mega 99 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how mega 99 ("mega 99", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "Member") who access or use the mega 99 website at mega99.games and any related services (collectively, the "Platform").

mega 99 is committed to safeguarding the privacy of all its members across Pakistan. Whether you are based in Karachi, Lahore, Islamabad, or elsewhere in Pakistan, this Policy applies to your use of the Platform and governs our data practices in full.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account, make a deposit, contact support, or interact with the Platform in any way, you may provide us with the following categories of personal data:

• Full name as per your CNIC or passport;
• Date of birth (for age verification — 18+ policy);
• Pakistani mobile number (primary contact and OTP verification);
• Email address (for account notifications and support correspondence);
• CNIC or passport number (for identity verification when required);
• Residential address in Pakistan;
• Payment method details (e.g., Easypaisa wallet number, JazzCash number, or bank account details for withdrawal processing).

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and usage information, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Pages visited, time spent on pages, and click-through patterns;
• Game session data, including games played, wager amounts in PKR, and session duration;
• Login timestamps and frequency of access.

2.3 Information from Third Parties

mega 99 may receive limited personal data about you from third-party payment processors (such as Easypaisa, JazzCash, or HBL) for the purpose of confirming and reconciling transactions. Such data is used solely for transaction processing and fraud prevention and is not used for marketing purposes.

3. How We Use Your Data

mega 99 uses the personal data it collects for the following specific purposes:

mega 99 does not use your personal data to serve you third-party advertising or to build marketing profiles for sale to outside parties.

4. Legal Basis for Processing

mega 99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account and fulfil our service obligations under the Terms & Conditions;
• Legitimate interests: Fraud prevention, Platform security, responsible gaming monitoring, and service improvement;
• Consent: Where you have provided explicit consent, such as for certain types of promotional communications;
• Legal obligation: Where we are required by applicable law or regulation to retain or process certain categories of data.

You may withdraw consent at any time for processing based on consent. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal, nor processing carried out on other legal grounds.

5. Sharing Your Data

mega 99 does not sell your personal data. We share your data only in the following limited and controlled circumstances:

• Payment processors: We share the minimum necessary data with Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB Bank solely to process your PKR transactions;
• Identity verification providers: Where additional KYC (Know Your Customer) checks are required, we may use a third-party identity verification service;
• Technology service providers: Cloud hosting and infrastructure partners who are contractually bound to protect your data and may not use it for any independent purpose;
• Legal and regulatory bodies: Where disclosure is required by applicable Pakistani law, regulation, court order, or the direction of a competent authority;
• Fraud prevention: Where necessary to investigate or prevent suspected fraud, money laundering, or other criminal activity affecting the Platform.

6. Payment Data

All PKR payment transactions on the mega 99 Platform are processed by certified payment service providers. mega 99 does not directly store full payment card numbers, bank account credentials, or mobile wallet PINs on its servers. Payment data is transmitted via encrypted channels and handled in accordance with applicable financial data security standards.

Transaction records, including deposit and withdrawal amounts in PKR, timestamps, and payment method identifiers (e.g., the last four digits of a mobile wallet number), are retained on the Platform for account management, customer support, and regulatory compliance purposes. These records are accessible to you within your account transaction history.

7. Cookies & Tracking Technologies

mega 99 uses cookies and similar tracking technologies to support the operation and improvement of the Platform. Cookies are small text files placed on your device when you visit the Platform. They serve the following functions:

• Essential cookies: Necessary for the Platform to function — including maintaining your logged-in session, remembering your language preference, and enabling secure transactions;
• Functional cookies: Used to remember your preferences and customise your experience on the Platform;
• Analytics cookies: Help us understand how members interact with the Platform so we can improve performance and usability;
• Security cookies: Used to detect and prevent fraudulent activity and unauthorised access attempts.

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling essential cookies may affect the functionality of your mega 99 account and some features may not work as intended.

8. Data Retention

mega 99 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. In general terms:

• Active account data is retained for the duration of your membership and for a period following account closure as required for legal and regulatory compliance;
• Financial transaction records in PKR are retained for a minimum period as required by applicable financial record-keeping obligations;
• Identity verification documents are retained for the period required by any applicable anti-money laundering obligations;
• Support communication records are retained for a reasonable period to assist with ongoing or future disputes or enquiries.

When data is no longer required and there is no legal basis for its continued retention, mega 99 will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

9. Data Security

mega 99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Hashing of passwords and sensitive authentication credentials — plaintext passwords are never stored;
• Role-based access controls limiting which employees can access personal data, on a need-to-know basis;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Automated monitoring for suspicious login activity, including detection of unusual IP patterns or multiple failed login attempts.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you suspect that your mega 99 account has been compromised, please contact our support team immediately via WhatsApp (mega99.support) or Telegram (@mega99official).

10. Your Rights

As a mega 99 member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team in English using the details in Section 13.

Right to Access: You may request a copy of the personal data mega 99 holds about you at any time.

Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.

Right to Erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected — you may request that your personal data be deleted. Please note that this right is subject to any overriding legal obligations that require us to retain certain records.

Right to Data Portability: Where processing is based on your consent or on a contract, and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

mega 99 will respond to all data rights requests within a reasonable timeframe, and in any case within 30 days of receipt. Where a request is particularly complex or numerous, we will notify you within that period and provide an extended timeframe of up to a further 60 days.

11. Minors & Age Policy

The mega 99 Platform is strictly for individuals aged 18 years or older. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 18. If we become aware that a member is under the age of 18, the account will be closed immediately and any personal data held will be deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe that a minor under your care has registered an account with mega 99, please contact our support team immediately so that we can take the appropriate action.

12. Changes to This Privacy Policy

mega 99 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we begin collecting new categories of data or change the purposes for which existing data is used — we will provide reasonable prior notice via the Platform or to your registered contact details before the changes take effect.

The "Last updated" date at the top of this document will always reflect when the most recent version came into effect. We encourage you to review this Policy periodically to remain informed about how mega 99 is protecting your data.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or would like to raise a privacy-related concern, please reach out to the mega 99 support team. All communications should be in English and may be directed through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: mega99.support
• Telegram: @mega99official
• Availability: 24 hours a day, 7 days a week, 365 days a year

mega 99 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days. For complex requests, you will be notified if additional time is required.