Legal
A marketplace cannot run on nothing: to hold your money and settle a dispute we have to know who you are. This is everything we keep, why we keep it, where it lives, and who can see it.
This site is run by GamersMandi, a sole proprietorship registered with the Federal Board of Revenue and based in Khyber Pakhtunkhwa, Pakistan. That business is responsible for the personal information described in this policy — it decides what is collected, why, and who may see it.
For anything about your data — a question, a correction, a copy of what we hold, or a request to delete it — write to [email protected]. That address is read by a person, not a form.
We do not publish a street address or a tax number. Gamers Mandi is run by one person from their home, and for a sole proprietorship in Pakistan the tax number is the owner’s national identity number — publishing either would create exactly the risk this policy asks you to trust us not to create with yours. Full registered details are given to anybody with a genuine legal or regulatory need; see the Terms.
Pakistan does not yet have a general data protection statute in force. A Personal Data Protection Bill has been under consideration for several years but is not law, so there is no local regulator you can complain to about privacy alone, and no statutory right of access.
We have written this policy as though there were. Not because we have to, but because you are handing us your CNIC and your money, and “there is no law about it” is not a reason to be careless with either.
The Prevention of Electronic Crimes Act 2016 does apply. Unauthorised access to your data — by an outsider or by one of our own staff — is a criminal offence under it, and we will treat it as one.
Last updated: 11 August 2026.
Your password is never stored as you typed it. Neither are the six-digit codes we email you — those are hashed too, so a copy of our database is not a list of live codes.
Selling requires identity verification. Before your first listing goes live we collect your full name, CNIC number, date of birth, contact number, photographs of both sides of your CNIC, a selfie, and the account details you want to be paid into.
To sell here you send us your CNIC number, photographs of the front and back of the card, and a selfie holding it. This is the most sensitive thing on the site, so this section says exactly what happens to it rather than leaving you to assume.
Who can open them
Not all staff. Opening a verification document requires a specific permission held by the staff roles that do identity checks — being an administrator is not by itself enough, and the roles that handle support tickets or chat moderation do not have it.
Those who hold it may open your documents only to:
Curiosity is not on that list. Every single time a verification document is opened, we record who opened it, which document, and when. That log is kept whether or not anything came of the viewing, and it is reviewable by the account owner of this business.
If your application is turned down
You can apply again. A rejection is not a ban, and most are a blurred photograph or a name that does not match rather than anything suspicious. You will be told the reason.
We keep the documents from a rejected application for 90 days and then delete the images automatically. Two things are being balanced there: somebody rejected for using a forged or borrowed CNIC will try again, and holding the file briefly is how that is spotted; and somebody rejected by mistake needs time to notice and ask us to look again, which is impossible if the evidence is already gone. After 90 days neither reason holds.
What stays after that is the decision, not the documents — that an application was made, what was decided and why. The photographs themselves are gone.
If you are approved
We keep your verification file for as long as you are a seller here, because it is what a payout is checked against and what we would have to produce if somebody claimed an account was sold fraudulently. It is deleted when your account closes — see below.
Messages between buyers and sellers are stored, including images sent in chat. Order conversations can be read by staff — that is how a dispute is decided, and pretending otherwise would be worse than saying it plainly.
Account logins that a seller stores for instant delivery are encrypted before they are written down. They are readable only by the buyer who paid for that listing, and are never shown to staff, never shown back to the seller once saved, and never sent through chat.
A message our filter refuses to deliver is still kept, along with a note of why. It is evidence, and it is shown to the person who wrote it and to staff — never to the person it was aimed at.
We do not sell your data. We do not share it for advertising. We do not build profiles of you for anybody else.
Gamers Mandi runs on services provided by other companies. They process data on our instructions only, and none of them may use it for their own purposes.
No system is perfectly safe. If something does go wrong that affects your data, we will tell the people affected rather than hope nobody notices.
When you close your account
Closing runs on a 7-day delay, so a closure made in anger or by somebody who got into your account can be undone. You cannot close while an order is still open or a withdrawal is still on its way — there would be money in the air with nobody attached to it.
When it runs, two different things happen to two different things:
What is kept is no longer attached to your name. It reads as a closed account with the orders still hanging off it.
Backups
Our database is hosted for us, and the provider keeps its own backups for disaster recovery. This means something deleted from the live site can still exist in a backup for a period afterwards, until that backup ages out on the provider’s schedule.
We do not read backups, search them, or restore from them for any ordinary purpose. They exist for one job: putting the site back if something destroys it. We are not going to state an exact number of days here, because it is set by the provider rather than by us and we would rather say that plainly than publish a figure we do not control.
Asking us to delete your data
You can close your account yourself from your settings, which is the fastest route and does everything described above. If you would rather ask, or you want something specific removed, email [email protected] from the address on the account.
Some things we will not delete on request, and it is fairer to say so now than when you ask:
Closing an account does not force the deletion of those. What it does is remove everything that identifies you personally, which is the part that actually matters.
You may only use Gamers Mandi with a parent or guardian’s permission, and they are responsible for what you do here — see the Terms of Service.
We do not knowingly collect CNIC documents from anybody under 18: selling, which is the only thing that requires them, is limited to adults. If you are a parent or guardian and believe we hold information about your child that we should not, tell us through the help button and we will remove it.
You can change your name, picture, bio and email from account settings, and choose which notifications you receive from notification settings.
You can ask us what we hold about you, ask us to correct something that is wrong, or ask us to close your account and delete what we can. Use the help button, or the email address below.
Records tied to completed orders and money movements are kept even after an account closes, because they are the other side of somebody else’s transaction and the proof behind money that has already moved. We will tell you what we cannot delete and why.
The fastest route is the help button in the corner of any page. It opens a ticket we answer from the same place we handle orders.
For anything formal, write to [email protected]. If you are not satisfied with our answer, you may take a consumer complaint to the relevant authority in Khyber Pakhtunkhwa, or report a criminal misuse of your data to the Cyber Crime Wing of the Federal Investigation Agency.
