PKMega Privacy Policy — Your Data, Protected

This Privacy Policy explains how PKMega ("the Platform", "we", "us", "our") collects, uses, stores and protects the personal information of individuals ("you", "the Player", "the Account Holder") who access or use the PKMega website at pkmega.fun and all associated services — including sports betting, casino games, slots, bingo, the game lobby and the VIP programme.

We are committed to handling your personal data responsibly. This policy is written in plain English so that it is easy to understand, regardless of your technical background. We want you to know exactly what we do with your information and to feel confident that it is being managed with care.

By registering an account or continuing to use PKMega, you confirm that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy.

If you have any questions about how we handle your data, our support team is available 24/7 and can be reached at [email protected].

We collect information in two ways: information you give us directly and information collected automatically when you use the platform.

Information you provide directly:

• Registration data: Full name, date of birth, email address, mobile number and any other details you enter when creating your PKMega account.
• Identity verification documents: CNIC, passport or other government-issued ID submitted when we request verification before processing a withdrawal or investigating account activity.
• Payment information: Transaction references, JazzCash or Easypaisa mobile numbers, bank account details or card information entered when making deposits or requesting withdrawals. Full payment credentials are processed by our secure payment partners — we do not store raw card numbers on our servers.
• Support communications: Any messages, emails or live chat transcripts you send to our support team, including any attachments or screenshots you share.
• Responsible gaming preferences: Deposit limits, session reminders, self-exclusion requests or cooling-off periods you set within your account.

Information collected automatically:

• Device and browser data: IP address, browser type and version, operating system, device type and screen resolution.
• Usage data: Pages visited, games played, bets placed, time spent on the platform, click paths and session duration.
• Cookies and similar technologies: Session cookies, preference cookies and analytics cookies as described in Section 7 of this policy.
• Location data: General location derived from your IP address. We do not collect precise GPS location data.

We use the personal data we collect for specific, clearly defined purposes. We do not use your data for anything beyond what is described here without first obtaining your consent.

• Account management: Creating and maintaining your PKMega account, verifying your identity, managing login sessions and keeping your account preferences up to date.
• Processing transactions: Handling PKR deposits via JazzCash, Easypaisa, Raast and bank transfer, processing withdrawal requests and maintaining accurate transaction records.
• Platform operation: Delivering the games, sports betting markets, bingo rooms and other features you use; ensuring bets are settled correctly and winnings are credited accurately.
• Fraud prevention and security: Monitoring account activity to detect unauthorised access, bonus abuse, multi-accounting, money laundering and other fraudulent behaviours that could harm you or other players.
• Customer support: Responding to your queries, resolving complaints and investigating disputes in relation to your account or transactions.
• Responsible gaming: Applying deposit limits, session reminders and self-exclusion preferences that you have set; monitoring play patterns to identify potential problem gambling behaviour where our responsible gaming obligations require it.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to make improvements to the user experience.
• Communications: Sending you service notifications, transaction confirmations, security alerts and — where you have opted in — promotional emails about bonuses and offers.

Every time we process your personal data, we do so on one of the following legal grounds:

• Contractual necessity: Processing required to fulfil our agreement with you — for example, operating your account, processing deposits and settling bets.
• Legitimate interests: Processing necessary for our legitimate business interests, such as fraud detection, platform security and general platform analytics, provided these interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations and identity verification requirements.
• Consent: Where we rely on your consent — for example, for marketing emails — you can withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

PKMega does not sell, rent or trade your personal information. We share your data only in the limited circumstances described below, and only with parties who are bound by appropriate data protection obligations.

• Payment processors: We share the minimum financial data necessary with our payment partners (including mobile wallet providers and bank transfer processors) to complete your PKR transactions. These partners are contractually required to protect your data.
• Game providers: Your account identifier and stake information may be shared with our game content providers for the purpose of delivering games and settling outcomes. These providers do not receive your personal identity data.
• Identity verification services: When you submit documents for verification, these may be processed by a third-party KYC (Know Your Customer) service provider operating under strict data security standards.
• Analytics providers: We use privacy-compliant analytics tools to understand aggregated platform usage. These tools receive anonymised or pseudonymised data only — your name, contact details and financial information are not shared with analytics providers.
• Legal and regulatory obligations: We may disclose your data to law enforcement agencies, courts or other authorities if required by applicable law or to protect the rights, property or safety of PKMega, our players or the public.

All financial transactions on PKMega are conducted in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer or a debit/credit card, the following data handling practices apply:

• Your full payment credentials — including card numbers and mobile wallet PINs — are never transmitted to or stored on PKMega's own servers. These details are entered directly into our payment partners' secure, encrypted environments.
• PKMega retains a transaction reference number, the payment method type, the transaction amount in PKR, the date and time, and the status of each transaction for account management and fraud monitoring purposes.
• JazzCash and Easypaisa mobile numbers used for transactions are stored in encrypted form and used only for processing payments and verifying that deposits originate from an account registered in your name.
• Transaction records are retained for a period consistent with our legal and financial record-keeping obligations, as described in Section 8 of this policy.

If you believe there is an error in your transaction history, contact our support team within 30 days of the transaction date with your transaction reference number. We will investigate and respond within 5 business days.

PKMega uses cookies and similar technologies to make the platform work properly and to understand how it is being used. A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies:

• Essential cookies: These are required for the platform to function. They keep you logged in during your session, remember your game settings and ensure transactions are processed securely. These cookies cannot be disabled without breaking the platform.
• Preference cookies: These remember your language settings, display preferences and notification choices so you do not need to set them again on every visit.
• Analytics cookies: These help us understand which pages and games are most popular, how long players spend on different sections and where technical issues occur. Analytics data is aggregated and does not identify you personally.
• Security cookies: Used to detect suspicious login attempts, bot activity and other security threats. These cookies are essential for protecting your account.

We do not use advertising cookies, tracking pixels from social media networks or any cookies that build a profile of your browsing behaviour across other websites.

We keep your personal data for as long as is necessary for the purposes for which it was collected, taking into account our legal and operational obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account being open plus a period of up to 5 years after account closure, to meet legal record-keeping requirements.
• Transaction records: Financial transaction data including PKR deposit and withdrawal records is retained for a minimum of 5 years from the date of the transaction.
• Identity verification documents: Retained for a minimum of 5 years from the date of submission or from account closure, whichever is later.
• Support communications: Customer support conversations are retained for up to 3 years to assist in resolving future disputes and improving service quality.
• Marketing consent records: Records of your marketing opt-in or opt-out preferences are retained for as long as they are relevant plus a reasonable period to demonstrate compliance.
• Technical and usage logs: Anonymised analytics data may be retained indefinitely. Identifiable technical logs such as IP address records are retained for up to 12 months.

When data is no longer required, it is deleted or anonymised in a secure manner. If you request account deletion, we will remove your personal data from active systems within 30 days, subject to any legal retention obligations that require us to retain certain records for longer.

Protecting your personal data is a core responsibility at PKMega. We have implemented a range of technical and organisational security measures appropriate to the nature of the data we process:

• SSL/TLS encryption: All data in transit between your device and our servers is protected by industry-standard SSL/TLS encryption. Look for the padlock icon in your browser's address bar.
• Encrypted storage: Sensitive data fields — including identity document details and payment references — are stored in encrypted form in our databases.
• Access controls: Access to personal data is restricted to PKMega staff who need it to perform their job functions. All staff with data access undergo security training and are bound by confidentiality obligations.
• Two-factor authentication: We offer two-factor authentication (2FA) on your account as an additional layer of security. We strongly encourage all players to enable 2FA.
• Regular security reviews: Our systems and processes are reviewed regularly to identify and address potential vulnerabilities.

While we take every reasonable precaution, no system is completely immune to security risks. In the event of a data breach that affects your personal information, we will notify you as required and take immediate steps to contain and remediate the issue.

As a PKMega account holder, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting our support team at [email protected]:

• Right to access: You can request a copy of the personal data we hold about you. We will provide this within 30 days of your verified request.
• Right to rectification: If any of the information we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. You can update many details yourself through your account settings.
• Right to erasure: You can ask us to delete your personal data. We will comply where there is no legal obligation requiring us to retain it. Note that some records — particularly financial transaction data — must be retained for legal compliance purposes even after account closure.
• Right to restrict processing: In certain circumstances, you can ask us to limit how we use your data while a concern is being resolved.
• Right to data portability: You can request that we provide your personal data in a structured, commonly used machine-readable format so that you can transfer it to another service if you choose.
• Right to object: You can object to processing based on legitimate interests — for example, receiving marketing communications. We will stop that processing unless we have compelling legitimate grounds to continue.
• Right to withdraw consent: Where processing is based on your consent — such as marketing emails — you can withdraw that consent at any time without affecting any processing that occurred before the withdrawal.

We will respond to all data rights requests within 30 days. In complex cases we may extend this by an additional 30 days, in which case we will notify you of the extension and the reason for it.

PKMega is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered an account or provided personal information on PKMega, please contact us immediately at [email protected] and we will take prompt action to close the account and delete the associated data.

We take the protection of minors very seriously. Our registration process includes a date of birth requirement, and accounts that fail our age verification checks are suspended pending investigation. If you have children at home, we recommend using parental control software to restrict access to online gaming and betting platforms.

PKMega may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable laws. When we make material changes, we will notify you by email to your registered address and display a prominent notice on the platform for at least 14 days before the changes take effect.

Your continued use of PKMega after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should stop using the platform and contact support to request account closure.

Minor changes — such as corrections to spelling, grammar or formatting that do not affect the meaning of any section — may be made without prior notice. The "Last Updated" date shown at the top of this page reflects the most recent revision. We recommend checking this page periodically so you are always aware of our current privacy practices.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information has been handled, please get in touch with our team.

We aim to respond to all privacy-related enquiries within 5 business days. For formal data subject access requests, please include your registered email address and a brief description of the data you are requesting or the right you wish to exercise. We may ask you to verify your identity before processing the request.