Data Protection & Privacy

Mostpaly Privacy Policy — How We Protect Your Personal Data in Pakistan

At Mostpaly, your privacy is not an afterthought. This policy explains exactly what data we collect, how we use it, who we share it with, and how you can control it. We've written it in plain, accessible English so every Pakistani player knows precisely what Mostpaly does — and doesn't do — with their information.

Last Updated: June 2025 Applies To: Pakistani Players Language: English (en-PK)
mostpaly
256-bit TLS Encryption
All data in transit secured
No Data Sold
Your info stays with Mostpaly
Right to Deletion
Request account data removal
Minimal Data Collection
Only what's needed to operate

1. Introduction

Mostpaly ("we", "us", "the Platform") operates the online gaming platform available at mostpaly.click. This Privacy Policy describes how Mostpaly collects, uses, stores, and protects the personal information of players in Pakistan and other jurisdictions where the platform is accessible.

We understand that handing over your personal details — your CNIC number, your Easypaisa wallet, your phone number — requires trust. Mostpaly takes that trust seriously. This policy is written in plain English precisely so you don't have to decode legal language to understand what we're doing with your data. We've kept it as straightforward as we can while still being complete.

By registering an account or using any Mostpaly service, you confirm that you have read and accepted this Privacy Policy. It forms part of your overall agreement with Mostpaly alongside our Terms and Conditions.

In short: We collect what we need, use it only for running your account and the platform, don't sell it to anyone, and keep it secure. That's the core of what this document says.

2. What Data We Collect

Mostpaly collects personal data in the following categories. We only collect information that is necessary for the purposes described in Section 3.

2.1 Registration Data

When you create a Mostpaly account, we collect:

  • Full name as it appears on your CNIC
  • Date of birth (for age verification — Mostpaly is an 18+ platform)
  • Pakistani mobile number
  • Email address
  • Username and password (password stored in hashed, non-recoverable form)
  • City and province of residence

2.2 Identity Verification Data

When Mostpaly requests identity verification (which may happen at registration or at any point during your account's lifespan), we may collect:

  • Copy of your CNIC (front and back) or passport
  • Selfie or photograph for liveness verification
  • Proof of address (utility bill, bank statement)

This data is handled with the highest level of security and used solely for the purpose of verifying your identity and age.

2.3 Financial Data

When you make deposits or withdrawals on Mostpaly, we collect transaction-level information including:

  • Payment method type (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, card)
  • Transaction reference numbers
  • Deposit and withdrawal amounts in PKR
  • Timestamps of all transactions

Mostpaly does not store full card numbers. Payment card details are tokenised and processed by PCI-DSS compliant third-party payment processors — we never see or hold your full card number.

2.4 Gameplay Data

We record activity related to your use of Mostpaly games, including:

  • Games played, bet amounts, win/loss outcomes
  • Session duration and frequency
  • Bonus activity and wagering progress
  • PSL betting selections and outcomes

This data is used to operate your account, calculate your balance, detect fraud, and fulfil our responsible gaming obligations.

2.5 Technical & Device Data

When you access Mostpaly, our servers automatically log certain technical information:

  • IP address and approximate geographic location
  • Device type, operating system, and browser version
  • Session timestamps and pages visited
  • Referral source (how you arrived at Mostpaly)
Data Category Examples Why Collected
RegistrationName, DOB, mobile, emailAccount creation & identity
Identity VerificationCNIC copy, selfieAge & KYC compliance
FinancialTransaction refs, PKR amountsPayment processing & AML
GameplayBets, wins, sessionsBalance & responsible gaming
TechnicalIP, device, browserSecurity & fraud detection
CookiesSession tokens, preferencesPlatform functionality
mostpaly

3. How We Use Your Data

The personal data Mostpaly holds about you is used for the following specific purposes:

  • Account management: Creating and maintaining your Mostpaly account, processing your deposits and withdrawals in PKR, and maintaining your transaction history.
  • Identity and age verification: Confirming that you are who you say you are and that you are at least 18 years old, as required for access to Mostpaly.
  • Anti-money laundering (AML) and fraud prevention: Monitoring transactions and gameplay for patterns that may indicate financial crime, bonus abuse, or account fraud.
  • Responsible gaming compliance: Using your gameplay data to monitor for signs of problematic gambling behaviour and to enforce limits or restrictions you have set on your own account.
  • Platform improvement: Analysing aggregated, anonymised usage data to improve Mostpaly's games library, payment experience, and user interface.
  • Communications: Sending you account notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about Mostpaly offers.
  • Legal obligations: Complying with any applicable regulatory requirements, including responding to lawful requests from government authorities.
What we don't do: Mostpaly does not use your data to build advertising profiles, does not sell your data to data brokers, and does not share your personal information with other gaming platforms or third-party marketers.

4. Legal Basis for Processing

Mostpaly processes your personal data on the following legal grounds:

  • Contract performance: Most of the data processing we carry out is necessary to deliver the services you signed up for — running your account, processing your PKR deposits and withdrawals, and providing access to Mostpaly's games.
  • Legal obligation: Certain data processing is required by law — for example, identity verification and transaction records for anti-money-laundering purposes.
  • Legitimate interests: We process some data (such as fraud detection signals and security logs) because we have a legitimate interest in protecting our platform and our players from harm.
  • Consent: Where we process data for purposes that go beyond the above — such as sending you marketing emails — we ask for your explicit consent at the point of data collection and give you the ability to withdraw that consent at any time.

5. Who We Share Your Data With

Mostpaly shares your personal data only with the specific categories of third party listed below, and only to the extent necessary for the stated purpose:

5.1 Payment Processors

When you deposit or withdraw using Easypaisa, JazzCash, NayaPay, SadaPay, a bank transfer, or a Visa/Mastercard, your transaction data is shared with the relevant payment provider to process the transaction. Each payment provider has its own privacy policy that applies to data they hold on their side.

5.2 Game Software Providers

Games on Mostpaly are supplied by third-party providers including Pragmatic Play, NetEnt, Play'n GO, and others. When you play their games, your gameplay session data is processed by their systems in real time. These providers are contractually required to protect your data and are not permitted to use it for any purpose other than delivering the game service.

5.3 Identity Verification Services

Mostpaly may use third-party identity verification providers to process CNIC copies and perform liveness checks. These providers operate under strict data processing agreements and are not permitted to retain your documents beyond the verification period.

5.4 Legal and Regulatory Authorities

If Mostpaly is required by law, court order, or regulatory authority to disclose your personal data, we will comply with that requirement. Where legally permitted to do so, we will inform you that such a request has been received.

5.5 No Sale of Data

Mostpaly does not sell, rent, or trade your personal data with any third party for commercial purposes. Your information is not shared with advertisers, data brokers, marketing agencies, or other gaming platforms.

mostpaly

6. Cookies & Tracking Technologies

Mostpaly uses cookies and similar technologies to operate the platform, remember your session, and understand how the platform is used. Here's a breakdown of what we use:

  • Essential cookies: Required for the platform to function. These include your login session token, language preference, and security tokens. You cannot opt out of essential cookies without losing access to the platform.
  • Functional cookies: Remember your preferences, such as your last-used game category or your stake settings in a game. These make your experience more convenient.
  • Analytics cookies: Used to understand how players navigate Mostpaly — which pages are most visited, where players drop off, and how long sessions typically last. This data is aggregated and anonymised before analysis.

Mostpaly does not use third-party advertising cookies or allow external advertisers to place tracking technology on our platform. You can manage your cookie preferences in your browser settings. Deleting essential cookies will require you to log back in on your next visit.

7. Data Security

Protecting your personal data is one of Mostpaly's core operational responsibilities. We apply the following security measures as a baseline:

  • TLS/SSL encryption: All data transmitted between your device and Mostpaly's servers is protected with 256-bit TLS encryption. You'll see the padlock icon in your browser address bar whenever you're on Mostpaly.
  • Password hashing: Your Mostpaly password is never stored in plain text. We use a one-way cryptographic hashing algorithm — even Mostpaly staff cannot see your password.
  • Access controls: Access to player data within Mostpaly's systems is restricted on a need-to-know basis. Staff who do not need access to your data in order to perform their role do not have it.
  • Regular security audits: Mostpaly's systems are subject to periodic security reviews to identify and address potential vulnerabilities before they can be exploited.
  • PCI-DSS compliant payments: Card payment data is processed through PCI-DSS compliant processors. Mostpaly does not store full card numbers on its own systems at any point.
If you suspect your account has been accessed without your permission, contact Mostpaly support immediately at support@mostpaly.click. We will lock your account, investigate, and take appropriate action.

8. How Long We Keep Your Data

Mostpaly retains your personal data for as long as your account is active and for a period thereafter as required by our legal and regulatory obligations. In practice:

  • Account and identity data: Retained for the lifetime of your account, plus a minimum of five years after account closure, to comply with anti-money-laundering record-keeping requirements.
  • Transaction records: Financial transaction data is retained for seven years from the date of each transaction.
  • Gameplay records: Retained for three years from the date of the session, or longer if needed for an ongoing dispute or investigation.
  • Security logs: Technical access logs and security event records are retained for 12 months.
  • Marketing consent records: If you opt in to marketing communications, we retain a record of that consent for as long as you remain opted in, plus six months after opt-out for compliance purposes.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised.

9. Your Rights as a Mostpaly Player

You have specific rights over the personal data that Mostpaly holds about you. Below is a summary of those rights and how to exercise them.

Your Data Rights at Mostpaly

Pakistani players have meaningful, enforceable rights over their personal data on Mostpaly. Here's what you can request.

Right of Access
Request a copy of all personal data Mostpaly holds about you. We'll provide it in a readable format within 30 days of your verified request.
Right to Correction
If any personal data Mostpaly holds about you is inaccurate or out of date, you can request that we correct it. Updates to core account details must be verified before they take effect.
Right to Deletion
You can request that Mostpaly delete your personal data. We'll action this where we're not legally required to retain it. AML and financial records may be exempt from deletion requests.
Right to Restrict Processing
In certain circumstances you can ask Mostpaly to restrict how we process your data — for example, while a dispute about accuracy is being resolved.
Right to Portability
You can request your personal data in a machine-readable format (such as JSON or CSV) so you can transfer it to another service if you choose.
Right to Object
You can object to processing carried out on the basis of legitimate interests. You can also withdraw consent for marketing communications at any time through your account settings.

To exercise any of the above rights, email support@mostpaly.click with the subject line "Data Rights Request". We'll acknowledge within 48 hours and respond fully within 30 days.

10. Children's Privacy

Mostpaly is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires you to confirm your date of birth, and Mostpaly reserves the right to verify age through document checks at any time.

If Mostpaly becomes aware that a player under 18 has successfully registered an account, we will close the account immediately, return any verifiable deposit balance to the payment source, and delete any data collected from that individual beyond what is required for record-keeping purposes.

If you are a parent or guardian and believe your child has created a Mostpaly account, please contact us immediately at support@mostpaly.click.

11. Third-Party Game Providers

The games available on Mostpaly — including slots from Pragmatic Play and NetEnt, card games, crash games, fishing games, and jackpot slots — are operated using software and live streaming infrastructure provided by third-party suppliers. When you play these games, your gameplay data (bets placed, outcomes received, session timing) is processed by those providers' systems in real time.

These game providers act as data processors under contract with Mostpaly. They are required by those contracts to:

  • Process your data only for the purpose of delivering the game
  • Apply appropriate security measures to protect your data
  • Not share your data with any party outside the scope of providing the game service
  • Delete data when the contractual relationship ends

Mostpaly selects game providers that operate to internationally recognised data protection standards. If you have concerns about how a specific game provider handles data, you are welcome to contact us and we will provide what information we can about our contractual requirements with that provider.

12. Changes to This Privacy Policy

Mostpaly reviews this Privacy Policy regularly and updates it when necessary — for example, when we introduce a new data processing activity, when we add a new payment method, or when applicable laws change. The "Last Updated" date at the top of this page indicates when the most recent changes were made.

When we make material changes that affect how your personal data is used, we will notify registered Mostpaly players by email to the address on file. Continued use of the Mostpaly platform after the effective date of any updated Privacy Policy constitutes your acceptance of those changes.

We recommend bookmarking this page and checking it whenever you receive an update notification from Mostpaly. If you disagree with any change, you can request account closure and data deletion as described in Sections 9 and 13.

13. Contact & Data Requests

For any privacy-related queries, data access requests, or concerns about how Mostpaly handles your personal information, please contact us through the following channel:

Mostpaly Privacy Team
Email: support@mostpaly.click
Subject Line: Use "Privacy Query" or "Data Rights Request" for faster routing
Response Time: Acknowledgement within 48 hours, full response within 30 days
Available: 7 days a week

When submitting a data rights request, please include your Mostpaly username, the email address on your account, and a brief description of your request. We may need to verify your identity before processing the request to ensure we release data only to the account owner.

For responsible gaming related matters — including requesting account limits or self-exclusion — please visit our Responsible Gaming page or include "Responsible Gaming" in your email subject line.

How Mostpaly Keeps Your Data Safe

Privacy isn't just a policy document at Mostpaly — it's built into how the platform works every day

End-to-End TLS Encryption
Every connection between your phone and Mostpaly's servers runs over 256-bit TLS. Whether you're depositing via JazzCash at 2 AM or checking your slot balance on the bus, your data is encrypted the entire time.
Card Data Never Stored
Mostpaly does not store card numbers anywhere on its servers. Card payments are tokenised at the point of entry and processed entirely by PCI-DSS compliant third-party processors. Your card details are never at risk on our end.
No Advertising Profiles
Mostpaly does not build advertising profiles using your data and does not participate in ad networks that track you across the web. The only tracking on Mostpaly is what's needed to operate your account and keep the platform secure.
Hashed Passwords Only
Your Mostpaly password is converted to an irreversible hash at the time you set it. Even Mostpaly staff cannot read your password — only you know it. Use a strong, unique password and enable two-factor authentication where available.
Strict Internal Access Controls
Mostpaly employees can only access player data they genuinely need to do their job. Customer support agents see what's necessary to resolve your query. Data scientists see only anonymised, aggregated data. Access is logged and audited.
Defined Retention Periods
Mostpaly doesn't keep your data indefinitely out of habit. Every data category has a defined retention period. When data is no longer needed, it's securely deleted or anonymised. No data warehouse of forgotten player profiles sitting unused.

Join Mostpaly — Your Data, Your Control

Play on a Platform That Respects Your Privacy from Day One

Create your free Mostpaly account today. Your personal data stays secure, your PKR withdrawals go directly to your Easypaisa or JazzCash, and you're always in control of your account. 500+ games. Zero data selling.

18+  By registering you confirm you have read and accepted this Privacy Policy and our Terms and Conditions.