MegaPari Privacy Policy

This policy explains how the platform manages the collection, processing, protection, disclosure, and destruction of personal information across its online services in Pakistan. Use of information is based on user consent, contractual necessity, and legal obligations. The policy applies to account holders and visitors to the websites. It also outlines retention periods and security safeguards that protect personal data. MegaPari commits to transparent handling of user information throughout the data lifecycle.

Privacy and Data Protection

  • Categories of personal data collected:
    • Identity and verification details: full name, date of birth, CNIC or passport, KYC documents and images.
    • Contact information: email, phone number, address.
    • Account and usage data: login details, preferences, support queries, responsible gaming settings.
    • Transaction data: deposits, withdrawals, payment method details processed by approved providers.
    • Technical data: IP address, device identifiers, browser type, cookies, approximate location.
  • Purposes of collection:
    • Provide and maintain services, open and manage accounts, process transactions in PKR or other currencies.
    • Verify age and identity, prevent fraud, and meet anti-money laundering and counter-terrorist financing duties.
    • Deliver support, handle disputes, improve online performance, and ensure platform integrity.
  • Security measures:
    • Encryption in transit (TLS) and at rest where appropriate, strict access controls, role-based permissions, logging and monitoring, secure development practices, vendor due diligence, staff training, and incident response procedures.
  • Data minimisation and retention:
    • Personal data is limited to what is necessary and retained for the shortest period required for services, legal duties, and dispute resolution, then deleted or anonymised.
  • User rights (subject to legal limits):
    • Access a copy of personal data, request correction, request deletion, restrict or object to certain processing, and request portability where technically feasible.
  • Legal compliance in Pakistan:
    • Processing aligns with applicable Pakistani laws such as the Prevention of Electronic Crimes Act 2016 and anti-money laundering requirements, and follows international data protection principles consistent with GDPR standards.

Use of Collected Information

  • Lawful bases for processing include consent, performance of a contract, legal obligations, and legitimate interests such as security and fraud prevention.
  • How information is used:
    • Account setup, identity checks, and age verification.
    • Processing deposits, withdrawals, and refunds through authorised payment providers.
    • Customer support and dispute handling.
    • Service improvement, quality assurance, and feature development using aggregated analytics.
    • Personalisation and responsible gaming tools.
    • Compliance checks, reporting obligations, sanctions screening, and risk management.
  • Marketing communications:
    • Sent only where permitted by law and user preference; users can change consent in account settings or by following the provided opt-out method.

Access to Information

  • Access and updates:
    • Users can review and update account information through profile settings. Additional requests for access, correction, or portability can be submitted through the contact channels shown on the website. Proof of identity may be required.
  • Deletion requests:
    • Users may request deletion of personal data. Certain records may be retained to meet legal, regulatory, anti-fraud, and accounting requirements before final deletion or anonymisation.
  • Consent to checks and payment processing:
    • By using MegaPari, the user authorises security reviews, KYC/AML screening, and processing of payment data by approved providers and acquiring banks for transactions and fraud prevention.

Protection of Children’s Privacy

  • The services are intended for adults aged 18 and above. Registration and play by minors are not permitted.
  • The operator cannot verify age without supporting documents. Identity and age verification may include CNIC, passport, or similar proofs.
  • If a minor’s information is identified, the account will be closed and the personal data erased where permitted by law.
  • Parents or legal guardians can request deletion of a minor’s information by contacting the channels listed on the website, subject to verification of authority.

International Data Transfers

  • Personal data may be stored or processed outside Pakistan in locations where partners, payment processors, verification providers, or support teams operate.
  • Using the site constitutes consent to these cross-border transfers, subject to appropriate contractual and technical safeguards.
  • Partners are required to keep information confidential and to apply security measures that are no less protective than those used by the operator.
  • Where relevant, standard contractual clauses or equivalent safeguards are used to protect user information.

Use of Cookies

  • Cookies are small text files stored on a device that help remember preferences and improve online experience.
  • Purpose of cookies:
    • Statistics and analytics to understand site performance.
    • Behaviour analysis to detect security risks and prevent abuse.
    • Personalisation of settings and content.
    • Website improvement and error tracking.
  • Retention: cookies are typically kept for up to 1 year, after which they expire or are deleted. Some essential cookies may operate for the current session only.
  • Control: users can manage cookies through browser settings. Disabling certain cookies may affect site functionality.

Acceptance of Privacy Policy

  • Use of MegaPari indicates full acceptance of this Privacy Policy and consent to the collection and processing described here.
  • The current version on the website prevails over any prior versions.
  • Where required by law, material changes will be notified and consent will be requested again if the change affects the basis for processing.

Third-Party Privacy Practices

  • Personal data may be shared with third parties where required by law, to resolve disputes, to enforce agreements, or to provide core services such as payments, identity verification, anti-fraud tools, hosting, analytics, and customer support.
  • Categories and names of providers are listed on the website or notified before or at the time of collection where practicable. If not listed, users will be informed of the purpose and scope of sharing.
  • Providing information for these purposes constitutes consent to transfer and processing by those parties, who must protect confidentiality and use the data only as instructed.

Updated: