BetMGM Privacy Policy — Your Data, Your Rights, Our Obligations

01Introduction

BetMGM Pakistan is committed to protecting the personal information of every member who registers and plays on our platform. We understand that Pakistani users place real trust in us when they share their CNIC details, mobile wallet numbers and betting history — and we do not take that lightly. This Privacy Policy is designed to explain, in plain and honest language, exactly what data we collect, why we collect it, where it goes and how long we keep it.

We are required by our gaming licence to collect and retain certain categories of personal data, including identity verification records and financial transaction histories. Beyond those mandatory requirements, we collect only what is genuinely necessary to provide you with a smooth, secure betting experience on BetMGM — nothing more. If we ever want to use your data for a new purpose not covered by this policy, we will ask for your consent first.

This policy uses straightforward English appropriate for Pakistani users. If anything is unclear, please do not guess — contact our support team and we will explain it directly.

02Data We Collect

BetMGM collects personal data in several ways: directly from you during registration and account use, automatically from your device and browser when you visit our platform, and from third parties such as payment processors and identity verification services. Here is a full breakdown:

Information you provide directly:

• Full name, date of birth, nationality and residential address (collected at registration for identity verification).
• CNIC (Computerised National Identity Card) number and a copy of your CNIC or passport (required for KYC verification before your first withdrawal).
• Email address and mobile phone number (used for account access, transaction notifications and support communications).
• Payment method details — for Easypaisa and JazzCash this is your registered mobile number; for bank transfers, your IBAN; for cards, your card number is processed by our payment partner and only the last four digits are stored by BetMGM.
• Any information you share with our support team through live chat or email correspondence.

Information collected automatically:

• IP address and approximate geolocation (city and country level only — BetMGM does not track precise GPS location).
• Device type, operating system, screen resolution and browser version.
• Session data including pages visited, features used, time spent on each section and click patterns.
• Betting and gaming activity — every bet placed, every game played, every deposit and withdrawal made on BetMGM is logged as part of the transactional record required by our gaming licence.

Information from third parties:

• Identity verification results from our KYC partner (pass, fail, or further review required) — BetMGM receives the outcome but does not store the raw biometric data processed by our KYC provider.
• Transaction status confirmations from Easypaisa, JazzCash and other payment processors.
• Fraud and sanctions screening results from our compliance data providers.

03How We Use Your Data

BetMGM uses your personal data for the following specific purposes. We do not use your data for any purpose that is not listed here without first obtaining your separate consent:

• Account creation and management: Setting up your BetMGM member account, maintaining your profile and enabling login access.
• Identity and age verification: Confirming that you are who you say you are and that you are at least 18 years old. This is both a legal obligation and a core commitment of BetMGM's responsible gaming policy.
• Processing deposits and withdrawals: Communicating with Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card processors to move PKR into and out of your BetMGM wallet.
• Bet settlement and gaming: Recording bets placed, calculating winnings, settling accounts and maintaining the complete betting history associated with your account.
• Fraud prevention and security: Monitoring for unusual account activity, multiple account detection, bonus abuse patterns and suspicious transaction behaviour.
• Regulatory compliance: Maintaining records required by our gaming licence, anti-money laundering (AML) obligations and any lawful request from a regulatory or law enforcement authority.
• Customer support: Using your account history and correspondence records to respond to your queries, resolve disputes and improve the quality of our support service.
• Platform improvement: Analysing aggregated, anonymised behavioural data to understand how Pakistani users navigate the BetMGM platform and improve features accordingly.
• Responsible gaming: Monitoring betting patterns to identify members who may be showing signs of problem gambling behaviour and enabling our responsible gaming team to act appropriately.

04Legal Basis for Processing

BetMGM processes your personal data on the following legal grounds, consistent with applicable data protection principles:

• Contract performance: Processing necessary to provide you with the betting and gaming services you have signed up for — account management, bet settlement, payment processing.
• Legal obligation: Processing required to comply with our gaming licence conditions, AML regulations, tax reporting obligations and lawful regulatory requests.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement and responsible gaming purposes — where these interests are proportionate and do not override your rights.
• Consent: Processing for marketing communications (where you have opted in), optional cookies beyond technical necessity, and any new data use not covered by the above grounds.

05Data Sharing & Third Parties

BetMGM does not sell your personal data to any third party, ever. We share data only in the following specific and limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT partner banks and card networks receive the payment data necessary to process your deposits and withdrawals. These providers are contractually obligated to protect your data and use it only for payment purposes.
• Identity verification providers: Our KYC partner receives your identity documents for the purpose of confirming your identity and age. They are bound by strict data processing agreements and certified industry standards.
• Fraud and compliance screening: Transaction data and identity information may be checked against sanctions lists and fraud databases by our compliance partners. These checks are mandatory under our licensing obligations.
• Regulatory authorities: BetMGM is legally required to provide certain data to its licensing authority and, in specific circumstances defined by law, to law enforcement or financial intelligence agencies.
• Group companies: BetMGM may share data within its corporate group for operational, compliance and fraud prevention purposes, always under binding internal data protection agreements.

All third parties with whom BetMGM shares personal data are required to process that data only for the purposes for which it was shared, to maintain appropriate security standards and to comply with applicable data protection law. BetMGM does not permit any third party to use your data for their own marketing or commercial purposes.

06Cookies & Tracking Technologies

BetMGM uses cookies and similar tracking technologies on the betmgm-bangla.com website. A cookie is a small text file placed on your device when you visit a website. Here is how BetMGM uses them:

• Essential cookies: Required for the platform to function — session management, login authentication and security tokens. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Anonymous analytics data about how pages are used, which features are accessed most and where errors occur. This helps BetMGM's development team prioritise improvements. No personally identifying information is collected in performance cookies.
• Functional cookies: Remembering your language preference, display settings and other personalisation choices so you do not have to re-enter them each session.
• Marketing cookies: Only placed with your explicit consent. Used to understand the effectiveness of BetMGM's promotional campaigns without tracking you across third-party websites.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use BetMGM's core betting and gaming services.

07Data Security

BetMGM implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

• All data transmitted between your browser or device and BetMGM's servers is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption.
• Account passwords are stored using industry-standard one-way hashing algorithms. BetMGM staff cannot see or retrieve your password in plain text under any circumstances.
• Payment card data is processed by PCI-DSS compliant payment processors. BetMGM stores only the last four digits of your card number — full card data never touches BetMGM's servers.
• Access to member data within BetMGM's internal systems is role-restricted — staff members can only access the data categories required for their specific job function. All data access events are logged and audited.
• BetMGM conducts regular security assessments and penetration testing of its platform infrastructure.
• In the event of a data breach that poses a risk to your rights, BetMGM will notify affected members and relevant regulatory authorities within the timeframes required by applicable law.

08Data Retention

BetMGM retains personal data for as long as it is needed to fulfil the purpose for which it was collected or to meet legal and regulatory obligations. The following retention periods apply:

• Active accounts: All personal data associated with your account is retained throughout the period of your active membership.
• Following account closure: BetMGM is required by its gaming licence and applicable AML regulations to retain financial records, identity documents and betting histories for a minimum of five years after account closure.
• Support correspondence: Live chat logs and email correspondence are retained for three years to support dispute resolution and service quality review.
• Technical logs: Server logs and access records are retained for 12 months and then automatically deleted unless required as part of an active investigation.
• Marketing data: If you have opted in to marketing communications, your contact details for this purpose are retained until you withdraw consent or for two years of inactivity in your marketing preferences, whichever comes first.

When data is no longer required for any of the above purposes, BetMGM securely deletes or anonymises it so that it can no longer be associated with you as an individual.

09Children's Privacy

BetMGM's services are strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. During the registration process, we require a date of birth and conduct age verification checks — any registration attempt by a person under 18 is blocked and the information is not retained.

If you believe that a minor has registered a BetMGM account or that a child's personal data has been collected in error, please contact our support team immediately at support@betmgm-bangla.com. We will investigate and delete any such data as quickly as possible. BetMGM actively supports parental controls and age-verification technologies as part of its wider responsible gaming commitment.

10Marketing Communications

BetMGM will only send you promotional communications — about new sports markets, bonus offers, PSL promotions and platform updates — if you have explicitly opted in to receive them during registration or through your account preferences. We do not send unsolicited marketing emails or SMS messages.

• Marketing communications from BetMGM will always clearly identify BetMGM as the sender and include a clear, one-click unsubscribe option.
• Opting out of marketing communications does not affect your ability to receive transactional messages — bet confirmations, deposit receipts, withdrawal notifications and security alerts are sent regardless of your marketing preferences.
• BetMGM does not share your contact details with third-party marketing companies. Every marketing communication you receive that is linked to your BetMGM account is sent by BetMGM directly.
• You may update your marketing preferences at any time through your account settings or by contacting support.

11Your Rights — How to Exercise Them

As described in the overview section above, you have the right to access, correct, delete, restrict, port and object to the processing of your personal data. To exercise any of these rights:

• Contact BetMGM at support@betmgm-bangla.com with the subject line "Data Rights Request".
• Include your registered account email address and a clear description of the right you wish to exercise.
• BetMGM will acknowledge your request within 5 business days and fulfil it within 30 days, subject to identity verification and any applicable legal limitations.
• There is no charge for submitting a data rights request unless requests are manifestly unfounded or excessive — in which case BetMGM may charge a reasonable administrative fee, which will be communicated before any charge is applied.

12Changes to This Privacy Policy

BetMGM may update this Privacy Policy from time to time as our data practices evolve, as regulatory requirements change or as we introduce new platform features. When we make material changes — meaning changes that affect your rights or how your data is used — we will:

• Display a prominent notice on the BetMGM homepage for a minimum of 7 days before the changes take effect.
• Send an email notification to your registered address where email preferences permit.
• Update the "Last Updated" date at the top of this page.

Minor clarifications and corrections that do not alter the substance of the policy may be made without notice. We encourage you to review this Privacy Policy periodically. Continued use of BetMGM following a material update constitutes acceptance of the revised policy.

13Contact & Complaints

If you have any questions about this Privacy Policy or about how BetMGM handles your personal data, or if you wish to make a complaint about our data practices, please contact us through the following channels:

If you are not satisfied with BetMGM's response to a privacy complaint, you have the right to escalate the matter to the relevant regulatory authority under our gaming licence. BetMGM will always provide the contact details of the relevant authority on request. We genuinely want to resolve any privacy concern you have — please come to us first and we will do our best to address it promptly and fairly.

For further information about your rights under these terms, please also review our Terms and Conditions and our Responsible Gaming page.