Privacy Policy – Megablock Pakistan Online Gaming Platform

1 Introduction

Megablock is Pakistan's dedicated online gaming and sports betting platform, built specifically for Pakistani players. We understand that when you share your personal information with us — your name, your mobile number, your payment details — you are placing trust in us to handle that information responsibly. This Privacy Policy is our commitment to you about exactly how that trust is honoured.

This policy applies to all personal data collected through the Megablock website at megablock.ws, through our mobile-optimised browser interface, and through any communication channels including support chat and email. It covers data collected from registered players as well as from visitors who browse the site without registering.

Megablock is the data controller for all personal data collected and processed under this policy. We are responsible for ensuring that data is collected and handled in accordance with applicable data protection principles.

This Privacy Policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy, which together form the complete agreement between you and Megablock.

2 Personal Data We Collect

Megablock collects the following categories of personal data:

Megablock does not collect sensitive data such as biometric information, health data, political opinions, or religious beliefs. We collect only what is necessary for the purposes described in this policy.

3 How We Collect Your Data

Megablock collects personal data through the following means:

• Direct collection: Information you provide when you register an account, complete KYC verification, make a deposit, place a bet, or contact our support team.
• Automated collection: Technical and usage data collected automatically when you visit megablock.ws, through cookies, server logs, and similar tracking technologies. See Section 8 for full details.
• Payment processors: When you make a deposit or withdrawal, our payment partners (Easypaisa, JazzCash, NayaPay, SadaPay, bank partners) share transaction confirmation data with Megablock to credit or debit your account.
• Identity verification providers: Where Megablock uses a third-party KYC service to verify your identity documents, that provider shares the verification result and associated data with us.
• Referral programme: If you were referred to Megablock by another player, we receive limited information about the referral relationship (the referrer's player ID) to process the referral reward. We do not receive personal data about you from the referring player beyond what you provide directly.

4 How We Use Your Personal Data

Megablock uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and manage your Megablock account, including authentication, profile management, and account security.
• Transaction processing: To process deposits, withdrawals, bet settlements, and bonus credits accurately and in a timely manner.
• Identity verification (KYC): To verify your identity and age as required for regulatory compliance and responsible gaming obligations. Megablock cannot process withdrawals from unverified accounts above certain thresholds.
• Customer support: To respond to your queries, complaints, and requests through live chat and email, and to maintain records of support interactions for quality and compliance purposes.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) regulations, record-keeping requirements, and any lawful requests from regulatory or law enforcement authorities.
• Fraud prevention and security: To detect, investigate, and prevent fraud, money laundering, unauthorised account access, and other prohibited activities. This includes automated monitoring of account and transaction patterns.
• Platform improvement: To analyse how players use the Megablock platform so that we can improve the user experience, fix bugs, and develop new features. This analysis is conducted on aggregated or anonymised data wherever possible.
• Responsible gaming: To monitor for indicators of problem gambling behaviour and to enable responsible gaming tools such as deposit limits and self-exclusion to function effectively.
• Marketing communications: To send promotional emails, bonus notifications, and platform updates to registered players who have opted in to receive marketing. See Section 13 for details on opting out.

5 Legal Basis for Processing

Megablock processes your personal data on the following legal bases:

• Contractual necessity: Processing your identity data, contact data, payment data, and transaction data is necessary to perform the contract we have with you (the Terms and Conditions). Without this processing, we cannot provide the service.
• Legal obligation: Processing for KYC verification, AML compliance, and regulatory reporting is required by applicable law. Megablock is obligated to conduct these activities regardless of your preferences.
• Legitimate interests: Processing for fraud prevention, platform security, and improving the Megablock product is justified by our legitimate business interests, provided those interests are not overridden by your privacy rights. We carry out regular assessments to ensure this balance is maintained.
• Consent: Processing for marketing communications is based on your consent, which you provide when you opt in to receive promotional emails or notifications. You can withdraw consent at any time.

6 Sharing Your Personal Data

Megablock shares personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: Your payment details and transaction data are shared with Easypaisa, JazzCash, NayaPay, SadaPay, and bank partners as necessary to process deposits and withdrawals.
• Identity verification providers: Your identity documents and personal details are shared with our KYC/AML verification partner when account verification is required. This partner is contractually bound to use the data only for verification and to protect it accordingly.
• Game providers: Technical identifiers (your player ID, session data) may be shared with licensed game providers to allow you to access their games through the Megablock platform. Game providers do not receive your name, contact details, or payment information.
• Regulatory and law enforcement authorities: Megablock will disclose personal data to authorities where required by applicable law, court order, or regulatory direction. We will notify you of such disclosure where permitted to do so.
• Service providers: We use trusted third-party service providers for functions including cloud hosting, customer support software, and email delivery. These providers are bound by data processing agreements that restrict their use of your data to the specific service they provide for Megablock.

Megablock does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Any third party that receives data from Megablock is contractually required to handle it in accordance with applicable data protection standards.

7 Payment Data and Financial Security

Megablock treats payment data with the highest level of care. When you make a deposit or withdrawal using Easypaisa, JazzCash, or any other payment method, the transaction is processed over an encrypted connection directly with the payment provider.

Megablock does not store full card numbers, CVV codes, or mobile wallet PINs. For card payments, only the last four digits and card type are retained for display purposes in your transaction history. Full card processing is handled entirely by the PCI-DSS compliant payment gateway.

For Easypaisa and JazzCash deposits, your mobile wallet number is stored as part of your payment profile to enable future deposits and to ensure withdrawals are returned to a payment method registered in your name. This number is stored encrypted and is not visible in full to Megablock staff.

8 Cookies and Tracking Technologies

Megablock uses cookies and similar tracking technologies on the megablock.ws website. Cookies are small text files placed on your device that help the platform function correctly and allow us to understand how players use the site.

We use the following categories of cookies:

• Essential cookies: Required for the Megablock platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect your account. These cannot be disabled without breaking the site.
• Functional cookies: Remember your preferences such as preferred language, game settings, and bet slip state. These improve your experience but are not strictly necessary.
• Analytics cookies: Collect anonymised data about how players navigate the site — pages visited, time on page, click paths. This data is used to improve the Megablock platform. We use this data in aggregate form only.
• Security cookies: Used to detect fraudulent sessions, bot activity, and suspicious login patterns. These are a key part of our account security infrastructure.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging into your Megablock account. Disabling functional or analytics cookies will not prevent you from using the platform but may affect certain features.

9 Data Retention

Megablock retains your personal data for as long as is necessary for the purposes described in this policy and to comply with applicable legal obligations. The following general retention periods apply:

• Account data (identity, contact): Retained for the lifetime of your account and for a minimum of 5 years after account closure, in accordance with AML and record-keeping requirements.
• Transaction and betting records: Retained for a minimum of 5 years from the date of the transaction, as required for financial record-keeping compliance.
• KYC and verification documents: Retained for a minimum of 5 years after the verification was completed or the account was closed, whichever is later.
• Support communication records: Retained for 3 years from the date of the interaction.
• Technical and usage data (logs): Retained for up to 24 months for security and fraud prevention purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained for as long as you have an active account or for 3 years after you opt out, to document your consent history.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where deletion is requested by you before the mandatory retention period expires, Megablock will suppress the data from active use and restrict access to it, even if it cannot be fully deleted until the legal retention period ends.

10 Data Security

Megablock implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• All data transmitted between your device and Megablock servers is encrypted using TLS (Transport Layer Security) with a minimum of TLS 1.2.
• Personal data stored on Megablock servers is encrypted at rest using AES-256 encryption.
• Access to personal data within Megablock is restricted on a need-to-know basis. Staff cannot access your full payment details or CNIC number through standard support interfaces.
• Megablock conducts regular security reviews and penetration testing of its infrastructure.
• Player accounts are protected by password hashing and optional two-factor authentication.
• Our payment processing infrastructure is handled by PCI-DSS compliant processors — Megablock's own servers never handle raw card data.

No security system is perfectly impenetrable. In the event of a data breach that poses a risk to your personal data, Megablock will notify affected players promptly and will take immediate steps to contain and remediate the breach.

11 Your Data Rights

You have the following rights in relation to your personal data held by Megablock. To exercise any of these rights, contact our support team at support@megablock.ws or via live chat with the subject "Data Rights Request." We respond to all requests within 30 days.