most play Privacy Policy — How We Handle Your Data

most play operates the online gaming platform accessible at mostplay-khelo.com. most play is the data controller responsible for the personal information of all registered players on the platform. When this Privacy Policy refers to "most play", "we", "us" or "our", it means the most play platform and the organisation that operates it.

This Privacy Policy applies to all personal data collected through the most play website, mobile browser interface and any related services or features — including account registration, PKR deposits and withdrawals, game play, customer support interactions and promotional communications.

This policy is written in plain English for our Pakistani audience. It is intended to give you a genuine understanding of how your data is handled — not to satisfy a legal requirement with text no one reads. If anything in this policy is unclear, contact our support team and we will explain it to you directly.

most play collects personal data in the following categories. The table below lists each category, specific examples and why it is collected:

The personal data most play holds about you is used for the following purposes — and only these purposes:

• Account management: Creating, maintaining and securing your most play account, including login authentication via OTP sent to your registered Pakistani mobile number.
• Payment processing: Facilitating PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card methods. Financial data is shared with payment processors only to the extent needed to complete the transaction.
• Identity verification (KYC): Verifying that you are who you say you are before processing withdrawals and periodically as required by our compliance obligations. CNIC data is processed by an approved verification provider under a strict data processing agreement.
• Game provision: Delivering the games, live scores, betting markets and other features you access on most play and maintaining accurate records of all wagers and results.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and proactively reaching out where warranted. Deposit limits, self-exclusion and other tools rely on accurate personal data to function correctly.
• Fraud and security: Detecting and preventing fraudulent account activity, unauthorised access, money laundering and other prohibited conduct using automated and manual monitoring systems.
• Customer support: Responding to your support requests, resolving disputes and improving service quality through communication records and outcome analysis.
• Legal compliance: Meeting our obligations under applicable anti-money-laundering, counter-terrorism-financing and gaming regulations, including record-keeping and reporting requirements.
• Marketing (with consent): Sending promotional emails or in-platform messages about most play bonuses, new games and events, where you have opted in to receive such communications. You may opt out at any time through account settings.

most play does not use your data for automated decision-making that produces legally significant effects on you without a mechanism for human review. If our fraud or responsible gaming systems flag your account for action, a member of the most play team reviews the case before any consequential decision is made.

most play processes your personal data on one or more of the following legal grounds:

• Contract performance: Processing necessary to provide the most play service you registered for — including account management, game delivery and PKR payment processing.
• Legal obligation: Processing required to comply with applicable laws — including KYC identity verification, AML transaction monitoring and retention of financial records.
• Legitimate interests: Processing carried out for most play's legitimate business interests — including fraud prevention, platform security and responsible gaming monitoring — where those interests are not overridden by your rights.
• Consent: Processing based on your specific, informed opt-in — primarily marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

most play shares personal data only where necessary and only with the following categories of recipients:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and card networks receive the minimum data required to process your PKR transactions. They are not authorised to use this data for any other purpose.
• KYC verification providers: Approved identity verification services receive your CNIC details and supporting documents strictly for the purpose of confirming your identity. These providers operate under data processing agreements that limit data use to the agreed purpose.
• Fraud detection and security services: Third-party fraud prevention tools receive technical and behavioural data (IP addresses, device fingerprints, transaction patterns) to help detect suspicious activity on the most play platform.
• Game providers: Software providers whose games appear on most play may receive anonymised or pseudonymised gameplay data for the purpose of auditing game fairness and resolving technical disputes.
• Legal and regulatory authorities: most play will disclose personal data to law enforcement, regulatory bodies or courts where we are legally required to do so or where disclosure is necessary to protect the safety of players or the integrity of the platform.

most play uses cookies and similar tracking technologies on the platform. Here is a plain explanation of what we use and why:

• Essential cookies: Required for the platform to function. These keep you logged in, remember your session preferences and enable core features like the betting slip and account balance display. You cannot opt out of essential cookies and continue using most play.
• Analytics cookies: Used to understand how players use the most play platform — which pages are most visited, where players drop off, how different features perform. This data is aggregated and is not used to identify individual players. Analytics cookies can be declined without affecting your ability to use most play.
• Fraud prevention cookies: Help identify suspicious access patterns, unusual device behaviour and potential bot activity. These cookies are part of our security infrastructure and operate silently in the background.

most play does not use third-party advertising cookies. We do not allow ad networks to track you across other websites through our platform. The cookies on most play exist to run the platform and protect it — not to build an advertising profile about you.

Most mobile browsers allow you to manage cookie settings through the browser's privacy menu. Blocking essential cookies will prevent most play from functioning correctly — you would not be able to log in or maintain a session.

most play takes the security of your personal data seriously and has implemented the following technical and organisational measures to protect it:

• Encryption: All data transmitted between your device and most play servers is encrypted using TLS 1.2 or higher. Sensitive data at rest — including financial information and identity documents — is encrypted using AES-256.
• Access controls: Personal data is accessible only to most play employees and systems that require it for their specific function. Access is role-based and logged. Access reviews are conducted regularly.
• Two-factor authentication: most play uses OTP-based verification for sensitive account actions including withdrawals and password changes, providing an additional layer of protection for Pakistani players even if login credentials are compromised.
• Infrastructure security: The most play platform is hosted on infrastructure with DDoS protection, intrusion detection systems and regular vulnerability assessments.
• Employee training: All most play staff with access to personal data receive data protection training. Contractors and third-party service providers are contractually bound to maintain equivalent security standards.

most play does not keep your personal data indefinitely. The periods below reflect standard compliance requirements for gaming and financial platforms operating in this region:

• Account and identity data: Retained for the duration of your active account and for a period of five years following account closure. This period satisfies AML and gaming record-keeping requirements.
• Transaction records: PKR deposit and withdrawal records are retained for seven years after the date of each transaction. This aligns with standard financial record-keeping obligations.
• KYC documents: CNIC scans and verification records are retained for five years after account closure and then securely deleted.
• Gameplay records: Individual game round data is retained for three years and then aggregated or deleted.
• Support communications: Chat transcripts and email correspondence are retained for two years and then deleted.
• Marketing consent records: Records of consent to receive marketing communications are retained for as long as the consent remains active, plus one year after it is withdrawn.

Following the applicable retention period, data is either securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. We do not retain data beyond these periods for speculative future use.

As a most play player, you have the following rights with respect to your personal data. These rights can be exercised by contacting our support team: