Privacy Policy

1. About This Policy

This Privacy Policy applies to all personal data collected by megabahis through the megabahis.asia website, mobile platform, customer support channels, and any other services we provide (collectively, the "Platform"). It applies to all registered players, prospective players, and visitors to the Platform.

By accessing or using the megabahis Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the megabahis Platform.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

megabahis is the data controller responsible for your personal data collected through the Platform. As data controller, megabahis determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data protection law.

If you have any questions about how megabahis processes your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer (DPO) using the details provided in Section 14 of this Policy.

3. Data We Collect

megabahis collects personal data from you in the following categories:

3.1 Registration Data

When you create a megabahis account, we collect the information you provide, including:

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Residential address (including city, province, and postal code);
• Email address;
• Mobile phone number;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine anti-money laundering laws, we may collect:

• Copies of government-issued identification documents (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS card);
• Proof of address documents (e.g., utility bills, bank statements);
• Source-of-funds documentation for large transactions.

3.3 Financial Data

When you make deposits or withdrawals, we collect transaction-related data, including:

• GCash or PayMaya account reference numbers;
• Bank account details (for BPI, BDO, or Metrobank transfers);
• Transaction amounts, dates, and reference IDs.

megabahis does not store full payment card numbers. All financial transactions are processed through secure, regulated payment channels.

3.4 Gaming Activity Data

We collect data about your activity on the Platform, including:

• Games played, bets placed, and outcomes;
• Session duration and login timestamps;
• Bonus and promotion usage;
• Responsible gaming tool settings (deposit limits, self-exclusion status).

3.5 Technical Data

When you access the Platform, we automatically collect certain technical information:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Pages visited, links clicked, and time spent on the Platform;
• Cookie identifiers and session tokens (see Section 7).

3.6 Communications Data

If you contact megabahis support, we collect records of your communications, including live chat transcripts, email correspondence, and any information you voluntarily provide during support interactions.

4. How We Use Your Data

megabahis uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your megabahis account;
• Service delivery: Processing bets, deposits, withdrawals, and bonus credits;
• Identity verification: Confirming your identity and age (21+) as required by PAGCOR regulations;
• Regulatory compliance: Meeting our obligations under Philippine anti-money laundering laws, PAGCOR licensing conditions, and the Data Privacy Act of 2012;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, cheating, and unauthorised account access;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and administering self-exclusion and deposit limit tools;
• Customer support: Responding to your enquiries, resolving disputes, and improving our support services;
• Platform improvement: Analysing usage patterns to enhance the megabahis platform's features, performance, and user experience;
• Marketing communications: Sending you promotional offers, bonuses, and updates about megabahis — only where you have given your consent or where we have a legitimate interest to do so, and always with an easy opt-out option.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 of the Philippines, megabahis processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your megabahis account and deliver gaming services;
• Legal obligation: Processing required to comply with applicable laws, including PAGCOR licensing conditions, AML regulations, and tax reporting obligations;
• Legitimate interests: Processing carried out for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies.

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

megabahis does not sell your personal data. We may share your personal data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

6.1 Regulatory Authorities

We are required by law to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities upon lawful request or as required by our licensing conditions.

6.2 Payment Processors

To process your deposits and withdrawals, we share necessary financial data with our payment partners, including GCash, PayMaya, BPI, BDO, and Metrobank. These partners are bound by their own data protection obligations and are not permitted to use your data for any purpose other than processing your transactions.

6.3 Technology and Service Providers

We engage trusted third-party service providers to support the operation of the megabahis platform, including cloud hosting providers, game software suppliers, fraud detection services, and customer support tools. All such providers are contractually required to process your data only on our instructions and to maintain appropriate security standards.

6.4 Legal and Law Enforcement

We may disclose your personal data to law enforcement agencies, courts, or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of megabahis, our players, or the public.

7. Cookies & Tracking Technologies

megabahis uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the megabahis website.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible.
• Marketing cookies: Used to deliver relevant promotional content about megabahis. These are only set with your consent.

7.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the megabahis Platform. For marketing cookies, you may also update your preferences through your account settings.

8. Data Retention

megabahis retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and Philippine AML laws;
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Financial transaction records: Retained for a minimum of five (5) years in accordance with AML reporting obligations;
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Support communications: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent.

When personal data is no longer required, megabahis will securely delete or anonymise it in accordance with our internal data disposal procedures.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by megabahis:

• Right to be informed: The right to know that your personal data is being collected and processed, and to receive clear information about how it is used — which this Privacy Policy provides;
• Right of access: The right to request a copy of the personal data megabahis holds about you;
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

10. Data Security

megabahis implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the megabahis Platform is encrypted using TLS 1.2 or higher. Sensitive data at rest is encrypted using AES-256;
• Access controls: Access to personal data is restricted to authorised megabahis personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations;
• Two-factor authentication: megabahis supports two-factor authentication (2FA) for player accounts to provide an additional layer of security;
• Regular security audits: The Platform undergoes regular security assessments and penetration testing by qualified security professionals;
• Incident response: megabahis maintains a documented data breach response procedure to ensure rapid detection, containment, and notification in the event of a security incident.

While megabahis takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your megabahis login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

11. Children's Privacy

The megabahis Platform is strictly intended for adults aged 21 years and above. megabahis does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

12. International Data Transfers

megabahis primarily stores and processes your personal data within the Philippines. In certain circumstances, your data may be transferred to and processed in other countries — for example, where we use cloud infrastructure or game software providers whose servers are located outside the Philippines.

Where such international transfers occur, megabahis ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that require the recipient to maintain standards equivalent to those required under Philippine law. We will not transfer your personal data to countries that do not provide an adequate level of data protection without your explicit consent or without implementing appropriate safeguards.

13. Changes to This Policy

megabahis reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes, we will notify registered players by email or by posting a prominent notice on the megabahis Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how megabahis protects your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by megabahis, please contact our Data Protection Officer:

If you are not satisfied with our response to your data protection concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.