MegaPari Privacy Policy

This Privacy Policy explains how personal data is collected, processed, protected, disclosed, and destroyed on this online platform. Processing of information is based on user consent, contractual necessity, and lawful interests permitted under Kenya law. The document applies to all services offered to users in Kenya. By using the website, the user agrees to the collection and use of data as described here.

Privacy and Data Protection

  • Personal data collected
    • Identity and contact details such as name, date of birth, ID/passport number, address, email, and phone.
    • Account details, responsible gambling settings, preferences, and communication history.
    • Transaction and payment information, including deposits, withdrawals, and mobile money references.
    • Technical data such as device identifiers, IP address, browser, app logs, and cookies.
    • Verification records and documents for KYC and AML compliance.
  • Why data is collected
    • To register and manage the user account and provide online services.
    • To process payments and verify identity.
    • To meet legal and regulatory duties under Kenya’s Betting, Lotteries and Gaming Act, POCAMLA, and tax laws.
    • To maintain responsible gambling tools and customer support.
    • To improve service quality and site performance through analytics.
  • Protection measures
    • Encryption in transit and at rest where appropriate.
    • Role-based access controls and multi-factor authentication for staff systems.
    • Network security, monitoring, logging, and regular audits.
    • Vendor due diligence and confidentiality obligations.
    • Incident response and breach notification protocols.
  • User rights under the Data Protection Act, 2019
    • Access a copy of personal information.
    • Request correction of inaccurate data.
    • Request deletion where lawful and feasible.
    • Object to or restrict certain processing, including direct marketing.
    • Withdraw consent at any time, without affecting prior lawful processing.
    • Lodge a complaint with the Office of the Data Protection Commissioner.

Compliance follows Kenya’s Data Protection Act, 2019 and relevant regulations. GDPR-aligned principles guide fairness, transparency, accuracy, security, and purpose limitation.

Use of Collected Information

Personal data is used for lawful purposes:

  • Account and service delivery
    • Create and manage the user profile, verify age and identity, and provide customer support.
  • Transactions
    • Process deposits and withdrawals, prevent fraud, and resolve payment issues.
  • Service improvement and analytics
    • Analyse site usage, fix errors, and optimise performance and usability.
  • Marketing and preferences
    • Send service messages, updates, and marketing communications where consent exists. Users can opt out at any time.
  • Safety, integrity, and compliance
    • Enforce terms, support responsible gambling, detect misuse, and meet legal obligations.

Processing is based on consent, performance of a contract, compliance with legal duties, and legitimate interests balanced against user rights. Processing is transparent and limited to stated purposes.

Access to Information

  • How to access or update data
    • Users can review or update most account information in profile settings.
    • For a copy of personal data or portability requests, use the contact details published on the website or in-account support.
  • Correction and deletion procedures
    • Submit a request identifying the data to correct or delete. Proof of identity may be required.
    • Requests are assessed under applicable law, including retention needed for regulatory, tax, AML, and dispute purposes.
    • If deletion is not possible, processing will be limited where permitted.

By using MegaPari, the user consents to security checks, identity verification, and the processing of payment information by authorised payment providers and verification partners for KYC, AML, and fraud control.

Protection of Children’s Privacy

  • The services are for persons aged 18 years and above. Account registration by minors is prohibited.
  • The operator cannot confirm age without identity documents provided by the user.
  • If a parent or guardian informs the operator that a minor has submitted personal information, the account will be closed and the data deleted where feasible and lawful.

International Data Transfers

  • Personal data may be processed in or transferred to other countries where partners, processors, or group entities operate.
  • Using the site constitutes consent to such transfers, subject to safeguards required by Kenya’s Data Protection Act and regulations.
  • Safeguards include adequacy assessments, contractual clauses, and binding obligations on confidentiality, security, and lawful processing by all partners.
  • Users may request information on transfer safeguards through the contact channels provided on the website.

Use of Cookies

  • Definition
    • Cookies are small files stored on the device to save settings and recognise the browser. Similar technologies include pixels and local storage.
  • How cookies are used
    • Statistics and analytics to understand site usage and improve services.
    • Behaviour analysis to detect fraud and keep accounts safe.
    • Personalisation of content such as language, preferences, and user experience.
    • Site improvement, load balancing, and error tracking.
  • Retention
    • Non-essential cookies are retained for up to 1 year, after which they expire or are refreshed if consent continues.
  • Control
    • Users can manage cookie preferences in the cookie banner or browser settings. Disabling certain cookies may affect some features.

Acceptance of Privacy Policy

Use of the site indicates full acceptance of this Privacy Policy and any updates. The current version on the website prevails over previous versions. Continued use after changes take effect indicates agreement to the revised terms. Users who disagree should adjust preferences or stop using the services.

Third-Party Privacy Practices

  • Sharing of personal data
    • Data may be shared to comply with law, enforce agreements, prevent fraud, handle disputes, and deliver services under contract.
    • Categories include payment providers, mobile money operators, identity verification services, fraud and AML vendors, customer support tools, analytics providers, marketing platforms, and regulators or law enforcement.
  • Transparency
    • A current list or description of key third parties is available on the website or upon request. If a specific party is not listed, the purpose and scope of sharing will be explained before or at the time of disclosure where required.
  • Consent
    • Providing information and using the services constitutes consent to processing by these third parties for stated purposes, subject to their own privacy practices and applicable law.

Updated: