Privacy Policy

1. Scope and Application

This Privacy Policy ("Policy") applies to all personal data processed by meg777 ("we," "us," or "our") in connection with the operation of the meg777 platform accessible at https://meg777.cam and any associated mobile or desktop applications.

This Policy applies to all current and prospective users of the meg777 platform, including individuals who browse the website without registering an account, registered account holders, and any party who contacts meg777 customer support. By accessing or using meg777 services, you acknowledge that you have read and understood this Policy. If you do not agree with any provisions herein, you must discontinue use of meg777 services immediately.

This Policy should be read in conjunction with meg777's Terms & Conditions, which form an integral part of the contractual relationship between you and meg777.

2. Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject").
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Controller" means meg777, which determines the purposes and means of processing Personal Data.
• "Processor" means any third party that processes Personal Data on behalf of meg777.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data.
• "KYC" means Know Your Customer — the identity verification process required for regulatory compliance and fraud prevention.
• "Cookies" means small text files stored on your device by your browser when you visit meg777, which help us recognise you on return visits and improve platform functionality.

3. Data We Collect

3.1 Identity and Contact Data

When you register an account with meg777, we collect information necessary to identify you and manage your account, including:

• Full legal name as it appears on your government-issued identification.
• Date of birth (to verify that you meet the minimum age requirement of 21 years).
• Indonesian National Identity Card number (Nomor Induk Kependudukan / NIK) and a copy or photograph of your KTP.
• Email address and mobile phone number.
• Residential address in Indonesia.
• Selfie photograph for biometric identity verification where required.

3.2 Financial Data

To process deposits and withdrawals, meg777 collects payment-related data, including:

• Bank account details (account name, account number, and bank name — for example, BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata).
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja where used for transactions.
• Transaction history including deposits, withdrawals, bonuses credited, and gaming wagers.
• Source-of-funds declarations where required for anti-money laundering compliance.

3.3 Technical and Usage Data

When you access and use meg777, we automatically collect technical information, including:

• IP address, device type, operating system, and browser version.
• Pages visited, time spent on pages, and navigation paths within the platform.
• Login timestamps, session durations, and geographic location data derived from your IP address.
• Game participation data including game titles accessed, bet amounts placed, and outcomes.
• Click-stream data and interaction logs for platform optimisation and fraud detection purposes.

3.4 Communication Data

When you contact meg777 customer support via Live Chat, email, WhatsApp, or in-app messaging, we retain records of those communications, including the content of messages, attachments submitted, and support ticket details. These records are used to resolve your enquiry, improve service quality, and maintain accurate records of account-related interactions.

3.5 Responsible Gaming Data

Where you utilise meg777's responsible gaming tools (deposit limits, loss limits, session time controls, self-exclusion, or reality check reminders), we maintain records of those settings and any changes made. This data is used exclusively to enforce your stated preferences and protect your welfare.

4. How We Collect Data

meg777 collects Personal Data through the following means:

4.1 Direct Collection

Data you voluntarily provide during account registration, KYC verification, payment transactions, support interactions, or when completing responsible gaming settings and self-assessments.

4.2 Automated Collection

Technical and usage data collected automatically through cookies, server logs, and analytics tools when you access and interact with the meg777 platform. Automated collection occurs from first access, including visits to the platform without a registered account.

4.3 Third-Party Sources

meg777 may receive data from trusted third parties to supplement your profile or verify information, including:

• Payment processors and banking partners (transaction confirmation and fraud signals).
• Identity verification services (cross-referencing KTP data for KYC compliance).
• Fraud prevention and anti-money laundering screening services.
• Publicly available sources where relevant to account integrity investigations.

5. Legal Basis for Processing

meg777 processes your Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to deliver the services you have contracted for, including account management, payment processing, and game provision.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering (AML) regulations, KYC requirements, and data retention mandates.
• Legitimate Interests: Processing carried out in the legitimate business interests of meg777, including fraud prevention, platform security, service improvement, and responsible gaming enforcement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, including optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Data

meg777 uses your Personal Data for the following purposes:

7. Data Sharing and Disclosure

7.1 Service Providers and Processors

meg777 engages trusted third-party service providers who process Personal Data on our behalf under binding data processing agreements. These providers are contractually prohibited from using your data for any purpose other than providing services to meg777. Categories of providers include:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and related financial institutions).
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft).
• Identity verification and KYC service providers.
• Cloud hosting, infrastructure, and cybersecurity providers.
• Customer support platform providers.
• Analytics service providers (data processed in aggregated, pseudonymised form).

7.2 Legal and Regulatory Disclosure

meg777 may disclos e Personal Data to law enforcement agencies, regulatory authorities, courts, or other governmental bodies where required by law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of meg777's business, your Personal Data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any changes to this Policy that may result.

7.4 What We Do Not Do

meg777 will never:

• Sell, rent, or trade your Personal Data to advertisers, data brokers, or marketing companies.
• Share your Personal Data with third parties for their own independent marketing purposes.
• Disclose your Personal Data to any party not described in this Policy without your prior explicit consent, except where legally required.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

meg777 uses the following categories of cookies and similar tracking technologies when you access the platform:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without preventing you from using core platform features.
• Functional Cookies: Remember your preferences such as language settings, currency display, and responsible gaming tool configurations to provide a personalised experience on return visits.
• Analytics Cookies: Collect aggregated, pseudonymised data about how users interact with the platform. This information helps us understand usage patterns and improve the platform. Analytics data does not identify you personally.
• Security Cookies: Support our fraud detection and account security systems by identifying unusual access patterns or suspicious session behaviour.

8.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most browsers allow you to view, block, or delete cookies through the browser's privacy or settings menu. Please note that disabling certain cookies may impair platform functionality. Strictly necessary cookies cannot be disabled as they are integral to the secure operation of your account.

9. Data Retention

meg777 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Account Data: Retained for the duration of your active account relationship with meg777 and for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering and financial record-keeping requirements.
• Transaction Records: Financial transaction data, including deposits, withdrawals, and gaming activity, is retained for a minimum of five (5) years from the date of each transaction to satisfy regulatory and audit obligations.
• KYC Documentation: Identity verification documents are retained for the duration of your account and for five (5) years after account closure or the last significant transaction, whichever is later.
• Support Communications: Customer support interaction records are retained for three (3) years from the date of the interaction to facilitate dispute resolution and service quality review.
• Marketing Consent Records: Records of your consent to or opt-out from marketing communications are retained for as long as your account remains active and for three (3) years thereafter.
• Technical Logs: Server and access logs are retained for twelve (12) months and then deleted or anonymised unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with you.

10. Data Security

meg777 implements a layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and meg777 servers is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
• Encryption at Rest: Sensitive Personal Data, including identity documents and financial records, is encrypted at rest on our servers using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to meg777 personnel who require it to perform their job functions. All access is logged and subject to regular audit.
• Two-Factor Authentication: Available for all user accounts and mandatory for all administrative system access.
• Regular Security Audits: Independent third-party security assessments and penetration testing are conducted on a regular basis to identify and remediate vulnerabilities.
• Intrusion Detection Systems: Continuous monitoring of our infrastructure for anomalous activity, with automated alerting and incident response procedures.
• Staff Training: All meg777 personnel with access to Personal Data receive mandatory data protection and information security training.

11. Your Privacy Rights

As a user of meg777 and a resident of Indonesia, you have the following rights in relation to your Personal Data:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and information about how we process it. Requests are fulfilled within thirty (30) calendar days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data. Many data fields (such as contact details) can be updated directly through your account settings.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligation to retain certain records for regulatory compliance.
• Right to Restriction of Processing: You have the right to request that we limit the processing of your Personal Data in certain circumstances — for example, while we verify the accuracy of data you have disputed.
• Right to Data Portability: You have the right to receive the Personal Data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data based on our legitimate interests. You also have the right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time through your account settings or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15 below. We will respond to all valid requests within thirty (30) calendar days. In complex cases or where we receive a high volume of requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

12. Protection of Minors

meg777 is an adult gaming platform. Our services are strictly available to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under 21 years of age. Our registration process includes date-of-birth verification and KYC identity checks specifically designed to prevent underage access.

If you believe that a person under the age of 21 has registered an account with meg777 or that meg777 has inadvertently collected Personal Data from a minor, please contact us immediately at the details provided in Section 15. Upon confirmation of underage registration, we will immediately suspend the account and securely delete all associated Personal Data.

Parents and guardians are encouraged to use parental control software and to monitor their children's internet activity to prevent access to online gaming platforms. Free parental control tools are widely available from internet service providers and third-party software vendors.

13. International Data Transfers

meg777 primarily processes your Personal Data on servers located within secure data centre facilities. To operate the platform effectively, some Personal Data may be processed by our service providers in jurisdictions outside Indonesia. When such transfers occur, meg777 ensures that appropriate safeguards are in place to protect your data, including:

• Binding contractual clauses in data processing agreements with third-party processors that require equivalent data protection standards.
• Transfers only to jurisdictions that provide an adequate level of data protection as determined by applicable legal standards.
• Regular assessment of third-party processor compliance with contractual data protection obligations.

By using meg777 services, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia. meg777 takes all reasonable steps to ensure that any such transfers are conducted lawfully and with appropriate protections in place.

14. Changes to This Policy

meg777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When we make material changes to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Notify registered users via email or in-app notification at least fourteen (14) days before the changes take effect, where the changes materially affect your rights or our data processing activities.
• Where required by law, seek your renewed consent before applying changes that affect processing based on consent.

We encourage you to review this Policy periodically. Your continued use of meg777 services following notification of changes constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must discontinue use of meg777 services and may request account closure as described in our Terms & Conditions.

15. Contact & Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, you may contact meg777's Data Protection Officer through the following channels:

• Email: [email protected] (please include "Privacy — DPO" in your subject line for fastest routing)
• Live Chat: Available 24/7 via the meg777 platform — request escalation to the Data Protection team
• Support Hours: 24/7, with specialist privacy responses delivered within two (2) business days

All privacy-related enquiries are handled with strict confidentiality by meg777's dedicated data protection team. We are committed to resolving all concerns promptly, professionally, and in full accordance with your rights under applicable data protection law.