Megapari Privacy Policy – How We Protect Your Data

Megapari operates the online casino and sports betting platform at megapari-khelo.com, providing services to players in Pakistan under international gaming licensing. For the purposes of this Privacy Policy, Megapari is the data controller responsible for the personal data of players registered on the platform.

When we use the terms "Megapari", "we", "us", or "our" in this policy, we are referring to the operating entity responsible for megapari-khelo.com. Our primary contact for data-related enquiries is our support team, reachable at support@megapari-khelo.com.

Megapari collects personal data from you in several ways: information you provide directly during registration and verification, information generated by your use of the platform, and technical information collected automatically. Here is a full breakdown:

Registration Data

• Full legal name (as on your CNIC)
• Date of birth
• Email address
• Mobile number
• Preferred currency (PKR by default)
• Password (stored in hashed form — never in plain text)

Identity Verification Data

• Copy of your CNIC (front and back)
• Selfie photograph for facial matching
• Proof of payment method ownership where required

This data is collected once as part of the mandatory KYC (Know Your Customer) process before your first withdrawal. It is stored securely and accessed only by authorised compliance personnel at Megapari.

Payment Data

• Easypaisa or JazzCash account number (last 4 digits visible to Megapari for matching)
• NayaPay or SadaPay account reference
• Bank account number for IBFT (last 4 digits only)
• Card details for Visa/Mastercard (tokenised by payment processor — full card numbers are never stored by Megapari)
• Transaction amounts, dates, and references

Gameplay and Activity Data

• Games played, bets placed, results, and session times
• Bonus activations and wagering history
• Sports markets and PSL betting history
• Customer support interaction history

Technical Data

• IP address at the time of login and transactions
• Device type, browser type, and operating system
• Cookies and session identifiers (see Section 7)
• Referring website or link (if applicable)

Megapari does not collect data for the sake of it. Every piece of personal information we hold serves a specific, legitimate purpose. Here is why each category of data is needed:

• Registration data is required to create your account, distinguish you from other players, and communicate with you about your account activity.
• Identity verification data is required to comply with anti-money laundering (AML) obligations, prevent fraud, confirm that you are aged 18 or above, and ensure withdrawals reach the correct person.
• Payment data is required to process your deposits and withdrawals accurately and to match transactions to your account for dispute resolution.
• Gameplay history is required to calculate bonuses and VIP points correctly, detect unusual activity, and respond to disputes about game outcomes or settlement.
• Technical data (IP, device) is used to detect and prevent unauthorised access, identify multiple accounts registered to the same person, and protect the security of the platform.
• Marketing preferences are used to send you relevant promotional offers from Megapari, only if you have opted in. You can withdraw this consent at any time.

Megapari processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and Megapari — including account creation, payment processing, and game operation.
• Legal obligation: Processing required for Megapari to meet its obligations under applicable law, including anti-money laundering requirements, age verification obligations, and financial record-keeping.
• Legitimate interests: Processing that Megapari reasonably needs to conduct its business — such as fraud detection, platform security, and customer support — where these interests do not override your privacy rights.
• Consent: Processing of data for marketing communications and optional personalisation features, where you have given explicit consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Megapari takes the security of your personal data seriously. The following technical and organisational measures are in place:

• SSL/TLS encryption: All data transmitted between your browser or device and the Megapari servers is encrypted using industry-standard protocols.
• Password hashing: Your account password is never stored in plain text. It is hashed using a one-way cryptographic algorithm.
• Tokenised payments: Full card numbers and complete wallet credentials are never stored on Megapari's own servers. These are handled by certified payment processors and tokenised for future transactions.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Employees with access to sensitive data such as CNIC images are subject to confidentiality obligations.
• Secure hosting: Megapari's platform is hosted on infrastructure with physical and network security controls, including firewalls and intrusion detection systems.
• Regular audits: Security practices are reviewed on a regular basis and updated in response to evolving threats.

Megapari does not sell your personal data. We share data with third parties only where necessary to provide the service or comply with legal requirements. The categories of third parties involved are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks, and Visa/Mastercard processors receive the payment data necessary to execute your deposit or withdrawal. These providers operate under their own privacy and security standards.
• Identity verification services: Megapari may use third-party KYC providers to assist with verifying CNIC documents and selfies. These providers process your data under strict confidentiality agreements and do not retain your data beyond the verification purpose.
• Fraud detection services: Megapari uses industry-standard fraud detection tools that may process IP addresses, device fingerprints, and transaction patterns to identify suspicious activity.
• Game providers: When you play a game from a provider such as Evolution, Pragmatic Play, or NetEnt, the game studio's software processes the outcome of your game session. Studios receive only the session and bet data necessary to operate the game — not your full personal profile.
• Legal and regulatory authorities: Megapari will disclose personal data to law enforcement or regulatory bodies where required to do so by applicable law, court order, or in connection with an investigation into suspected fraud or money laundering.

Megapari does not share personal data with advertising networks, data brokers, or other commercial third parties for marketing purposes.

Megapari uses cookies and similar tracking technologies on its website. Cookies are small text files stored on your device that help the platform function correctly and improve your experience. Here is how they are categorised:

• Essential cookies: Required for core platform functionality — keeping you logged in, maintaining your session, and processing transactions securely. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language settings and game filters to personalise your experience.
• Analytics cookies: Allow Megapari to understand how players use the platform — which pages are visited most, where players drop off, and how features are used. This data is aggregated and not personally identifiable.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts, and bot traffic.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the Megapari platform from functioning correctly. Megapari does not use third-party advertising or tracking cookies for cross-site advertising purposes.

Megapari retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods include:

• Account and registration data: Retained for the duration of your active account plus a minimum of 5 years after account closure, in line with anti-money laundering record-keeping obligations.
• Identity verification documents (CNIC, selfie): Retained for a minimum of 5 years from the date of verification, or longer if required by applicable regulation.
• Transaction records: Retained for a minimum of 7 years from the date of each transaction for financial compliance purposes.
• Gameplay history: Retained for a minimum of 2 years and used for dispute resolution and bonus integrity checks.
• Technical and security logs: Typically retained for 12 months and used for fraud investigation and security auditing.
• Marketing consent records: Retained for as long as consent is active, plus 3 years after withdrawal of consent as evidence of compliance.

When data reaches the end of its retention period and there is no longer a legal or contractual basis for keeping it, Megapari deletes or anonymises it securely.

As a Megapari player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact support@megapari-khelo.com with a clear description of your request.

Megapari is strictly for individuals aged 18 and above. The platform does not knowingly collect personal data from individuals under the age of 18. If we discover that an account has been registered by a minor, that account will be closed immediately, all funds will be returned to the payment method used, and all associated data will be deleted or anonymised.

If you believe a minor has registered on the Megapari platform, please contact support@megapari-khelo.com immediately with the relevant details. We take this seriously and will act promptly.

In the event of a data security incident that poses a risk to your personal data, Megapari will:

• Act immediately to contain and assess the incident;
• Notify affected players by email within 72 hours of becoming aware of the breach, where it is feasible to do so and where the breach poses a significant risk to individuals;
• Advise affected players on what data may have been involved and what steps they should take — such as changing their password — to protect themselves;
• Report to relevant regulatory authorities where required by applicable law.

If you suspect that your Megapari account has been accessed without your authorisation, change your password immediately and contact support via live chat or email. Megapari will investigate promptly and secure your account.

The Megapari platform does not contain links to external websites or third-party platforms as a general practice. Game content streamed or served from game studios operates within the Megapari interface under agreed data processing arrangements.

If you access any third-party service from a link that is not part of the Megapari navigation — for example, in a support email or through an external source — please be aware that Megapari is not responsible for the privacy practices of that third party. Review their privacy policy before providing any personal information.

Megapari reviews this Privacy Policy regularly and may update it from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data practices. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page;
• Notify registered players by email where the changes significantly affect how their data is used;
• Display an on-platform notification for 30 days following a material update.

Your continued use of Megapari after any update to this policy constitutes your acceptance of the revised terms. We recommend bookmarking this page and reviewing it periodically.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to make a complaint about how Megapari has handled your personal data, please get in touch through one of the following channels:

• Live Chat: Available 24/7 from any page on the Megapari platform after logging in. For urgent security or data concerns, live chat is the fastest route to a response.
• Email: support@megapari-khelo.com — use the subject line "Privacy Request" or "Privacy Complaint" to ensure your message is directed to the right team. We aim to respond within 5 business days.

If you are unsatisfied with Megapari's response to a privacy complaint, you have the right to escalate your complaint to the appropriate data protection or regulatory authority in the applicable jurisdiction.