Milvin Privacy Policy — Your Data, Explained Plainly

1Who We Are

Milvin is an online casino and sports betting platform designed and operated specifically for Pakistani players. Our platform offers casino games, live dealer tables, sports and esports betting, crash games, fishing games and promotional services — all in Pakistani Rupees (PKR) through local payment providers. When this policy refers to "Milvin", it refers to the legal entity operating the platform under applicable international gaming regulations.

Milvin acts as the data controller in relation to personal data collected through the platform. This means we are responsible for deciding how and why your data is collected and processed. For any privacy-related questions, you can reach us at support@milvin.ws.

2Data We Collect

Milvin collects different types of data depending on how you interact with the platform. We only collect what is necessary and proportionate for the purposes described in this policy.

3How We Use Your Data

Milvin uses your personal data for specific, legitimate purposes only. We do not use your data for purposes that are inconsistent with why it was originally collected.

• Account management: Creating and maintaining your Milvin account, verifying your identity, processing your deposits and withdrawals in PKR.
• Service delivery: Running the games, sports markets and other platform features you use. Recording bet outcomes and settling winnings correctly.
• Fraud prevention and security: Detecting and preventing fraud, money laundering, duplicate account creation and other misuse of the platform. Technical and IP data is central to this purpose.
• Regulatory compliance: Milvin is subject to anti-money laundering (AML) and know-your-customer (KYC) obligations. Identity and financial data is processed to meet these requirements.
• Customer support: Answering your questions, resolving disputes and managing your account at your request.
• Responsible gaming: Monitoring for signs of problem gambling behaviour and applying player protection tools such as deposit limits and self-exclusion where relevant.
• Communications: Sending transactional messages (deposit confirmations, withdrawal updates, security alerts). Where you have opted in, sending promotional communications about Milvin offers.
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve platform performance, game selection and user experience.

4Legal Basis for Processing

Milvin processes your personal data on the following legal grounds:

• Contractual necessity: Processing your identity, contact and financial data is necessary to fulfil the contract between you and Milvin — that is, to operate your account and deliver the services you have signed up for.
• Legal obligation: KYC, AML verification and regulatory reporting require us to process certain identity and financial data regardless of consent.
• Legitimate interests: Fraud detection, security monitoring and platform improvement are pursued as legitimate business interests, balanced against your privacy rights.
• Consent: Where data processing goes beyond the above — for example, sending marketing emails about new promotions — we rely on your explicit opt-in consent, which you can withdraw at any time.

5Data Sharing — Who Sees Your Information

Milvin does not sell, rent or trade your personal data to third parties. We share data only when it is necessary and in the limited circumstances described below.

• Payment processors: To process PKR deposits and withdrawals, Milvin shares transaction data with payment providers including Easypaisa, JazzCash, NayaPay, SadaPay, banking networks and card schemes. These providers receive only the data they need to process the specific transaction.
• Game providers: Games on Milvin are provided by licensed third-party developers. These providers may receive session-level data necessary to deliver the game, such as your player ID and stake amounts. They do not receive your name or contact details.
• Identity verification services: To complete KYC checks, Milvin may use third-party verification providers who process identity document data on a secure, compliant basis.
• Regulatory and legal authorities: Milvin is obligated to report certain transactions and account information to relevant regulatory and law enforcement authorities where required by applicable law. This includes AML reporting obligations.
• Fraud prevention networks: Anonymised risk signals may be shared with fraud prevention services to protect the platform and players from fraudulent activity.

6Payment Data — PKR Transactions

Because Milvin operates entirely in PKR using Pakistani payment infrastructure, your financial data is processed through local channels. Here is how payment data is handled:

• Easypaisa and JazzCash wallet transactions are processed through the mobile money operators' own secure APIs. Milvin receives a confirmation token and transaction reference — not your wallet PIN or full account credentials.
• NayaPay and SadaPay transactions follow the same model: secure API communication with confirmation data passed back to Milvin.
• Bank IBFT transactions are verified against your account details for withdrawal matching purposes. Bank account details are encrypted at rest in Milvin's systems.
• Visa and Mastercard transactions are processed through a PCI-DSS Level 1 certified payment gateway. Raw card numbers never pass through or are stored on Milvin's infrastructure.

Transaction records — including PKR amounts, payment method type and timestamps — are retained for a minimum of five years for regulatory compliance purposes. This retention cannot be shortened at your request as it is legally required.

7Cookies & Tracking Technologies

Milvin uses cookies and similar technologies to operate the platform, maintain your logged-in session, detect fraud, and understand how the platform is used. Below is a breakdown of the cookie categories Milvin uses and your control options.

You can also manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect your ability to use certain features of the Milvin platform — including staying logged in between sessions.

8Data Retention

Milvin keeps your personal data for as long as is necessary for the purposes for which it was collected, subject to legal and regulatory requirements that may mandate longer retention periods.

• Active account data: Retained for the duration of your account relationship with Milvin plus a period of five years after account closure.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in compliance with AML regulatory requirements.
• KYC documents: Retained for five years after the end of the customer relationship or longer if required by applicable law.
• Support communications: Retained for three years from the date of the last communication, or longer if the communication relates to an unresolved dispute.
• Marketing consent records: Retained for three years from the date of consent, or until consent is withdrawn, whichever comes first.
• Technical and log data: Retained for 12 months for security and fraud analysis purposes, then automatically deleted.

9Security — How We Protect Your Data

Milvin takes the security of your personal data seriously and applies technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration or destruction.

• SSL/TLS encryption: All data transmitted between your device and Milvin's servers is encrypted using industry-standard SSL/TLS protocols. You will always see HTTPS in your browser when using the platform.
• Data encryption at rest: Sensitive data stored in Milvin's databases — including identity documents and payment method details — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within Milvin is restricted on a strict need-to-know basis. Only staff members with a legitimate operational requirement can access specific categories of player data.
• Two-factor authentication: Milvin supports and encourages two-factor authentication for player accounts to protect against unauthorised logins.
• Penetration testing: The platform undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.
• Breach notification: In the event of a data breach that is likely to affect your rights or freedoms, Milvin will notify affected players promptly and take immediate remediation steps.

10Your Rights Over Your Data

As a Milvin player, you have meaningful rights over your personal data. Exercising these rights is straightforward — contact us at support@milvin.ws and we will respond within 30 days.

11Minors — Under-18 Access

Milvin's platform is strictly for adults aged 18 and over. We do not knowingly collect or process personal data from individuals under 18. If we discover that an account holder is under 18, the account will be immediately closed, all data retained only for the minimum period required by law, and all deposits returned.

Parents and guardians who believe a minor may have registered on Milvin should contact us immediately at support@milvin.ws. We will investigate and act promptly. We also encourage the use of parental control tools available on devices and through internet service providers to restrict access to online gambling services for minors.

12Changes to This Policy

Milvin may update this Privacy Policy from time to time to reflect changes in the law, our practices or the platform's features. When changes are made, the updated policy will be published on this page with a revised effective date. For material changes — those that significantly affect how we process your data or reduce your rights — we will provide advance notice via email or an in-platform notification.

Continuing to use Milvin after a policy update constitutes acceptance of the revised policy. We recommend checking this page periodically, particularly when using the platform for the first time after a period of inactivity.

13Contact — Privacy Questions & Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how Milvin handles your personal information, please contact us through any of the following channels:

• Email: support@milvin.ws — mark your subject line with "Privacy Request" for faster routing
• Live chat: Available 24/7 within the Milvin platform. Select "Privacy & Data" from the support topic menu
• Response time: Privacy requests are acknowledged within 72 hours and resolved within 30 days

For full platform rules and betting terms, see our Terms and Conditions. For responsible gaming tools and self-exclusion, see our Responsible Gaming page.