Privacy Policy — MamaExch
Pakistan Online Gaming Platform

This Privacy Policy sets out how MamaExch ("we", "us", "the Platform") collects, uses, stores, shares and protects the personal information of players who register accounts and use the MamaExch online gaming platform at mamaexch.app.

MamaExch is committed to maintaining the privacy and security of your personal information. We understand that when you hand over your details to any online platform, you are placing a degree of trust in that platform to handle those details responsibly. We take that responsibility seriously, and this policy is our commitment to you — written in plain English so you actually know what is going on with your data.

By registering a MamaExch account, using our platform or clicking "I agree" during the registration process, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree, please do not register or continue using the platform.

This Privacy Policy should be read alongside our Terms and Conditions, which govern the overall use of the MamaExch platform. Together, these two documents define the full relationship between you as a player and MamaExch as a platform.

MamaExch is an online gaming and sports betting platform designed specifically for Pakistani players and operated through mamaexch.app. All gaming and betting services, including cricket betting, Andar Bahar, jackpot slots, fishing games, ludo-format games and virtual sports, are provided through this platform exclusively in Pakistani Rupees (PKR).

MamaExch acts as the data controller in respect of all personal information collected through the platform. This means we decide the purposes for which your data is collected and the manner in which it is processed. Where we engage third-party service providers who handle personal data on our behalf — for example, payment processors — those providers act as data processors under our instructions and are bound by appropriate data protection obligations.

For all privacy-related questions, requests or concerns, the correct point of contact is the MamaExch support team. Contact details are provided in Section 13 of this policy.

MamaExch collects personal information through several means: directly from you during registration and account management, automatically through your use of the platform, and from third-party verification and payment services. Here is a clear breakdown of the categories of data we collect and why.

MamaExch does not collect sensitive personal categories of data — such as biometric data, health information or religious beliefs — except where you voluntarily provide such information in the context of a support request, in which case it is used solely to address that request and is not stored longer than necessary.

MamaExch uses your personal information only for purposes that are necessary for the operation of the platform and the delivery of services to you. We do not use your data for purposes unrelated to your MamaExch account. Specifically, we use your personal information for the following purposes:

• Account creation and management: Setting up your MamaExch account, managing your preferences, processing deposit limits and responsible gaming settings.
• Identity verification: Confirming you are who you say you are and that you meet the 18+ eligibility requirement — this may involve checking your CNIC and mobile number against third-party verification services.
• Processing transactions: Handling deposits and withdrawals to and from your MamaExch wallet in PKR via your chosen payment method.
• Platform security and fraud prevention: Detecting unusual activity patterns, preventing unauthorised access, identifying bonus abuse and investigating suspected fraudulent or illegal activity.
• Customer support: Responding to your enquiries, resolving disputes and providing assistance with account issues.
• Legal and regulatory compliance: Meeting our obligations under anti-money laundering regulations, retaining transaction records for required periods and cooperating with legitimate law enforcement requests.
• Responsible gaming: Monitoring playing patterns to identify potential signs of problem gambling and triggering support outreach where appropriate.
• Platform improvement: Analysing aggregated, anonymised usage data to understand which features are working well and which need improvement.
• Marketing communications: Sending you promotional offers, bonus notifications and platform updates via SMS or email — only if you have opted in to receive these and subject to your right to opt out at any time.

MamaExch does not sell, rent or trade your personal information to third parties for commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose involved.

• Payment processors: When you make a deposit or withdrawal, relevant financial details are shared with our integrated payment service providers — including Easypaisa, JazzCash, NayaPay, SadaPay and banking partners for IBFT processing. These providers are bound by their own strict data protection and financial industry regulations.
• Identity verification services: During account verification, we may share your name, date of birth and identification number with third-party identity verification services operating in Pakistan. This is done solely for the purpose of confirming eligibility.
• Technology service providers: We engage technology partners for hosting, cloud infrastructure, analytics and platform security. These partners process data strictly under our instructions and are contractually prohibited from using your data for any other purpose.
• Legal and regulatory authorities: Where required by applicable Pakistani law, regulatory order or a legitimate law enforcement request, MamaExch may be obligated to disclose certain personal or financial information. We will comply with such requests to the extent legally required and will inform affected players where legally permitted to do so.
• Anti-money laundering reporting: Where MamaExch identifies or reasonably suspects money laundering activity, we are obligated to report relevant information to appropriate authorities without notifying the player concerned.

In all cases of data sharing, MamaExch requires that third-party recipients maintain appropriate technical and organisational security measures and handle personal data in a manner consistent with the principles set out in this Privacy Policy.

Given the sensitive nature of financial data, MamaExch applies additional layers of protection to all payment-related information. We do not store full payment card numbers on our own servers — card processing is handled entirely by our PCI-compliant payment partners. When you save a payment method in your MamaExch account, we store only a tokenised reference and the last four digits of the account or card number — never the full financial credentials.

For Easypaisa and JazzCash transactions, only your registered mobile number is shared with these services during transaction processing. MamaExch does not have access to your Easypaisa or JazzCash PIN or password, and we will never ask you to share these with us or with our support team.

All financial transactions processed through MamaExch are monitored in real time for unusual patterns. Automated and manual fraud detection systems flag anomalous deposit or withdrawal activity for review. This monitoring is conducted in your interest as well as in the interest of the platform's financial integrity.

MamaExch uses cookies and similar tracking technologies on the platform to ensure the site functions correctly, to remember your preferences and to understand how players interact with different areas of the platform. Cookies are small text files stored on your device by your browser. They do not contain executable code and cannot access other files on your device.

Essential cookies cannot be disabled as they are required for the platform to function. You can manage functional and analytics cookies through your browser settings. Disabling functional cookies may affect your experience — for example, your language preferences may not be remembered between sessions. Disabling analytics cookies will not affect your ability to use any MamaExch feature.

MamaExch does not use third-party advertising cookies or cross-site tracking cookies. No tracking data from your MamaExch sessions is shared with external advertising networks.

MamaExch retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the lifetime of your MamaExch account plus a minimum period after account closure as required for legal compliance.
• Transaction records: Financial transaction records, including deposit and withdrawal history and bet records, are retained for a minimum of five years from the date of each transaction in accordance with anti-money laundering requirements.
• Identity verification records: Documents and records used for age and identity verification are retained for a minimum of five years from the date of account closure or the last transaction, whichever is later.
• Support communications: Chat logs, email correspondence and support ticket records are retained for up to three years from the date of the communication.
• Technical and usage logs: Server logs, IP records and session data are retained for up to 12 months for security and fraud prevention purposes.

Where personal data is no longer required and no legal retention obligation applies, MamaExch will securely delete or anonymise the data. Anonymised data — where all identifying information has been irreversibly removed — may be retained indefinitely for platform analytics and improvement purposes.

MamaExch implements a comprehensive set of technical and organisational security measures to protect your personal information against unauthorised access, accidental loss, alteration and disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and MamaExch servers.
• AES-256 encryption for sensitive data stored in our databases, including identity verification records and financial data.
• Access controls ensuring that only authorised staff with a legitimate operational need can access personal data — all access events are logged and monitored.
• Regular security audits and penetration testing of the MamaExch platform by independent cybersecurity specialists.
• Two-factor authentication (2FA) available for player accounts and mandatory for all MamaExch staff accounts.
• Real-time monitoring for unusual access patterns and automated alerts for potential data security incidents.
• A documented incident response procedure that includes notification to affected players in the event of a material data breach.

While MamaExch takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. We encourage you to take your own precautions — using a strong unique password, enabling 2FA on your account and not sharing your login credentials with anyone.

As a MamaExch player, you have the following rights in relation to your personal information. You can exercise any of these rights at any time by contacting the MamaExch support team.

To exercise any of these rights, contact the MamaExch support team with a clear description of your request. We will acknowledge your request within 3 business days and aim to complete it within 30 days. Some requests — particularly deletion requests involving data subject to legal retention — may take longer or may be partially declined for compliance reasons, in which case we will explain the specific reason.

MamaExch is strictly for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. Our registration process includes age verification steps specifically designed to prevent underage access.

If MamaExch discovers or is notified that an account belongs to a person under the age of 18, the account will be immediately suspended. All personal data associated with the underage account will be deleted from our active systems as quickly as possible, subject only to any records that must be retained for regulatory compliance purposes such as anti-money laundering reporting. Any funds in the account will be returned to the deposit source.

Parents and guardians who believe a minor may have registered a MamaExch account should contact our support team immediately. We will prioritise such reports and act on them with full confidentiality.

MamaExch may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable legal requirements or improvements in how we describe our data practices. When we make material changes to this policy, we will notify registered players via the mobile number or email address on their account at least 7 days before the changes take effect.

The "last updated" date at the top of this document reflects the date of the most recent revision. We recommend reviewing this policy periodically — at minimum whenever you receive a notification of changes and at least once every six months. The current version of the Privacy Policy will always be available at mamaexch.app/privacy-policy.

Your continued use of MamaExch after any Privacy Policy update takes effect constitutes your acceptance of the revised policy. If you disagree with any changes, you may close your account and request data deletion in accordance with Section 10 of this policy.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, have concerns about how MamaExch is handling your personal information or wish to report a potential data security issue, please contact our support team:

• Email: support@mamaexch.app — privacy-related requests are prioritised and typically addressed within 3 business days.
• Live Chat: Available from your logged-in MamaExch account dashboard 24 hours a day, 7 days a week.
• FAQ: Common questions answered on our FAQ page.

Please include the following information in any privacy-related request so we can process it efficiently: your registered mobile number, the nature of your request (access, correction, deletion, etc.) and any relevant context. We may need to verify your identity before processing certain requests to protect against fraudulent or unauthorised submissions.