Megablock Privacy Policy — How We Handle Your Personal Data

1Who This Policy Applies To

This Privacy Policy applies to all individuals who use the Megablock platform, including visitors who browse the site without registering an account, players who create and use a registered Megablock account, and individuals who contact Megablock's support team with queries or complaints.

By accessing or using any part of the Megablock platform, you acknowledge that you have read this Privacy Policy and that you consent to the data practices described in it. If you do not agree with how Megablock collects or uses personal data, please do not use the platform or create an account.

This Policy should be read alongside Megablock's Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement between Megablock and its players.

2What Personal Data We Collect

Megablock collects personal data in the following categories depending on how you use the platform and at what stage of your account relationship you are.

3How We Collect Your Data

Megablock collects personal data through the following channels and mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, fill in a survey, or update your account preferences.
• Automatically through platform use: When you browse the Megablock website or use the platform, our systems automatically log technical data including your IP address, device information, session duration, and pages visited. This happens through cookies and server logs.
• From payment providers: When you make a deposit or withdrawal, our payment processing partners share transaction confirmation data with Megablock. We do not receive full payment credentials — only confirmation that a transaction was completed and the reference details.
• From identity verification partners: When you complete KYC, Megablock may use a third-party verification service to confirm identity documents. This service shares a verification result with Megablock but does not grant Megablock direct access to Pakistani government databases.
• From fraud prevention services: Megablock works with fraud detection providers who share risk signals based on anonymised behavioural patterns. No raw personal data is exchanged for this purpose — only risk scores that help us detect unusual account activity.

4How We Use Your Data

Megablock uses the personal data we collect for the following purposes. Each purpose is matched to a legal basis for processing.

• Account management and service delivery: Processing registrations, managing account balances, settling bets, processing deposits and withdrawals, and providing access to all Megablock games and features. This is necessary to perform our contract with you.
• Identity verification and fraud prevention: Verifying that accounts are held by real individuals who meet our eligibility criteria, detecting suspicious activity, and preventing money laundering or underage gambling. This is a legal obligation and a legitimate interest.
• Responsible gaming monitoring: Reviewing betting patterns to identify players who may be showing signs of problem gambling behaviour and contacting them with information about available support tools. This is a legitimate interest that directly protects our players.
• Customer support: Using communication history to investigate and resolve account queries, payment disputes, and complaints efficiently. This is necessary to perform our contract with you.
• Platform improvement: Using anonymised and aggregated usage data to understand how players interact with Megablock, identify bugs, and improve features over time. This is based on legitimate interest and the data used is not identifiable at an individual level.
• Marketing communications: Sending emails or SMS messages about promotions, new features, and special offers — only to players who have opted in to receive marketing from Megablock. You can withdraw consent at any time by updating your preferences in account settings.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful requests from authorities, and maintaining audit trails for regulatory review purposes.

5Who We Share Your Data With

Megablock does not sell or trade personal data. We do share data with a limited set of trusted partners and service providers who help us operate the platform, but only to the extent necessary for their specific function. All third parties who handle personal data on Megablock's behalf are contractually required to treat it with equivalent care and to use it only for the purposes for which it was shared.

• Payment processors: EasyPaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard payment gateway providers receive the transaction details necessary to process your deposits and withdrawals. Each provider operates under their own privacy framework in addition to Megablock's requirements.
• Identity verification providers: Third-party KYC service providers receive copies of identity documents you submit for verification. These providers are used solely for identity confirmation and are not permitted to use your data for any other purpose.
• Fraud and security partners: Anti-fraud services receive anonymised risk signals. They do not receive your full identity information — only the behavioural and technical data required to generate risk assessments.
• Live casino content providers: When you play live dealer games on Megablock, the live casino content provider receives your in-session betting actions. This is required to operate the real-time game and settle bets correctly.
• Customer support platform: Our support system stores communication records associated with your account to enable efficient query handling and follow-up.
• Legal and regulatory authorities: Megablock will share personal data with law enforcement, financial intelligence authorities, or court-ordered legal processes where we are legally obliged to do so. We will notify you when permitted if your data has been disclosed in this way.

6Cookies and Tracking Technologies

Megablock uses cookies and similar technologies on its platform. Cookies are small text files stored on your device that help our systems recognise your session, maintain your login state, and understand how you use the platform.

We use three categories of cookies:

• Strictly necessary cookies: These are required for the platform to function. They handle your login session, maintain your bet slip state, and ensure security features operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: These help us understand aggregate traffic patterns, popular features, and technical performance. The data is anonymised before analysis — we cannot identify individual players from analytics cookie data. You can opt out of analytics cookies through the cookie settings panel accessible from the footer.
• Marketing cookies: If you have opted in to marketing communications, marketing cookies help us understand which promotions are relevant to you and avoid sending you offers you have already seen. These are only active for players who have given marketing consent.

7Data Retention

Megablock retains personal data only for as long as it is needed for the purpose for which it was collected, subject to any legal obligations that require longer retention periods.

• Active account data: Retained for the duration of the account relationship — from registration until account closure.
• Post-closure retention: After an account is closed — whether voluntarily or by Megablock — core account and transaction data is retained for a minimum of five years to meet anti-money laundering and financial record-keeping requirements applicable to betting operators.
• KYC documents: Identity verification documents are retained for the same post-closure period as account data for regulatory compliance purposes.
• Support communications: Records of support interactions are retained for three years after the last relevant communication, to enable resolution of disputes that may arise after a query was initially handled.
• Marketing data: If you have opted out of marketing, Megablock retains a record of your opt-out status indefinitely to ensure you are not contacted again. The underlying contact data is deleted after the account retention period.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be attributed to individual players.

When retention periods expire, data is securely deleted using industry-standard deletion methods or anonymised so that it can no longer be linked to any individual.

8How We Protect Your Data

Megablock takes the security of player data seriously. The following technical and organisational measures are in place to protect personal data from unauthorised access, disclosure, alteration, or destruction:

• All data in transit between your device and Megablock servers is encrypted with TLS 1.2 or higher. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Passwords are stored as salted cryptographic hashes. Megablock staff cannot retrieve your original password — only you know it.
• Access to personal data within Megablock's systems is restricted on a need-to-know basis. Staff who do not need access to personal data to perform their role do not have it.
• Payment data is handled through PCI-DSS compliant payment processors. Full card numbers are never transmitted to or stored on Megablock's systems.
• Megablock's platform infrastructure undergoes regular security testing including vulnerability scanning and periodic penetration testing by independent security assessors.
• Multi-factor authentication is available for all player accounts and is recommended. Staff accessing internal systems with personal data access are required to use multi-factor authentication.

9Your Rights Over Your Personal Data

As a Megablock player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at support@megablock.im with the subject line "Privacy Request".

We will respond to all privacy rights requests within 30 days. In complex cases we may extend this to 60 days, in which case we will notify you of the extension and the reason within the initial 30-day window. We do not charge a fee for legitimate privacy rights requests.

10Children's Privacy

Megablock does not knowingly collect personal data from individuals under 18 years of age. Our registration process includes a date of birth field specifically to prevent underage users from creating accounts. If Megablock discovers that an account has been created by someone under 18, the account will be closed immediately, all real-money funds returned to the original payment source, and all personal data associated with the account deleted.

If you are a parent or guardian and believe your child has registered an account on Megablock, please contact us immediately at support@megablock.im. We will investigate and take appropriate action within 24 hours of receiving a report.

11Marketing Communications

Megablock sends promotional emails, SMS messages, and in-platform notifications about bonuses, new features, and special events. These are sent only to players who have explicitly opted in to receive marketing communications from Megablock.

• You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, by updating your notification preferences in account settings, or by contacting support.
• Opting out of marketing does not affect transactional communications — you will still receive emails about your account, deposits, withdrawals, security notices, and support responses.
• Megablock does not send marketing communications to players who have active self-exclusion restrictions on their accounts.
• We do not sell or share your contact details with third-party marketers for their own promotional use.

12Data Breaches

Despite Megablock's security measures, no online platform can offer an absolute guarantee against all forms of data breach. In the event of a security incident that results in unauthorised access to personal data, Megablock will:

• Investigate the incident immediately and contain the breach as quickly as possible.
• Notify all affected players via email within 72 hours of confirming that personal data was accessed without authorisation, explaining what happened, what data was affected, and what steps are being taken.
• Implement remediation measures to prevent recurrence and document the incident for regulatory and audit purposes.
• Where the breach is of a type that requires reporting to relevant authorities under applicable law, Megablock will make such a report in the required timeframe.

13Changes to This Privacy Policy

Megablock may update this Privacy Policy from time to time to reflect changes in how we process data, changes to applicable law, or the introduction of new platform features that involve data collection.

When material changes are made to this Policy, registered players will be notified via email to their registered address or via an in-platform notification. We will give players at least 14 days' notice of any significant change before it takes effect.

Minor changes — such as clarifications of existing practices or corrections of typographical errors — may be made without advance notice. The "Last Updated" date at the top of this page always reflects the most recent revision.

Continued use of the Megablock platform after the effective date of a Policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with changes, you should stop using the platform and close your account before the changes take effect.

14Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to report a concern about how Megablock handles personal data, please contact us through the following channels:

• Email: support@megablock.im — please use the subject line "Privacy Request" for privacy-related queries to ensure your message is directed to the right team.
• Live Chat: Available 24/7 on the Megablock platform for registered players, in Urdu and English.
• Privacy Rights Requests: To exercise your data access, erasure, or portability rights, email us at support@megablock.im with your registered username and the specific right you wish to exercise. We will acknowledge your request within 3 working days and complete it within 30 days.

We take every privacy-related query seriously. If you feel your concern has not been addressed adequately after contacting Megablock's support team, you may escalate through the formal complaint process described in our Terms and Conditions.