Privacy Policy

1 Personal Data We Collect

megafun collects personal data only to the extent necessary to operate a PAGCOR-licensed gaming platform, comply with Philippine legal obligations, and deliver a safe and personalised experience to Filipino players. The categories of data we collect are set out below.

1.1 Identity & Registration Data

When you register an account on megafun, we collect your full legal name, date of birth, gender, nationality, residential address, mobile number, and email address. This information is required to create your account, verify your identity, and comply with PAGCOR registration requirements.

1.2 KYC & Verification Documents

Prior to processing any withdrawal, megafun is required by PAGCOR to verify your identity. We collect scanned copies or photographs of valid Philippine government-issued identification documents, such as the PhilSys National ID, passport, driver's licence, or PRC ID. We may also collect proof of address (e.g., a utility bill or bank statement dated within 90 days) and, where required by enhanced due diligence procedures, documentation relating to your source of funds.

1.3 Financial & Transaction Data

We collect data related to your deposits and withdrawals, including your GCash number, Maya account, bank account details (where provided), USDT wallet address, transaction amounts, timestamps, and transaction reference numbers. We do not store full payment card numbers — card payments, if applicable, are handled by PCI-DSS-certified payment processors who transmit only tokenised references to megafun.

1.4 Gaming Activity Data

We collect detailed records of your gaming activity on the megafun platform, including game sessions, wager amounts, game outcomes, bonus claims and wagering progress, win/loss history, and session duration. This data is required for regulatory reporting to PAGCOR, responsible gaming monitoring, and the resolution of any disputes regarding game outcomes.

1.5 Technical & Device Data

1.6 Communications Data

If you contact megafun support via email, live chat, or any other channel, we retain records of those communications. This includes chat transcripts, email correspondence, and support ticket history. These records are used to resolve your queries, train support staff, and maintain an accurate account history.

2 How We Collect Your Data

megafun collects personal data through the following channels:

• Directly from you — when you register, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through cookies, server logs, and device fingerprinting technology as you use the megafun platform. See Section 10 for our full Cookie Policy.
• From third-party identity verification providers — when you submit KYC documents, our identity verification service provider processes and validates the documents and returns a verification result to megafun.
• From payment processors — transaction confirmation data, payment method validation results, and fraud risk scores are transmitted to megafun by our payment partners (GCash, Maya, BPI, BDO, UnionBank, Coins.ph, and USDT processing partners).
• From PAGCOR and other regulators — where required by law, we may receive information from PAGCOR or AMLC relating to player registration, exclusion lists, or regulatory investigations.

3 How We Use Your Data

megafun uses the personal data we collect for the following specific purposes:

• Account creation and management — registering your account, maintaining your player profile, and managing your megafun wallet.
• Identity verification (KYC) — confirming your age (21+ requirement) and identity as required by PAGCOR regulations before withdrawal processing.
• Payment processing — facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, Coins.ph, and USDT TRC20.
• Gaming operations — processing bets, recording game outcomes, calculating and crediting winnings, and managing bonus wagering requirements.
• Regulatory compliance — filing required reports with PAGCOR, responding to AMLC suspicious transaction reporting obligations, and maintaining records as required by Philippine law.
• Fraud prevention and AML monitoring — detecting and investigating suspicious account activity, multiple-account abuse, bonus abuse, and potential money laundering.
• Responsible gaming — monitoring gaming patterns to identify potential problem gambling behaviour, applying self-exclusion and deposit limits where instructed, and communicating responsible gaming resources.
• Customer support — responding to your queries, resolving disputes, and maintaining support records.
• Marketing and promotions — sending you personalised bonus offers and platform updates via email or SMS, where you have consented to receive such communications. You may opt out at any time.
• Platform improvement — using aggregated, anonymised analytics data to improve megafun's user interface, game selection, and overall player experience.

We do not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by law.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), megafun relies on the following lawful bases for processing your personal data:

5 Data Sharing & Third Parties

megafun does not sell, rent, or trade your personal data. We share personal data only in the following circumstances, and only to the minimum extent necessary:

5.1 Regulatory Authorities

As a PAGCOR-licensed operator, megafun is legally required to share player data with PAGCOR upon request. Under the Anti-Money Laundering Act (RA 9160), we are required to file Covered Transaction Reports (CTRs) and Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) when legally triggered. These disclosures are mandatory and cannot be refused.

5.2 Service Providers (Data Processors)

We engage third-party service providers who process personal data on megafun's behalf under written data processing agreements that bind them to confidentiality and compliance with RA 10173. These include:

• KYC / Identity Verification Providers — to validate government-issued IDs and perform facial recognition matching.
• Payment Processors — GCash (Mynt), Maya (Voyager Innovations), BancNet (for bank transfers), and USDT processing partners for handling deposit and withdrawal transactions.
• Cloud Infrastructure Providers — server hosting, database management, and CDN services.
• Customer Support Platform — live chat and ticketing system provider for managing support interactions.
• Analytics Providers — processing aggregated and anonymised platform usage data to improve performance.

5.3 Game Providers

Certain game providers (e.g., JILI, Pragmatic Play, Evolution Gaming) may receive a player session token and anonymised player identifier to facilitate game sessions. These providers do not receive your full name, contact details, or financial data. Game provider data access is governed by our contracts with each provider and their own privacy policies.

5.4 Law Enforcement

megafun may disclose personal data to law enforcement agencies, courts, or other government bodies where we are legally compelled to do so by a valid court order, subpoena, or equivalent legal process under Philippine law.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of megafun's business operations, player data may be transferred to the acquiring entity as part of that transaction. Any such transfer would be subject to equivalent data protection obligations, and affected players would be notified in advance.

6 Data Retention

megafun retains personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, and resolve any disputes that may arise. The retention periods below are our standard practice:

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. For anonymised data (where it is no longer possible to identify you), this policy no longer applies and megafun may retain such data indefinitely for analytical purposes.

7 Data Security

megafun implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include, but are not limited to:

• TLS 1.3 encryption for all data in transit between your device and megafun servers.
• AES-256 encryption for sensitive data at rest, including password hashes and KYC document storage.
• Two-factor authentication (2FA) available to all players and mandatory for all megafun administrative staff accounts.
• Role-based access controls ensuring that staff can only access player data necessary for their specific job function. No megafun employee has unrestricted access to the full player database.
• Regular penetration testing and third-party security audits conducted on the platform's infrastructure and application layer.
• Segregated storage environments for KYC documents, with access logs maintained for every retrieval event.
• Incident response procedures compliant with the NPC's mandatory breach notification requirements — in the event of a data breach affecting your rights, you will be notified within the timeframe required by law.

8 Your Rights Under Philippine Law

The Data Privacy Act of 2012 grants you the following rights in relation to your personal data held by megafun. You may exercise any of these rights by contacting our Data Protection Officer at [email protected].

megafun will respond to verified data subject requests within fifteen (15) business days of receipt, in compliance with the NPC's standard response timeframe. Some requests may require identity verification before they can be processed, to ensure we are responding to the correct data subject.

9 Cookies & Tracking Technologies

megafun uses cookies and similar tracking technologies to operate the platform, maintain your session, prevent fraud, and improve your experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and notification preferences. Disabling these may reduce platform convenience.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, how long sessions last, and where errors occur. This data helps megafun improve the platform experience. No personally identifiable information is included in analytics data.
• Security Cookies: Used for device fingerprinting and fraud detection. These help megafun identify and block suspicious login attempts and detect multiple-account violations.

megafun does not use third-party advertising cookies or retargeting pixels. Your megafun browsing behaviour is not shared with advertising networks.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the megafun platform.

10 Minors & Age Restriction

The megafun platform is strictly for persons aged 21 years and older. Philippine law (as administered by PAGCOR) sets the minimum gambling age at 21. megafun does not knowingly collect personal data from any person under 21 years of age.

During the registration process, players are required to declare their date of birth. KYC verification — which is mandatory before any withdrawal — confirms age through government-issued ID validation. Any account found to belong to a person under 21 will be closed immediately and all funds handled in accordance with PAGCOR regulations.

If you believe that a person under 21 has registered on megafun using false information, please report this to our support team at [email protected] immediately. We take underage gambling extremely seriously and act on all such reports without delay.

11 Cross-Border Data Transfers

Some of megafun's third-party service providers — including cloud infrastructure providers and game providers — may be located outside the Philippines and may process your personal data in other jurisdictions. Where such transfers occur, megafun ensures that adequate data protection safeguards are in place, consistent with the requirements of the Data Privacy Act of 2012 and NPC regulations on cross-border data transfers.

Specifically, megafun requires all overseas service providers to execute data processing agreements that include standard contractual clauses approved by the NPC, obliging those providers to protect your personal data to a standard equivalent to Philippine law. Where a service provider is located in a jurisdiction with an adequacy determination by the NPC, we rely on that determination as the transfer mechanism.

By registering on megafun and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside the Philippines as described in this section, subject to the safeguards outlined above.

12 Changes to This Privacy Policy

megafun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or platform features. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date at the top;
• Display a prominent notice on the megafun platform for at least 14 days following a material change; and
• Send an email notification to all registered players with an active account, summarising the key changes.

Your continued use of the megafun platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any updated version of this policy, you have the right to close your account by contacting our support team before the effective date of the change.

We encourage you to review this Privacy Policy periodically to stay informed about how megafun protects your personal data. Non-material changes — such as corrections to typographical errors or clarifications that do not alter your rights — may be made without prior notice.

13 Contact Our Data Protection Officer

megafun has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to your personal data or this policy, please contact our DPO using the details below:

To process your request efficiently, please include your registered account username, the nature of your request (e.g., access, correction, deletion), and a brief description. We may need to verify your identity before processing certain requests to protect your account security.