MegaFun Privacy Policy — Your Data, Protected

MegaFun is an online gaming platform operated under a PAGCOR license and accessible at megafun.best. For the purpose of this Privacy Policy, "MegaFun," "we," "us," and "our" refer to the company that owns and operates the megafun.best platform. "You," "Player," or "User" refers to any person who registers an account, browses the platform, or otherwise interacts with MegaFun's services.

MegaFun is the data controller with respect to all personal data collected through the platform. This means we determine how and why your data is processed. Our Data Protection Officer (DPO) oversees compliance with the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its implementing rules. Contact details for the DPO are provided in Section 14 of this policy.

MegaFun collects personal data through several channels — your registration form, ongoing account activity, payment processing, and technical interactions with the platform. Here is a breakdown of the categories of data we collect:

Registration & Identity Data: Full legal name, date of birth, gender, nationality, Philippine mobile number, email address, and a username of your choosing. This information is provided by you when you create your MegaFun account.

KYC Verification Data: Government-issued identification document (e.g., Philippine passport, driver's license, SSS ID, PhilSys, PRC, UMID), a selfie or liveness check image, proof of address, and payment method ownership documentation. This is collected during the identity verification process required before your first withdrawal.

Financial & Transaction Data: Deposit amounts, withdrawal requests, payment method details (e.g., GCash number, Maya number, bank account last four digits), transaction timestamps, and wallet balance history. MegaFun does not store full bank card numbers or full e-wallet credentials — these are handled directly by your payment provider.

Gaming Activity Data: Games played, bet amounts, bet history, win/loss records, bonus usage, and session duration. This data is integral to operating your account, settling bets, and calculating bonuses or VIP rewards.

Technical & Device Data: IP address, device type, browser type and version, operating system, referring URL, and unique device identifiers. This data is collected automatically when you access megafun.best.

Communications Data: Records of your interactions with MegaFun's support team via live chat or email, including the content of messages sent and received.

Every piece of personal data that MegaFun collects serves a specific, legitimate operational purpose. We do not collect data speculatively or "just in case." Below are the primary reasons your data is collected:

• Account creation and management — your identity, contact, and login data are needed to create and maintain your MegaFun account.
• Payment processing — financial data is required to process deposits, settle winnings, and execute withdrawal requests to your GCash, Maya, or bank account.
• Identity verification (KYC) — required by PAGCOR regulations and Philippine anti-money laundering law (AMLA) to confirm that players are who they say they are and are of legal gaming age.
• Fraud prevention and security — technical and behavioral data helps us detect suspicious activity, prevent unauthorized access, and identify potential account fraud or bonus abuse.
• Legal compliance — certain data must be retained for defined periods to satisfy PAGCOR licensing requirements, Bureau of Internal Revenue (BIR) obligations, and AMLA reporting duties.
• Platform improvement — aggregated, anonymized usage data helps us understand how players navigate MegaFun so we can improve the user experience over time.
• Customer support — communications data enables our support team to handle your queries accurately and maintain a consistent service history.

Under the Philippines' Data Privacy Act (RA 10173), MegaFun must have a valid legal basis for each category of personal data processing. The legal bases we rely on are:

• Contractual necessity: Processing required to fulfill our obligations under the Terms and Conditions you accepted when registering — including account management, game settlement, and payout processing.
• Legal obligation: Processing required to comply with Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and BIR tax reporting requirements.
• Legitimate interests: Processing necessary for MegaFun's legitimate operational interests — specifically fraud detection, platform security, and service improvement — where these interests do not override your fundamental rights.
• Consent: For optional communications such as promotional emails or SMS notifications, we rely on your explicit consent. You can withdraw this consent at any time through your account notification settings.

Your personal data at MegaFun is used in the following ways. We do not use it for any purpose beyond what is described here without first updating this policy and notifying you:

Specific uses include: verifying your identity and age before processing any withdrawal; settling bets and crediting winnings accurately to your wallet; calculating and applying VIP Club rewards based on your wagering activity; detecting and investigating suspicious account behavior or payment irregularities; responding to support queries with full context of your account history; sending transactional notifications (deposit confirmations, withdrawal updates, account alerts) to your registered mobile number or email; and sending promotional communications where you have opted in to receive them.

MegaFun does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. Full stop. However, there are specific operational and legal circumstances under which your data may be shared with trusted third parties:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, and partner banks receive the minimum transaction data necessary to process your deposits and withdrawals. These providers have their own privacy policies and are bound by contractual data handling obligations.
• KYC / Identity verification partners: MegaFun works with certified identity verification service providers to process your government ID and selfie during the KYC process. These partners are strictly prohibited from using your data for any purpose other than identity verification for MegaFun.
• PAGCOR: As a licensed operator, MegaFun is required to submit regular compliance reports and respond to regulatory inquiries from PAGCOR. This may include account-level data where required for audit or investigation purposes.
• Law enforcement and government authorities: MegaFun will disclose personal data to Philippine law enforcement agencies, the Anti-Money Laundering Council (AMLC), or other government bodies when legally compelled to do so by valid court order, subpoena, or regulatory directive.
• Platform technology providers: Cloud hosting, customer support software, and analytics tools used by MegaFun may process technical data in the course of providing their services. All such providers are bound by data processing agreements that restrict their use of your data to the delivery of services to MegaFun only.

In all cases, MegaFun shares only the minimum data necessary for the specific purpose. We do not share your gaming history or financial data with any party that does not have a direct operational need for it.

All MegaFun player data is stored on servers within jurisdictions that provide an adequate level of data protection as recognized under Philippine law. Data in transit between your device and MegaFun's servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by major Philippine banks.

At rest, sensitive data — including identity documents and financial records — is stored in encrypted format using AES-256 encryption. Access to player data within MegaFun's systems is strictly role-based: only employees and contractors with a demonstrated operational need can access specific categories of data, and all access is logged and auditable.

MegaFun's security infrastructure includes intrusion detection systems, regular security audits, and a formal incident response procedure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, MegaFun will notify the National Privacy Commission (NPC) within 72 hours of discovery and will notify affected players without undue delay, in accordance with RA 10173's breach notification requirements.

MegaFun uses cookies and similar tracking technologies to make the platform function properly, maintain your session while you're logged in, and gather aggregated usage analytics. Here is a breakdown of the cookie categories in use:

You can manage cookie preferences through your browser settings. Disabling required cookies will affect platform functionality — some features, including login, may not work correctly without them. Analytics and preference cookies can be disabled without affecting core gaming functionality. MegaFun does not use advertising or cross-site tracking cookies.

MegaFun retains personal data only for as long as it is necessary to fulfill the purposes described in this policy, or as required by Philippine law. The following retention periods apply:

• Account data (name, contact details, login history): Retained for the lifetime of your account plus 5 years after account closure, as required by PAGCOR and AMLA regulations.
• KYC documents (ID copies, verification images): Retained for the lifetime of your account plus 5 years after account closure in compliance with AMLA record-keeping requirements.
• Transaction and gaming records (deposits, withdrawals, bet history): Retained for 5 years after the transaction date, in line with BIR and AMLA retention obligations.
• Support communications (chat logs, email records): Retained for 3 years from the date of the last interaction.
• Technical and device data (IP logs, session logs): Retained for 12 months for security monitoring purposes.
• Marketing consent records: Retained for as long as you remain opted in, plus 3 years after withdrawal of consent, as evidence of your prior consent.

When data reaches the end of its required retention period, it is securely deleted or anonymized so that it can no longer be associated with your identity.

As a Filipino data subject under RA 10173, you have the following rights with respect to your personal data held by MegaFun. These rights can be exercised by contacting our Data Protection Officer (see Section 14):

MegaFun is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. Registration requires date of birth confirmation and is subject to age verification during the KYC process. If MegaFun discovers that a registered account belongs to a minor, the account will be immediately and permanently closed, all funds will be returned to the payment source used for deposits, and the case will be referred to relevant authorities as required under Philippine law.

Parents and guardians who believe a minor may have registered on MegaFun should contact our support team immediately at support@megafun.best with as much account detail as possible so we can investigate and take appropriate action promptly.

megafun.best does not contain links to external third-party websites. All navigation within the platform leads to internal MegaFun pages only. This policy does not apply to the websites of payment providers, such as GCash or Maya, which you access independently outside of the MegaFun platform when processing transactions. Those services are governed by their own privacy policies, which MegaFun has no control over. We recommend reviewing the privacy practices of any payment provider you use before sharing your financial details with them.

MegaFun reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in Philippine privacy law, or new PAGCOR regulatory requirements. The date of the most recent update is displayed at the top of this page.

When material changes are made to this policy — particularly changes that affect how we collect, use, or share your personal data — MegaFun will notify registered players via email and/or a platform notice at least 7 days before the changes take effect. Continued use of MegaFun after the effective date of any amendment constitutes your acknowledgment of the updated policy.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a potential data incident, please contact MegaFun's Data Protection Officer directly:

For complaints that MegaFun cannot resolve to your satisfaction, you may contact the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint is available at the NPC's official website.