate interest: improving the quality and usability of the platform for the benefit of all users. |
mega88 does not sell your Personal Data. We share data only with trusted partners who assist us in operating the platform, and only to the extent necessary for the specified purpose. Recipients include:
We share Financial Data with payment gateway partners who process transactions through BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These partners are contractually bound to use your data only to process your payment instructions and are prohibited from retaining data longer than necessary.
We share limited session data (Account ID, bet amounts, win/loss results) with game studio partners including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe to enable real-time gameplay and ensure accurate bet settlement. Game providers do not receive your Identity Data or Contact Data.
We share KYC Data with specialized identity verification vendors who use automated systems to cross-reference your submitted documents against official databases. We also share Technical Data with fraud detection platforms that analyze login patterns and device fingerprints to identify suspicious activity.
Live chat transcripts and support tickets are processed through cloud-based customer service platforms. These providers store Communication Data on our behalf and are contractually prohibited from using it for their own purposes.
mega88 may disclose Personal Data to law enforcement agencies, financial regulators, or judicial authorities where required by law, in response to a valid subpoena or court order, or where disclosure is necessary to prevent imminent harm, investigate fraud, or enforce our Terms & Conditions.
All third-party data processors engaged by mega88 are required to sign data processing agreements that impose confidentiality obligations, restrict data use to the contracted purpose, and mandate deletion of data once the service is complete.
mega88 operates primarily in Indonesia and processes data within Indonesian territory wherever technically feasible. However, some of our service providers — particularly cloud infrastructure providers and game studios — operate data centers outside Indonesia. Where Personal Data is transferred internationally, we ensure that appropriate safeguards are in place:
You have the right to request details of the safeguards applied to any specific international transfer by contacting our support team.
mega88 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Type | Retention Period |
|---|---|
| Identity & Contact Data | Duration of Account plus 5 years after Account closure |
| KYC Documents | 7 years after Account closure (legal requirement for anti-money-laundering compliance) |
| Financial Data & Transaction Records | 7 years after the transaction date (tax and audit requirements) |
| Gameplay Data | Duration of Account plus 5 years (required for dispute resolution and pattern analysis) |
| Communication Data (support logs) | 3 years after the conversation date |
| Technical Data (IP logs, device identifiers) | 90 days in active logs; anonymized data may be retained indefinitely for security analysis |
| Marketing Consent Records | Duration of Account plus 2 years (to defend against claims of unauthorized marketing) |
Once the applicable retention period expires, your Personal Data is securely deleted from all active systems. Archived backups may retain data for up to an additional 12 months, after which backups are overwritten or destroyed.
mega88 implements industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, and malicious attacks. Our security framework includes:
All data transmitted between your device and our servers is protected using TLS 1.3 encryption. Sensitive data at rest — including payment details, KYC documents, and passwords — is encrypted using AES-256.
Access to Personal Data within mega88 is restricted on a need-to-know basis. Employees and contractors are assigned role-based permissions and must authenticate using multi-factor authentication (MFA) before accessing production systems.
Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and DDoS mitigation services. All servers are hosted in secure, access-controlled data centers with 24/7 monitoring.
mega88 conducts regular internal security reviews and engages third-party security firms to perform penetration testing and vulnerability assessments. Critical vulnerabilities are remediated within 48 hours of identification.
In the event of a data breach affecting your Personal Data, mega88 will notify affected users within 72 hours of becoming aware of the breach, describe the nature and scope of the incident, and outline steps being taken to mitigate harm.
Your Responsibility: While mega88 implements robust security measures, you also play a role in protecting your Account. Use a strong, unique password; do not share your login credentials; and always log out when using a shared device.
mega88 uses cookies and similar technologies to ensure the platform functions correctly and to improve your user experience. The table below describes each type of cookie we use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, load balancing, security tokens — required for the platform to function. | Session (deleted when browser closes) or up to 30 days |
| Functional | Remember your language preference, time zone (WIB/WITA/WIT), theme settings, and last-visited page. | Up to 1 year |
| Performance | Collect anonymized data about page load times, which features are most used, and where errors occur. | Up to 2 years |
| Targeting (if consent given) | Track which promotions you viewed to avoid showing the same offer repeatedly; personalize bonus recommendations. | Up to 6 months |
You may configure your browser to reject all cookies or to alert you when a cookie is being set. However, disabling strictly necessary cookies will prevent you from logging in or placing bets. Performance and targeting cookies can be disabled without affecting core functionality.
mega88 does not use third-party advertising networks or cross-site tracking technologies. All cookies are first-party cookies set by the mega88 domain.
You hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team using the details in Section 14.
You may request a copy of all Personal Data mega88 holds about you. We will provide this in a structured, commonly used format (typically PDF or CSV) within 30 days.
If any Personal Data we hold is inaccurate or incomplete, you have the right to request correction. We will update your records within 10 business days of verification.
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (for marketing). Legal obligations may prevent immediate deletion in some cases.
You may request that we temporarily suspend processing of your Personal Data while we investigate a dispute over accuracy or lawfulness of processing.
Where processing is based on consent or contract and carried out by automated means, you may request that we transfer your data to another provider in a machine-readable format.
You may object to processing based on legitimate interests (e.g., direct marketing). We will cease the objected-to processing unless we can demonstrate compelling legitimate grounds that override your interests.
To verify your identity when exercising these rights, we may require you to provide a copy of your KTP or to authenticate via your registered email address. This protects your Personal Data from unauthorized access requests.
mega88 strictly prohibits the use of our Services by individuals under the age of 21. We do not knowingly collect Personal Data from minors. Our KYC verification process is designed to detect and reject underage registration attempts.
If we become aware that we have inadvertently collected Personal Data from an individual under 21 years of age, we will immediately close the associated Account, delete all collected data, and confiscate any deposited funds pending contact with a parent or legal guardian.
Parents or guardians who discover that a minor has registered an Account on mega88 should contact our support team immediately at [email protected].
mega88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or the Services we offer. Material changes will be communicated via email to the address registered on your Account and via a prominent notice on the platform homepage.
The "Last Updated" date at the top of this policy indicates when the most recent revision was published. We encourage you to review this policy periodically to stay informed about how we are protecting your Personal Data.
Continued use of the platform after the effective date of a revised policy constitutes acceptance of the updated terms.
If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or need to raise a complaint regarding how your Personal Data has been handled, please contact the mega88 support team:
We commit to acknowledging all privacy-related inquiries within 24 hours and providing a substantive response within 30 days of receiving all necessary information to verify your identity and process your request.
If you are not satisfied with our response, you have the right to lodge a complaint with the Indonesian data protection authority or other competent supervisory body in your jurisdiction of residence.
Our support team is here to help. You can also review our Terms & Conditions to understand your rights as a player, or visit our FAQ for common data protection questions.