1 Introduction
This Privacy Policy ("Policy") describes how M Sport ("we", "us", "our") collects, uses, stores, and protects the personal data of players and visitors ("you", "your") who use the M Sport platform at msport.bio and all associated services including sports betting, online casino, live casino, card games, Ludo games, and live cricket score features.
M Sport is committed to protecting the privacy and personal data of all Pakistani players who use our platform. This Policy has been written in plain English — not legal jargon — so that you can understand exactly what happens to your data without needing a legal background. We believe that transparency about data is not just a compliance requirement; it is part of being a platform that Pakistani players can genuinely trust.
By creating an M Sport account or continuing to use the M Sport platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with how M Sport handles personal data as described in this Policy, please do not register or continue using the platform.
This Policy applies to all M Sport services and products. It should be read alongside M Sport's Terms and Conditions, which also contain relevant provisions about account data and security.
2 What Data M Sport Collects
M Sport collects two broad categories of data: data you provide to us directly, and data that is generated automatically by your use of the platform. The table below sets out the specific data types we collect and why we collect each one.
| Data Category | Specific Data Points | Why Collected |
|---|---|---|
| Identity | Full legal name, date of birth, CNIC number | Account registration, age verification, fraud prevention |
| Contact | Pakistani mobile number, email address | Account communication, OTP verification, support |
| Financial | Payment method identifiers, transaction amounts, deposit/withdrawal history | Payment processing, anti-money laundering compliance |
| Account | Username, password hash, login history, account settings | Account security, session management |
| Activity | Bet history, game history, stake amounts, win/loss records | Platform operation, responsible gaming monitoring, disputes |
| Technical | IP address, device type, browser type, operating system | Security, fraud detection, platform optimisation |
| Behavioural | Navigation patterns, feature usage, session duration | Platform improvement, personalisation of experience |
M Sport does not collect or store sensitive personal data categories such as health information, biometric data, political opinions, or religious beliefs. If any such information is volunteered by a player in a support communication, it will not be recorded in player profiles and will be handled with additional care.
3 How We Collect Your Data
3.1 Data You Provide Directly
The majority of personal data M Sport holds is information you provide directly through the registration form, identity verification process, deposit and withdrawal forms, support conversations, and any competitions or promotions you choose to participate in. You are always in control of what information you provide, though some fields are required for the platform to function — for example, a valid Pakistani mobile number is required to activate an account and receive OTPs for secure login.
3.2 Data Collected Automatically
When you use M Sport, certain technical and behavioural data is collected automatically. This includes your IP address (used to identify your approximate location and detect unusual login activity), the type of device and browser you are using (used for platform optimisation and security), and your navigation behaviour on the platform (used to improve the player experience and identify where the platform is causing friction or confusion).
3.3 Data from Payment Processors
When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, the payment processor shares transaction confirmation data with M Sport. M Sport does not receive or store full card numbers or mobile wallet PINs — only transaction reference numbers and confirmation statuses are shared. Full payment credentials remain with the respective payment provider.
M Sport will never ask for your JazzCash or Easypaisa PIN, or your bank account password, through any channel. If anyone contacts you claiming to be M Sport support and asks for these details, please report it to us immediately.
4 How M Sport Uses Your Data
M Sport uses the personal data we collect for the following specific purposes only:
- Account creation and management: Setting up and maintaining your M Sport account, verifying your identity, and managing your login security including OTP verification.
- Payment processing: Handling deposits and withdrawals through your chosen payment method, maintaining a transaction record, and resolving any payment disputes.
- Fraud prevention and security: Detecting and preventing unauthorised account access, identifying unusual betting patterns that may indicate fraudulent activity, and protecting the integrity of the M Sport platform for all players.
- Regulatory compliance: Meeting obligations under anti-money laundering (AML) regulations, maintaining records required by M Sport's gaming licence, and responding to lawful requests from regulatory authorities.
- Responsible gaming: Monitoring account activity for signs of problem gambling, enforcing deposit limits and self-exclusion settings you have applied, and contacting players where our monitoring systems indicate a potential welfare concern.
- Customer support: Investigating and resolving account issues, disputes, and complaints with full context of the relevant account history.
- Platform improvement: Analysing aggregated and anonymised usage data to identify improvements to M Sport's products and services.
- Direct communications: Sending you account-related notifications, security alerts, and — where you have opted in — information about promotions and offers relevant to your activity on M Sport.
M Sport does not use automated decision-making processes that produce legally significant effects on players without human oversight. Any decision that materially affects your account — such as closure for suspected fraud — involves a human review stage before being implemented.
5 Legal Basis for Processing Your Data
M Sport processes your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil our contract with you — operating your account, processing bets, handling payments, and providing customer support. Without this processing, M Sport cannot provide its services to you.
- Legal obligation: Processing required to comply with regulatory requirements applicable to a licensed gaming operator, including AML obligations and licence conditions.
- Legitimate interests: Processing carried out for M Sport's legitimate operational interests — fraud detection, platform security, responsible gaming monitoring, and platform analytics — where these interests are not overridden by your rights and interests.
- Consent: Processing carried out on the basis of your specific consent, primarily for marketing communications and non-essential cookies. You may withdraw consent for these at any time without affecting any other processing.
7 Payment Data & Financial Information
Given that M Sport handles real money transactions for Pakistani players, this section explains in specific detail how your financial data is handled.
M Sport does not store complete payment credentials on its servers. When you save a payment method to your account for faster future transactions, M Sport stores a tokenised reference — a unique identifier provided by the payment processor — rather than the actual payment details. This tokenisation is an industry-standard security practice that means even if M Sport's systems were ever breached, your actual payment credentials could not be extracted.
Transaction history — including deposit amounts, withdrawal amounts, dates, and payment method types — is stored in your account for the duration of account activity plus the regulatory retention period. This record is used to investigate payment disputes, comply with AML requirements, and assist you if you contact support about a specific transaction.
All payment pages and deposit/withdrawal forms on M Sport are served over HTTPS with 256-bit SSL encryption. The padlock icon in your browser address bar confirms this encryption is active whenever you are on a payment page at msport.bio.
8 How M Sport Protects Your Data
M Sport implements a layered approach to data security that covers the technical, organisational, and operational dimensions of data protection:
- Encryption in transit: All data moving between your device and M Sport's servers is encrypted with TLS 1.3 / 256-bit SSL. There are no unencrypted pathways for data transmission on M Sport's platform.
- Encryption at rest: Sensitive data fields — including password hashes, identity document numbers, and payment tokens — are stored encrypted in M Sport's databases. Database-level encryption is applied to all player data tables.
- Access controls: Access to player data within M Sport's systems is restricted on a strict need-to-know basis. Customer support staff can access the data needed to resolve player queries but cannot access financial credentials or identity document images without elevated authorisation.
- Penetration testing: M Sport's platform undergoes regular independent security penetration testing. Any vulnerabilities identified are remediated on a priority basis before disclosure.
- Incident response: M Sport has a documented data breach response procedure. In the unlikely event of a data breach affecting player information, affected players will be notified within 72 hours of M Sport becoming aware of the breach, consistent with standard industry practice.
- Staff training: All M Sport staff who handle player data receive regular training on data protection obligations and security best practices.
M Sport Security Strength Indicators
9 Data Retention
M Sport retains personal data for no longer than necessary for the purposes for which it was collected, taking into account any legal retention obligations that apply to a licensed gaming operator.
The following general retention periods apply at M Sport:
- Active account data: Retained for the duration of your account plus 5 years following account closure, to meet regulatory and audit requirements associated with M Sport's gaming licence.
- Transaction records: Retained for 7 years from the date of each transaction, in accordance with standard financial record-keeping obligations.
- Customer support communications: Retained for 3 years from the date of the communication, or longer where the communication relates to an unresolved dispute or regulatory matter.
- Marketing consent records: Retained for 5 years from the date of consent or withdrawal of consent, to demonstrate compliance with consent requirements.
- Security and fraud logs: Retained for 2 years from the date of the logged event, unless the event relates to an active investigation in which case the relevant data is retained until the investigation is closed.
Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Data that has been fully anonymised is retained indefinitely for statistical analysis purposes.
10 Your Privacy Rights as an M Sport Player
As an M Sport player and a Pakistani resident, you have the following rights over the personal data we hold about you. All rights can be exercised by contacting M Sport support — no legal process is required.
Right of Access
You can request a complete copy of all personal data M Sport holds about you. We will provide this within 30 days of your request, free of charge.
Right to Correction
If any data M Sport holds about you is inaccurate or out of date, you can request that we correct it. Corrections are processed within 14 days.
Right to Deletion
You can request deletion of your personal data. We will delete all data not subject to a legal retention obligation within 30 days of confirmed request.
Right to Restrict Processing
You can ask M Sport to restrict how your data is used while a correction or deletion request is being processed, or where you contest the accuracy of data we hold.
Right to Object
You can object to processing carried out on the basis of legitimate interests — including direct marketing — at any time. Objections to marketing are processed immediately.
Right to Portability
You can request a structured, machine-readable copy of data you provided to M Sport and have it transferred to another service where technically feasible.
11 Cookies & Tracking Technologies
M Sport uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help the platform function correctly and improve your experience. M Sport uses three categories of cookies:
11.1 Essential Cookies
These cookies are required for the M Sport platform to function. They maintain your login session, remember your account preferences, and ensure security features like CSRF protection work correctly. You cannot opt out of essential cookies while using M Sport — without them, the platform cannot operate.
11.2 Analytics Cookies
These cookies collect anonymised data about how players use the M Sport platform — which pages are most visited, where players encounter errors, and how navigation flows across the site. This data is used exclusively to improve M Sport's products. Analytics cookies do not collect any personally identifiable information. You may opt out of analytics cookies from your browser settings.
11.3 Marketing Cookies
Where you have opted in to marketing communications, M Sport may use cookies to understand which promotions and content are most relevant to your interests. Marketing cookies are set only with your explicit consent and can be withdrawn at any time by updating your communication preferences in your account settings or contacting M Sport support.
M Sport does not use third-party advertising networks or social media tracking pixels on its platform. The only cookies active on msport.bio are those necessary to operate M Sport's own services.
12 Contact M Sport About Your Privacy
If you have any question about this Privacy Policy, want to exercise any of your data rights, or want to raise a concern about how M Sport has handled your personal data, our support team is available 24 hours a day, 7 days a week.
You can reach M Sport's data protection team by:
- Email: privacy@msport.bio — please use the subject line "Privacy Request" and include your registered account username and a description of your request.
- Live Chat: Available from within your M Sport account at any time. Average response time under 2 minutes.
M Sport will acknowledge all privacy-related requests within 24 hours and provide a full response within 30 days of receipt. If a request is complex or requires verification of your identity, we will let you know within the 24-hour acknowledgement window.
If you are not satisfied with how M Sport has handled your privacy request or concern, you have the right to escalate to the relevant data protection authority or the independent dispute resolution service associated with M Sport's gaming licence. Details of both are available from the M Sport support team.
For privacy requests, please always use the email address registered on your M Sport account. This allows us to verify your identity quickly and process your request without unnecessary delays.