milwin Privacy Policy —
Your Data, Your Rights, Our Obligations

This Privacy Policy ("Policy") describes how milwin ("milwin", "the Platform", "the Operator", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals who register for, access, or use the milwin platform at https://milwin.one ("the Platform"), including all associated services, features, betting markets, casino games, and promotional programmes.

This Policy applies to all milwin players, including players accessing the platform from Pakistan and from any other eligible jurisdiction. It is intended to provide you with clear, transparent information about our data practices in plain English, supplemented by the legal detail required under our international gaming licence obligations.

Introduction

milwin takes the privacy of its players seriously. We are an internationally licensed online gaming operator and, as such, we are subject to specific data protection obligations under the terms of our gaming licence and the data protection laws applicable to our operating jurisdiction. These obligations set a minimum standard for how we handle personal data — milwin commits to meeting or exceeding that standard in every aspect of our operations.

Pakistani players form the core of milwin's user base. Whether you are a cricket betting enthusiast in Lahore checking PSL odds, a slot player in Karachi spinning your favourite game, or a live casino regular in Islamabad joining a blackjack table at midnight — the data you provide to milwin when using the platform is handled with the same level of care, security, and respect regardless of who you are or where you are in Pakistan.

This Policy was last reviewed and updated on 1 January 2026. We review our Privacy Policy on a regular basis to ensure it remains accurate, current, and reflective of our actual data practices. The version number and effective date at the top of this document indicate the most current version in force.

Data Controller

For the purposes of applicable data protection law, milwin is the data controller in respect of personal data collected from and about players on the milwin platform. As the data controller, milwin determines the purposes for which personal data is processed and the means by which that processing is carried out.

milwin operates under an international gaming licence, details of which are available from our customer support team upon request. Data protection enquiries, access requests, and formal complaints should be directed to milwin's support team via live chat or email at support@milwin.one — a plain-text address, not a clickable link. We will acknowledge all data-related requests within 5 business days.

Data We Collect

3.1 Registration Data

When you create a milwin account, we collect the personal data necessary to establish and verify your identity and to set up your account. This includes:

• Full legal name as it appears on your government-issued identity document
• Date of birth — collected and verified to enforce the milwin 21+ age policy
• Pakistani mobile number (MSISDN) — used as your primary account identifier and for SMS authentication
• Email address, if provided during registration
• Chosen username and hashed (encrypted) password
• City or region of residence within Pakistan (e.g., Karachi, Lahore, Islamabad, Faisalabad)

3.2 Identity Verification (KYC) Data

As a condition of our international gaming licence, milwin is required to verify the identity and age of all players before processing withdrawals above stated thresholds. KYC documentation collected may include:

• Copy of a valid Pakistani CNIC (Computerised National Identity Card) or passport
• Proof of registered payment method (e.g., screenshot of JazzCash account in your name)
• Selfie or liveness check photograph, where required by our KYC verification system
• Proof of address documents, where required by risk management processes

3.3 Financial Transaction Data

milwin retains records of all deposits, withdrawals, and in-platform transactions associated with your account. This includes transaction amounts (in PKR), timestamps, payment method references, and transaction status. Sensitive payment credentials — such as JazzCash PINs or bank account passwords — are never collected or stored by milwin.

3.4 Betting & Gaming Activity Data

milwin logs all gaming and betting activity associated with your account. This includes the games you play, bets placed (sport, market, odds, stake, result), session duration, and betting patterns. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud detection.

3.5 Technical & Device Data

When you access milwin, our systems automatically collect certain technical information, including your IP address, device type, operating system, browser type and version, and session timestamps. This information is used for security purposes, to detect unauthorised access, and to optimise platform performance across different devices and network conditions encountered by players across Pakistan.

3.6 Communication Data

milwin retains records of communications between you and our support team, including live chat transcripts, email correspondence, and any formal complaint submissions. These records are used to resolve disputes, train support staff, and improve service quality.

How We Use Your Data

milwin uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and securing your milwin account; processing your logins and authentication events; enabling password resets and account recovery
• Platform Operation: Processing bets and casino game participation; settling winnings; crediting bonuses; running loyalty programme calculations
• Payment Processing: Processing deposits and withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; conducting anti-money laundering (AML) checks as required by our licence
• Identity Verification: Verifying your age (21+ requirement) and identity as required under our international gaming licence and responsible gaming obligations
• Fraud & Security: Detecting and preventing fraudulent activity, account takeover, multi-accounting, collusion, and bonus abuse; protecting the integrity of milwin's gaming environment
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour; enforcing self-exclusion requests; applying deposit limits and cooling-off periods
• Customer Support: Responding to your enquiries, resolving disputes, and improving our support processes
• Legal & Regulatory Compliance: Fulfilling obligations under milwin's international gaming licence; responding to lawful requests from regulatory or law enforcement authorities
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform features, game selection, and user experience for Pakistani players
• Communications: Sending you account-related notifications (transaction confirmations, security alerts, password resets, KYC requests) and, where you have opted in, promotional communications about milwin offers

Legal Basis for Processing

milwin processes your personal data on the following legal bases, depending on the nature and purpose of the processing:

• Contractual Necessity: Processing required to fulfil milwin's obligations under the account agreement between milwin and you — including operating your account, processing bets, and handling payments
• Legal Obligation: Processing required to comply with milwin's international gaming licence, AML obligations, KYC requirements, and any lawful direction from a competent authority
• Legitimate Interests: Processing carried out for milwin's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and gaming integrity
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional promotional communications

Data Sharing & Disclosure

6.1 Principle of Minimum Disclosure

milwin does not share your personal data with third parties except where strictly necessary for the purposes described in this Policy. milwin will never sell, rent, or otherwise transfer your data to any third party for commercial marketing purposes.

6.2 Authorised Third-Party Service Providers

milwin works with a limited number of carefully vetted third-party service providers who process personal data on milwin's behalf and under milwin's instructions. These include:

• Payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — solely for the purpose of processing your transactions
• KYC and identity verification technology providers — processing the identity documents you submit during account verification
• Cloud infrastructure and data hosting providers — operating the secure servers on which milwin's platform and data are hosted
• Independent RNG auditing and certification bodies — who may access anonymised game log data as part of their certification process
• Customer support platform providers — who host the live chat and ticketing systems through which you communicate with milwin support
• Responsible gaming monitoring tools — which analyse anonymised betting pattern data to assist milwin in identifying players who may need support

All third-party service providers are contractually required to process milwin player data in accordance with this Privacy Policy and applicable data protection laws. They are not permitted to use your data for any purpose other than providing the service for which they have been engaged by milwin.

6.3 Regulatory & Legal Disclosure

milwin may be required to disclose your personal data to regulatory bodies, licensing authorities, law enforcement agencies, or courts of competent jurisdiction where milwin is legally compelled to do so. milwin will disclose the minimum necessary information in such circumstances and will, where legally permitted, notify you of such a disclosure.

6.4 Business Transfers

In the event that milwin undergoes a merger, acquisition, or transfer of all or a substantial part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and, where required by applicable law, given the opportunity to object or to request deletion of your data.

Cookies & Tracking Technologies

7.1 What Cookies milwin Uses

milwin uses cookies and similar lightweight tracking technologies on its platform. The cookies milwin places fall into the following categories:

• Strictly Necessary Cookies: Essential for the platform to function — including session management, login authentication, and security tokens. These cannot be disabled without preventing the platform from working.
• Performance & Analytics Cookies: Used to collect anonymised data about how players interact with the milwin platform, which pages are visited most, and where errors occur. This data helps milwin improve the platform experience for players across Pakistan.
• Preference Cookies: Store non-sensitive preferences such as your preferred language, game lobby view, or notification settings to personalise your milwin experience.

7.2 What milwin Does Not Do with Cookies

milwin does not use advertising cookies, cross-site tracking cookies, or third-party marketing pixels. We do not share cookie data with advertising networks. Our cookies are used exclusively for the operation, security, and improvement of the milwin platform itself.

7.3 Managing Cookies

You can manage or delete cookies through your web browser settings at any time. Disabling strictly necessary cookies will prevent the milwin platform from functioning correctly. Disabling performance and preference cookies will not prevent you from using milwin but will remove certain personalisation features.

Data Security

milwin implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and milwin's servers
• Passwords stored exclusively as salted cryptographic hashes — never in plain text, never readable by milwin staff
• SMS-based two-factor authentication on unrecognised device logins to prevent unauthorised account access
• Access controls limiting staff access to player personal data to those with a specific operational need
• Regular independent security audits of milwin's platform infrastructure and data handling practices
• Automated threat detection and brute-force login protection systems
• Secure, access-controlled data hosting with encryption at rest
• Incident response protocols to identify, contain, and notify affected players in the event of a data breach

Data Retention

milwin retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by the terms of our international gaming licence and applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your milwin account's active status plus a minimum of five years following account closure, as required under our gaming licence
• KYC Documents: Retained for a minimum of five years from the date of verification, as required by our anti-money laundering obligations
• Financial Transaction Records: Retained for a minimum of seven years from the date of each transaction, consistent with international financial record-keeping standards
• Betting & Gaming Logs: Retained for a minimum of five years from the date of each session or transaction for dispute resolution and regulatory audit purposes
• Support Communications: Retained for three years from the date of the last communication in each case
• Technical & Security Logs: Retained for 12 months from the date of generation in standard circumstances; longer if retained in connection with an ongoing investigation or dispute

Where data is no longer required for any purpose and no legal retention obligation applies, milwin will securely destroy or anonymise that data in accordance with established data disposal procedures.

Your Data Rights

Subject to applicable law and the conditions described below, you hold the following rights in respect of your personal data held by milwin:

milwin will respond to all data rights requests within 30 days of receipt. Where a request is particularly complex or milwin receives a large number of requests simultaneously, this period may be extended by up to a further 60 days, and you will be informed of the extension. Exercising your rights will not result in any negative consequences to your milwin account, unless the exercise of a right (such as erasure) makes account operation impossible.

Children & Minors

milwin is strictly intended for adults aged 21 and above. The milwin platform is not directed at, and milwin does not knowingly collect personal data from, individuals under the age of 21. If milwin discovers or has reason to believe that an account is held by an individual under the age of 21, that account will be immediately suspended, all data associated with that account will be securely deleted (subject to any legal retention obligations), and any funds in the account will be handled in accordance with our Terms and applicable law.

If you have reason to believe that a minor has created a milwin account — whether using your payment details, mobile number, or device — please contact our support team immediately. We will investigate and take appropriate action as a matter of urgency. For guidance on preventing underage access to gambling platforms, please visit our Responsible Gaming page.

Third-Party Links

The milwin platform does not include links to third-party websites, applications, or services. This Privacy Policy applies solely to data collected and processed by milwin through https://milwin.one. milwin is not responsible for the privacy practices of any third party, including payment gateway interfaces that may be displayed during a deposit or withdrawal transaction. Any data you provide directly to a payment provider (such as JazzCash or EasyPaisa) is governed by that provider's own privacy policy and terms of service.

Policy Updates

milwin reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, or changes in the requirements of our international gaming licence. The version number and effective date at the head of this document identify the current version. Where changes are material — meaning they significantly affect your rights or how we use your personal data — milwin will provide advance notice via the platform and, where appropriate, via the mobile number or email address registered to your account.

Your continued use of the milwin platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated Policy. If you do not agree with any updated Policy, you must cease using the platform and contact our support team to close your account.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how milwin has handled your personal data, please contact us through one of the following channels:

• Live Chat: Available 24/7 to all logged-in milwin players. Average response time under 2 minutes. Recommended for urgent privacy concerns.
• Email: support@milwin.one (plain text — not a clickable link). Email responses within 4 business hours. Please include your registered mobile number and a clear description of your request or concern.
• Subject Line for Data Requests: When emailing a data access, correction, deletion, or portability request, please use the subject line "Data Rights Request — [Your Username]" so that your request is routed to the correct team immediately.

milwin treats all privacy-related communications as a priority. If you are dissatisfied with milwin's response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body designated under milwin's international gaming licence. Please contact our support team for details of the applicable escalation route.