Scope of This Privacy Policy
This document explains how MegaPari manages personal information across its online services, including collection, processing, protection, disclosure, and destruction. The policy applies to users in Turkey and outlines how information is handled throughout its lifecycle. Use of personal data is based on user consent for identified purposes. The objective is to provide transparent rules so each user understands how data is used.
Data We Collect and Safeguards
The platform may collect the following personal information to provide and secure services:
- Identification and contact data: full name, nationality, ID or passport details, date of birth, address, email, phone number.
- Account and verification data: username, credentials, identity verification documents, liveness or selfie checks, consent records.
- Financial and transactional data: payment instrument tokens, limited bank details, deposits, withdrawals, bet history, winnings, bonuses.
- Compliance data: sanctions and watchlist screening results, PEP status, risk indicators required by anti-money laundering obligations.
- Technical and usage data: IP address, device identifiers, operating system, browser type, app logs, coarse location, cookies.
- Communications and preferences: support messages, marketing choices, notification settings.
Why this information is collected:
- To create and maintain the user account and deliver online services.
- To process payments and verify identity for fraud prevention and security.
- To comply with legal obligations, including AML/CFT and tax record keeping.
- To improve site performance, fix issues, and enhance user experience.
Protection measures applied:
- Encryption in transit and at rest, secure key management, and TLS.
- Role-based access control, least privilege, multi-factor authentication.
- Network segmentation, logging, monitoring, and vulnerability testing.
- Staff training, incident response procedures, and vendor due diligence.
- Payment data handled by providers that follow recognized security standards such as PCI DSS.
User rights under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, where applicable, GDPR:
- Access: learn whether data is processed and obtain a copy.
- Correction: request rectification of inaccurate or incomplete information.
- Deletion: request erasure where legal grounds allow, or anonymization under KVKK.
- Restriction and objection: limit or object to processing based on legitimate interests.
- Complaint: apply to the data controller first; if unresolved, lodge a complaint with the Personal Data Protection Authority (KVKK).
Compliance statement: Processing aligns with KVKK, relevant MASAK obligations under Law No. 5549, and GDPR standards where they apply to the user.
Purposes and Legal Bases for Processing
Personal data is used for lawful purposes and processed in a transparent manner:
- Account services: registration, authentication, account maintenance, customer support.
- Transactions: deposits, withdrawals, bet settlement, chargeback handling.
- Verification and security: KYC, fraud detection, risk management, platform integrity.
- Service improvement: analytics, performance monitoring, error diagnostics.
- Personalization: remembering preferences and tailoring content.
- Marketing: newsletters and promotions sent only where consent has been given, with the option to withdraw at any time.
- Compliance: AML/CFT checks, sanctions screening, lawful requests, tax and audit requirements.
Legal bases include explicit consent, performance of a contract, compliance with legal obligations, and legitimate interests such as preventing abuse and securing services.
Your Access, Update, and Deletion Options
Users can manage and review information using the account settings or by submitting a request to the Data Protection Team at [email protected]. Requests should include identifying details, contact information, and a description of the rights being exercised.
- Access: receive confirmation of processing and obtain a copy of personal data.
- Correction: update inaccurate or incomplete records.
- Deletion: request erasure where no longer necessary or where consent is withdrawn, subject to legal retention duties.
- Objection and restriction: object to certain processing or request limitations.
The company responds within 30 days under KVKK, extending where complex. Identity verification is required before actioning a request. By using MegaPari, the user consents to security checks, identity verification, and processing of payment information by authorized providers to complete transactions and prevent fraud.
Minors and Age Restrictions
The services are intended for individuals aged 18 and over. The operator cannot confirm a person’s age without identity documents. If a minor’s account is identified, access will be closed and personal data will be deleted or anonymized where permitted by law, retaining only what is necessary to meet legal obligations. A parent or legal guardian may request deletion by contacting [email protected] and providing proof of authority.
Cross-Border Processing and Transfers
Personal data may be stored and processed outside Turkey in locations where technology vendors, game studios, payment processors, or support partners operate. Using the site constitutes consent to such international data transfers for the purposes described in this document. All partners are bound by confidentiality and data protection obligations and process information under contractual safeguards such as data transfer agreements, standard contractual clauses, or KVKK-approved undertakings, or based on explicit consent where required.
Disclaimer and Precedence
This disclaimer may limit, clarify, or otherwise affect the scope or effects of the rules in this policy to the extent allowed by law. Mandatory legal provisions prevail over any conflicting term in this document. The disclaimer applies once the user accepts the policy by signature, electronic acceptance, or accession through account use. If any clause is invalid, the remaining provisions continue to apply.
Cookies and Similar Technologies
Cookies are small files placed on a device by websites to store information. The site uses cookies for statistics, behavior analysis, personalization, and service improvement. Cookie retention is 1 year unless a shorter period is set by the browser or the cookie is deleted earlier. Types include essential, analytics, functionality, and advertising cookies. Users can manage or disable cookies through browser settings and may withdraw consent for non-essential cookies at any time.
Consent and Version Control
Using the platform constitutes full acceptance of this Privacy Policy and any referenced terms. The current version published on the website prevails over previous versions. Continued use after changes indicates consent to the updated document, subject to applicable legal requirements for notice and consent.
Sharing Personal Information with Third Parties
Personal information may be shared when required by law, for dispute resolution, or to perform agreements. Typical recipients include payment service providers, identity verification vendors, game content providers, analytics services, cloud hosting, audits, banks, legal advisors, and competent authorities. The list of third parties is maintained on the website where applicable; if not available, users are informed of the purpose and scope before sharing or at the earliest possible time. Providing personal data constitutes consent to such sharing where the law requires consent.
External Links
The site may include links to other websites that operate under their own privacy policies. The operator is not responsible for how those websites collect, use, or disclose information. Users should review the privacy notices of external sites and exercise caution before providing personal data.
Updated: