pakmega Privacy Policy

1. Data Controller

pakmega ("the Platform", "we", "us", or "our") is the data controller responsible for the personal information collected through pakmega.app and all associated mobile and desktop applications. When this Privacy Policy refers to "processing" your data, it means any operation performed on personal information — including collection, storage, use, disclosure, and deletion.

If you have questions about this policy or our data practices, you may contact our Data Protection contact at: [email protected].

2. Data We Collect

pakmega collects personal data through three primary channels: information you provide directly, information collected automatically as you use the Platform, and information received from third-party verification and payment partners.

2.1 Information You Provide

• Registration data: Full name, date of birth, email address, mobile number, residential address (city, province, postal code), and preferred currency (PKR).
• Identity documents: Computerised National Identity Card (CNIC) number and/or a scanned copy, passport details, or other government-issued identification requested during KYC verification.
• Payment information: JazzCash mobile account number, EasyPaisa account details, bank account information (IBAN, account title, bank name — e.g., HBL, UBL, Meezan Bank), and transaction history.
• Communications: Messages sent to our support team via live chat, email, or any feedback form, including your support ticket history.
• Responsible gaming declarations: Self-exclusion preferences, deposit limits, session duration settings, and cooling-off requests.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone.
• Usage data: Pages visited on pakmega, time spent on each page, games played, bets placed (including stake amount, market selected, and outcome), and session duration.
• Log data: Server-side logs recording login events, transaction attempts, and security-related actions.
• Cookie data: See Section 9 for full details on cookies and tracking technologies used by pakmega.

2.3 Information from Third Parties

• Identity verification providers: We may receive confirmation of identity and age from regulated KYC service providers in order to comply with our gaming licence conditions.
• Payment processors: Transaction status, confirmation references, and fraud-risk scores from JazzCash, EasyPaisa, and banking partners.
• Fraud and AML screening: Risk indicators from anti-money laundering screening databases used to comply with Pakistan's financial regulations and our international gaming licence obligations.

3. Why We Collect Your Data

pakmega processes personal data for the following purposes:

Purpose	Examples
Account administration	Creating and managing your pakmega account; enabling login; processing deposits and withdrawals.
Regulatory compliance	KYC / AML obligations required by our gaming licence; age verification (21+ policy); reporting to regulatory bodies.
Transaction processing	Authorising and recording all PKR deposits and withdrawals; resolving payment disputes.
Security & fraud prevention	Detecting suspicious login attempts; identifying bonus abuse; preventing unauthorised account access.
Platform improvement	Analysing aggregate usage patterns to improve game performance, interface design, and betting market offerings (e.g., PSL, UFC, cricket).
Customer support	Responding to account queries, withdrawal issues, and technical problems; maintaining support ticket records.
Responsible gaming	Monitoring for signs of problem gambling; enforcing self-exclusion and deposit limit settings.
Marketing (with consent)	Sending promotional emails, bonus notifications, and PSL / cricket season offers — only where you have opted in.

4. Legal Basis for Processing

pakmega processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the pakmega Terms & Conditions you accepted upon registration — including account management and payment processing.
• Legal obligation: Processing mandated by our gaming licence, AML regulations, and applicable Pakistani law — including identity verification, transaction record-keeping, and regulatory reporting.
• Legitimate interests: Processing for fraud detection, platform security, and aggregate analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit, freely given, and revocable consent.

5. Data Sharing & Disclosure

pakmega does not sell your personal data. We may share data only in the following circumstances and only to the minimum extent necessary:

5.1 Regulated Payment Partners

Your payment data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors solely for the purpose of executing your requested transactions. Each partner processes data under its own privacy policy and applicable Pakistani financial regulations.

5.2 Identity and KYC Verification Providers

To comply with our gaming licence age and identity verification requirements, we may share your identity document data with licensed KYC verification service providers. These providers are contractually bound to use your data only for verification purposes.

5.3 Regulatory and Law Enforcement Bodies

We may disclose personal data to regulators, gaming authorities, financial intelligence units, or law enforcement agencies when required by law, court order, or our gaming licence conditions. We will notify you of any such disclosure to the extent permitted by law.

5.4 Technology and Hosting Providers

Our platform is hosted on secure cloud infrastructure. Hosting, data storage, and IT service providers access personal data only on our instructions and under strict confidentiality obligations. They may not use your data for any purpose beyond providing the contracted services to pakmega.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets involving pakmega, your personal data may be transferred to the successor entity. We will notify you in advance and ensure that your data continues to be protected under terms no less restrictive than this policy.

6. International Transfers

Your personal data is primarily stored and processed within secure data centres. Where data is transferred outside Pakistan — for example, to cloud infrastructure providers or KYC service vendors — pakmega ensures that appropriate safeguards are in place. These include standard contractual clauses, data processing agreements, and transfers only to jurisdictions with an adequate level of data protection as recognised by international data protection standards. You may request details of these safeguards by contacting us at [email protected].

7. Retention Periods

pakmega retains personal data for as long as is necessary to fulfil the purposes outlined in this policy, and in accordance with applicable legal, regulatory, and contractual requirements. As a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by AML and gaming licence obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in line with financial record-keeping regulations.
• Support communications: Retained for two (2) years from the date of resolution of the relevant support ticket.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of compliance.
• Cookie and analytics data: Aggregate analytics data is anonymised and retained indefinitely; session-level data is purged after thirteen (13) months.

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures.

8. Security Measures

pakmega employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including identity document copies.
• Bcrypt password hashing — your account password is never stored in plain text.
• Multi-factor authentication (MFA) available for all registered accounts.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular penetration testing and vulnerability assessments by independent security firms.
• 24/7 security monitoring with automated anomaly detection and alerting.

Despite these measures, no system is entirely immune to security incidents. In the event of a data breach affecting your personal data, pakmega will notify you and relevant regulatory authorities in accordance with applicable breach notification obligations.

9. Cookies & Tracking Technologies

pakmega uses cookies and similar technologies (web beacons, local storage) for the following categories of purpose:

Category	Purpose	Required?
Strictly Necessary	Session management; keeping you logged in; CSRF protection; load balancing.	Yes — cannot be disabled.
Functional	Remembering your language, preferred odds format, and responsible gaming settings.	Yes — required for core features.
Analytics	Aggregate page view and session data used to improve platform performance. No personal identifiers are included in analytics reports.	Optional — can be disabled.
Fraud Detection	Device fingerprinting and behavioural analysis to identify suspicious activity and protect your account.	Yes — required for security.

You can manage your optional cookie preferences at any time via the Cookie Settings panel. Please note that disabling certain cookies may affect the functionality of the pakmega platform.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights regarding your personal data held by pakmega:

• Right of Access: Request a copy of all personal data pakmega holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
• Right to Restriction: Request that we restrict processing of your data in certain circumstances (e.g., while a disputed matter is being resolved).
• Right to Data Portability: Request a machine-readable export of the personal data you have provided to pakmega.
• Right to Object: Object to processing based on legitimate interests, including direct marketing. Marketing opt-outs take effect immediately.
• Right to Withdraw Consent: Withdraw any previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. Identity verification may be required before we fulfil your request.

11. Children & Minors

pakmega is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Registration requires confirmation that you are 21 or older, and we conduct age verification checks as part of our KYC process.

If we discover that personal data has been collected from a user under 21, we will immediately suspend the relevant account, void any transactions, and delete the associated data. If you believe a minor has registered on pakmega, please notify us immediately at [email protected].

12. Marketing Communications

With your explicit consent, pakmega may send you promotional communications about bonuses, new game releases, PSL and cricket season offers, and platform news. You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email we send you.
• Adjusting your communication preferences within your pakmega account dashboard.
• Contacting our support team at [email protected].

Opt-out requests are processed within 48 hours. Please note that even after opting out of marketing communications, you will continue to receive essential transactional messages related to your account (e.g., withdrawal confirmations, security alerts).

Users who have activated self-exclusion on their account are automatically removed from all pakmega marketing lists for the duration of the exclusion period.

13. Policy Changes

pakmega reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will notify you by posting a prominent notice on the pakmega platform and, where we have your email address, by sending you a direct notification at least seven (7) days before the changes take effect.

The "Effective Date" at the top of this policy indicates when the current version came into force. We encourage you to review this policy periodically. Your continued use of pakmega after the effective date of any updated version constitutes acceptance of the revised policy.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or pakmega's data processing practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 in English and Urdu through your pakmega account dashboard.
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 calendar days.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We are committed to working constructively to resolve any privacy concerns you may have.

For responsible gaming support and self-exclusion tools, please visit our dedicated page at /responsible-gaming. For a full understanding of your account rights and obligations, please review our Terms & Conditions.