Mili Win Privacy Policy – How We Protect Your Data in Pakistan

1. Introduction

Welcome to the Mili Win Privacy Policy. Mili Win ("we", "us", "our", "the Platform") is committed to protecting the personal data of everyone who uses our online gaming platform. This policy applies to all registered players and visitors of Mili Win, including users accessing the platform from any location within Pakistan.

When you create a Mili Win account, deposit funds, place bets, request a withdrawal or simply browse the website, you share certain information with us. This document explains in clear terms exactly what data that involves, what we do with it, how long we keep it, and the choices you have over your own information. We have deliberately avoided dense legal language — if something is unclear, our support team is available to explain it.

By using Mili Win, you acknowledge that you have read and understood this Privacy Policy and that you agree to the collection and use of your information as described here. This policy should be read alongside our Terms and Conditions, which together form the complete agreement governing your use of the platform.

2. What Personal Data Mili Win Collects

Mili Win collects only the data necessary to operate your account, process transactions and meet our legal obligations. We do not collect data we don't need. The categories of personal data we may hold about you are:

We do not intentionally collect sensitive personal data such as political opinions, racial or ethnic origin, religious beliefs or health data unless it is directly relevant to a responsible gaming assessment or legal compliance requirement and you have provided it voluntarily.

3. How Mili Win Collects Your Data

Your data reaches Mili Win through several routes, all of which you initiate or consent to through your use of the platform:

4. Why Mili Win Uses Your Personal Data

Every piece of data collected by Mili Win has a specific, documented purpose. We do not collect data speculatively or store information without a clear reason. The primary purposes for which your data is used are:

Mili Win does not use your personal data for direct marketing to third parties. We may send you platform-related communications — such as transaction confirmations, account security alerts and policy update notifications — using your registered mobile number or email. Promotional communications from Mili Win about bonuses or new features can be opted out of through your account notification settings.

5. Legal Basis for Processing Your Data

Mili Win processes your personal data under one or more of the following legal bases, depending on the specific activity:

• Contractual necessity: Processing required to deliver the services you signed up for — operating your account, executing transactions, running games. Without this data, the platform cannot function for you.
• Legal obligation: We are required to collect and retain certain data by applicable financial regulations, anti-money-laundering rules and other laws applicable to online gaming and payment services in Pakistan.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring and improving the quality of our services. In each case, Mili Win has assessed that its legitimate interests do not override your privacy rights.
• Consent: Where you have explicitly agreed to a specific use of your data — for example, receiving promotional emails or SMS from Mili Win. You can withdraw consent at any time through account settings.

6. Who Mili Win Shares Your Data With

Mili Win does not sell your personal data to any third party. Data sharing occurs only in the specific circumstances listed below, and only the minimum data necessary is shared in each case:

Payment Processors

To execute deposits and withdrawals, Mili Win shares transaction-relevant data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank or your card network. This sharing is necessary to complete the transaction you have requested. Each payment provider operates under its own privacy policy governing how they handle this data.

Identity Verification Partners

Where required for Know Your Customer (KYC) compliance, Mili Win may share your identity documents with a certified identity verification provider. This occurs when you are required to submit CNIC or other documents during account verification. These partners are contractually bound to handle your data securely and use it only for verification purposes.

Legal and Regulatory Authorities

Mili Win may be required to share your data with government authorities, law enforcement agencies or regulatory bodies where we receive a lawful request to do so. We will always verify the lawfulness of such requests before complying. Where we are legally permitted to notify you of such a request, we will do so.

Fraud Prevention Services

Aggregated and anonymised technical data may be shared with fraud detection services to protect the platform and all players against fraudulent activity. This data does not identify individual players.

7. Payment Data and PKR Transactions

Because Mili Win operates entirely in Pakistani Rupees through local payment channels, payment data handling deserves specific attention. All PKR transactions — whether via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card — generate financial records that Mili Win stores for a minimum of five years to meet our legal obligations under applicable financial regulations.

Mili Win stores payment method identifiers (such as your Easypaisa mobile number) in encrypted form. Full card numbers are never stored by Mili Win — card payment processing is handled by our certified payment gateway partner, which maintains PCI-DSS compliance. Mili Win only receives a tokenised reference from card transactions.

Withdrawal requests at Mili Win require that funds are returned to a payment account registered in your name. When processing withdrawals, Mili Win verifies the destination account against your registered payment details to prevent misdirected funds and fraud. This verification process involves briefly accessing your stored payment data.

8. Cookies and Tracking Technologies

Mili Win uses cookies and similar tracking technologies to operate the platform correctly and understand how it is being used. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies are not programs and cannot harm your device.

Types of Cookies Used by Mili Win

• Essential cookies: Required for the platform to function. These manage your login session, keep your account authenticated, remember your preferences within a session, and protect against cross-site request forgery. You cannot opt out of essential cookies and still use the platform.
• Analytics cookies: Used to understand how players navigate and use the platform — which pages are visited, how long sessions last, where errors occur. This data is aggregated and does not identify individual players. Mili Win uses this information to improve platform design and performance.
• Security cookies: Help Mili Win detect unusual login patterns, potential fraud and suspicious technical behaviour that may indicate account compromise.

Mili Win does not use third-party advertising cookies or share cookie data with advertising networks. You can manage cookie preferences through your browser settings, though disabling essential cookies will prevent you from logging into or using the platform normally.

9. How Mili Win Protects Your Data

Data security is taken seriously at Mili Win. The following technical and organisational measures are in place to protect your personal information:

• SSL/TLS encryption: All data transmitted between your device and the Mili Win platform is encrypted using industry-standard TLS 1.3 protocols. The padlock icon in your browser confirms this when accessing any Mili Win page.
• Data encryption at rest: Sensitive personal data — including identity information, payment method details and financial records — is encrypted in storage using AES-256 encryption.
• Access controls: Mili Win staff can only access player personal data on a need-to-know basis for their specific role. Access to financial data and identity documents is restricted to authorised personnel only and is logged.
• Regular security audits: The platform undergoes regular penetration testing and security reviews by qualified security professionals.
• Two-factor authentication: Available to all Mili Win players for account login and available for withdrawal requests.
• Incident response: In the event of a data breach that affects your personal data, Mili Win will notify you via your registered mobile number or email without undue delay and take immediate steps to contain and remediate the incident.

While Mili Win maintains robust security measures, no internet-based platform can guarantee absolute security. You also play a role in protecting your data by maintaining a strong, unique password for your Mili Win account and not sharing your login credentials with anyone.

10. How Long Mili Win Keeps Your Data

Mili Win retains personal data for as long as is necessary for the purpose it was collected, or as required by law — whichever is longer. The following retention periods apply:

When data is no longer required, Mili Win deletes or anonymises it in a secure manner. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for platform analytics and improvement purposes.

11. Your Privacy Rights as a Mili Win Player

You have meaningful rights over the personal data that Mili Win holds about you. These rights are real and exercisable — not just items on a list. Here is what you are entitled to and how to exercise each right:

To exercise any of these rights, contact Mili Win at support@miliwin.com with the subject line "Privacy Rights Request" and your account username. We will acknowledge your request within 48 hours and fulfil it within 30 calendar days. We may ask you to verify your identity before acting on a request — this is to protect you from unauthorised requests by third parties.

12. Children's Privacy

Mili Win is strictly for adults aged 18 and over. The platform does not knowingly collect, store or process personal data from individuals under the age of 18. If a minor has provided personal data to Mili Win through misrepresentation, their account will be closed immediately upon discovery, all balances will be returned via the registered payment method, and all associated data will be securely deleted.

If you are a parent or guardian and believe your child has created a Mili Win account, please contact us immediately at support@miliwin.com. Provide the account username or mobile number used to register and we will investigate and close the account promptly.

Mili Win supports a responsible approach to preventing underage access and cooperates fully with any requests from parents, guardians or relevant authorities concerning underage account holders.

13. International Data Transfers

Mili Win primarily processes and stores your data within secure data centres that serve the Pakistan region. Where any processing by a third-party service provider (such as an identity verification partner or security service) involves transferring data outside Pakistan, Mili Win ensures that:

• The receiving organisation has adequate data protection standards equivalent to those applied by Mili Win.
• Appropriate contractual safeguards are in place covering the transfer, including data processing agreements that restrict secondary use of your information.
• Only the minimum data necessary for the specific service is transferred.

Mili Win does not transfer your financial data internationally except where required by international payment networks (Visa/Mastercard) to process card transactions — a process governed by PCI-DSS standards and the card networks' own privacy frameworks.

14. Changes to This Privacy Policy

Mili Win may update this Privacy Policy from time to time to reflect changes in data practices, legal requirements or platform features. When we make material changes — changes that significantly affect how your data is used or your privacy rights — we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to your registered mobile number or email address describing the key changes.
• Where legally required, seek your active re-acceptance of the updated policy before you can continue using the platform.

For non-material changes — such as clarifications of existing practices or minor wording improvements — we will update the page without individual notification. We recommend reviewing this policy periodically. Continued use of the Mili Win platform after changes are published constitutes your acknowledgement of the updated policy.

15. Contact Mili Win About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a complaint about how Mili Win has handled your personal information, please reach out through the channels below:

If you submit a privacy complaint to Mili Win and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority or regulatory body in Pakistan. Mili Win will cooperate fully with any regulatory investigation into our data practices.