1Who We Are
Margo operates the online gaming platform accessible at margo.ws. For the purposes of this Privacy Policy, Margo is the data controller — meaning we determine the purposes and means by which your personal data is processed when you use our platform.
Our platform provides Pakistani players with access to virtual sports, card games, roulette, baccarat, crash games including Aviator, ludo games, and live cricket scoring services. Each of these services involves the collection and use of personal data to varying degrees, all of which is described in this policy.
This Privacy Policy applies to all data collected through the Margo website at margo.ws, including data collected via any mobile browser session. If you have questions about how Margo handles your personal data, you can contact us directly at support@margo.ws.
Margo protects the personal data of every Pakistani player — from account registration through to withdrawal and beyond.
2Personal Data We Collect
Margo collects the minimum amount of personal data necessary to operate your account, process transactions, verify your identity, and comply with applicable legal obligations. Below is a summary of the categories of data we collect.
Account & Registration Data
- Full legal name
- Email address
- Pakistani mobile number
- Date of birth (for age verification purposes)
- Username and encrypted password
- Preferred language and currency (PKR)
Identity Verification (KYC) Data
When required for account verification or to process larger withdrawals, Margo may collect:
- Copy of a government-issued ID (such as CNIC, passport, or driver's licence)
- Proof of address (utility bill, bank statement dated within 3 months)
- Proof of ownership of your payment method (screenshot of wallet or bank account confirming name and account number)
Financial & Transaction Data
- Deposit and withdrawal history
- Payment method details (Easypaisa account number, JazzCash number, bank account details, partial card numbers — Margo never stores full card numbers)
- Transaction amounts and timestamps in PKR
- Bonus and promotional activity linked to your account
Gaming Activity Data
- Game history — rounds played, bets placed, outcomes, cash-out times
- Session duration and frequency data
- Responsible gaming tool usage (limit settings, cooling-off periods)
- Live cricket score page access and session data
Technical & Device Data
- IP address and approximate geographic location (city/region level)
- Device type, operating system, and browser
- Pages visited, time spent on each page, click patterns
- Session tokens and authentication data
Communications Data
- Support tickets and live chat transcripts
- Email correspondence with the Margo support team
- Feedback and survey responses, where provided voluntarily
Margo does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for regulatory compliance in rare circumstances, and only with your explicit consent.
3How We Collect Your Data
Margo collects personal data through the following channels:
Directly from You
Most of the data Margo holds about you is provided directly by you — when you register your account, complete identity verification, make a deposit, place a bet, contact support, or update your account settings. You are in control of what you share with us, though some information is required to use the platform.
Automatically During Platform Use
When you access the Margo website, we automatically collect technical and behavioural data including your IP address, device information, browser type, and your activity on the platform. This data is collected via server logs, session cookies, and similar technologies described in Section 7 of this policy.
From Payment Processors
When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, Margo receives confirmation of the transaction from the payment processor. This includes transaction reference numbers, amounts, timestamps, and the identifier of your payment account. Margo does not receive or store full card numbers — these remain with your payment provider.
From Identity Verification Providers
Where Margo uses a third-party KYC service to verify identity documents, that provider shares a verification outcome (approved / not approved) and the document information with Margo. The full document image is handled securely and in accordance with the provider's own privacy standards.
Every data interaction on Margo is secured — your information stays private and is never sold to third parties.
4Why We Use Your Personal Data
Margo uses your personal data for the following purposes. We only process data where we have a legitimate reason to do so, as described in Section 5.
| Purpose | Data Used | Why It's Necessary |
|---|---|---|
| Account creation & management | Name, email, mobile, DOB, password | To create and maintain your Margo account |
| Age & identity verification | KYC documents, DOB | Legal requirement — players must be 18+ |
| Processing deposits & withdrawals | Payment method details, transaction data | To move your PKR funds securely |
| Fraud & security prevention | IP address, device data, transaction history | To protect you and the platform from fraud |
| Responsible gaming compliance | Gaming activity, session data, limit settings | To identify and support players at risk |
| Customer support | Communications data, account data | To resolve queries and complaints effectively |
| Platform improvement | Anonymised usage & behavioural data | To improve game features and user experience |
| Legal & regulatory compliance | Transaction records, KYC data | To meet anti-money laundering obligations |
Margo does not use your personal data to build profiles for sale to advertisers or data brokers. Any use of data for personalisation on Margo — such as showing you game recommendations — is done entirely within the Margo platform and does not involve sharing your data with third-party advertisers.
5Legal Basis for Processing Your Data
Margo processes your personal data under one or more of the following legal bases:
- Contractual necessity: Processing your registration data, transaction data, and gaming activity is necessary to perform the contract between you and Margo — i.e., to provide you with the gaming services you signed up for.
- Legal obligation: Margo is required by applicable law and regulatory requirements to collect and retain certain data — particularly for anti-money laundering (AML) compliance, age verification, and financial record-keeping.
- Legitimate interests: Margo processes some data on the basis of legitimate interests — for example, using technical and device data to detect fraud and protect the security of the platform. We balance our legitimate interests against your privacy rights and only process data where our interests do not override yours.
- Consent: Where Margo processes data for optional purposes — such as sending you promotional emails about new games or offers — we will ask for your explicit consent first. You can withdraw that consent at any time through your account settings or by contacting support.
6Sharing Your Personal Data
Margo does not sell your personal data. We share your data only with the following categories of trusted third parties, and only to the extent necessary for the specific purpose described.
Payment Processors
When you deposit or withdraw funds, Margo shares the necessary transaction information with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT), or Visa/Mastercard's processing network. These providers have their own privacy policies governing how they handle your financial data.
Identity Verification (KYC) Providers
Margo may use a third-party identity verification service to check the authenticity of documents submitted for KYC. This provider receives your document data solely for verification purposes and is contractually prohibited from using it for any other purpose.
Game Software Providers
Margo's game library includes titles from third-party game studios and RNG certification bodies. These providers may receive anonymised session data for the purpose of game performance monitoring and fairness auditing. They do not receive personally identifiable information about individual Margo players.
Regulatory Authorities & Law Enforcement
Margo will disclose personal data to regulatory authorities or law enforcement agencies when required by law, court order, or regulatory directive. This includes reporting obligations under applicable anti-money laundering and counter-terrorism financing regulations. Margo will notify you of any such disclosure where legally permitted to do so.
IT & Security Service Providers
Margo uses trusted third-party infrastructure providers for web hosting, data storage, security monitoring, and fraud detection. These providers process personal data only on Margo's instructions and under strict data processing agreements that require them to protect your data to at least the same standard as Margo itself.
All third parties with whom Margo shares your data are contractually obligated to handle it securely, use it only for the specified purpose, and not retain it beyond the period necessary for that purpose.
7Cookies & Tracking Technologies
Margo uses cookies and similar tracking technologies to operate the platform, keep you logged in between sessions, understand how players use the site, and maintain security. This section explains what types of cookies Margo uses and how you can manage them.
A cookie is a small text file stored on your device by the Margo website. Cookies do not contain executable code and cannot access other files on your device. They are used to store session identifiers, preferences, and anonymised usage data.
You can manage your cookie preferences through your browser settings. Disabling optional cookies will not prevent you from using Margo, though it may reduce personalisation. Disabling required cookies will prevent the site from functioning correctly.
Whether you're in Lahore or anywhere across Pakistan, Margo keeps your personal data secure and private at all times.
8How Margo Secures Your Data
Margo takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction.
Encryption
All data transmitted between your device and the Margo platform is encrypted using Transport Layer Security (TLS). This means that your login credentials, payment information, and personal data cannot be intercepted by third parties during transmission. Sensitive data stored in our systems — including passwords and payment identifiers — is encrypted at rest using industry-standard algorithms.
Access Controls
Access to personal data within Margo is restricted on a strict need-to-know basis. Only staff members whose role requires access to specific categories of data are permitted to view it, and all access is logged and audited. No Margo employee can access your full payment card numbers — these are tokenised at the point of entry.
Infrastructure Security
Margo's platform is hosted on infrastructure that undergoes regular security assessments, penetration testing, and vulnerability scanning. Our servers are protected by firewalls, intrusion detection systems, and DDoS mitigation tools. Security incidents are subject to a formal incident response procedure with defined notification timelines.
Your Responsibility
While Margo takes extensive steps to protect your data on our side, you also play an important role in keeping your account secure. Never share your Margo password with anyone, use a strong and unique password that you don't use on other sites, and contact us immediately at support@margo.ws if you suspect unauthorised access to your account.
9How Long We Keep Your Data
Margo retains personal data only for as long as necessary for the purpose it was collected, or as required by applicable law. Below is a summary of our standard retention periods.
- Account data: Retained for the duration of your active account, plus a period of up to 5 years following account closure (for regulatory compliance and dispute resolution purposes).
- Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping obligations.
- KYC and identity documents: Retained for the duration of your account relationship with Margo, plus a minimum of 5 years following account closure.
- Customer support communications: Retained for 2 years from the date of the communication, or longer if the communication relates to an unresolved dispute.
- Analytics and technical data: Anonymised session data is retained indefinitely in aggregated form. Individual session logs are retained for up to 12 months.
When personal data is no longer required for any of the above purposes, Margo deletes or anonymises it securely. You may request earlier deletion of your data where legally permissible — see Section 10 for your rights.
10Your Privacy Rights
You have the following rights regarding the personal data Margo holds about you. To exercise any of these rights, contact us at support@margo.ws with your request and your registered account email address. We will respond within 30 days.