megaph Privacy Policy

1. Introduction and Scope

megaph is committed to protecting the privacy and security of your personal information. As a PAGCOR-licensed online gaming operator in the Philippines, we process personal data in accordance with the highest standards of data protection and regulatory compliance.

This Privacy Policy applies to all personal information collected through the megaph website (https://megaph.cam), mobile applications, customer support channels, and any other digital platforms operated by megaph. It covers both registered users and visitors who access our services.

By creating a megaph account, accessing our website, or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any provision of this Policy, you must immediately cease using megaph services.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a megaph account or use our services, you voluntarily provide us with personal information including:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (passport, driver's license, UMID, postal ID)
• Contact Information: Email address, mobile phone number, residential address, postal code
• Financial Information: Bank account details, e-wallet account information (GCash, Maya), payment method details, transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued IDs, utility bills, bank statements, selfie photographs for identity verification
• Account Credentials: Username, password, security questions and answers, PIN codes
• Communication Data: Contents of correspondence with customer support, live chat transcripts, email communications, feedback submissions

2.2 Information Collected Automatically

When you access megaph services, we automatically collect technical and behavioral information including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID)
• Connection Data: IP address, internet service provider, geographic location, time zone, access times
• Usage Data: Pages visited, features accessed, games played, betting patterns, session duration, click paths, referral sources
• Gaming Activity: Bet amounts, game selections, win/loss records, bonus utilization, wagering history, progressive jackpot participation
• Cookies and Tracking Data: Cookie identifiers, web beacons, pixel tags, local storage data (see Section 8 for details)

2.3 Information from Third Parties

megaph may receive personal information from external sources including:

• Payment Processors: Transaction verification data, payment status, fraud risk assessment from GCash, Maya, banks, and other financial institutions
• Identity Verification Services: Age verification, identity authentication, address validation from third-party verification providers
• Game Providers: Gameplay data, RNG results, progressive jackpot information from licensed game developers and content suppliers
• Regulatory Authorities: Compliance-related information, investigation data, sanction lists from PAGCOR and other government agencies
• Marketing Partners: Referral information, attribution data, campaign performance metrics from authorized affiliates (where applicable)

3. How We Use Your Information

3.1 Lawful Basis for Processing

megaph processes your personal information based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to provide gaming services, process transactions, and fulfill our obligations under the Terms & Conditions
• Legal Compliance: Processing is required to comply with Philippine laws, PAGCOR regulations, anti-money laundering (AML) requirements, and regulatory reporting obligations
• Legitimate Interests: Processing is necessary for fraud prevention, platform security, business analytics, and service improvement, balanced against your privacy rights
• Consent: Where you have given explicit, informed, and freely given consent for specific processing activities such as marketing communications

3.2 Primary Purposes

megaph uses your personal information for the following purposes:

• Account Management: Creating and maintaining your account, authenticating your identity, verifying eligibility, managing login credentials
• Gaming Services: Processing bets, calculating payouts, managing bonuses, tracking wagering requirements, operating progressive jackpots, facilitating game selection
• Payment Processing: Processing deposits and withdrawals, verifying payment methods, preventing payment fraud, reconciling financial transactions, issuing refunds
• Customer Support: Responding to inquiries, resolving disputes, providing technical assistance, handling complaints, improving service quality
• Regulatory Compliance: Verifying age and identity, conducting Know Your Customer (KYC) checks, screening against sanction lists, reporting suspicious transactions to authorities, maintaining regulatory records
• Fraud Prevention: Detecting and preventing fraud, money laundering, collusion, bonus abuse, account takeovers, and other prohibited activities
• Responsible Gaming: Monitoring for problem gambling indicators, implementing deposit limits, facilitating self-exclusion, providing responsible gaming tools
• Security: Protecting platform integrity, preventing unauthorized access, detecting security vulnerabilities, investigating security incidents
• Communications: Sending account notifications, transaction confirmations, security alerts, service updates, regulatory communications (where consent is provided, marketing materials)
• Analytics and Improvement: Analyzing user behavior, improving platform performance, optimizing user experience, developing new features, conducting market research

4. Information Sharing and Disclosure

4.1 Service Providers and Business Partners

megaph may share your personal information with trusted third-party service providers who assist in operating our platform, including:

• Payment Processors: GCash, Maya, banks, and other financial institutions to process deposits and withdrawals
• Game Providers: Licensed software developers who supply casino games, live dealer solutions, and gaming content
• Identity Verification Services: Third-party providers who verify your identity, age, and address
• Cloud Service Providers: Hosting and data storage providers who maintain our technical infrastructure
• Customer Support Tools: Live chat platforms, ticketing systems, and communication service providers
• Analytics Providers: Services that help us understand user behavior and improve our platform

All third-party service providers are contractually bound to process your information only for specified purposes, maintain confidentiality, and implement appropriate security measures.

4.2 Regulatory and Legal Disclosures

megaph is legally obligated to disclose personal information to regulatory authorities and law enforcement agencies in certain circumstances:

• PAGCOR: Regulatory reports, compliance audits, investigation assistance, suspicious activity reporting
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports, covered transaction reports, compliance with AML directives
• Law Enforcement: Responses to valid legal process (subpoenas, court orders, warrants), cooperation with criminal investigations
• Tax Authorities: Reporting of winnings subject to withholding tax, compliance with revenue regulations
• National Privacy Commission: Data breach notifications, compliance reporting, investigation cooperation

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity as part of the business transaction. We will notify affected users via email and prominent website notice prior to any such transfer.

4.4 Aggregate and De-identified Data

megaph may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. This data may be used for statistical analysis, market research, industry reports, or shared with business partners without restriction.

5. Data Security Measures

5.1 Technical Security Controls

megaph implements industry-standard technical security measures to protect your personal information:

• Encryption: All sensitive data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 encryption
• Access Controls: Role-based access controls ensure that only authorized personnel can access personal information on a need-to-know basis
• Authentication: Multi-factor authentication (MFA) for administrative access and sensitive account operations
• Network Security: Firewalls, intrusion detection systems, and DDoS protection to prevent unauthorized access
• Secure Development: Security testing, code reviews, and vulnerability assessments throughout the software development lifecycle
• Data Segregation: Logical and physical separation of customer data from other system components

5.2 Organizational Security Measures

In addition to technical controls, megaph maintains comprehensive organizational security practices:

• Regular employee training on data protection and security best practices
• Confidentiality agreements and background checks for employees with access to personal information
• Incident response procedures for data breaches and security events
• Regular security audits and penetration testing by independent third parties
• Business continuity and disaster recovery plans to ensure data availability

5.3 User Responsibilities

While megaph implements robust security measures, you also have a responsibility to protect your account:

• Choose a strong, unique password and do not share it with others
• Enable two-factor authentication (2FA) when available
• Log out after each session, especially on shared devices
• Keep your contact information current to receive security notifications
• Report suspicious activity or unauthorized access immediately
• Use secure internet connections and avoid public Wi-Fi for sensitive transactions

6. Data Retention and Deletion

6.1 Retention Periods

megaph retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations:

• Active Accounts: Personal information is retained for the duration of your account activity and for a reasonable period thereafter
• Closed Accounts: After account closure, personal information is retained for a minimum of five (5) years to comply with PAGCOR record-keeping requirements, AML regulations, and tax laws
• Transaction Records: Financial transaction data is retained for seven (7) years in accordance with Philippine bookkeeping and tax regulations
• KYC Documents: Verification documents are retained for seven (7) years following account closure to satisfy regulatory compliance obligations
• Communications: Customer support records and correspondence are retained for three (3) years for quality assurance and dispute resolution
• Marketing Data: Where consent is withdrawn, marketing data is deleted or anonymized within thirty (30) days unless retention is required for legal compliance

6.2 Secure Deletion

Upon expiration of retention periods, megaph securely deletes or anonymizes personal information using industry-standard data destruction methods. Backup copies are purged in accordance with backup retention schedules, typically within ninety (90) days of primary deletion.

7. Your Privacy Rights

7.1 Right to Access

You have the right to request access to the personal information we hold about you. Upon verification of your identity, megaph will provide a copy of your personal data in a commonly used electronic format within thirty (30) days.

7.2 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction. You may update certain information directly through your account settings, or contact customer support for assistance.

7.3 Right to Erasure

You may request deletion of your personal information, subject to certain legal limitations. megaph may be required to retain information for regulatory compliance, legal proceedings, or legitimate business purposes even after account closure.

7.4 Right to Object and Restrict Processing

You have the right to object to certain types of data processing, such as direct marketing. You may also request restriction of processing in specific circumstances, such as during a dispute about data accuracy.

7.5 Right to Data Portability

Where technically feasible, you may request a copy of your personal information in a structured, machine-readable format that can be transmitted to another service provider.

7.6 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. However, withdrawal does not affect the lawfulness of processing conducted prior to withdrawal, and megaph may continue to process information on other legal grounds.

7.7 Exercising Your Rights

To exercise any of your privacy rights, please contact megaph customer support via email or live chat. We will respond to verified requests within thirty (30) days. If your request is complex or voluminous, we may extend this period by an additional sixty (60) days with notice.

8. Cookies and Tracking Technologies

8.1 Types of Cookies Used

megaph uses cookies and similar tracking technologies to enhance user experience and analyze platform performance:

• Essential Cookies: Necessary for platform operation, session management, authentication, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and customization choices to improve usability.
• Analytics Cookies: Collect information about how visitors use megaph, which pages are visited most frequently, and where errors occur.
• Marketing Cookies: Track your activity across websites to deliver personalized advertisements and measure campaign effectiveness (where consent is provided).

8.2 Managing Cookies

You can manage cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of the megaph platform. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored.

9. International Data Transfers

megaph primarily stores and processes personal information within the Philippines. However, some service providers and business partners may be located outside the Philippines, including in jurisdictions that may not provide the same level of data protection.

Where personal information is transferred internationally, megaph implements appropriate safeguards such as Standard Contractual Clauses (SCCs), binding corporate rules, or verification that the recipient country has been recognized by the National Privacy Commission as providing adequate data protection.

By using megaph services, you acknowledge and consent to such international transfers where necessary to provide our services or comply with legal obligations.

10. Protection of Minors

megaph services are strictly intended for individuals aged 21 years or older. We do not knowingly collect, process, or retain personal information from persons under 21 years of age.

If we become aware that a minor has provided personal information or created an account, we will immediately suspend the account, delete all associated personal information, and forfeit any funds in accordance with our Terms & Conditions.

Parents and guardians who believe their child has provided information to megaph should contact us immediately at the email address provided in Section 12.

11. Changes to This Privacy Policy

megaph reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational considerations. Material changes will be communicated via email notification to registered users and prominent notice on our website at least thirty (30) days prior to the effective date.

Your continued use of megaph services after the effective date of changes constitutes acceptance of the modified Privacy Policy. If you do not agree to the changes, you must discontinue use of our services and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact our Data Protection Officer:

megaph Philippines Inc.
Data Protection Officer
Email: [email protected]
Privacy Inquiries: [email protected]
Customer Support: [email protected]
Live Chat: Available 24/7 via website

National Privacy Commission:
If you are not satisfied with our response to your privacy concerns, you may file a complaint with the National Privacy Commission:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City 1308
Email: [email protected]
Website: privacy.gov.ph