Megha Privacy Policy — How We Keep Your Data Safe

This privacy policy applies to all services offered through the Megha (megha.onl) platform. By creating an account or using any of our services, you acknowledge that you have read and agreed to this privacy policy. Your trust is our greatest asset — and we always treat your data with the respect it deserves.

Megha collects various types of information from you — some provided directly by you, and some collected automatically while you use the platform. We only gather what is strictly necessary to deliver our services.

• We never collect unnecessary or excessive data.
• Documents submitted for KYC verification are stored on secure servers.
• No sensitive data is collected without your consent.

Megha uses your data solely for legitimate and clearly defined purposes. We never use your information beyond the scope of this privacy policy. Every use of your data has a specific reason, each of which is outlined clearly below.

• Account Management: To create and verify your account and ensure its security.
• Payment Processing: For managing deposits, withdrawals, and transaction history.
• Customer Support: To handle your questions, complaints, and support requests.
• Security & Fraud Prevention: To prevent account hacking, money laundering, and fraudulent activity.
• Legal Obligations: To comply with applicable laws and regulatory requirements.
• Personalized Experience: To provide game recommendations and offers tailored to your preferences.
• Contact: To send important updates, bonus offers, and security notifications.

Megha never sells or rents your personal data. However, to operate our services, limited information may be shared with trusted partners in specific circumstances — always in your interest and under strict confidentiality agreements.

• Payment Processors: To verify transactions with payment partners such as bKash, Nagad, and Rocket.
• KYC Verification Provider: With authorized agencies for identity and age verification.
• Law Enforcement Agencies: Under a court order or legal obligation.
• Game Provider: Minimum data required to operate game services.

Megha uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help remember your preferences.

You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of some features on the site.

Megha believes every user should have full control over their own data. In line with international data protection standards (GDPR-compliant), you have the following rights:

Megha applies industry-leading technical and organizational measures to protect your data. Our security practices are regularly reviewed by international experts.

• 256-bit SSL/TLS Encryption: All data transmission takes place over encrypted channels.
• Secure Data Centers: Our servers are hosted in ISO 27001 certified data centers.
• Data Masking: Sensitive information such as payment numbers is always displayed in masked form.
• Access Control: Only authorized personnel may access specific data.
• 24/7 Security Monitoring: Real-time monitoring to detect suspicious activity.
• Regular Security Audits: A third-party expert team conducts a full security audit every year.

Megha retains your data only for as long as needed. Once a service ends or the legally required retention period expires, your data is securely deleted.

• Account data: retained for up to 5 years after account closure (as required by law).
• Transaction records: retained for up to 7 years in accordance with financial regulatory requirements.
• KYC documents: retained for 5 years after verification, or as required by law.
• Gaming logs: retained for up to 3 years for fraud prevention and dispute resolution.
• Marketing preferences: updated immediately upon opt-out.
• Cookie data: expires within 30 days to 2 years depending on the type.

Megha is a platform operated exclusively for adults aged 18 and over. We never knowingly collect data from anyone under 18.

• Age verification is mandatory at the time of registration.
• Any account identified as belonging to a minor is closed immediately.
• Any data suspected to have been collected from a minor is deleted without delay.

Megha may update this privacy policy from time to time. We will notify you before any significant changes take effect. You can always check the "Last Updated" date at the top of this page to see when changes were made.

• A notification will be sent to your account for any significant changes.
• Continued use of the platform after any changes constitutes acceptance of the updated policy.
• Previous versions are archived — you can request them through support if needed.

For any questions, requests, or complaints regarding this Privacy Policy, please contact our Data Protection team. We are committed to responding within 30 business days.