Privacy Policy – Mostplay Pakistan Data Protection Commitment

1. Overview — How Mostplay Approaches Privacy

Mostplay operates as an online gaming platform serving players in Pakistan. In the course of providing gaming services, processing payments and running a regulated platform, we inevitably collect and process personal data. We take that responsibility seriously. This policy is written to be genuinely readable — not to bury important information in legal language that most people skip.

The short version: we collect personal data that is necessary to run the platform, verify your identity, process your transactions and provide support. We do not sell your data to advertisers. We do not share your data with third parties unless it is necessary to deliver our services, comply with legal obligations or protect the platform and its players from fraud. We retain your data for as long as is required by law or legitimate operational need, and then we delete it.

Mostplay operates within the framework of applicable Pakistani data protection legislation. Where our services are accessed by players subject to other jurisdictions' laws, we extend appropriate protections as a matter of operational policy. If you have specific questions about how your data is handled that are not answered in this document, contact us via the details in Section 13.

2. Data We Collect

Mostplay collects personal data in three main ways: information you provide directly, information we collect automatically as you use the platform, and information we receive from third parties such as payment processors and identity verification services.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you visit or use Mostplay, our systems automatically collect certain technical and behavioural data. This includes: your IP address and approximate geographic location derived from it; device type, operating system version and browser information; session timestamps and duration; pages visited, games launched, betting activity and in-game actions; referral source (how you arrived at Mostplay); and error logs generated during your session. This data is collected via server logs, cookies and similar tracking technologies described in Section 5.

2.3 Data from Third Parties

Mostplay may receive information about you from third parties in the following circumstances: payment processors confirm transaction status and in some cases flag fraud signals; identity verification providers confirm whether the documents you submit match public records; responsible gaming databases may indicate if you have self-excluded from other platforms (where such cross-platform checks are technically available); and marketing partners may share aggregated, non-personal data about acquisition campaign performance.

3. How We Use Your Data

Mostplay uses personal data for the following purposes. We process your data only where we have a lawful basis to do so — either your consent, a contractual necessity, a legal obligation or a legitimate interest that does not override your privacy rights.

• Account operation: Creating and maintaining your player account, authenticating logins, managing your wallet balance and processing game results.
• Identity verification (KYC): Confirming your identity and age as required before allowing withdrawals. This is both a legal obligation and a player protection measure.
• Payment processing: Executing deposits and withdrawals through your chosen payment method. Payment data is transmitted to your payment provider for transaction completion.
• Anti-fraud and security: Detecting and preventing fraudulent activity, multi-accounting, money laundering, bonus abuse and any other prohibited behaviour described in the Terms and Conditions.
• Responsible gaming: Monitoring betting patterns to identify potential problem gaming behaviour, enforcing self-imposed limits, and reaching out proactively where data suggests a player may need support.
• Customer support: Investigating and resolving complaints, answering queries, processing account changes and documenting dispute outcomes.
• Legal compliance: Meeting obligations under applicable anti-money laundering legislation, gaming regulation requirements and responding to valid legal orders or requests from competent authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use the platform, identify performance issues and prioritise feature development.
• Marketing communications: Sending promotional emails and notifications about bonuses, new games and events — only where you have opted in or where we have a legitimate interest and you have not opted out. See Section 11 for full details.

4. Sharing and Disclosure of Your Data

Mostplay does not sell personal data. We do not share your information with advertisers for their own marketing purposes. We share personal data only in the following limited circumstances:

4.1 Service Providers

We work with a small number of third-party service providers who process data on Mostplay's behalf and under Mostplay's instruction. These include: payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT gateways, Visa/Mastercard processing networks); identity verification providers; cloud infrastructure providers hosting the platform's servers and databases; customer support software providers; and email delivery services for account and promotional communications. Each service provider is bound by a data processing agreement that restricts their use of your data to the specific services they provide to Mostplay.

4.2 Game Providers

Live casino games on Mostplay are provided by licensed studios including Evolution Gaming and Ezugi. When you play at a live table, the game session data — including your stake amounts, bet outcomes and in-game actions — is processed by the game provider's systems. These providers operate under their own data protection frameworks as licensed gaming entities. Mostplay shares only the minimum data necessary for game session delivery.

4.3 Legal Obligations

Mostplay will disclose personal data where required by a valid legal order, court order, regulatory direction or law enforcement request from a competent authority. Where we are legally permitted to notify you of such a disclosure before complying, we will do so. Where disclosure is required immediately by law enforcement, we will notify you at the earliest opportunity after compliance.

4.4 Business Transfers

In the event that Mostplay or its operating company is involved in a merger, acquisition, asset sale or restructuring, player data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified in advance of any such transfer where the new entity intends to use your data in a materially different way from this policy.

4.5 Protection of Rights

Mostplay may share data where necessary to protect the legal rights, safety or property of Mostplay, its employees, players or the public — including sharing data with other platforms' fraud prevention systems to prevent cross-platform abuse.

5. Cookies and Tracking Technologies

Mostplay uses cookies and similar browser-based technologies to operate the platform, remember your preferences, maintain your login session, analyse usage patterns and detect fraudulent access. Here is a breakdown of the cookie types in use:

You can manage cookie preferences through your browser settings. Note that disabling cookies beyond the required categories may affect how some features of the platform work. Mostplay does not use third-party advertising cookies or any technology that tracks your activity across other websites.

6. Data Security Measures

Mostplay applies industry-standard technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. The following measures are in place:

7. Your Data Rights

As a Mostplay player, you have rights over your personal data. These rights can be exercised by contacting us at support@mostplay-play.com with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

8. How Long We Keep Your Data

Mostplay retains personal data for as long as necessary to fulfil the purposes described in this policy, and no longer. The specific retention periods for different categories of data are as follows:

After the applicable retention period expires, data is securely deleted or anonymised such that it can no longer be linked to any individual. If you request account closure, data subject to legal retention obligations will be held for the required period in restricted storage before deletion.

9. Minors

Mostplay is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. Age is verified at registration through date-of-birth declaration and confirmed through KYC document checks before withdrawals are permitted. If we become aware that an account has been created by a minor, the account will be immediately suspended, all data will be deleted (except where retention is required for fraud investigation purposes) and any funds held will be handled in accordance with applicable legal requirements. If you are a parent or guardian and believe a minor has registered on Mostplay using false information, contact us immediately at support@mostplay-play.com.

10. International Data Transfers

Mostplay's primary servers are located in data centres serving the South Asian region. Some of our service providers — particularly live casino game providers and cloud infrastructure partners — process data in other countries. Where personal data is transferred outside Pakistan, Mostplay ensures that appropriate safeguards are in place, including: contractual data processing agreements with the receiving party that impose equivalent data protection obligations; using providers that operate certified data centres with recognised security standards; and limiting the personal data transferred to the minimum necessary for the service being provided. Live casino game sessions processed by Evolution Gaming and Ezugi studios are subject to those providers' own data protection frameworks as licensed gaming entities operating under their respective regulatory regimes.

11. Marketing Communications

Mostplay may send you promotional communications about bonuses, new games, tournaments and platform updates by email and push notification. Marketing communications are sent only where: you gave explicit consent to receive marketing at registration or via account settings; or you are an existing registered player and we are communicating about services directly relevant to your account (in which case we rely on legitimate interest and always include an unsubscribe option).

You can unsubscribe from marketing emails at any time using the unsubscribe link in any marketing email or by updating your communication preferences in account settings. Unsubscribing from marketing does not affect transactional communications — you will still receive emails about deposits, withdrawals, account security, and KYC requirements regardless of your marketing preference.

12. Changes to This Privacy Policy

Mostplay may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform features. The "Last Updated" date at the top of this page will always reflect the most recent revision. Material changes — those that significantly affect how your personal data is used or your rights in relation to it — will be communicated to registered players by email at least 7 days before taking effect. Minor changes such as clarifications of existing practices may be updated without direct notification. Continuing to use the Mostplay platform after an updated policy takes effect constitutes acceptance of the changes. If you do not accept an updated policy, you should close your account before the effective date.

13. Contact Us About Your Data

For any questions, concerns or requests relating to your personal data and Mostplay's privacy practices, please contact us using the details below. All data-related enquiries are handled by the Mostplay privacy and compliance team.

Data rights requests are acknowledged within 5 business days and responded to substantively within 30 days. For urgent security concerns — suspected account compromise, unauthorised access — use live chat for the fastest response. Related policies: Terms and Conditions | Responsible Gaming.