Scope and principles of this policy

Information is collected to provide services and comply with applicable regulations in Peru.

Types of personal data that may be collected:

• Identification and contact details: name, date of birth, national identity card or passport number, address, email address, telephone number, country of residence.
• Verification and compliance: age, KYC checks, sanctions list validations, and anti-money laundering.
• Transactions and payments: payment methods, amounts, deposit and withdrawal records, receipts.
• Use of the site: activity on the site and applications, IP address, device identifiers, browsing data, cookies, and similar technologies.
• Communication: customer service records, preferences, consents, and revocations.

Purposes of data processing:

• Operate the user’s account and provide online casino and betting services.
• Process transactions and prevent fraud.
• Comply with legal and regulatory obligations.
• Improve websites, security, and user experience.

Technical and organizational measures to protect information:

• TLS encryption in transit and role-based access controls.
• Network segmentation, event logging, and incident monitoring.
• Risk assessments, periodic testing, and data minimization.
• Limited retention policies and pseudonymization where appropriate.
• Staff training and confidentiality agreements.

User rights regarding personal data:

• Access to and obtaining of information on data collection and processing.
• Correction of inaccurate or incomplete data.
• Cancellation or deletion where applicable, and opposition to processing in permitted cases.
• Withdrawal of consent without retroactive effect.

Regulatory compliance in Peru:

• Law No. 29733 on Personal Data Protection and its Regulations.
• Supervision by the National Authority for the Protection of Personal Data.
• Obligations of the online gaming and betting sector under Law No. 31557 and amendments thereto, regarding identity verification, integrity, and security.

Personal data is processed in a lawful, fair, and transparent manner.

Main uses of the data:

• Account management and online service provision.
• Payment processing and transaction management.
• Identity verification, KYC checks, and fraud and abuse prevention.
• Platform security, incident investigation, and system integrity assurance.
• Customer support and query management.
• Analytics and statistics to improve site and application performance.
• Compliance with legal, regulatory, and accounting obligations.
• Sending personalized communications and content if the user has given their consent.

Standard legal bases:

• User consent.
• Execution of the service contract.
• Compliance with legal obligations or requests from authorities.
• Legitimate interest, respecting the rights and freedoms of the user.

Mechanisms for exercising rights:

• Account settings to review and update basic information. Rights:
• Requests for access, rectification, cancellation, or opposition through the help channel or privacy email indicated on the site.

Response times in accordance with Peruvian law:

• Access: up to 20 business days.
• Correction, cancellation, or objection: up to 10 business days.

Disposal and storage:

• Data will be deleted when it is no longer necessary for the purposes for which it was collected or when consent is withdrawn, except where retention is required by law, for dispute resolution, or for the defense of claims.
• Deletion may include blocking and secure deletion of records in active systems and backups, following applicable retention periods.

By using MegaPari, the user consents to security checks and the processing of payment data by authorized providers to execute transactions and anti-fraud controls.

The site and services are intended exclusively for persons aged 18 or older. No contractual relationships are established with minors. Age verification is not possible without valid identity documents.

If a minor is detected, the account will be closed, unauthorized transactions will be canceled, and personal data will be deleted. Parents or guardians can request deletion by sending proof of guardianship through the published contact channels.

Personal data may be stored or processed outside Peru, in countries where suppliers and technology partners operate. Use of the site implies the user’s consent to these international transfers.

Guarantees applied:

• Contracts with data protection clauses and confidentiality obligations.
• Risk assessments and appropriate technical measures, such as encryption and access controls.
• Commitment that third parties will only process the information in accordance with instructions and for authorized purposes.

This notice may clarify, limit, or interpret the scope of the privacy rules in specific situations, including regulatory updates or technical requirements necessary to operate the services.

This notice is enforceable when the user accepts this policy by agreeing to it when creating their account, expressly accepting it on the site, or providing an equivalent electronic signature. In the event of a regulatory conflict, the legal obligation in force will be complied with and changes to the document will be reported.

Cookies are small files that the site sends to the browser to store and retrieve information about browsing. They are used for statistics, behavior analysis, personalization, and improvement of the experience on websites. The standard retention period is 1 year, unless the cookie requires a shorter period for its purpose.

Common categories:

• Essential: enable basic functions and security.
• Preferences: remember user language and settings.
• Analytics: measure site performance and usage.
• Advertising: manage ad frequency and relevance where applicable.

Cookie management:

• Users can configure their browsers to accept, reject, or delete cookies.
• The site preferences panel allows you to modify consent by category when available.

Use of MegaPari implies full acceptance of this Privacy Policy. The current version is the one published on the site at any given time and prevails over previous versions.

Updates may be made to reflect legal, technical, or operational changes. Relevant modifications will be communicated through the site, and the date of the last update will remain visible in this document.

Personal data may be shared with third parties when necessary to comply with the law, resolve disputes, enforce agreements, or provide services, including payment providers, identity verification, hosting, security, analytics, and support. The list of categories and purposes is published on the site; if it is not available, the purpose and scope will be disclosed before or at the time of collection. Third parties assume confidentiality obligations and may only process the information in accordance with documented instructions and appropriate safeguards.

The provision of data for these purposes implies user consent, without prejudice to other applicable legal bases. Third parties assume confidentiality obligations and may only process the information in accordance with documented instructions and appropriate protection measures.

The site may include links to other websites that maintain their own privacy policies. No responsibility is assumed for the content, security, or use of information at those destinations.

It is recommended that you review each site’s policy before providing personal data and exercise caution when leaving the official domain.