milvin Privacy Policy

01 Introduction

This Privacy Policy ("Policy") sets out how milvin ("milvin", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("Player", "User", "you") who access or use the milvin online casino and sports betting platform at milvin.vip (the "Platform").

milvin operates as an internationally licensed online gaming platform serving players across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, and beyond. Given the nature of our services — which involve real-money transactions in PKR, identity verification, and regulated gaming activity — we are required to collect and process certain categories of personal data in order to lawfully operate the Platform.

milvin is committed to handling your data with transparency, integrity, and respect. We treat data protection not merely as a compliance requirement but as a genuine obligation to the players who trust us with their information. This Policy is written in plain, accessible English so that every milvin player understands exactly where they stand.

This Policy should be read alongside the milvin Terms & Conditions and any specific product terms that may apply to particular services on the Platform.

02 Data We Collect

milvin collects personal data through several channels — directly from you during registration and use of the Platform, automatically through your interactions with the Platform, and in limited cases from third-party verification services. The categories of data we collect are as follows:

Identity & Contact Data

• Full legal name as it appears on your national identity document (CNIC) or passport;
• Date of birth (used to verify the 21+ age requirement);
• Residential address in Pakistan;
• Email address;
• Mobile phone number (used for OTP verification and account security).

Identity Verification (KYC) Data

• Copy of government-issued photo ID (CNIC, passport, or driver's licence);
• Proof of address documentation (utility bill, bank statement);
• Proof of payment method ownership (JazzCash / EasyPaisa account confirmation, bank account statement);
• Source of funds documentation where required by enhanced due diligence procedures.

Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in PKR and timestamps;
• Payment method identifiers (mobile wallet numbers, masked bank account references);
• Betting and wagering activity history on the milvin Platform.

Technical & Usage Data

• IP address and approximate geolocation at the time of login;
• Device type, operating system, and browser version;
• Session duration, pages visited, and features used within the Platform;
• Login timestamps and authentication logs.

Communications Data

• Records of correspondence with the milvin support team via live chat or email;
• Feedback, survey responses, and complaint records.

03 How We Use Your Data

milvin uses the personal data described in Section 2 for the following specific purposes:

milvin will never use your personal data for purposes that are incompatible with those listed above without first notifying you and, where required, obtaining your renewed consent.

04 Legal Basis for Processing

milvin processes personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the milvin gaming services you have contracted for — including account management, payment processing, and customer support;
• Legal obligation: Processing required to comply with anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and the conditions of milvin's international gaming licence;
• Legitimate interests: Processing necessary for fraud detection, platform security, responsible gaming monitoring, and improving the Platform — where those interests are not overridden by your data protection rights;
• Consent: Processing carried out on the basis of your freely given, specific consent — most notably in relation to marketing communications. You may withdraw consent at any time by contacting [email protected] or updating your account preferences.

05 Sharing Your Data

milvin does not sell your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• KYC and identity verification providers: Third-party services that assist in verifying your identity and age in compliance with our licensing obligations;
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the transaction data necessary to process your deposit or withdrawal in PKR;
• Fraud prevention and security services: Specialist providers that help milvin detect and prevent fraudulent account activity, collusion, and money laundering;
• Regulatory and law enforcement authorities: Where milvin is required by law, court order, or regulatory direction to disclose data — including reporting obligations under AML regulations;
• Gaming licence authority: milvin's international gaming licence authority may audit player and transaction data as part of its regulatory oversight functions;
• IT and infrastructure providers: Cloud hosting and data storage providers engaged by milvin under strict data processing agreements that prohibit them from using your data for any purpose other than providing services to milvin.

All third parties with whom milvin shares data are contractually required to maintain appropriate security standards and to use the data solely for the purposes specified in their agreements with milvin.

06 Payment Data & PKR Transactions

milvin processes all financial transactions in Pakistani Rupees (PKR) through locally trusted payment channels — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Because these transactions involve regulated financial intermediaries, the following payment data handling principles apply:

• milvin records deposit and withdrawal amounts, timestamps, transaction reference numbers, and the payment method used — but does not store complete mobile wallet credentials or full bank account numbers;
• Payment method ownership must be verified as part of KYC to ensure that funds are transacted only between accounts in the same name, preventing third-party deposits or withdrawals;
• Transaction records are retained for a minimum period as required under our international gaming licence and applicable AML obligations — typically five (5) years from the date of each transaction;
• Any dispute relating to a specific financial transaction should be raised with the milvin support team at [email protected], referencing the transaction ID visible in your milvin account history.

07 Cookies & Tracking Technologies

The milvin Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your authenticated session, and to gather anonymised analytics that help us understand how players use the Platform so that we can improve it.

The categories of cookies used by milvin are:

• Strictly necessary cookies: Required for the Platform to operate — including session authentication, fraud detection signals, and load balancing. These cannot be disabled without breaking Platform functionality;
• Functional cookies: Store your preferences such as language settings and game display options to improve your experience on subsequent visits;
• Analytics cookies: Collect anonymised data about how players navigate the Platform — such as which pages are most visited and where players exit — to help milvin improve the user experience. No personally identifiable data is included in analytics reports;
• Marketing cookies: Used only with your consent to allow milvin to show you relevant promotional content. You may withdraw consent at any time through your account settings.

You can manage cookie preferences through your browser settings. Please note that disabling cookies beyond strictly necessary ones may affect the performance of certain Platform features.

08 Data Retention

milvin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any mandatory retention periods required under our international gaming licence and applicable law. The following general retention principles apply:

• Active account data: Retained throughout the period your milvin account is active;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with AML obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Support communications: Retained for three (3) years following the resolution of the relevant query or complaint;
• Marketing preference records: Retained until consent is withdrawn or the account is closed;
• Anonymised analytics data: May be retained indefinitely as it contains no personally identifiable information.

Following the expiry of the relevant retention period, personal data is securely deleted or anonymised in accordance with milvin's internal data disposal procedures.

09 Security Measures

milvin takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the milvin servers;
• Encryption of sensitive data at rest within milvin's database infrastructure;
• Role-based access controls ensuring that only authorised milvin personnel with a business need can access player data;
• Two-factor authentication (2FA) available to all milvin account holders and mandatory for internal milvin staff accessing player records;
• Regular security audits and penetration testing of the milvin Platform infrastructure;
• Incident response procedures in place to detect, contain, and notify affected players in the event of a data breach.

10 Your Rights

milvin respects your rights with respect to your personal data. Depending on applicable data protection standards, you may have the following rights:

• Right of access: You may request a copy of the personal data milvin holds about you. milvin will provide this within 30 days of a verified request;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your milvin account;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations;
• Right to restrict processing: You may request that milvin limits the processing of your data in certain circumstances — for example, while a dispute regarding its accuracy is under review;
• Right to data portability: You may request that milvin provides your personal data in a structured, machine-readable format where processing is carried out on the basis of your consent or contractual necessity;
• Right to object: You may object to processing carried out on the basis of milvin's legitimate interests, including profiling for responsible gaming monitoring purposes;
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the milvin privacy team at [email protected] with the subject line "Data Rights Request" and include your registered email address and a description of the right you wish to exercise. milvin will acknowledge your request within 5 business days and resolve it within 30 days.

11 Children's Privacy

The milvin Platform is strictly intended for adults aged 21 years and above. milvin does not knowingly collect personal data from any individual under the age of 21. The age verification process milvin applies at registration is designed to prevent access by minors.

If milvin becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all data associated with the account will be deleted, and any deposited funds will be returned to the payment method used, following verification.

If you believe that a minor has accessed the milvin Platform using falsified details, please contact milvin immediately at [email protected] so that the matter can be investigated and resolved promptly.

12 Third-Party Links

The milvin Platform may contain links to third-party websites or services — for example, links to the responsible gaming resources of our international gaming licence authority. milvin is not responsible for the privacy practices of any third-party website and this Privacy Policy does not extend to those sites.

We encourage you to review the privacy policy of any third-party site you visit via a link from the milvin Platform. milvin's inclusion of a link to a third-party resource does not constitute an endorsement of that site's privacy or data handling practices.

13 International Data Transfers

As an internationally licensed online gaming platform serving Pakistani players, milvin may store and process personal data on servers located outside of Pakistan. Where personal data is transferred internationally, milvin ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards that milvin relies on for international data transfers include contractual data processing agreements with all third-party processors, incorporating standard data protection clauses, and ensuring that processors are located in jurisdictions with adequate data protection frameworks recognised by milvin's licence authority.

14 Updates to This Privacy Policy

milvin reserves the right to update this Privacy Policy at any time. When material changes are made, milvin will notify registered players via email to the address on file and will post a prominent notice on the milvin Platform for a period of not less than 14 days following the effective date of any revision.

The "Last Updated" date displayed at the top of this page and in the updated badge above indicates when the most recent version of this Privacy Policy came into effect. We encourage you to review this Policy periodically so that you remain informed about how milvin protects your data.

Your continued use of the milvin Platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not accept any revised terms, you should cease using the Platform and may request account closure in accordance with the milvin Terms & Conditions.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or milvin's data handling practices, please contact the milvin privacy team through the following channel:

• Email: [email protected]
• Subject line for data requests: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the milvin Platform
• Response target: Acknowledgement within 5 business days; full resolution within 30 days

milvin's support team is well-versed in the specific context of Pakistani players and can assist with queries in plain English — whether your question relates to how your JazzCash transaction data is handled, what KYC documents are retained, or how to request deletion of your account data.