Privacy Policy

This policy sets the framework within which your personal data will be processed by us and describes how we process and protect your data. Please read the following carefully to understand our principles and practices regarding personal data and the way we treat them. Please also read our separate cookie policy, from which you will find out how we use cookies and other similar technologies. The words and phrases defined in the Terms and Conditions will have the same meaning in this policy.

According to the requirements of the General Data Protection Regulation no. 679/2016 (hereinafter "GDPR"), of Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, as well as of the Order no. 52 of 2002 issued by the People's Advocate, we will manage safely and only for the specified purposes, the personal data provided by our clients, collaborators, partners, etc.

This data protection policy applies when you use our services.

The data operator is SC MEGABET INTERNATIONAL SRL, based in Bucharest, Bd. Tudor Vladimirescu, No. 29A, AFI Tech Park 1, 5th floor, Office 60, District 5. 

MEGABET INTERNATIONAL holds a Class 1 license issued by the Romanian National Gaming Office (ONJN) to operate in Romania as a distance gambling organizer.

MEGABET INTERNATIONAL will process the personal data of the online gambling platform users of  in accordance with the GDPR and its data protection policy, in accordance with the legislation in force. 

The designated Data Protection Officer can be contacted at [email protected].

Your use of our services is subject to the Data Protection Policy and the Cookies Policy. When you use our services, you agree to the terms of this Data Protection Policy. The purpose of this Policy is to inform players about their personal data that is collected, stored and used.

If you do not agree to this Privacy Policy, you must stop using our services.

We can collect and process personal data in the following situations:

a. When filling out the forms for creating the user account on the Site. To participate in the online gambling, we will collect the following data categories from the players:

• The chosen username;

• The selected password;

• Email Address;

• Name and surname;

• Date of birth;

• Sex;

• Address;

• CNP (personal numeric code);

• Mobile phone number;

• Duplicate copy from the bank card both sides of the if the gambling account it is supplied with the card, subject to the terms of the Terms and Conditions;

b. We may request a copy of your identity card in order to fulfil our legal obligations regarding the verification of the players' identity and observance of the age limit;

c. Statements as well as any other document deemed necessary to remove any doubt about the identity of the gaming account user, including video recordings to verify your identity, selfies;

d. Copy of a utility bill / account statement / other documents to prove the tax residence and residence of the player. This data is required to verify the authenticity of the data provided by the player at registration. Requested documents contain the following categories of personal data: name, surname, address, financial data.

e. We will collect data about your activity as a player on our betting platform, relating to bets, games, stakes, winnings, as well as details of the transactions carried out through the gambling platform, namely the amounts deposited and withdrawn, the payment method;

f. We will collect personal data if you enrol in a contest or promotion that we conduct;

g. If you contact us by (email, online chat, WhatsApp, or by contact form), we will keep the record of correspondence for the entire duration of the Account, but not more than 10 years from the closing of the Account. If you do not have an Account, the registration of the correspondence will be stored for 2 years from the contact date;

h. If you contact us by phone, the call can be recorded, and in this case we will keep a copy of the call. If you have an Account, we will keep the registration for the entire duration of the Account, but not more than 10 years from the closing of the Account. If you do not have an Account, the registration will be stored for 2 years from the contact date;

i. We can also ask you to fill out surveys that we use for market research purposes;

j. When you visit our websites or when you are using our native applications for mobile devices, we receive information about your device and location, including traffic data, location data, web logs, and other communications data;

k. When you request for self-exclusion or limitation of betting amounts;

l. When you use our native mobile apps, based on your consent, we use Firebase Analytics and Firebase Crashlytics (from Google). We use Firebase Analytics to collect analytical data about the use of the application, to provide a better user experience and a more performing application. This data helps us understand how our application is used, so that we can make informed decisions. We use Firebase Crashlytics to collect data related to errors, bugs and crashes to understand what happened during the problem, what device and what version of the operating system was used. For a complete description of Firebase Crashlytics see - http://firebase.google.com/docs/crashlytics.

The data sources we process about you may be:

- You direct providing the data, during the direct interaction with the Site or with the gaming platform (for example, when creating an account, your various requests);

- Your gaming behaviour or interactions with promotions available on the Site;

- Publicly available data (such as authority registers – ONJN and other authorities).

As we will state in the Cookies Policy, we collect data through cookies and related technologies (scripts). We can collect information about your computer including, where available, the IP address (as part of statistical analysis - collecting takes place in anonymous format by removing the last byte of the address, so Ips will have the same format), the operating system and browser type, device, screen resolution, mouse movements, keystrokes, selected language for our services, and date and time of access. These are statistics on the actions and patterns of our users' browsing without directly identifying individuals.

For the same reason, we can get information on the general use of the Internet by using a cookie file that is stored on the hard drive on your computer. Cookies contain information that is transferred to your computer's hard drive. They help us improve our services and improve marketing and advertising campaigns.

Cookies help us to:

• Estimation of audience and usage;

• Storing information about your preferences and thus allowing us to personalize your site according to your individual interests;

• Increase the speed of your searches;

• Improving your experience on the site and identifying the technical difficulties encountered when using the site;

• Your recognition when you return to the site.

We also allow others to use cookies as described in the Cookies Policy.

You can control the cookie modules on your computer/mobile device through your browser settings and through other tools that we can make available to you within the applications for mobile devices. You can also choose to refuse the acceptance of cookies by activating the setting in your browser that allows you to refuse the setting of cookies. However, if you select this option, you may not be able to access certain parts of the site. Unless you have adjusted your browser settings to refuse cookies, our system will issue cookies when you register on the site.

You can learn more about our cookies policy consulting our Cookies Policy.

We can collect and process personal data for the following purposes:

a. Providing gambling services as well as fulfilling the obligations arising from any contracts concluded between you and us: creating, checking and administering the account, processing the data on deposits and withdrawals. On this occasion, we will ask you to share your exact geographic location to determine if we can provide you the services at your location.

b. Compliance with the legal norms in force, including checking the identity of the account holder and the accuracy of the information provided by the account holder. Compliance with legal obligations regarding withholding tax on gambling income;

c. Providing information on updating and changing terms and conditions, as well as on the provision of services;

d. Withdrawing or depositing money, in cash, at the dedicated locations of Megabet International SRL partners and affiliates;

e. Submitting offers and promotions, if you have expressly expressed your consent;

f. Investigation of any suspected activity that can be qualified as prohibited behaviour in connection with the provision of services, as well as cooperation with competent authorities;

g. Improve the services we provide by analysing player activity data on our websites or when players are using the native applications for mobile devices. This analysis may take into account the data provided by scripts installed in the websites/gambling platform;

h. Analysis of websites activity data or activity data when players are using the applications for mobile devices to display content relevant to the player;

i. Drawing up statistics on the use of the services by the clients, and also on players' interaction with the various promotions on the Site/application - free spins or other types of bonuses provided according with the terms and conditions;

j. Preliminary analysis of a merger or acquisition that may involve a partial or total transfer of activity in the provision of gambling services;

k. Partial or total transfer of gambling activity to another company;

l. Carry out studies and market research;

m. Managing of self-exclusions, exclusions and deposit payments limitation in the gaming account;

n. Fraud detection.

As far as the basis for the processing of these data is concerned, we hereby notify you that acceptance of the Terms and Conditions is your agreement to be a party to the contract. The categories of data you provide to us are governed by the legal provisions on distance bets.

Thus, the collection, use and transmission to the authorities with control and monitoring powers is done by corroborating Articles 8 (5), 127 (1) and 129 (4) of GD no. 111/2016 regarding the Methodological Norms in GEO 77/2009, as well as under art. 10 par. (3) of GO 77/2009, the Fiscal Code - the obligation to declare the revenues achieved and the obligation to inform the players about the achieved gains, as well as based on the provisions of Law no. 129/2019 for preventing and combating money laundering and terrorist financing. As a general rule, the data you provide when concluding this agreement is necessary to verify your age and identity for reasons of both gambling law and reason related to preventing and combating money laundering. Also, regarding the placement of cookies on devices used to participate in remote gambling, the ground is represented by both your consent expressed by ticking the appropriate box, as well as the legal obligation of the operator or even the legitimate interest in the regards of quality assurance and customer experience on our websites and when using the applications for mobile devices.

In relation to processing performed through the statistical analysis tool, we ensure that it does not store your personal data. Therefore, to analyse the rate of use of certain pages and to identify technical problems encountered in their use, our website transmits data, as identified in the cookies chapter, to the analysis tool. If you enter data in existing free fields on pages on the site, they will not be stored and will be transmitted in an anonymous format to the analytics tool.

With regard to the purposes of the preliminary analysis and the partial or total transfer of activity to third parties, the basis is Megabet's legitimate interest in ensuring compliance with the legal principles of processing, in particular as regards the minimization and accuracy of data with processed personal data as well as to ensure the continuity of the transferred assets, given the fact that in the absence of personal data of customers, the platform cannot operate, the two elements being inextricably linked. If necessary, the clients will be informed before the transfer is made, with the possibility for them to exercise their right of opposition, in accordance with the provisions of the GDPR, under the conditions provided in section “Your rights”.

Fraud detection

Your personal data may also be processed to fulfil the “know your customers” legal obligation, as provided for in Law no. 129/2019 on the prevention and countering of money laundering and terrorism financing and in Order no. 370/2021 approving the Instructions on the prevention and countering of money laundering and terrorism financing in the gambling field.

“Know your customers” procedures for the prevention of money laundering and terrorism financing involves the identity verifications for natural persons and processing the personal data required by law, at the time of your registration as a user on the site, and as well as throughout the entire duration of your use of our services. For this purpose, we will collect from you and store a copy of your identity card with all the information contained therein (surname, first name, CNP, date and place of birth, home address, series and number, photograph). This data will be collected directly from you at the time of registration as a user or within 30 days from making the first deposit.

The data provided in the “know your customers” process may be used by Megabet and verification services providers for the purpose of improving anti-fraud detection and control processes, based on the legitimate interest of the operator or service providers.

Anti-fraud detection and control is carried out through an automated decision-making process, and your data may be transmitted for this purpose to a service provider that ensures an adequate level of protection of personal data either according to an adequacy decision of the European Commission or according to the contractual obligations that it assumes in its relationship with Megabet.

Through this verification, your identification data will be compared with data in databases of persons accused of financing terrorist acts or persons at high risk of fraud. The comparative analysis can be carried out based on the data provided by you and based on the information from the database managed by the verification service providers. If your personal data is detected in these records, Megabet may decide to refuse to initiate or continue the contractual relationship with you.

7. Direct marketing 

We promote our services to you and others. We use customer information for invitations and communications that promote the services we provide to you, to the extent that you have agreed to do so.

If you do not want us to use your data in this way or to send your details to our Marketing Authorizing Officers, please do not tick the relevant box on the form used to collect your data.

In all cases, you will be able to unsubscribe from receiving marketing information. Please keep in mind that if you apply for a non-subscription, we may need up to 48/72 hours to run changes to your system, and you may receive marketing information.

Also, unsubscribing from receiving marketing emails will not prevent you from transmitting to you emails that relate to the agreement expressed through the terms and conditions of use of our websites and/or using the applications for mobile devices.

We do not transmit your personal data to third parties for their direct marketing purpose.

As a general rule, we will not disclose your personal information to any person excepting our processors. However, with your participation in online gambling, certain data categories are transferred and stored by the persons empowered by us (our processors) to do so. Thus, with respect to data collected for the provision of gambling services, for verifications performed under the provisions of Law 129/2019 for the prevention and combating of money laundering and the financing of terrorism, and to improve our services and identify the technical issues with which you are confronted in using the websites or when using the applications for mobile devices, this data is stored in EEA.

In the case of the transfer of personal data to a processor or to a controller established in a third country, one or more specified guarantees or exceptions apply:

A decision on the adequate protection of personal data

The European Commission can and will assess third countries, a territory and/or certain sectors in third countries to assess whether there is an appropriate level of protection of the rights and freedoms of natural persons. In these cases no authorization is required.

Countries that are members of the European Economic Area (EEA), but not the EU, are accepted as meeting the conditions of an adequacy decision.

A list of countries that currently meet the Commission's eligibility requirements is published in the Official Journal of the European Union. https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.

Adequacy assessment by the data controller

When assessing the adequacy, the exporting operator must take into account the following factors:

- the nature of the information transferred;

- the country or territory of origin and final destination of the information;

- how the information will be used and for how long;

- the laws and practices of the country of transfer, including relevant codes of practice and international obligations; and

- the security measures to be taken with respect to data from the location abroad.

Agreement on standard contractual clauses - art. 28 (8) of the GDPR

If Megabet International wishes to transfer personal data from the EU to an organization in the United States or outside the EU/EEA, it will ensure that it enters into an agreement with the recipient of the data in the form of standard contractual clauses, as defined by the COMMISSION DECISION of 04.06.2021 on the introduction of a set of standard contractual clauses for the transfer of personal data to third countries. The content of these clauses cannot be changed by the agreement of the parties, they are mandatory and are considered by the Commission to ensure an adequate level of protection. These clauses can be consulted: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_en.

Mandatory corporate rules

Megabet International may adopt its own rules for the transfer of data outside the EU. They require the prior approval of the competent supervisory authority.

In certain situations, we may be required to disclose your user data to comply with legal requirements. We will do our utmost to inform you of these situations, unless we are forbidden to do so. We may also disclose to enforce or enforce the Terms and Conditions and other agreements to protect our rights, property, security or our clients. This includes sharing information with other companies or organizations to protect against fraud and reduce credit risk.

We may also transfer your personal data to third-party purchasers, to the extent that Megabet's business is transferred (in whole or in part), and personal data is part of the assets that are the subject of such a transaction or to other companies, which will follow Megabet's instructions regarding the processing of your personal data.

In accordance with European data protection law and national gambling legislation, we use reasonable procedures to prevent unauthorized access and inappropriate use of personal data.

We use appropriate systems and procedures to protect and secure your personal data. We also use security procedures and technical and physical restrictions on accessing and using personal data on our servers. Only authorized personnel can access your personal information while working.

Data collected from you are usually stored in EEA in accordance with the legal provisions on online gambling. They are processed by staff operating in the EEA, working for us or one of our suppliers or one of our processors. Such staff may be involved, among other things, in processing your payment details, verifications performed under the provisions of Law 129/2019, the provision of services specific to our gambling platform or providing support services. By registering your personal data, you agree to such processing. We will take all necessary measures to ensure that your data is treated safely and in accordance with this data protection policy.

All information provided by you is stored on our secure servers. Any payment transactions will be encrypted. Where we have (or have selected) a password that will allow you to access certain parts of the websites or to the applications for mobile devices, you are responsible for keeping this password confidential. Please do not tell anyone this password.

Transmitting information over the Internet is not completely secure. While we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the websites or through the applications for mobile devices; any transmission is at your own risk. Once we receive the information, we will use strict processes and security options to try to prevent unauthorized access.

The websites are protected by Secured Socket Layer (SSL) standard encryption. This technology encrypts all of your personal data transferred between you and us.

Data storage period

We assure you that your personal data will be stored only for a strictly necessary period, in accordance with the purpose for which it is collected. The information we collect from you will be erased regularly from our servers, subject to your notification in this policy, but to the extent we are legally required by our competent government authorities, we will retain this information in our internal system. If you provided us with your data by completing the account creation form and you are an active user, your data will be retained for a period up to 10 years from the user account closure. For your information, we will retain your personal data, among others:

• To provide you with the Services and to fulfil our obligations to you;

• To comply with legal obligations under EU / local law (eg anti-money laundering regulations or licensing regulations);

• To comply with reporting and regulatory requirements (for example, the archiving conditions provided for in the accounting law and the requirements of GD 111/2016, Art.137 (3));

• To defend us against claims that may be made against us;

• To comply with our contractual obligations and rights in relation to the information involved.

You have the right to ask us not to process your personal data for marketing purposes. Prior to data collection, we will let you know if we intend to use your data for such purposes. If you do not want us to use your data, please do not tick the relevant box located on the form used to collect your data because, by ticking this box, you agree to the processing of your personal data for this purpose. You may also withdraw such consent or request that we no longer process your personal data for marketing purposes anytime, by contacting us at e-mail [email protected]. 

Occasionally, the websites and/or our applications for mobile devices may contain links to and from websites of our partner networks, merchants, and affiliates. If you access a link to these websites, please note that they have their own data protection policies and we do not assume liability for these policies. Please check these policies before entering any personal data on these websites.

For gambling platform services users are guaranteed the following rights:

• the right of access, based on which you can ask us, free of charge, to confirm whether or not we process personal data that concerns you. You can also request a copy of the data we process about you. Applications must include relevant information to be able to identify you in our database. We will resolve your request within 30 days;

• the right to rectification, which you can exercise by formulating a request that you can ask us to modify the information we already have about you. You can make such a request when you notice that your data is incomplete or inaccurate;

• the right to restriction of processing, which you can exercise when challenging the accuracy of the data, you consider the processing to be illegal or you will oppose the deletion of the data. Following the exercise of this right, we may still be able to store the data, making other processing operations only with your consent, unless expressly provided for by law;

• the right to data portability, which you can only exercise in cases where processing is based on your consent or contract and only if your data is processed by automated means. If you meet the conditions, you may send us a request for porting the data to the operator you want;

• the right to oppose data processing for marketing purposes or processing based on Megabet's legitimate interest. You may exercise this right at any time and we guarantee that your data will no longer be processed for that purpose. However, there may be a reasonable time (72 hours) to register and resolve your request that you may receive marketing information from us. In terms of collecting data through the script to improve the experience on our websites and using our applications for mobile devices, you can exercise the right of opposition filling the form from the site. 

• the right to erasure, based on which we have the obligation to delete the personal data we process about you. This right is not an absolute one, being applicable only in certain situations expressly provided by law. When making a removal request, please be aware that deleting them may be a complex process.

• if you are not satisfied with the way we have solved your requests, you can address the Supervisory Authority at any time.

To exercise these rights, the user will send a written, dated and signed application to Megabet International at the email address [email protected] with the subject "Personal Information Request". The request format is on the site. 

Any changes to the data protection policy in the future will be posted on this page.

Questions, comments and requests regarding this data protection policy are welcome, and therefore please do not hesitate to contact us by e-mail at [email protected],  if you wish to have readings.