Privacy policy
for tickets.megacampus.com and the Seat Selection / Reservation Service Version date: 11 February 2026 Published at: tickets.megacampus.com This Privacy Policy (the “Policy”) explains what personal data we collect on tickets.megacampus.com, how and why we use it, who we share it with, how long we keep it, and what rights you may have. 1. Who we are (Controller) and how to contact us Controller / Service Operator: MEGACAMPUS EVENTS L.L.C., License No.: 1444340, Address: Office SM1-268, ARAB BANK Building, Port Saeed, Plot 184-0, Dubai, United Arab Emirates, Makani: 32005 94654, e-mail: info@megacampus.com (the “Company”, “we”, “us”). For privacy requests, contact: info@megacampus.com (please use subject: “Privacy request”). 2. Scope This Policy applies to: - the website tickets.megacampus.com (the “Website”); - authentication via email and one-time password (OTP); - the seat selection / reservation / confirmation functionality for attending an event based on a previously purchased ticket (“Service”). This Policy does not cover third-party websites that may be linked from the Website. 3. What data we collect We collect data necessary to provide the Service and keep it secure. 3.1. Data you provide: - first name, last name; - email address; - phone number; - country and city. 3.2. Technical and usage data: - IP address, date/time of access; - device type, OS, browser, language; - session identifiers, server logs; - Service actions (e.g., sign-in attempts, seat selection/reservation status); - cookies and similar technologies (see the Cookie Policy, if published separately). 3.3. Ticket/entitlement-related data (if applicable): - internal user/order/ticket identifier; - ticket category/zone/quota data required to display eligible seats and prevent abuse/errors. Note: unless payment functionality is explicitly implemented on this Website, we do not request payment card details here. 4. Purposes of processing - Providing the Service: OTP sign-in, session management, enabling seat selection/reservation/confirmation. - Eligibility verification: confirming a valid ticket/entitlement via email/identifier/lists (as applicable). - Service communications & support: sending OTP and service notifications, responding to requests, incident handling. - Security & fraud prevention: protecting against bots, brute-force attempts, misuse, and investigating incidents. - Service improvement & analytics (if used): diagnosing errors, performance monitoring, aggregated statistics. - Legal compliance: meeting applicable legal requirements and responding to lawful requests. 5. Legal bases - Performance of a contract / providing the requested Service (authentication, seat selection features). - Legitimate interests (security, fraud prevention, maintaining and improving the Service). - Consent (where required, e.g., non-essential cookies/marketing analytics or promotional communications). - Legal obligation (where processing is required by applicable law or lawful authority request). 6. Sharing and recipients We may share data strictly as needed with: - IT and hosting providers (infrastructure, hosting, maintenance); - Email delivery providers (OTP and service notifications); - Security/anti-bot providers (if used); - Analytics providers (if used, subject to cookie choices/consents); - Event organizer/venue/partners (only as needed for seating/access administration, where applicable); - Authorities (where required by law). We engage processors under contracts requiring confidentiality and appropriate safeguards. 7. International data transfers We are based in the UAE (Dubai). Data may be processed/stored in the UAE and/or other countries where our providers operate. We take reasonable measures to protect data in cross-border transfers (contractual protections, access controls, security measures). Where specific mechanisms are required for certain jurisdictions (e.g., EU/UK), we implement them where applicable. 8. Retention We retain data no longer than necessary for the purposes above and as required by applicable law. Typically: user-submitted profile/contact data is retained for the seat-selection process and a reasonable period after the event to handle requests/disputes; logs/security data as needed for security and investigations; longer retention where required by law. 9. Your rights Depending on your jurisdiction, you may have rights to: - access and obtain a copy; - rectify/update; - delete (where applicable); - restrict processing (where applicable); - object to processing based on legitimate interests (where applicable); - withdraw consent (where processing is based on consent); - lodge a complaint with a competent authority (where applicable). To exercise your rights, email info@megacampus.com. We may request reasonable verification of identity. 10. Security We use reasonable technical and organizational measures to protect data (access controls, encryption in transit where applicable, logging, least-privilege access, backups, etc.). No system is 100% secure. 11. Children The Service is not intended for individuals who are not legally able to provide consent under applicable law. If you believe a child provided data, contact us at info@megacampus.com. 12. Changes to this Policy We may update this Policy from time to time. The updated version becomes effective upon publication on the Website unless stated otherwise. 13. Contact info@megacampus.com MEGACAMPUS EVENTS L.L.C., License No.: 1444340 Address: Office SM1-268, ARAB BANK Building, Port Saeed, Plot 184-0, Dubai, United Arab Emirates Makani: 32005 94654