Who we are
MegaBonanza ("we", "us", "our") operates the social casino website at megabonanza.online. We are committed to handling personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws across Canada. This policy explains what we collect, why we collect it, how long we keep it and the rights you have over your data.
What we collect
When you register for a MegaBonanza account we collect your email address, a screen name, a password (stored as a salted hash, never in plain text) and your declared date of birth. When you use the site we collect basic technical data such as IP address, browser type, device type and pages visited. If you opt in to marketing notifications we store your preferences. If you contact support we store the content of the conversation. If you purchase a coin pack we receive a transaction reference from our payment processor — we do not see or store full card numbers.
Why we collect it
We use your data to operate the social casino service, authenticate logins, prevent fraud, comply with applicable law, respond to support enquiries, send the marketing communications you have opted in to, and improve the platform over time. We never sell personal data to third parties and we never use it to target ads outside the MegaBonanza ecosystem.
Cookies and analytics
MegaBonanza uses essential cookies (for login, security and consent) and optional analytics cookies (to understand how the lobby is used). Optional cookies are off by default and only turn on after you give consent through the in-lobby cookie banner. Full detail of each cookie, its purpose and its lifetime is on the Cookie Policy page.
Your rights under PIPEDA
Canadian residents have the right to access the personal information we hold about them, request a correction if anything is inaccurate, withdraw consent for non-essential processing, opt out of marketing at any time, and request deletion of personal information that is no longer needed. To exercise any of these rights, email privacy@megabonanza.online from the email address on the account. We acknowledge requests inside one business day and respond inside 30 calendar days.
Data retention
Account data is retained for the life of the account. After account closure, personal data is removed within 30 days, with the exception of transaction records relating to coin pack purchases, which are retained for the period required by Canadian financial-record-keeping rules (typically six years). Support transcripts are retained for two years for quality monitoring and dispute resolution.
Data storage and international transfers
MegaBonanza primarily stores personal data on servers located in Canada and the European Union. Where data is transferred to processors in other countries (for example a global content delivery network), we put contractual safeguards in place that meet PIPEDA requirements. We rely on no automated decision-making with legal effect on individuals.
Security
We protect personal data with TLS encryption across every connection, optional two-factor authentication on every account, salted password hashing, role-based access for staff and continuous monitoring for unusual activity. No system is invulnerable, but our security posture is built around the principle of minimising data held and locking down what remains.
Children
MegaBonanza is strictly 19 and over across Canada (18 and over in Alberta, Manitoba and Quebec) and is not intended for minors. We do not knowingly collect data from anyone under the legal age in their province or territory. If you believe a minor has registered an account, contact privacy@megabonanza.online and we will remove the account immediately.
Updates to this policy
We may update this Privacy Policy from time to time. Material changes will be announced inside the lobby and via email to active accounts. The "last updated" date at the bottom of this page reflects the most recent revision.
Last updated: June 2026.