Megapari Privacy Policy — How We Handle Your Data in Pakistan

01Introduction

This Privacy Policy describes how Megapari ("we", "us", "our") collects, uses, stores, and protects the personal information of players ("you", "your") who register and use the Megapari platform at megapari.cash. Megapari operates as an online gaming platform serving Pakistani players and processes all transactions in Pakistani Rupees (PKR).

By creating a Megapari account or using any service on megapari.cash, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described here. This Policy should be read alongside Megapari's Terms and Conditions.

We are committed to handling your personal data responsibly, lawfully, and with full transparency. If you have any questions about how Megapari handles your data at any point, our support team is available 24/7 at support@megapari.cash — in both English and Urdu.

02What Personal Data We Collect

Megapari collects personal data in three ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information provided by third-party services we use (such as payment processors and identity verification providers).

Information you provide directly:

• Full legal name as it appears on your CNIC
• Date of birth (to verify you are 18 or older)
• Pakistan mobile number used for account registration and OTP verification
• Email address (if provided during registration)
• CNIC number or copy (requested during identity verification)
• Payment method details including Easypaisa account number, JazzCash number, NayaPay ID, SadaPay ID, bank account details for IBFT, or card details for Visa/Mastercard transactions
• Any documents submitted for KYC (Know Your Customer) purposes
• Communications sent to Megapari customer support

Information generated automatically:

• IP address and approximate geographical location
• Device type, operating system, and browser information
• Session duration and login timestamps
• Games played, bets placed, and transaction history on the platform
• Cookies and similar tracking technologies (see the Cookies section below)

Information from third parties:

• Identity verification results from KYC providers confirming your age and identity
• Transaction confirmation data from payment processors (Easypaisa, JazzCash, bank systems) confirming that deposits and withdrawals completed successfully

03Why We Collect Your Data

Megapari collects and uses your personal data for the following specific purposes. We do not use your data for any purpose that is not listed here:

Megapari does not use your personal data for any form of profiling for advertising purposes, and does not share it with advertisers or marketing agencies. Any analytics performed on usage data uses anonymised, aggregated information that cannot be traced back to an individual player.

04Legal Basis for Processing

Megapari processes your personal data under the following legal bases:

• Contractual Necessity: Much of the data processing Megapari performs is necessary to fulfil the contract between you and Megapari — i.e., to operate your account and provide the gaming services you've signed up for. Without processing this data, we cannot provide the service.
• Legal Obligation: Megapari is required by law to collect and retain certain data, including identity verification records, transaction logs, and AML-related information. We retain this data for as long as legally required even if you close your account.
• Legitimate Interest: Megapari processes some data — such as device and session information — to protect the platform against fraud, cheating, and security threats. This processing is in both Megapari's and our players' legitimate interests.
• Consent: Where Megapari relies on consent as a legal basis — for example for optional marketing communications — we will always ask for explicit consent and provide a straightforward way to withdraw it at any time.

05Who We Share Your Data With

Megapari does not sell your personal data. We share data only with the categories of third parties listed below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking IBFT partners, and Visa/Mastercard processing networks receive the transaction data required to process your PKR deposits and withdrawals. These parties are contractually bound to handle your data securely and not to use it for any other purpose.
• Identity Verification Providers: Where KYC verification is required, Megapari uses certified third-party identity verification providers. Your CNIC or other documents may be processed by these providers solely for the purpose of confirming your identity and age. These providers are selected for their data security standards and are contractually restricted from using your documents for any other purpose.
• Legal and Regulatory Authorities: Megapari may be required by law to disclose certain information to regulatory authorities, law enforcement agencies, or financial intelligence units. Such disclosures are made only when legally required and to the minimum extent necessary.
• Platform Infrastructure Providers: Cloud hosting and server infrastructure providers that power megapari.cash process data on Megapari's behalf. These providers operate under strict data processing agreements and do not have the right to access or use your personal data independently.

Megapari does not share your data with other players, with gambling operators, with marketing companies, or with any party not listed above. If you receive unsolicited marketing that appears to reference your Megapari account, please report it to support@megapari.cash immediately.

06Payment Data & PKR Transactions

Megapari processes PKR transactions through Pakistan's leading mobile payment platforms and banking channels. Here's specifically how your payment data is handled:

• Megapari does not store your complete Easypaisa PIN, JazzCash MPIN, or bank account password. These credentials are entered directly into your payment provider's secure interface, not into Megapari's systems.
• Megapari records transaction metadata — including the amount, timestamp, method, and status (completed/failed) of each deposit and withdrawal — for account management and legal compliance purposes.
• For card payments, Megapari uses tokenised card processing. Your full card number is not stored on Megapari's servers. Only a secure token representing your card is retained to facilitate repeat transactions.
• Transaction records are retained for the period required by applicable financial regulations, even after account closure.
• Withdrawal requests are processed only to payment accounts registered in your own name. This protects both you and the platform against fraudulent third-party withdrawal attempts.

07Cookies & Similar Technologies

Megapari uses cookies and similar browser-based storage technologies to operate the platform correctly and to understand how players use the site. The cookies Megapari uses fall into the following categories:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in between pages, security tokens that prevent cross-site request forgery, and cookies that remember your game and settings preferences. These cannot be disabled without breaking platform functionality.
• Analytics Cookies: Megapari uses anonymised analytics to understand which pages and games are most popular, where players encounter problems, and how the platform can be improved. This data is aggregated and anonymised — it does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and account takeover attempts. These cookies help protect your account.

Megapari does not use third-party advertising cookies or allow advertising networks to place tracking cookies on megapari.cash. You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect the platform's ability to function correctly.

08How We Protect Your Data

Megapari takes data security seriously and has implemented multiple layers of protection for your personal and financial data:

• Encryption in Transit: All data between your device and megapari.cash is encrypted using TLS 1.2/1.3 with 256-bit AES encryption. The padlock icon in your browser confirms this is active on every page.
• Encryption at Rest: Sensitive data stored on Megapari's servers — including identity documents and payment records — is encrypted at rest using AES-256 encryption.
• Access Controls: Only authorised Megapari staff with a legitimate business need can access player personal data. Access is logged, role-restricted, and regularly audited.
• Two-Factor Authentication: Megapari supports two-factor authentication (2FA) via OTP to your registered mobile number. We strongly recommend enabling 2FA on your account to protect against unauthorised access.
• Regular Security Audits: Megapari's platform undergoes regular third-party security audits to identify and address vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects your personal data, Megapari will notify affected players within 72 hours of becoming aware of the incident and will provide guidance on protective steps you can take.

09How Long We Keep Your Data

Megapari retains your personal data only for as long as necessary for the purpose it was collected, or as required by law. The following retention periods apply:

• Active Account Data: Retained for the duration of your Megapari account plus 5 years after account closure, to meet financial record-keeping and regulatory requirements.
• Transaction Records: PKR transaction records are retained for a minimum of 5 years after the date of each transaction as required by financial regulations applicable to payment processing in Pakistan.
• Identity Verification Documents: KYC documents (CNIC copies, etc.) are retained for 5 years after account closure to comply with anti-money laundering regulations.
• Customer Support Communications: Retained for 3 years after the resolution of the relevant query or dispute.
• Analytics Data: Anonymised, aggregated analytics data may be retained indefinitely as it cannot be linked to individual players.

When data retention periods expire, Megapari securely deletes or anonymises the relevant data. You may request early deletion of data that is not subject to legal retention requirements — see the Your Rights section below.

10Your Data Rights

As a Megapari player, you have the following rights with respect to your personal data. To exercise any of these rights, contact support@megapari.cash. We will respond within 30 days and will not charge a fee for standard requests.

11Minors & Under-18 Players

Megapari is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the Megapari registration and KYC process.

If Megapari discovers that personal data has been collected from a person under 18 — whether through a false date of birth provided at registration or through any other means — the account will be immediately suspended, all balances will be frozen, and the data will be reviewed and handled in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered a Megapari account using false information, please contact support@megapari.cash immediately. Megapari takes underage access seriously and will act promptly on any credible report.

12Changes to This Privacy Policy

Megapari reviews and updates this Privacy Policy periodically. When material changes are made — changes that affect how your data is used, who it is shared with, or what rights you have — registered players will be notified via their registered mobile number or email at least 7 days before the changes take effect.

Minor clarifications or formatting updates may be made without prior notice. The "Last Updated" date at the top of this policy reflects when the most recent changes were made. We recommend checking this page periodically.

13Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by Megapari, please contact us through one of the following channels:

• Privacy Requests & Data Subject Rights: support@megapari.cash — please use the subject line "Privacy Request" and include your registered mobile number for identity verification.
• General Privacy Questions: Available via Live Chat 24/7 from within your logged-in Megapari account.
• Urgent Security Concerns: If you believe your account or personal data has been compromised, contact support@megapari.cash immediately and mark your message as urgent. Our security team monitors this address around the clock.

Megapari's customer support team is available in both English and Urdu, 24 hours a day, 7 days a week. We aim to acknowledge privacy requests within 24 hours and to resolve them within 30 days. Complex requests may take longer, in which case we will keep you informed of progress.

For common questions about your Megapari account, privacy settings, and data rights, you can also visit our FAQ page.