Privacy Policy — megabets

1. Information We Collect

megabets collects personal data that is necessary to provide you with a secure, compliant, and fully functional betting and gaming experience. We collect information in three ways: directly from you during registration and account use, automatically through your interactions with the platform, and from trusted third-party service providers where applicable.

The categories of personal data we collect are set out in the table below, along with the primary reason each category is required:

You are not obligated to provide all requested information, but please be aware that withholding mandatory data — such as identity verification documents during KYC review — may result in restrictions being applied to your account, including suspension of withdrawal functionality until the required information is received and verified.

2. How We Use Your Data

megabets uses your personal data only for legitimate purposes directly connected to operating the platform and providing services to you as a registered player. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The lawful bases on which we process your data are: performance of a contract (your account agreement), legal obligation (KYC and anti-money-laundering compliance), legitimate interests (fraud prevention, platform security), and, where required, your explicit consent.

• Account management: Creating and maintaining your megabets account, processing login authentication, managing account settings, and applying responsible gaming tools such as deposit limits and self-exclusion periods that you have requested.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, processing withdrawal requests to your verified BDT payment method, and maintaining accurate transaction records for your account history.
• Identity and age verification: Verifying that you are who you say you are, that you are at least 18 years of age, and that your payment methods are registered in your own name — all in accordance with our KYC obligations and the 18+ age restriction policy.
• Customer support: Responding to queries, complaints, and account disputes submitted via live chat or email. Support interaction records are retained to ensure continuity of service and to support the fair resolution of any escalated complaint.
• Fraud prevention and security: Monitoring account activity for unusual patterns, detecting and investigating suspected bonus abuse, collusion, or use of automated tools, and taking protective action where the integrity of the platform or other players is at risk.
• Platform communications: Sending transactional notifications (deposit confirmations, withdrawal updates, OTP codes), important account alerts, and — where you have opted in — promotional communications about relevant offers, seasonal events (e.g., Eid promotions, BPL season offers), and new features.
• Legal and regulatory compliance: Retaining records as required by applicable anti-money-laundering rules, responding to lawful requests from competent authorities, and enforcing these Terms & Conditions.

3. Data Sharing & Third Parties

megabets does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.

• Payment service providers: When you make a deposit or withdrawal, relevant transaction data is shared with your chosen payment processor — bKash, Nagad, Rocket, Upay, Visa, or Mastercard — to complete the financial transaction. These providers are bound by their own data protection obligations and applicable financial regulations.
• Identity verification services: To fulfil KYC requirements, we may share identity documents and related data with trusted third-party verification service providers. These partners are contractually required to use the data solely for the purpose of completing the verification check.
• Game software providers: Game studios and live casino providers (including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi) may receive anonymised session data necessary to render games within the platform. No personally identifiable information is transferred to game providers beyond what is technically required for the game session.
• IT infrastructure and cloud services: megabets uses reputable hosting and infrastructure providers to store and process platform data. These providers operate under data processing agreements that restrict their use of data to infrastructure-related purposes only.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or other competent public authorities when required to do so by law, court order, or other binding legal process. Where permissible, we will notify the affected account holder before making such a disclosure.
• Business transfers: In the event that megabets undergoes a merger, acquisition, or sale of business assets, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance via their registered email address.

4. Cookies & Tracking Technologies

megabets uses cookies and similar tracking technologies to keep the platform functioning correctly, to maintain the security of your session, and to understand how players interact with the site so that we can continuously improve the experience.

A cookie is a small text file that is placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device. The types of cookies used on megabets are described below:

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your megabets account and using core platform features. Disabling functional or analytical cookies will not prevent you from accessing the platform but may affect the quality of your experience.

5. Data Retention & Storage

megabets retains your personal data for as long as your account is active and for a defined period thereafter, as required by legal, regulatory, and contractual obligations. We do not retain data for longer than is necessary for the purpose for which it was collected.

• Active account data: All personal data associated with an active megabets account is retained for the lifetime of the account. This includes identity data, contact data, transaction records, and bet history.
• Post-closure retention: Following voluntary account closure or platform-initiated termination, core account records including identity verification documents and transaction history are retained for a minimum of five (5) years to meet anti-money-laundering and financial record-keeping obligations.
• Support and correspondence records: Chat logs, email correspondence, and complaint records are retained for a period of three (3) years from the date of the final interaction, to support ongoing dispute resolution and quality review processes.
• Technical and usage data: Server logs and anonymised usage analytics are retained for up to twenty-four (24) months, after which they are permanently deleted or irreversibly anonymised.
• Dormant accounts: Accounts with no recorded login activity for twelve (12) consecutive months are classified as dormant. The account holder is notified by email before any dormancy policy is applied. Dormant account data is subject to the same retention schedule as active accounts unless the account holder requests deletion in accordance with their rights under Section 6 of this Policy.

6. Your Data Rights

As a registered account holder on megabets, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of them, please contact the support team via live chat from within your account dashboard or by sending a written request to support@megabets from your registered email address. All valid data subject requests will be processed within fifteen (15) business days of receipt.

• Right of access: You have the right to request a copy of all personal data that megabets holds about you, along with information about how and why that data is being processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly within your account settings panel without needing to contact support.
• Right to erasure: You may request that megabets delete your personal data where there is no longer a lawful basis for retaining it. Please note that this right is subject to overriding legal obligations — for example, we are required to retain financial transaction records for a minimum of five years regardless of an erasure request.
• Right to restrict processing: In certain circumstances — for example, while the accuracy of your data is being contested — you may request that we pause the processing of your data without deleting it.
• Right to data portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to megabets, and to have that data transmitted directly to another service provider where technically feasible.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. We will honour such objections unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where data processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect processing already completed before the withdrawal date.

7. Data Security Measures

megabets takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, alteration, or destruction. No online platform can guarantee absolute security, but we maintain industry-standard protections and continuously review and update our security posture.

• Encryption in transit: All data transmitted between your device and megabets servers is encrypted using 256-bit SSL/TLS protocols. This includes the registration form, login screen, deposit and withdrawal flows, and all in-session platform activity.
• Encryption at rest: Sensitive data fields — including passwords, payment instrument references, and identity document metadata — are encrypted at rest using AES-256 encryption standards. Passwords are never stored in plain text.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific operational role. All access events are logged and subject to periodic audit.
• Two-factor authentication: megabets offers two-factor authentication (2FA) for all account holders. Enabling 2FA significantly reduces the risk of unauthorised account access even if login credentials are compromised. We strongly recommend enabling 2FA from the account security settings.
• Penetration testing: The platform undergoes regular independent security assessments including penetration testing and vulnerability scanning. Identified issues are prioritised and remediated according to their severity rating.
• Incident response: megabets maintains a documented data breach response plan. In the event of a confirmed breach affecting personal data, affected account holders will be notified via their registered email address within seventy-two (72) hours of the breach being confirmed.

8. Changes to This Policy

megabets reserves the right to update, revise, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, or our data processing practices. When material changes are made, we will notify registered account holders via the email address associated with their account, and display a prominent notice on the platform at next login.

The effective date at the top of this document reflects when the current version of the Privacy Policy came into force. We encourage you to review this page periodically to stay informed about how megabets handles your personal data. Continued use of the platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy, about how megabets uses your personal data, or about how to exercise your data rights, please contact our support team at any time. Support is available 24 hours a day, 7 days a week, via live chat from within your account dashboard. You may also send written enquiries to support@megabets from your registered email address and expect a response within two (2) business days.

This Privacy Policy was last reviewed and updated on 1 January 2026.