Six Things We Promise Every Player
These are the principles that guide how PKMega handles your personal data every single day.
End-to-End Encryption
All data transmitted between your device and our servers is encrypted using TLS. Your login details, payment information and personal records are never sent in plain text.
Never Sold to Third Parties
Your name, CNIC details, mobile number and transaction history are never sold to advertisers, data brokers or any third party for commercial purposes.
You Control Your Data
You can request a copy of all personal data we hold, ask us to correct inaccuracies, or request deletion of your account and associated records at any time.
Minimal Data Collection
We only collect the data that is genuinely needed to run your account securely, process payments in PKR and comply with identity verification requirements.
Clear Retention Periods
We do not hold your data indefinitely. Retention periods are defined for each data category. When the period expires, data is securely deleted or anonymised.
Breach Notification
In the unlikely event of a security breach affecting your personal data, PKMega will notify affected players promptly and take immediate steps to contain and remediate the issue.
1 Who We Are
PKMega operates the online gaming and sports betting platform available at pkmega.onl. References to "PKMega", "we", "us" or "our" throughout this Privacy Policy refer to the platform operator responsible for the personal data of players who register and use the site.
This Privacy Policy applies to all personal data collected through pkmega.onl, including data collected during account registration, identity verification, deposits, withdrawals, gameplay, customer support interactions and any other use of the platform.
2 What Data We Collect
PKMega collects several categories of personal data, depending on how you interact with the platform. Here is a breakdown of each type:
2.1 Registration Data
When you create a PKMega account you provide your mobile number, a password and your date of birth. This is the minimum needed to open an account and grant you access to the platform.
2.2 Identity Verification (KYC) Data
Before withdrawals can be processed, you are required to complete identity verification. This involves submitting a copy of your CNIC (Computerised National Identity Card) and a selfie photograph. This data is used solely for the purpose of confirming your identity and age, and is handled by a secure verification provider.
2.3 Financial Data
When you make a deposit or withdrawal, we collect transaction details including the payment method used (JazzCash, Easypaisa, Raast, bank transfer or card), the amount in PKR and the transaction timestamp. We do not store full card numbers — payment data is handled by our payment processing partners.
2.4 Gaming Activity Data
We record your activity on the platform including bets placed, games played, stakes, results, session durations and bonus usage. This data is used for account management, dispute resolution and responsible gaming monitoring.
2.5 Technical and Device Data
When you access pkmega.onl, our servers automatically collect certain technical data: your IP address, browser type and version, operating system, device type, and pages visited. This data is used for security monitoring and to improve platform performance.
2.6 Customer Support Data
If you contact PKMega support via live chat or email, we retain a record of the conversation. This helps us resolve ongoing issues and improve the quality of support we provide.
| Data Category | Examples | Purpose |
|---|---|---|
| Registration | Mobile number, DOB, password hash | Account access & security |
| KYC / Identity | CNIC, selfie photo | Age & identity verification |
| Financial | PKR amounts, payment method, timestamps | Payment processing & fraud prevention |
| Gaming Activity | Bets, game sessions, bonus usage | Account management & responsible gaming |
| Technical / Device | IP address, browser, device type | Security & platform optimisation |
| Support Records | Chat transcripts, email threads | Dispute resolution & service quality |
3 Why We Collect Your Data
Every piece of data PKMega collects serves a specific, legitimate purpose. We do not collect data speculatively or without a clear reason. The main purposes are:
- Account creation and management: To set up your player account, keep it secure and allow you to log in and use the platform.
- Identity and age verification: To confirm that you are at least 18 years old and are the person you claim to be, as required before any withdrawal is approved.
- Payment processing: To facilitate deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer and cards, and to maintain accurate financial records.
- Fraud prevention and security: To detect and prevent unauthorised access, money laundering, multiple account abuse and other fraudulent activity that could harm you or other players.
- Responsible gaming: To monitor gaming patterns and, where necessary, intervene with responsible gaming tools such as deposit limit reminders or cooling-off prompts.
- Customer support: To respond to your queries, resolve disputes and maintain a record of support interactions.
- Platform improvement: To understand how players use pkmega.onl and to improve the user experience, game offering and overall performance of the platform.
- Communications: To send you important account notifications — such as withdrawal confirmations, security alerts and updates to these policies. Promotional messages are only sent where you have opted in.
4 Legal Basis for Processing
PKMega processes your personal data on the following legal grounds:
- Contractual necessity: Processing is necessary to perform the contract between you and PKMega — i.e., to operate your account and deliver the services you have signed up for.
- Legal obligation: Certain data processing is required to comply with identity verification and anti-money-laundering obligations.
- Legitimate interests: PKMega has a legitimate interest in preventing fraud, securing the platform and improving services, provided those interests do not override your privacy rights.
- Consent: Where processing is based on consent — for example, receiving promotional communications — you can withdraw that consent at any time by contacting support or adjusting your account notification settings.
5 How Your Data Is Stored and Secured
PKMega takes the security of your personal data seriously. The measures we have in place include:
- TLS encryption: All data in transit between your browser or app and our servers is encrypted using TLS 1.2 or higher. This protects your login credentials and payment details from interception.
- Encrypted storage: Sensitive data at rest — including KYC documents and financial records — is stored in encrypted form on secured servers with restricted access.
- Access controls: Only authorised PKMega personnel with a genuine need to access your data are permitted to do so. Access is logged and audited regularly.
- Password security: Passwords are stored as salted hashes. PKMega staff cannot see your password and will never ask you to share it.
- Regular security reviews: The platform and its infrastructure undergo periodic security assessments to identify and address vulnerabilities.
6 Who We Share Your Data With
PKMega does not sell your personal data. We share data only in the circumstances described below, and only to the extent necessary:
6.1 Payment Processors
When you make a deposit or withdrawal, your transaction details are shared with the relevant payment provider — JazzCash, Easypaisa, Raast or your bank. These providers operate under their own privacy policies and security standards. PKMega does not retain full card numbers; card processing is handled entirely by the payment gateway.
6.2 Identity Verification Providers
KYC documents (CNIC and selfie) are passed to a third-party identity verification service to confirm your identity and age. This provider is contractually bound to use your data only for the verification purpose and to delete it after the verification is complete.
6.3 Game Suppliers
To deliver games from third-party providers — including slots, live casino and other titles in the Game Lobby — a session token and minimal account reference data may be shared with the game supplier. Full personal information is not shared with game suppliers.
6.4 Law Enforcement and Regulatory Bodies
PKMega may be required to disclose personal data to law enforcement authorities, financial intelligence units or other government bodies where legally compelled to do so. We will only provide data that we are legally required to share, and where possible we will notify you of such a request unless prohibited by law.
6.5 Internal Group Companies
Data may be shared within the PKMega group of companies for the purposes of platform operation, security and compliance. All group entities are bound by the same data protection standards as set out in this policy.
7 Cookies and Tracking Technologies
PKMega uses cookies and similar technologies on pkmega.onl. A cookie is a small text file placed on your device when you visit a website. We use the following types:
- Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. You cannot opt out of essential cookies and continue to use the platform.
- Analytics cookies: Used to understand how players navigate the site — which pages are visited most, where players encounter issues, and how sessions flow. This data is aggregated and anonymised. You can opt out of analytics cookies in your browser settings.
- Preference cookies: Store your platform preferences such as language and display settings, so you do not need to reset them each time you visit.
You can manage cookie settings in your browser. Note that disabling certain cookies may affect the functionality of pkmega.onl — for example, you may need to log in again on every visit if session cookies are blocked.
8 How Long We Keep Your Data
PKMega retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The general retention periods we apply are:
- Active account data: Retained for the lifetime of your account and for a period of up to 5 years after account closure, to comply with financial record-keeping obligations and to resolve any late-arising disputes.
- KYC documents: Retained for the duration of your account plus up to 5 years after closure.
- Transaction records: Retained for up to 5 years from the date of each transaction.
- Support records: Retained for up to 2 years from the date of the last interaction.
- Technical / device logs: Retained for up to 12 months and then deleted or anonymised.
When the applicable retention period expires, data is securely deleted or anonymised so it can no longer be linked to you as an individual.
9 Your Privacy Rights
As a PKMega player, you have the following rights in relation to your personal data:
- Right of access: You can request a copy of all personal data we hold about you. We will provide this within a reasonable timeframe, typically within 30 days of your request.
- Right to rectification: If any personal data we hold is inaccurate or out of date, you can ask us to correct it. For example, if your contact number has changed, contact support and we will update our records.
- Right to erasure: You can request deletion of your personal data. This right is subject to certain limitations — for example, we cannot delete transaction records where there is a legal obligation to retain them. However, we will delete all data that is not subject to such obligations.
- Right to restrict processing: In certain circumstances, you can ask us to restrict the way we process your data while a dispute or review is ongoing.
- Right to data portability: You can request your personal data in a structured, machine-readable format so you can transfer it elsewhere if you wish.
- Right to object: Where processing is based on legitimate interests, you have the right to object. We will review your objection and cease processing unless there are compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), you can withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact our support team via live chat or email. We will respond to all valid requests within 30 days. Complex requests may take longer, in which case we will keep you informed of progress.
10 Children's Privacy
PKMega is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is carried out as part of the KYC process, and accounts found to belong to minors will be immediately closed and any funds returned.
If you believe that a minor has registered on the platform, please contact our support team immediately so we can investigate and take appropriate action. Parents and guardians are encouraged to use parental control tools on shared devices to prevent minors from accessing gaming platforms.
11 Updates to This Privacy Policy
PKMega may update this Privacy Policy from time to time to reflect changes in the platform, applicable practices or legal requirements. When we make significant changes, we will notify registered players via an in-platform notification or email at least 7 days before the update takes effect.
The "Last updated" date at the top of this page always shows the date of the most recent revision. We encourage you to review this policy periodically. Continuing to use the platform after an updated policy has taken effect constitutes your acknowledgement of the changes.
12 How to Contact Us About Privacy
If you have any questions, concerns or requests relating to this Privacy Policy or the way PKMega handles your personal data, please get in touch:
- Live Chat: Available 24/7 on every page of pkmega.onl — the quickest way to get a response.
- Email: [email protected] — for non-urgent privacy queries and formal data subject requests.
We take all privacy concerns seriously. Data subject requests will be acknowledged within 24 hours and resolved within 30 days. If you are not satisfied with our response, you may escalate your concern through the complaints process described in our Terms and Conditions.
Privacy FAQ
Quick answers to the questions our Pakistani players ask most often about data and privacy.
Your Privacy Is Protected — Join PKMega Confidently
Register today and enjoy Sports, Live Casino, Slot Games, Bingo and more — with your personal data secured and your rights fully respected.