MostPlay Privacy Policy — How We Protect Your Personal Data

MostPlay operates the platform at mostplay.plus and is the data controller responsible for the personal information you provide when you register and use the service. As data controller, MostPlay determines the purposes for which your personal data is collected and the manner in which it is processed.

This Privacy Policy applies to all personal data collected through the MostPlay website, mobile browser interface, customer support communications, and any other interaction you have with MostPlay as a registered or prospective player based in Pakistan.

By creating a MostPlay account or by continuing to use the platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not consent, please do not create an account or cease using the platform and request account closure through our support team.

MostPlay collects personal data from you in two ways — information you provide directly, and information generated automatically through your use of the platform. Below is a full breakdown of what we collect and why.

MostPlay does not collect or store full payment card numbers. When a Visa or Mastercard is used for deposits, card data is handled directly by our PCI-DSS compliant payment processor and is never stored on MostPlay's own servers.

MostPlay uses your personal data for specific, legitimate purposes. We do not use your data for anything beyond what is described in this policy. Here is a clear account of every purpose for which your data is processed:

• Account Operation: Your name, mobile number and login credentials are used to create and maintain your MostPlay account, authenticate your identity on each login, and ensure only you can access your account.
• Payment Processing: Your payment method details are used to process PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer and card payments.
• Identity Verification (KYC): Your CNIC details are used to verify your age and identity as part of our Know Your Customer obligations. This is required by our operational and anti-money laundering procedures.
• Platform Personalisation: Your activity data and game preferences help us present relevant game suggestions, personalise your homepage experience, and remember your preferred settings.
• Responsible Gaming: Your betting history and session data are monitored to support the responsible gaming tools available in your account and to identify patterns that may warrant a proactive responsible gaming intervention.
• Fraud Prevention: Your device data, IP address and transaction patterns are analysed to detect and prevent fraudulent activity, money laundering and bonus abuse.
• Customer Support: Communication data from support interactions is used to resolve your queries, document complaint history, and improve our support quality.
• Marketing Communications: Where you have opted in, your contact details are used to send you promotional offers and news from MostPlay. You can opt out at any time.
• Legal and Regulatory Compliance: Certain personal data is retained to meet our obligations under anti-money laundering regulations and other applicable legal requirements.

Every instance of personal data processing at MostPlay has a legal basis. We do not process personal data without one. The legal bases we rely on are as follows:

• Contractual Necessity: Processing your identity, contact and financial data is necessary to fulfil our contractual obligations to you under the MostPlay Terms and Conditions — specifically to operate your account and process your PKR transactions.
• Legitimate Interests: We process activity, device and communication data on the basis of our legitimate interests in fraud prevention, platform security, responsible gaming oversight, and service improvement. These interests are weighed against your privacy rights and we only proceed where our interests do not override yours.
• Legal Obligation: We process identity and financial data as required by applicable anti-money laundering laws and KYC obligations. This processing is non-optional and cannot be limited by consent preferences.
• Consent: We process your contact data for marketing communications only where you have provided clear, opt-in consent. This consent can be withdrawn at any time by updating your communication preferences in your MostPlay account settings or by emailing us directly.

MostPlay does not sell your personal data. We share data only with third parties who have a legitimate operational role in delivering the MostPlay service, and only to the extent necessary for that role. Below are the categories of third parties with whom data may be shared:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive transaction data necessary to process your PKR deposits and withdrawals. These processors operate under their own data protection standards and are contractually bound to protect your information.
• Identity Verification Services: Third-party KYC providers receive identity documents for verification purposes. Once verification is complete, these documents are not retained by the service provider.
• Game Content Providers: Licensed slot and live game providers (Pragmatic Play, NetEnt, etc.) receive session data necessary to deliver and maintain game functionality. These providers do not receive your financial data or full identity.
• Fraud Detection Services: Specialist fraud screening tools receive device and behavioural data to flag suspicious activity. This is a necessary security measure for all players.
• Regulatory Authorities: MostPlay will disclose personal data to competent authorities when required by law, court order, or regulatory instruction. We do not make voluntary disclosures to authorities beyond what is legally required.
• Legal Advisors: In the context of a formal legal dispute or investigation, our legal team may need to access account data relevant to the matter. All such access is restricted to what is strictly necessary.

MostPlay retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below apply to the main data categories we hold:

Once a retention period expires, MostPlay securely deletes or anonymises the relevant data. Anonymised data — where it cannot be used to identify any individual player — may be retained indefinitely for aggregate statistical analysis used to improve the platform.

MostPlay takes the security of your personal data and financial information seriously. We have implemented a layered set of technical and organisational security measures that are reviewed and updated regularly:

• SSL/TLS Encryption: All data transmitted between your device and MostPlay is encrypted using 256-bit SSL/TLS — the same encryption standard applied to online banking in Pakistan.
• Secure Server Infrastructure: MostPlay's servers are hosted in secure, access-controlled data centres with physical and logical security measures including firewalls, intrusion detection systems and regular security audits.
• Access Controls: Internal access to player data is restricted on a need-to-know basis. All staff access is authenticated and all data access events are logged and reviewed.
• Password Security: Account passwords are stored as cryptographic hashes — not in plain text. Even MostPlay staff cannot retrieve your password; only a reset is possible.
• Fraud Monitoring: Automated systems monitor account activity in real time to detect unusual patterns that may indicate unauthorised access or fraudulent use.
• Regular Security Testing: MostPlay conducts regular penetration testing and vulnerability assessments on its platform infrastructure.

MostPlay uses cookies and similar tracking technologies to make the platform work correctly and to improve your experience as a player. Below is a clear explanation of the types of cookies we use and what they do.

You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies will affect platform functionality. Most modern browsers — including Chrome, Firefox and Safari on Android and iOS — allow you to view, block and delete cookies through the browser's privacy settings menu.

As a MostPlay player, you have specific rights over your personal data. These rights are genuine and exercisable — we have a dedicated process for handling them and we commit to responding within 30 days of receiving a valid request.

MostPlay does not knowingly collect personal data from any person under 18 years of age. The platform is strictly for adults, and we operate age verification procedures during and after registration to enforce this requirement. If we discover that personal data has been collected from a minor, that account will be immediately suspended, all data will be deleted, and the matter will be escalated through our responsible gaming procedures.

Parents and guardians in Pakistan who are concerned that a minor may have accessed or registered on MostPlay should contact us immediately at support@mostplay.plus. We will investigate and act without delay.

We also strongly encourage parents and guardians to use parental control software on shared devices to prevent underage access to gambling platforms. Our Responsible Gaming page has further guidance on this topic.

Some of the third-party service providers that MostPlay works with — particularly game content providers and fraud detection services — may process data in countries outside Pakistan. Where such transfers occur, MostPlay takes steps to ensure that your data receives an equivalent level of protection to that which it would receive under applicable data protection law.

These safeguards include contractual clauses in our agreements with data processors that require them to maintain appropriate security standards and to use the data only for the specific purposes defined in those agreements. MostPlay does not transfer data to countries or organisations that cannot provide adequate data protection guarantees.

MostPlay may update this Privacy Policy from time to time to reflect changes in how we operate, in applicable law, or in the services we offer. When we make material changes — changes that meaningfully affect how your data is used or what rights you have — we will notify registered players by email and by a prominent notice on the MostPlay platform at least 7 days before the changes take effect.

The date of the most recent update is always displayed at the top of this page. We encourage you to review this policy periodically so that you are aware of how MostPlay handles your personal information. Continued use of the platform after any update constitutes your acknowledgement of the revised policy.

If any update to this policy would require your explicit consent to continue processing your data in a new way, we will seek that consent separately before the new processing begins. You will not be required to continue using MostPlay if you do not accept a material change — you may close your account and receive any outstanding verified balance at any time.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, want to update your marketing preferences, or have a privacy concern you would like to raise, please get in touch with MostPlay directly. We take all privacy communications seriously and aim to provide clear, helpful responses.

For general account queries, our live chat support is available 24 hours a day from within your logged-in MostPlay account. For sensitive data matters — such as erasure requests or complaints — we recommend using email so that there is a written record of your request and our response.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming page, all of which form part of the overall framework governing your use of MostPlay.