Effective Date: April 18, 2026 · Last updated: September 18, 2026 · Mega Tickets USA LLC
Mega Tickets USA LLC ("Mega Tickets", "we", "our", "us") operates a global self-service marketplace for event tickets at megaticketsusa.com. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and the rights you have under applicable privacy laws — including the EU/UK GDPR, the California CCPA/CPRA, Brazil's LGPD, Mexico's LFPDPPP, and similar laws in Argentina, Colombia, and Chile.
By using the Service, you acknowledge that you have read this Policy. Where we rely on consent (for example, for marketing or non-essential cookies), we ask you to consent separately.
Account and profile information you give us: name, email, phone number, password (hashed), date of birth, profile photo, language, country.
Transaction information: tickets purchased or listed, event details, order history, billing and shipping details, and payment metadata. We never store full card numbers on our servers. Card data is tokenized and processed by our PCI-DSS compliant processors (Square and Stripe).
Identity verification ("KYC"): for Organizers, government ID, business registration, and bank/payout information collected by Square or Stripe to comply with anti-money-laundering and tax laws.
Device and technical data: IP address, browser/user-agent, operating system, device identifiers, crash logs, and approximate location derived from IP.
Cookies and similar technologies: see our Cookie Policy.
Precise location (latitude/longitude) only when you explicitly enable it for event check-in verification.
Social-integration data (if you sign in via Google, Apple, or Facebook): basic profile data that provider shares per your settings.
Communications: emails, support tickets, survey answers, and feedback.
For users in the EU/UK (GDPR art. 6) and in Brazil (LGPD art. 7) and other jurisdictions with analogous frameworks, we rely on the following bases:
We share personal data only as described below, and never sell it in the everyday sense of the word. Some of these activities may be classified as "sale" or "sharing" under the California CCPA/CPRA — see Section 10 for your opt-out right.
Mobile information and text-message consent. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. This exclusion applies to every category above, including advertising and measurement partners, affiliate networks and anything treated as a "sale" or "sharing" under the CCPA/CPRA. See Section 16.
Mega Tickets is based in the United States. When you use the Service from outside the U.S., your data will be transferred to and processed in the U.S. and in other countries where our service providers operate (primarily U.S., EU, and Latin America).
For transfers from the EU/UK or Brazil, we rely on the European Commission's Standard Contractual Clauses (Module 1 or 2, as applicable), the UK International Data Transfer Addendum, and ANPD-approved mechanisms under LGPD art. 33, supplemented by technical measures such as encryption in transit and at rest.
We keep personal data for as long as your account is active and as needed to provide the Service. Specific retention periods:
We use industry-standard safeguards: TLS 1.2+ in transit, encryption at rest, Row-Level-Security on our database, hashed passwords, MFA for staff admins, and PCI-DSS compliance via our processors. QR codes rotate every 30 seconds and are signed with HMAC-SHA256 to make screenshots useless for entry.
No system is perfectly secure. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities within the timelines required by law (e.g., 72 hours under GDPR art. 33, and "in a reasonable time frame" under LGPD art. 48).
The Service is intended for users 18 years of age or older. We do not knowingly create accounts for children, and additional rules apply by jurisdiction:
If you believe a minor has created an account, contact privacy@megaticketsusa.com and we will delete it.
Depending on where you live, you have the rights below. To exercise any right, email privacy@megaticketsusa.com. We will respond within 30 days (GDPR/LGPD), 45 days (CCPA), or any shorter period required by local law. We may need to verify your identity first.
We use cookies and similar technologies on our website. For a full list, including analytics and advertising cookies (Google Analytics, Meta Pixel) and how to manage your preferences, see our Cookie Policy.
Affiliate / partner network tracking. Some events listed on Mega Tickets USA are sold by third-party ticketing platforms with which we have an affiliate relationship (administered through commission-based affiliate networks such as Impact.com). When you click an outbound link to one of these partners, the partner's network may set a cookie that lets us receive a referral commission if you complete a purchase. The cookie typically expires within 7 to 30 days. The information shared is limited to the click event, the destination platform, and (in some cases) a hashed identifier we generate — we do not share your email, payment details, or account data with affiliate networks. You can disable affiliate cookies via your browser settings or our Cookie Policy preferences. Disabling them does not affect the price you pay or your ability to complete a purchase.
Most browsers send a "Do Not Track" signal. Because there is no industry consensus on how to interpret the signal, we currently do not respond to DNT signals. We do honor the Global Privacy Control (GPC) signal from California residents as an opt-out of "sale" and "sharing" for cross-context behavioral advertising.
You can reach our privacy team at privacy@megaticketsusa.com.
If you believe we have not adequately handled your request, you may contact your local data-protection authority:
We may update this Policy. If the change is material, we will give at least 30 days' notice by email or prominent notice in the Service before it takes effect. Your continued use after the effective date means you accept the updated Policy.
Mega Tickets USA operates Mega Ride, dispatch software licensed by chauffeur and limousine companies. Under that programme we send one kind of text message, and only to chauffeurs of those companies: when a company assigns a ride to one of its own chauffeurs, that chauffeur receives a text naming the company, the ride, the time and the pickup address. We send no marketing or promotional texts under this programme.
The number is recorded with consent, either by the company when it adds the chauffeur to its fleet or by the chauffeur in the MegaRide Chauffeur app under More → Ride alerts by SMS. Consent is optional and is never a condition of holding an account, being dispatched or using the software. A chauffeur with no recorded consent is simply not texted.
Frequency is about one message per ride assigned. Message and data rates may apply. Reply STOP to any message to stop immediately, or HELP for help; the in-app switch stops them too, in one tap. Carriers are not liable for delayed or undelivered messages.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. In practice the number reaches only our messaging provider (Twilio), for the single purpose of delivering the message.
For help, reply HELP to any message or email contact@megaticketsusa.com. The full programme, including the exact consent wording, is described at megaticketsusa.com/megaride; the SMS terms are in Terms of Service, section 24.