megasensa Privacy Policy

What data we collect on megasensa

When you open an account on megasensa, we collect your full legal name, email address, phone number, and date of birth. These are necessary for account creation and for verifying your identity against government-issued documents (KTP, passport, or driver's license).

During identity verification, we also collect your residential address. We may request supporting documentation—a utility bill, rental agreement, or bank statement—to confirm your address matches your government ID. This Know Your Customer (KYC) process helps us comply with anti-money laundering regulations and prevents account fraud.

We automatically collect technical data: your IP address, browser type, device model, operating system, and the pages you visit on megasensa. We also log your login times and locations to detect unauthorized access attempts. If you access megasensa from Jakarta one day and from Surabaya the next, we record both sessions to verify they are yours.

How we use and retain your data

We use your personal data for the following purposes: account creation and login authentication, identity verification and fraud detection, payment processing and settlement, regulatory reporting and compliance, customer support and dispute resolution, and platform improvement (analyzing usage patterns to fix bugs or enhance features).

We retain your account data for as long as your account is active. Once you close your account, we retain your personal information and transaction history for a legal retention period (typically seven years) to comply with anti-money laundering regulations and tax authorities. After that period, we delete non-essential personal data, though we may keep anonymized records for statistical purposes.

Your payment data (deposits, withdrawals, wagers) is retained indefinitely as part of your permanent account and transaction history. This allows us to provide you with account statements, settle disputes, and maintain audit trails for regulatory purposes. Technical data (IP addresses, device logs) is typically retained for six to twelve months unless needed for a legal investigation or dispute.

Third parties and data sharing

We do not sell your data to third parties for marketing or commercial purposes. However, we do share certain data with processors necessary to operate megasensa:

• Payment processors: Banks and e-wallet providers (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive transaction data to process your deposits and withdrawals.
• Identity verification services: Third-party verification companies may receive your government ID and address to confirm your eligibility and prevent fraud.
• Regulatory authorities: If required by law, we provide user data to tax authorities, financial crime agencies, or law enforcement in your jurisdiction or ours.
• Cloud infrastructure providers: Our servers may be hosted by third-party data centres located outside Indonesia. Data transferred to these facilities is encrypted and subject to contractual protections.

We contractually require all third parties to protect your data with the same standards we do. We do not allow them to use your data for their own marketing or purposes unrelated to operating megasensa.

Cookies and tracking

We use cookies and similar technologies to improve your megasensa experience. Session cookies allow you to stay logged in while browsing. Persistent cookies remember your preferences and detect unusual login activity. Analytics cookies help us understand how users interact with our platform so we can identify bugs and enhance features.

You can control cookies through your browser settings. Disabling cookies may limit your ability to use megasensa features (for example, you may need to log in again on each visit). We do not use cookies to track you across websites outside megasensa, and we do not share cookie data with advertisers.

Your rights on megasensa

We provide you with the following rights regarding your data:

• Right of access: You can request a copy of all personal data we hold about you. We provide this within 30 days in a structured, portable format.
• Right to correction: If your personal data is inaccurate (for example, a misspelled name or old address), you can request we correct it.
• Right to deletion: You can request deletion of non-essential personal data, subject to legal obligations to retain transaction records.
• Right to restrict processing: In limited cases, you can ask us to limit how we use your data (for example, pausing marketing emails).
• Right to object: You can object to certain uses of your data, such as automated decision-making for account closure.

To exercise these rights, contact our support team through the chat interface on megasensa or submit a data request form on our FAQ page. We respond within 30 days. If your request affects your account (for example, deletion of contact information), we may require you to verify your identity first.

Security and data protection

We use industry-standard encryption (TLS/SSL) for all data transmitted between your device and megasensa servers. Sensitive data—passwords, banking information, ID documents—is encrypted both in transit and at rest on our servers. We do not store plain-text passwords; instead, we store encrypted hashes that only you can match when you log in.

We conduct regular security audits and penetration testing to identify and patch vulnerabilities. Access to your personal data is restricted to authorized megasensa employees who need it for their job functions. All employees sign confidentiality agreements and receive data protection training.

However, no security system is perfect. If we detect a data breach affecting user information, we notify affected users as quickly as possible and disclose the nature of the breach, the data involved, and the steps we are taking to remedy it. We also cooperate with regulatory authorities and law enforcement as required.