Privacy Policy

1 Introduction

meg111 ("the Company", "we", "us", or "our") operates the online betting and gaming platform accessible at https://meg111.cam. In the course of providing our services to players across Indonesia and other eligible jurisdictions, we necessarily collect and process personal data. We take this responsibility seriously.

This Privacy Policy sets out a transparent and complete account of our data practices. It covers what personal data we collect, the legal grounds on which we process it, the purposes for which it is used, how long we retain it, with whom we share it, and the rights you hold as a data subject. Our practices are aligned with internationally recognised data protection principles including those embodied in the GDPR framework, which we voluntarily adopt as a baseline standard for all players regardless of their country of residence.

If you have any questions about this Policy or wish to exercise any of your data rights, please refer to Section 15 (Contact & DPO) for the appropriate contact details.

2 Definitions

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, meg111.
• "Data Processor" means a third party that Processes Personal Data on behalf of the Data Controller under a binding data processing agreement.
• "Data Subject" means you — the individual whose Personal Data is being Processed.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process required by our international licensing obligations.
• "Platform" means the meg111 website, its sub-pages, and any associated mobile-optimised interfaces.

3 Data Controller

The Data Controller responsible for the Personal Data you provide through the Platform is meg111, an internationally licensed online gaming operator. For the purposes of this Policy, meg111 is the sole Data Controller of all Personal Data collected via the Platform.

Where meg111 engages third-party service providers (for example, payment processors, game studios, or analytics platforms) to assist in delivering our services, those providers act as Data Processors under written agreements that bind them to our data protection standards. They are not permitted to use your Personal Data for their own independent purposes.

4 Personal Data We Collect

The table below summarises the categories of Personal Data we collect and the primary purpose for each:

We do not collect special-category sensitive data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless you voluntarily disclose such information in a support communication. Where this occurs, that data is used solely to address your specific enquiry and is not retained beyond the resolution of your case.

5 How We Collect Personal Data

We collect Personal Data through the following channels:

• Direct submission: Information you provide when registering your Account, completing KYC, making a deposit, submitting a withdrawal request, or contacting our support team.
• Automated technologies: Cookies, web beacons, and server logs that capture Technical and Usage Data as you interact with the Platform. See Section 11 for our full Cookies Policy.
• Third-party sources: Identity verification agencies and fraud-screening services that cross-reference the details you provide to confirm their accuracy.
• Payment providers: When you initiate a deposit or withdrawal, your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) shares transaction confirmation data with us to reconcile your account balance.

6 Purpose & Legal Basis for Processing

We process your Personal Data only where we have a valid legal basis to do so. The following table maps each processing purpose to its legal ground:

Where we rely on Consent as our legal basis (for example, to send you marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To opt out of marketing communications, contact our support team or use the unsubscribe mechanism in any email we send you.

7 Data Sharing & Disclosure

meg111 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — to facilitate transaction processing. These entities are independent data controllers in respect of your banking information and are governed by their own privacy policies.
• Game and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe, and other licensed studios — to deliver game content. We share only user identifiers necessary for account management; game studios do not receive your banking details.
• Identity verification and fraud-screening agencies: To validate the accuracy of your KYC documents and to flag potential fraudulent activity.
• Regulatory and law enforcement authorities: Where we are legally compelled to disclose data, or where disclosure is necessary to protect the rights, safety, or property of meg111, its players, or the public.
• Professional advisers: External auditors, legal counsel, and insolvency or gaming-industry consultants, under strict confidentiality obligations.
• Affiliates and group entities: To the extent necessary to operate, or to enable you to use, the Platform's services.

Where we share data with service providers acting as Data Processors, we enter into written agreements that require those providers to process the data only on our documented instructions, to protect the data with appropriate security measures, and to delete or return it once the processing relationship ends.

8 International Data Transfers

meg111 is an internationally licensed operator, and as such your Personal Data may be transferred to, stored in, and processed in countries outside of Indonesia. These locations include the jurisdiction in which our licence is held, our secure data centres, and the operating jurisdictions of our service providers.

Wherever your data is transferred outside Indonesia, we ensure that appropriate safeguards are in place, including but not limited to:

• Data processing agreements incorporating recognised Standard Contractual Clauses
• Verification of the receiving party's compliance with internationally recognised data protection standards
• Where applicable, reliance on adequacy decisions or equivalent transfer mechanisms

Regardless of where your data is processed, it is always handled in accordance with the principles set out in this Policy and the protections described in Section 10 (Security Measures).

9 Data Retention

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or for such longer period as required by our legal, regulatory, and licensing obligations. The table below outlines our retention schedule:

Once the retention period has lapsed, your Personal Data is securely deleted, anonymised, or irreversibly de-identified. Where data is not subject to an overriding legal retention obligation, it may be anonymised for statistical analysis purposes.

10 Security Measures

The security of your Personal Data is a top priority at meg111. We deploy a multi-layered security architecture that includes the following measures:

• Encryption in transit: All traffic between your browser and our servers is encrypted using TLS 1.3 protocol, ensuring that data cannot be intercepted in transit.
• Encryption at rest: Personal and financial data stored on our servers is encrypted using AES-256, a globally recognised encryption standard.
• Access controls: Access to personal data within meg111 is restricted to authorised personnel on a strict need-to-know basis, with multi-factor authentication required for all administrative access.
• Secure infrastructure: Our data centres are protected by physical access controls, 24/7 monitoring, and redundant systems designed to prevent service disruption.
• Fraud monitoring: Automated fraud-detection systems continuously monitor account activity for suspicious behaviour, flagging anomalies for manual review.
• Regular penetration testing: Independent third-party security audits are conducted on a scheduled basis to identify and remediate vulnerabilities.
• Incident response plan: In the event of a data breach, we have a documented incident response procedure and will notify affected players and relevant authorities in accordance with applicable laws within 72 hours where required.

While we take reasonable and proportionate measures to protect your data, no method of transmission or storage over the internet is completely secure. We cannot guarantee absolute security, but we are committed to using industry-leading safeguards and to updating our practices as new threats and technologies emerge.

11 Cookies Policy

Cookies are small text files that are stored on your device when you visit a website. meg111 uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for core Platform function, including maintaining your login session and remembering your security preferences. These cannot be disabled, as the Platform would not function correctly without them.
• Functional cookies: Used to remember your language and interface preferences, so that your experience is consistent across visits.
• Analytics cookies: Help us understand how players interact with the Platform, including which pages are most popular and where users encounter difficulties. These are aggregated and do not identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, such as session hijacking, cross-site scripting, or other cyber threats.

meg111 does not deploy third-party advertising cookies or cross-site tracking pixels that would follow you across other websites. Where any non-essential cookies are deployed, your consent will be sought at the time of first visit.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies; however, disabling essential cookies may prevent you from accessing certain features of the Platform. Refer to your browser's help documentation for specific instructions.

12 Your Data Protection Rights

As a Data Subject, you hold the following rights over your Personal Data held by meg111, in accordance with internationally recognised data protection principles:

• Right of Access: Request a copy of the Personal Data we hold about you and information about how it is processed.
• Right to Rectification: Request that we correct inaccurate or incomplete Personal Data.
• Right to Erasure: Request deletion or removal of your Personal Data where there is no compelling legal ground for continued processing.
• Right to Restriction of Processing: Request that we limit the manner in which we process your data in certain circumstances.
• Right to Data Portability: Request that we provide your Personal Data in a structured, machine-readable format and transmit it to another controller.
• Right to Object: Object to processing carried out on the basis of legitimate interests, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: Raise a concern with our Data Protection team or with the relevant supervisory authority in your jurisdiction.

To exercise any of these rights, submit a written request to our Data Protection contact (see Section 15). We will respond within 30 days of receipt. Where you exercise your Right to Erasure, note that we may be legally required to retain certain data — such as transaction records — for compliance with AML and gaming licensing obligations.

13 Minors & 21+ Policy

The Platform is strictly for adults aged 21 years and above. meg111 does not knowingly collect, process, or retain Personal Data from any person under the age of 21. If we discover that we have inadvertently processed data belonging to a minor, we will delete such data immediately without prejudice to any other action we may take under our Terms & Conditions.

If you believe that a person under 21 has registered an account on the Platform, please notify our support team immediately so that we can investigate and take appropriate action. We encourage parents and guardians to monitor their children's internet usage and to report any underage access they become aware of.

14 Policy Amendments

meg111 may update this Privacy Policy from time to time to reflect changes in our practices, our technology, or applicable legal requirements. Where we make material changes, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the amended Policy, you should close your Account and cease using the Platform before the changes take effect. The "Last updated" date at the top of this page indicates the most recent revision.

15 Contact & Data Protection Officer

For any questions, requests to exercise your data rights, or complaints relating to this Privacy Policy or the handling of your Personal Data, please contact our Data Protection team using the channel below:

Please note that the email address above is displayed as plain text for reference only and is not a clickable link. For the fastest response to a privacy concern, please use the live chat feature within your Account dashboard. Standard response time is 4 hours during WIB (UTC+7) business hours.

You also retain the right to lodge a complaint directly with any applicable data protection or gaming regulatory authority. meg111 will fully cooperate with any such investigation and will keep you informed of the outcome of any complaint you raise with us directly.