MustPlay Privacy Policy

1. Introduction

MustPlay ("we", "us", "the Platform") operates mustplay.fun, an online entertainment platform offering sports betting — including Cricket, PSL and T20 markets — alongside Casino games, Slots, Live Casino, Bingo and related gaming products for players based in Pakistan. This Privacy Policy describes how MustPlay collects, uses, stores and protects the personal data of its users ("you", "the Player").

By registering a MustPlay account or using any part of mustplay.fun, you confirm that you have read and understood this Privacy Policy. This policy should be read alongside the Terms and Conditions, which govern the overall use of the platform.

We understand that privacy matters to Pakistani players — particularly when it comes to financial data related to PKR deposits and withdrawals via JazzCash, Easypaisa, Raast and bank transfer. We take that responsibility seriously and have built our data practices around the principle of collecting only what is genuinely necessary.

2. Data We Collect

MustPlay collects the following categories of personal data:

We do not intentionally collect sensitive personal data such as health information, religious beliefs or biometric data unless specifically required by a legal obligation applicable to the platform.

3. How We Collect Data

3.1 Directly From You

The majority of your personal data is collected directly from you during the registration process, when you make a deposit or withdrawal, when you contact support, or when you update your account profile. You choose what information to provide, though some fields are required for the platform to function — for example, a valid mobile number is necessary to send you transaction confirmations.

3.2 Automatically During Platform Use

When you visit mustplay.fun — whether on a mobile device, tablet or desktop — our servers automatically record certain technical information including your IP address, the pages you visit, the time and duration of your session, and basic device information such as your operating system and browser version. This data helps us keep the platform secure and diagnose technical issues.

3.3 From Payment Processors

When you make a PKR deposit via JazzCash, Easypaisa, Raast or bank transfer, the relevant payment processor confirms the transaction outcome to MustPlay. We receive confirmation data — including transaction reference numbers and amounts — but we do not store full mobile wallet PINs, card CVV numbers or bank account passwords at any point.

3.4 From Verification Services

Where identity verification is required — for example, before processing a large PKR withdrawal — we may use third-party verification services to confirm that the documents you have submitted are valid. These services process your CNIC data under strict data processing agreements with MustPlay.

4. How We Use Your Data

MustPlay uses your personal data for the following specific purposes:

• Account Management: Creating and maintaining your MustPlay account, processing your login, managing your PKR balance and keeping your account history accurate.
• Payment Processing: Facilitating PKR deposits via JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets, and processing withdrawal requests to your registered payment method.
• Platform Security: Detecting and preventing fraud, identifying duplicate accounts, investigating suspicious betting patterns and protecting the integrity of sports markets including Cricket and PSL events.
• Customer Support: Responding to your queries, resolving account issues and communicating important account-related updates.
• Bonus & Promotions: Administering bonus offers, verifying eligibility, tracking wagering requirements and preventing systematic bonus abuse.
• Legal Obligations: Retaining transaction records and identity data where required to meet anti-fraud and financial record-keeping obligations.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand which games and sports markets Pakistani players engage with most, and to improve the overall platform experience.
• Responsible Gaming: Monitoring account activity patterns to identify signs of problematic gaming behaviour and, where appropriate, prompting players to review the Responsible Gaming tools available to them.

MustPlay does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. For example, if an account is flagged by our fraud detection system, a member of the MustPlay team reviews the case before any action is taken.

5. Sharing Your Data

MustPlay does not sell, rent or trade your personal data. We share your data only in the following specific and limited circumstances:

5.1 Payment Processors

To process your PKR deposits and withdrawals, we share the minimum necessary data with the relevant payment processor — JazzCash, Easypaisa, Raast, your bank or card network. These processors act on our instruction and are bound by their own data security obligations. MustPlay does not share more data than is required for the transaction to be completed.

5.2 Identity Verification Services

Where you are required to complete identity verification — for example, by submitting a copy of your CNIC — a third-party verification service may process that document on our behalf under a formal data processing agreement. Your documents are used solely for verification and are not retained by the verification service beyond the period needed to complete the check.

5.3 Fraud Prevention

MustPlay may share data with anti-fraud platforms and industry integrity bodies — particularly in connection with suspected match-fixing involving Cricket or PSL events — where we have a legitimate interest in protecting the platform and its players. Such sharing is limited to the information relevant to the specific concern.

5.4 Legal Requirements

If MustPlay receives a valid legal request from an authorised body requiring disclosure of user data, we will comply to the extent required by applicable law. Where legally permitted, we will notify the affected user that such a request has been received.

5.5 Business Transfers

In the event that MustPlay undergoes a business restructuring, merger or acquisition, player data may be transferred as part of that transaction. If this occurs, you will be notified in advance and the receiving entity will be required to honour the commitments made in this Privacy Policy.

6. Payment Data & PKR Transactions

Given that MustPlay operates exclusively in Pakistani Rupees, payment data handling is a particular priority. When you initiate a PKR deposit via JazzCash or Easypaisa, the transaction is handled through those providers' secure systems. MustPlay receives a confirmation of the transaction along with the reference number and amount — we do not have access to your JazzCash or Easypaisa PIN or your bank internet banking credentials at any point.

For card transactions, card data is processed through a PCI-DSS compliant payment gateway. MustPlay stores only a masked version of card details sufficient to identify the payment method for withdrawal routing purposes — for example, the last four digits and card type. Full card numbers and CVV codes are never stored on MustPlay servers.

PKR transaction records — including deposit amounts, withdrawal amounts and dates — are retained as part of your account history for the period described in Section 8 of this policy. This history is accessible to you via your account dashboard.

7. Cookies & Tracking

MustPlay uses cookies and similar technologies on mustplay.fun. Cookies are small text files placed on your device when you visit the platform. They serve several purposes:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in during a visit and security cookies that help protect your account from unauthorised access. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences — such as your preferred language setting or display options — so you do not have to reset them on each visit.
• Analytics Cookies: Collect aggregated, anonymised data about how players use mustplay.fun — which pages are visited most, how long sessions last and which game categories attract the most engagement. This data is used to improve the platform and is not linked to your individual identity.
• Security Cookies: Help detect unusual access patterns, such as a login attempt from a device or location that is inconsistent with your normal usage history.

MustPlay does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the platform normally.

8. Data Retention

MustPlay retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods below reflect the purposes for which the data is held:

• Account and identity data: Retained for the lifetime of your account plus a minimum of five years after account closure to meet anti-fraud and financial record-keeping obligations.
• PKR transaction records: Retained for a minimum of five years from the date of each transaction, consistent with standard financial record-keeping practice.
• Support communications: Retained for two years from the date of the last message in a support thread, or longer if the matter remains unresolved.
• Technical and session logs: Retained for up to 12 months, after which they are deleted or anonymised.
• Verification documents (CNIC copies): Retained for the period required by applicable obligations and deleted securely once that period has passed.

When data is no longer required and no retention obligation applies, it is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

9. Your Rights

As a MustPlay player, you have the following rights in relation to the personal data we hold about you:

• Right of Access: You can request a copy of the personal data MustPlay holds about you, including your account history and transaction records.
• Right to Correction: If any of your personal data is inaccurate or out of date, you have the right to request that it be corrected. For basic details such as your contact number or email address, you can update these directly in your account settings.
• Right to Deletion: You can request that your personal data be deleted. We will action this request where no legal retention obligation prevents us from doing so. Note that certain transaction and identity data must be retained for the periods described in Section 8.
• Right to Restrict Processing: In certain circumstances, you can ask MustPlay to pause the processing of your data while a query or complaint is being resolved.
• Right to Data Portability: You can request your personal data in a commonly used, machine-readable format where technically feasible.
• Right to Object: You can object to the use of your data for platform improvement analytics. This will not affect your ability to use the platform.

To exercise any of these rights, contact the MustPlay support team at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe and may need to verify your identity before actioning the request.

10. Security Measures

MustPlay employs a range of technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure:

• All data transmitted between your device and mustplay.fun is encrypted using TLS (Transport Layer Security).
• Stored personal data is encrypted at rest using industry-standard algorithms.
• Access to personal data within the MustPlay team is restricted on a strict need-to-know basis, with access logs maintained.
• Payment processing is handled through PCI-DSS compliant systems. Full card numbers and wallet PINs are never stored on MustPlay infrastructure.
• Accounts are protected by password hashing. MustPlay staff cannot view your password — only you know it.
• Suspicious login activity — such as access from an unfamiliar device or location — triggers additional verification steps to protect your account.

No online platform can guarantee absolute security. If you believe your MustPlay account has been compromised, contact support immediately so we can investigate and take protective action. Using a strong, unique password and not sharing your login credentials with anyone remains the single most effective step you can take to protect your own account.

11. Minors

MustPlay is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe a minor has registered a MustPlay account, please contact [email protected] immediately. Upon confirmation, the account will be closed, all data will be deleted and any transactions will be reversed where technically possible.

Age verification is part of the account registration process. Where there is any doubt about a player's age, MustPlay may request documentary proof — such as a CNIC — before the account is allowed to proceed. This protects both the platform and younger individuals from accessing age-restricted gaming content.

12. Changes to This Policy

MustPlay may update this Privacy Policy from time to time to reflect changes in platform features, data practices or applicable requirements. When material changes are made, we will notify registered players via their registered email address or through a prominent notice on mustplay.fun before the changes take effect.

The effective date at the top of this page reflects when the current version came into force. We recommend reviewing this page periodically. Continued use of MustPlay after a policy update constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the personal data MustPlay holds about you, please get in touch with our support team:

For responsible gaming-related data requests — such as account self-exclusion or the deletion of gaming history — please reference "Responsible Gaming" in your subject line so your query reaches the right team member promptly.