Privacy Policy – How mli win Collects and Protects Your Personal Data

mli win operates the online gaming and sports betting platform at mliwin.com. For the purposes of this Privacy Policy, mli win is the data controller – meaning we are the entity responsible for determining how and why your personal data is processed.

Our platform is designed for and primarily serves players in Pakistan. All transactions on mli win are denominated in Pakistani Rupees (PKR) and the platform supports payment methods widely used by Pakistani players including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and Visa/Mastercard.

Any questions or requests related to your personal data at mli win should be directed to our support team at support@mliwin.com. We respond to all data-related queries within five business days.

The data we collect at mli win falls into the following categories. We collect this information when you register, when you use the platform, and when you contact our support team.

We do not collect sensitive personal data categories such as biometric data, health records, religious beliefs, or political opinions. Where identity documents such as a CNIC copy are provided for KYC purposes, these are handled under strict access controls and deleted once verification is complete and the retention period has elapsed.

Every piece of data collected at mli win has a defined purpose. We do not collect data speculatively or hold information that serves no operational or compliance function. The table below maps our data use to the specific purposes that apply:

• Account creation and management: Your name, mobile number, email, and date of birth are used to create and maintain your mli win account, authenticate your logins, and communicate account-related information to you.
• Payment processing: Financial data including your mobile wallet account numbers or bank details are used solely to process your deposits and withdrawals in PKR. This data is shared with payment processors as required – see Section 5.
• Identity verification (KYC): mli win is required to verify the identity and age of players before processing significant withdrawals or as part of routine compliance checks. CNIC or passport data provided for this purpose is used only for verification and is not used for any other purpose.
• Regulatory compliance and fraud prevention: Transaction records, gaming activity data, and technical data are analysed to detect unusual patterns that may indicate fraud, money laundering, bonus abuse, or multi-accounting. This is a legal obligation for an online gaming operator.
• Customer support: Communications data is used by the mli win support team to resolve your queries, investigate complaints, and maintain records of support interactions for quality assurance purposes.
• Platform improvement: Aggregated and anonymised gaming activity and technical data are used to understand how players interact with mli win, identify areas for improvement, and prioritise feature development. This analysis does not identify individual players.
• Responsible gaming: Gaming activity and session data are monitored to support responsible gaming obligations. Where patterns suggest a player may be at risk, mli win may reach out with information about available responsible gaming tools. See the Responsible Gaming page for more details.
• Marketing and promotions: With your consent, mli win may send you promotional communications about new games, sports betting markets, and offers via the mobile number or email address on your account. You can withdraw marketing consent at any time by contacting support or updating your account preferences.

mli win processes your personal data on the following legal bases:

• Contract performance: Processing necessary to register your account, process payments, and deliver the gaming and betting services you have signed up for at mli win.
• Legal obligation: Processing required to comply with applicable financial regulations, anti-money laundering laws, age verification requirements, and reporting obligations to relevant authorities.
• Legitimate interests: Processing to detect and prevent fraud, maintain platform security, improve the mli win service, and conduct responsible gaming monitoring – where these interests are not overridden by your own rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. Consent can be withdrawn at any time without affecting the processing that took place before withdrawal.

mli win does not sell your personal data. We share your information only in the following specific and limited circumstances, and only to the extent necessary for the defined purpose:

• Payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card, the relevant financial data is shared with the payment provider processing your transaction. These providers handle your payment data under their own privacy policies and applicable Pakistani financial regulations.
• Identity verification providers: Where KYC verification is required, your identity documents may be shared with a third-party verification service to confirm authenticity. These providers are contractually bound to use your data only for verification purposes.
• Regulatory and law enforcement authorities: mli win may be required by applicable law to disclose certain player data to financial intelligence units, tax authorities, or law enforcement agencies. We will comply with such requests where legally required and will notify you where we are legally permitted to do so.
• Fraud prevention and security services: Technical and transaction data may be shared with fraud detection services to identify and prevent abuse of the mli win platform. These services process data on behalf of mli win under strict data processing agreements.
• Platform infrastructure providers: Hosting, cloud storage, and platform services used to run mli win may process certain technical data as part of service delivery. These providers act as data processors under contractual agreements that require them to protect your data in accordance with applicable standards.

mli win does not share your personal data with advertisers, data brokers, social media platforms, or any other third party for marketing or profiling purposes without your explicit consent.

mli win uses cookies and similar tracking technologies on the platform. Cookies are small files stored on your device that help the website remember your session, preferences, and usage patterns. Here is an overview of the cookie types used at mli win:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to mli win. Disabling functional or analytics cookies will not affect your ability to play games or place bets but may mean the platform does not remember your preferences between sessions.

Data security at mli win is not an afterthought – it is built into how the platform handles information at every level. The following security measures are in place:

• Encryption in transit: All data transmitted between your device and the mli win platform is encrypted using TLS (Transport Layer Security). This applies to login sessions, payment processing, and all account interactions.
• Encryption at rest: Sensitive personal and financial data stored in mli win systems is encrypted at rest. Plain-text storage of passwords or financial account numbers does not occur.
• Access controls: Access to personal data within the mli win organisation is restricted on a need-to-know basis. Support agents can access data required to resolve your queries; they cannot access payment credentials or identity document images beyond what is needed for verification.
• Fraud detection systems: Automated monitoring systems at mli win flag unusual account activity, login attempts from unfamiliar devices or locations, and transaction patterns that may indicate unauthorised account access.
• Regular security reviews: The mli win platform undergoes regular security assessments to identify and address vulnerabilities. Third-party security tools are used alongside internal reviews.

While mli win takes all reasonable steps to secure your data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in risk to your rights, mli win will notify affected players as required by applicable law.

mli win retains personal data only for as long as necessary for the purposes outlined in this Privacy Policy or as required by applicable law. The general retention periods applied at mli win are:

• Account data and transaction records: Retained for a minimum of five years following account closure. This period reflects standard financial record-keeping obligations applicable to online gaming operators under anti-money laundering regulations.
• KYC identity documents: Retained for the duration of your active account plus five years following closure, or longer if required by a specific regulatory investigation or legal proceeding.
• Gaming activity logs: Retained for three years from the date of the relevant activity. Aggregated and anonymised versions of activity data may be retained indefinitely for platform analysis purposes.
• Support communications: Retained for three years from the date of the last interaction, enabling mli win to maintain continuity of service and respond to any related complaints or disputes.
• Marketing consent records: Retained for the life of your account plus two years, to maintain a record of your consent status and allow us to demonstrate compliance with consent requirements.
• Cookie data: Retained for the periods stated in Section 6, after which it is automatically deleted or anonymised.

Once a retention period expires, personal data is deleted from mli win systems or anonymised such that it can no longer be linked to an individual. You may request earlier deletion of certain data categories – see Section 9 for details of your rights.

As a mli win player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@mliwin.com. We will respond within five business days.

mli win is strictly for players aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a person under 18 has registered an account at mli win, please contact us immediately at support@mliwin.com. Any account identified as belonging to a minor will be closed immediately and deposits returned without winnings.

Age verification is conducted at registration and when significant withdrawals are requested. This process uses the identity information provided by the player and may involve comparison with identity documents such as a CNIC. Parents and guardians who are concerned about underage access to online gaming platforms are encouraged to use parental control software to restrict access to gaming websites on shared devices.

mli win may update this Privacy Policy from time to time as the platform evolves, as our data practices change, or as legal requirements are updated. When material changes are made, we will notify registered players by email to the address on their mli win account and/or by posting a notice on the platform.

The effective date at the top of this page will always reflect when the current version was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how mli win handles your personal data. Continued use of the platform following notification of updates constitutes acceptance of the revised Privacy Policy.

If a proposed change to this Privacy Policy would materially affect how we process data that you provided under consent, we will seek fresh consent before the change takes effect rather than relying on continued use as acceptance.

If you have any questions about how mli win handles your personal data, want to exercise any of your data rights described in Section 9, or wish to raise a complaint about our data practices, please contact the mli win privacy team:

• Email: support@mliwin.com
• Response time: Within five business days of receipt
• Languages: English and Urdu
• Availability: 24 hours a day, 7 days a week

If you submit a privacy complaint to mli win and you are not satisfied with the response you receive, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. mli win takes all privacy complaints seriously and will work to resolve them fairly and transparently.

For requests to exercise your data rights, please include your registered email address or mobile number, the specific right you are exercising, and any relevant details to help us locate your account and process your request efficiently. Identity verification may be required before we can fulfill certain requests to ensure we are speaking with the account holder.