MegaPari Privacy Policy
This document explains the collection, processing, protection, disclosure, and secure destruction of personal data for users in Pakistan. Use of the platform constitutes consent to the handling of information described here. The policy sets out what data is collected, how it is used for services, and how security is maintained. It also describes user rights and how to exercise them. The platform maintains records in line with legal and compliance requirements.
Privacy and Data Protection
Personal data collected may include:
- Identification and verification details: name, date of birth, CNIC or passport data, identity documents verified through NADRA-compliant checks where applicable.
- Contact information: email, phone, address.
- Account and usage information: username, preferences, game and bet history, responsible gaming settings, support communications.
- Technical data: device identifiers, IP address, browser type, cookies, logs from websites and mobile apps.
- Transaction information: payment method tokens, limited card or wallet details handled by regulated processors, deposits and withdrawals in PKR.
Why this data is collected:
- To register and service accounts, provide online services, and process transactions.
- To verify identity, meet KYC/AML obligations, prevent fraud, and monitor risk.
- To comply with Pakistan laws such as PECA 2016 and anti-money laundering requirements, and to align to recognised international standards of privacy (including GDPR principles).
- To improve platforms and resolve disputes.
Security measures (technical and organisational):
- Transport-layer encryption (TLS) and encryption at rest for sensitive records.
- Strict access controls, role-based permissions, multi-factor authentication for staff, and audit logging.
- Network segmentation, vulnerability management, and incident response procedures.
- Vendor due diligence and data processing agreements for third parties handling information.
User rights:
- Access: request a copy of personal information.
- Correction: update inaccurate or incomplete data.
- Deletion: request removal where no legal basis requires retention.
- Objection and restriction: object to certain processing or request limits on use.
- Consent withdrawal: opt out of optional processing such as marketing.
Data retention: records are kept for the life of the account and then for the period required by law and compliance, generally up to 5 years for AML and financial record-keeping. Logs and analytics are retained for limited periods aligned to necessity.
Use of Collected Information
Personal information is used to deliver services lawfully and transparently:
- Account creation, authentication, and user support.
- Processing deposits, bets, wins, and withdrawals through payment providers.
- Identity verification, responsible gaming tools, and fraud prevention.
- Compliance checks for KYC/AML, sanctions screening, and dispute handling.
- Personalisation of content, language, and settings across online platforms.
- Analytics to improve performance, fix issues, and enhance user experience.
- Marketing communications where consent exists, with options to opt out at any time.
Processing is based on consent, contractual necessity, legal obligations, and legitimate interests, applied in a proportionate manner.
Access to Information
Users can access, update, or delete personal data by:
- Using account settings where available for profile and communication preferences.
- Submitting a request through the support channel listed on the websites. Identity verification may be required, for example through CNIC or passport document checks.
Correction and deletion:
- Incorrect information can be rectified upon request.
- Deletion requests will be honoured where no legal retention duty applies. Certain financial and KYC records must be kept for statutory periods.
By using MegaPari, users consent to security checks and to processing of payment information by regulated payment service providers that handle transactions and verification securely.
Protection of Children’s Privacy
The platform is intended for users aged 18 and above. Age cannot be verified without identity documents. If a parent or legal guardian notifies the platform that a minor has provided personal data, the account will be closed and related information will be deleted where permissible by law. Evidence of guardianship and the child’s identity may be required to process such requests.
International Data Transfers
Personal data may be stored or processed outside Pakistan where service partners, hosting providers, payment processors, or verification vendors operate. Use of the platform indicates consent to such transfers. Confidentiality and security obligations are imposed on all partners through contracts, including appropriate safeguards such as standard contractual clauses or equivalent measures, and access is limited to a need-to-know basis.
Legal Disclaimer
This policy may include disclaimers that clarify or limit obligations as allowed by applicable law. Such terms apply once the user accepts the policy by signing up, clicking to accept, or continuing use of the services. Where the policy conflicts with mandatory law, legal requirements prevail. Nothing in this document removes statutory rights that cannot be waived.
Use of Cookies
Cookies are small files stored on a device to remember a user and improve websites. They are used for:
- Essential functions such as security and session management.
- Statistics and behaviour analysis to understand service performance.
- Personalisation of content and settings.
- Site improvement through aggregated analytics.
Retention: up to 1 year, depending on cookie type. Users can manage or delete cookies through browser settings and may opt out of non-essential cookies in on-site controls where provided. Some features may not function if essential cookies are disabled.
Acceptance of Privacy Policy
Use of MegaPari means full acceptance of this Privacy Policy and processing described in this document. The current version published on the website prevails over any prior versions. Continued use after updates indicates acceptance of the revised terms. Users are encouraged to review the policy periodically.
Third-Party Privacy Practices
Personal data may be shared in limited cases:
- To comply with law, court orders, or requests from competent authorities such as the FIA under PECA 2016.
- To process payments and verification through regulated processors and KYC vendors.
- To handle disputes, chargebacks, fraud investigations, and enforcement of agreements.
- To provide infrastructure, hosting, analytics, and customer support services under data processing agreements.
Third parties used by the platform are listed on the websites where feasible. If not listed, users will be informed of the purpose and scope where required. Providing personal information constitutes consent to such sharing, subject to contractual confidentiality and security.
Links to Other Websites
The platform may contain links to external websites that follow their own privacy practices. MegaPari is not responsible for how those sites collect, use, or disclose information. Users should review the privacy policy of each external site and exercise caution when providing personal data.
Updated: