Mil Vin Privacy Policy – How We Protect Your Data in Pakistan

Mil vin is an online casino and sports betting platform operated at milvin.click, designed specifically for adult players in Pakistan. We are the data controller for all personal information collected through the platform. That means we are responsible for deciding why and how your data is processed, and we are accountable for ensuring it is handled properly.

Our platform serves Pakistani players across the country — from Karachi and Lahore to Islamabad, Peshawar, Quetta and beyond. Because we are built specifically for the Pakistani market, we are conscious that the people whose data we handle are our core community, and we treat that responsibility seriously.

If you have any questions about this Privacy Policy or about how mil vin handles your data, the contact details for our privacy team are in Section 13 at the end of this document.

Mil vin collects personal data in three main ways: information you give us directly, information generated automatically when you use the platform, and information received from third-party service providers such as payment processors and identity verification services.

We do not collect data that we do not need. We do not ask for your home address unless it is required for specific verification purposes, and we do not store your full payment card number — card transactions are processed by third-party PCI-DSS compliant processors and only tokenised references are held by mil vin.

Every piece of data mil vin collects has a specific, documented purpose. We do not collect information speculatively or because it might be useful someday. Here are the purposes for which we process your data:

• To operate your account: Your registration data is used to create and maintain your player account, verify your identity, and ensure the right person is accessing the right account.
• To process payments: Your payment details allow us to credit deposits to your account and process withdrawal requests to your registered Easypaisa, JazzCash, NayaPay, SadaPay, bank or card account.
• To comply with anti-money-laundering (AML) obligations: Identity documents and transaction data are reviewed as part of our legal obligation to prevent financial crime and money laundering. This is a legal requirement, not optional.
• To provide and improve the platform: Technical data about how players use mil vin helps us identify problems, optimise the experience and develop new features. For example, if a large number of players are experiencing slow load times on the PSL live betting page, technical logs help us identify and fix the issue.
• To administer promotions: When you opt in to a bonus or promotion at mil vin, your account and betting activity data is used to track eligibility, wagering progress and reward crediting.
• To run the refer-a-friend programme: Referral links are linked to your account. We track when someone registers using your link and makes a qualifying deposit so we can credit your Rs 1,000 referral reward.
• To provide customer support: When you contact mil vin support, we use your account and activity data to understand and resolve your query efficiently.
• To apply responsible gaming measures: Your betting and session data is monitored to support responsible gaming obligations, including identifying patterns that may indicate problem gambling behaviour.
• To send service communications: We may send you account-related notifications — such as deposit confirmations, withdrawal updates, or security alerts — by SMS or email. These are not marketing messages and cannot be opted out of while your account is active.
• For fraud and security: Device and IP data is used to detect and prevent unauthorised account access, bonus abuse, multi-accounting and other forms of fraud.

Data protection law requires that every processing activity has a lawful basis. At mil vin, we rely on the following bases:

• Contract performance: Processing your registration data, payment information and betting activity is necessary to fulfil the contract between you and mil vin — i.e., to actually run your account and process your bets and payments.
• Legal obligation: KYC identity verification and AML transaction monitoring are legal requirements we cannot opt out of. We process your documents and transaction data because the law requires it.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring and platform improvement are carried out on the basis of mil vin's legitimate interest in running a safe and honest platform. We balance these interests against your privacy rights and only process the minimum data necessary.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we rely on your consent. You can withdraw consent at any time by updating your preferences in account settings or contacting support.

Mil vin does not sell, rent or trade your personal data to third parties for their own marketing purposes. Full stop. We share data only where it is necessary to operate the platform or where we are legally required to do so.

The categories of third parties who may receive your data, and the reason for each, are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card processing networks receive the minimum payment data needed to execute your transactions.
• KYC and identity verification providers: When you submit identity documents, they are processed by a third-party verification service that checks document authenticity and performs AML screening. This provider operates under strict data processing agreements with mil vin.
• Game studios and software providers: Casino and Aviator game providers receive your player session data necessary to run the game. They do not receive your payment information or CNIC documents.
• IT infrastructure providers: Hosting, cloud storage and content delivery services that host the mil vin platform may technically have access to data stored on their servers. These providers operate under data processing agreements and are not permitted to use the data for any purpose other than providing the infrastructure service.
• Regulatory and law enforcement authorities: If required by law — for example, under AML regulations or in response to a court order — mil vin will disclose player data to the relevant authority. We do not have discretion to refuse lawful requests from authorities.
• Fraud prevention services: Industry fraud prevention networks may receive device fingerprint and IP data in anonymised or pseudonymised form to help identify patterns of fraudulent activity across multiple platforms.

All third-party processors who receive data from mil vin are required to handle it according to data protection standards equivalent to those applied by mil vin itself.

Because mil vin processes real-money transactions in PKR, our payment and identity verification procedures involve some of the most sensitive data we handle. Here is how we manage it.

Payment data security: Mil vin does not store full card numbers or mobile wallet PINs. Card transactions are routed through PCI-DSS compliant processors, and only a tokenised reference is stored in our systems. Your Easypaisa and JazzCash mobile numbers are stored in encrypted form and used only to process transactions on your behalf.

KYC documents: When you submit your CNIC for identity verification, the document image is transmitted over an encrypted connection to our verification provider. Verified documents are stored in encrypted form and access is restricted to authorised compliance staff only. Documents are not visible to general support agents or other players under any circumstances.

When KYC is required: Mil vin may request KYC verification at registration, at first withdrawal, when a withdrawal exceeds Rs 50,000, or at any other point where we have a regulatory or risk-based obligation to verify identity. Accounts that do not complete verification within the required timeframe may have withdrawal access restricted. This is a legal obligation, not a commercial decision.

Mil vin uses cookies and similar technologies to make the platform work properly, to keep you logged in, to remember your preferences, and to understand how the platform is being used so we can improve it. A cookie is a small text file stored on your device by your browser when you visit a website.

The cookies used at mil vin fall into the following categories:

You can manage your cookie preferences in your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent the mil vin platform from functioning correctly — you will not be able to log in or place bets.

Mil vin does not use cross-site tracking cookies to follow you around other websites. Analytics data collected on the mil vin platform is not shared with advertising networks and is not used to build marketing profiles for sale to third parties.

Mil vin does not keep your data longer than necessary for the purpose it was collected. The retention periods we apply are:

• Active account data (registration details, betting history, payment records): Retained for the duration of your account and for a minimum of 5 years after account closure, as required by AML regulations.
• KYC documents (CNIC copies, selfies): Retained for a minimum of 5 years after the last transaction on the account, in line with financial crime prevention legal requirements. After this period, documents are securely deleted.
• Support communications: Retained for 3 years after the last interaction, to allow for follow-up queries and complaint resolution.
• Technical logs (IP addresses, device data): Retained for 12 months for fraud detection purposes, then deleted or fully anonymised.
• Marketing preferences and consent records: Retained until you withdraw consent, then deleted within 30 days.
• Responsible gaming records (self-exclusion, limit settings): Retained for 5 years to ensure that self-exclusion requests are honoured even if the player attempts to re-register after the exclusion period ends.

When data is no longer needed and the retention period has expired, mil vin deletes or anonymises it securely. Anonymised data — from which your identity cannot be re-linked — may be retained indefinitely for statistical analysis and platform improvement.

As a player at mil vin, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at support@milvin.click with "Privacy Rights Request" in the subject line.

Mil vin is strictly an 18+ platform. We do not knowingly collect, store or process the personal data of anyone under the age of 18. If you are under 18, you must not register an account or attempt to use the platform.

If mil vin discovers or reasonably suspects that an account belongs to a player under 18, the account will be immediately suspended. Any funds on the account will be reviewed and handled in accordance with our Terms and Conditions. If you believe that a minor has created an account on the platform, please contact us immediately at support@milvin.click so we can investigate and take appropriate action.

Age verification is a core part of our KYC process. We use document verification and, where necessary, age estimation tools to verify that players are of legal age before allowing withdrawal access. This is both a legal requirement and a moral obligation that mil vin takes seriously.

Data security is not an afterthought at mil vin — it is built into how the platform is architected. The security measures we apply include:

• TLS/SSL encryption: All data transmitted between your browser or device and the mil vin platform is encrypted using TLS, preventing interception in transit.
• Encryption at rest: Sensitive stored data — including identity documents, payment references and account credentials — is encrypted in our database systems. Even if someone gained unauthorised access to the database, they would not be able to read the encrypted values without the decryption keys.
• Access controls: Internal access to player data at mil vin is restricted to staff who need it for their specific role. Support agents can see account information necessary to help you — they cannot see your CNIC document images or full payment details. Compliance staff who review documents cannot see your betting history.
• Multi-factor authentication: Internal systems used by mil vin staff to access player data require multi-factor authentication. Player accounts also support optional two-factor authentication, which we strongly recommend enabling.
• Regular security assessments: Mil vin conducts periodic security reviews and penetration testing to identify and remediate potential vulnerabilities in the platform.
• Incident response: Mil vin maintains an incident response plan. In the event of a data breach that poses a risk to players, affected individuals will be notified promptly in accordance with applicable requirements.

While we take all reasonable measures to protect your data, no internet-based system is 100% immune to security risks. You also have a role to play — please keep your mil vin password unique, enable two-factor authentication, and never share your login details with anyone.

Mil vin may update this Privacy Policy from time to time to reflect changes in the law, new data processing activities, or improvements to our practices. The date at the top of this page shows when the policy was last updated.

When we make material changes — meaning changes that significantly affect your rights or how your data is used — we will display a notice on the platform upon your next login and, where appropriate, send you a notification to your registered email or mobile number. Minor clarifications or formatting changes will not trigger a specific notification.

Continued use of the mil vin platform after the effective date of any changes constitutes your acknowledgment of the updated policy. If you disagree with any material changes, you may close your account in accordance with the process described in our Terms and Conditions.

If you have any questions, concerns or requests related to this Privacy Policy or how mil vin handles your personal data, please get in touch:

• Email: support@milvin.click — please include "Privacy" in the subject line so your query reaches the right team quickly.
• Live Chat: Available on the platform after login, 24 hours a day. For privacy-specific queries, ask to be connected to the privacy team and a ticket will be raised for documented follow-up.

We aim to respond to all privacy-related queries within 5 working days, and to privacy rights requests within 30 calendar days. We do not charge any fee for privacy requests or for providing copies of your data.