Privacy Policy – Milwinn Pakistan Data Protection & Your Rights

Milwinn respects your privacy and is committed to protecting the personal data of every Pakistani player on the platform. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and protected, who we share it with, and what rights you have over your own data.

Last Updated: January 2025 Language: English (Pakistan) Applies to: All Pakistani Players
Our Commitment

Milwinn does not sell your personal data to any third party. Your information is used only to operate your account, process transactions, and — where you have given consent — send you relevant offers.

All data is protected by 256-bit SSL encryption and stored on secure, audited servers.

Encrypted Storage
256-bit SSL on all data
No Data Sales
Never sold to third parties
Your Rights
Access, edit, delete anytime
Audited Annually
Independent security reviews
Right to Erasure
Request deletion anytime
Opt-Out Marketing
Unsubscribe at any time
milwinn
1 About This Privacy Policy

This Privacy Policy describes how Milwinn ("we", "us", "our") collects, uses, stores, protects, and shares the personal data of players and visitors to milwinn.com. It applies to all users of the Milwinn platform, including registered players, visitors who browse without registering, and any person who contacts Milwinn support or engages with our communications.

Milwinn takes privacy seriously. We have tried to write this policy in plain, straightforward English that Pakistani players can actually understand — not in dense legal language designed to confuse. If anything here is unclear, contact us at support@milwinn.com and we will explain it.

By using Milwinn — including registering an account, making a deposit, placing a bet, or simply browsing the platform — you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how Milwinn handles personal data, you should not use the platform.

Key point: Milwinn is the data controller for the personal information you provide. We are responsible for keeping it safe and using it only for the purposes described in this policy. We will never sell your data to marketers, data brokers, or any other third party.

2 What Personal Data Milwinn Collects

Milwinn only collects personal data that is necessary to provide the platform's services safely, legally, and effectively. The table below sets out the main categories of data we collect and why.

Data Category Examples Why We Collect It
Identity Data Full name, date of birth, CNIC number, username Account registration, age verification, KYC compliance
Contact Data Email address, Pakistan mobile number Account communications, transaction confirmations, support
Financial Data Mobile wallet ID (Easypaisa/JazzCash), bank account details, transaction history Processing deposits and withdrawals, fraud prevention, AML compliance
Technical Data IP address, device type, browser, operating system, session logs Security monitoring, fraud detection, platform performance
Usage Data Game history, betting activity, session duration, pages visited Providing personalised services, responsible gaming monitoring
Communications Data Support chat transcripts, emails, feedback messages Resolving queries, improving support quality, compliance record-keeping
Verification Documents CNIC copies, proof of address, payment method evidence KYC identity verification, withdrawal processing, fraud prevention
2.1 Data You Provide Directly

Most of the personal data Milwinn holds is provided by you directly — during registration, when you make a deposit or withdrawal, when you contact our support team, or when you respond to a survey or promotion. You are in control of what you share with us.

2.2 Data We Collect Automatically

When you use the Milwinn platform, we automatically collect certain technical and usage data — for example, your IP address, the type of device you are using, and which pages of the platform you visit. This data is collected primarily for security purposes and to ensure the platform performs correctly on your device. It is not used to build advertising profiles or sold to data brokers.

2.3 Data We Receive From Third Parties

In limited circumstances, Milwinn may receive data about you from third parties — for example, identity verification providers used during KYC checks, payment processors confirming transaction details, or fraud prevention services that flag suspicious activity. We only request data from third parties where it is necessary and proportionate to the purpose.

3 How Milwinn Uses Your Personal Data

Milwinn uses your personal data for the following purposes:

  • Account management: Creating and maintaining your Milwinn account, verifying your identity, and managing your login credentials.
  • Processing transactions: Handling deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard in PKR.
  • Providing gaming services: Allowing you to place bets, play casino games, access live casino tables, and use all other Milwinn features.
  • Customer support: Responding to your questions, resolving disputes, and maintaining records of your communications with Milwinn.
  • Legal and regulatory compliance: Meeting our obligations under anti-money laundering (AML) regulations, age verification requirements, and any other applicable laws.
  • Responsible gaming: Monitoring your gaming activity to identify signs of problem gambling and taking appropriate action where required under our responsible gaming policy.
  • Security and fraud prevention: Detecting and preventing fraud, money laundering, account takeover, and other prohibited activities.
  • Platform improvement: Analysing usage patterns to improve the Milwinn platform, fix bugs, and develop new features.
  • Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have given your consent or where we have a legitimate interest and you have not opted out.

Milwinn will never use your data for purposes that are incompatible with those listed above without first obtaining your consent or notifying you through an updated Privacy Policy.

milwinn
4 Legal Basis for Processing

Milwinn processes your personal data on the following legal grounds:

  • Contract performance: Processing your registration data, transaction data, and gaming activity is necessary to fulfil the contract between you and Milwinn (i.e., to provide the services you have signed up for).
  • Legal obligation: Processing your identity and financial data for KYC, AML compliance, and age verification is required by applicable laws and regulations.
  • Legitimate interests: Using technical and usage data for security monitoring, fraud prevention, and platform improvement is in Milwinn's legitimate interest as an operator — provided this does not override your rights and freedoms.
  • Consent: Sending you marketing communications and setting non-essential cookies is based on your consent. You may withdraw this consent at any time without affecting the lawfulness of any earlier processing.
5 Who Milwinn Shares Your Data With

Milwinn does not sell your personal data to any third party under any circumstances. We share your data only in the following limited and necessary circumstances:

5.1 Payment Processors

To process your deposits and withdrawals, Milwinn shares necessary financial data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT), or Visa/Mastercard's processing network. Each of these providers operates under their own privacy policies and data protection obligations. Milwinn only shares the minimum data required to complete the transaction.

5.2 Identity Verification Providers

To complete KYC checks required for high-value withdrawals and regulatory compliance, Milwinn uses third-party identity verification services. These providers receive the documents you submit (such as your CNIC copy) and return a verification result. They are contractually bound to use your data only for verification purposes and to delete it after the process is complete.

5.3 Regulatory and Law Enforcement Authorities

Milwinn may be required by law to disclose personal data to regulatory bodies, financial intelligence units, law enforcement agencies, or courts. We will only comply with such requests where we are legally obliged to do so, and we will always assess their validity carefully. Where legally permitted, we will notify you of any such disclosure.

5.4 Technology and Infrastructure Partners

Milwinn uses third-party technology partners to operate the platform — including cloud hosting providers, game software suppliers, and fraud detection services. These partners process data only as instructed by Milwinn, under data processing agreements that require them to protect your data to the same standard as Milwinn itself.

No advertising data sharing: Milwinn never shares your personal data with advertising networks, social media platforms, data brokers, or marketing agencies for the purpose of targeting you with third-party advertising. If you see Milwinn advertisements elsewhere, this is managed through non-personalised ad placements and does not involve sharing your personal data.

6 Cookies & Tracking Technologies

Milwinn uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather anonymised analytics data. Here is a breakdown of the cookies Milwinn uses:

You can manage your cookie preferences through your browser settings. Disabling essential and security cookies will affect your ability to use the Milwinn platform. Disabling functional and analytics cookies will not affect core gameplay but may reduce the personalisation of your experience. Most mobile browsers on Android and iOS also provide cookie management controls in their privacy settings.

7 How Milwinn Protects Your Data

Milwinn uses a combination of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

  • 256-bit SSL encryption on all data transmitted between your device and Milwinn's servers — the same standard used by international banks.
  • Encrypted data storage — sensitive data including payment information and identity documents is stored in encrypted form in our databases.
  • Access controls — only authorised Milwinn personnel with a legitimate operational need can access player personal data. All access is logged and audited.
  • Two-factor authentication — available for player accounts to add an additional layer of protection to your login process.
  • Regular security audits — Milwinn undergoes independent security penetration testing and compliance audits on at least an annual basis.
  • Data minimisation — we only collect the personal data that is genuinely needed and delete data that is no longer required in line with our retention schedule.
  • Incident response plan — in the event of a data breach that poses a risk to your rights, Milwinn will notify you and the relevant regulatory authority within the timeframes required by applicable law.

While Milwinn takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You also play a role in keeping your data safe — keep your password strong and unique, do not share your login credentials, and contact support immediately if you suspect unauthorised access to your account.

milwinn
8 How Long We Keep Your Data

Milwinn does not keep your personal data longer than necessary. Retention periods vary depending on the type of data and the purpose for which it was collected:

  • Account and identity data: Retained for the duration of your account plus 5 years after account closure, as required by AML and financial regulations.
  • Transaction records: Retained for 7 years to meet financial record-keeping requirements.
  • KYC documents: Retained for 5 years after the completion of the verification process or account closure, whichever is later.
  • Communications and support records: Retained for 3 years after the last interaction or account closure.
  • Technical and usage data: Anonymised after 12 months; raw logs deleted after 90 days.
  • Marketing consent records: Retained for as long as you remain a Milwinn user, or until you withdraw consent.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you. If you request earlier deletion of your data (subject to the limitations described in Section 9), Milwinn will comply unless retention is required for legal or regulatory reasons.

9 Your Data Rights

As a Milwinn player, you have a range of rights over your personal data. These rights are meaningful and Milwinn is committed to honouring them. Here is what you can ask for and how to exercise each right:

Right of Access
Request a copy of all the personal data Milwinn holds about you. We will provide this within 30 days free of charge.
Right to Rectification
Ask us to correct any inaccurate or incomplete personal data we hold about you. You can update basic details directly in your account settings.
Right to Erasure
Request deletion of your personal data where it is no longer needed for the purpose it was collected. Note: we may be required to retain some data for legal reasons.
Right to Restrict Processing
Ask Milwinn to stop using your data for certain purposes — for example, while a dispute about its accuracy is being resolved.
Right to Data Portability
Request your data in a structured, machine-readable format so you can transfer it to another provider if you choose.
Right to Object
Object to Milwinn processing your data on the basis of legitimate interests, including for direct marketing. Marketing opt-outs take effect immediately.

To exercise any of these rights, contact Milwinn's data team at support@milwinn.com with the subject line "Data Rights Request" and a clear description of what you are asking for. Include your registered email address so we can verify your identity. We will acknowledge your request within 48 hours and provide a full response within 30 days.

10 Children's Privacy

Milwinn is strictly an 18+ platform. The Milwinn platform is not designed for, directed at, or intended for use by anyone under the age of 18. Milwinn does not knowingly collect personal data from children. If we discover that a registered user is under 18, that account will be immediately closed and any personal data collected will be deleted in accordance with our data retention policy.

If you believe that a minor has registered on Milwinn or provided personal data to us, please contact support@milwinn.com immediately so we can investigate and take appropriate action. Parents and guardians in Pakistan are encouraged to use device-level parental controls to prevent minors from accessing online gaming platforms.

11 Marketing Preferences & Opt-Out

Milwinn may send you promotional communications — including bonus offers, new game announcements, PSL promotions, and platform updates — via email and SMS to your registered Pakistan mobile number. We will only do this where you have given explicit consent at registration or have not opted out following a legitimate interest assessment.

Opting out of marketing communications from Milwinn is easy and can be done at any time:

  • Click the "Unsubscribe" link in any Milwinn marketing email
  • Reply STOP to any Milwinn SMS from your registered mobile number
  • Update your communication preferences in your Milwinn account settings
  • Contact support@milwinn.com and ask to be removed from all marketing lists

Opting out of marketing communications does not affect your ability to use your Milwinn account. You will still receive essential transactional messages such as deposit confirmations, withdrawal notifications, security alerts, and account management emails — these are not marketing and cannot be opted out of while your account is active.

12 International Data Transfers

Milwinn's primary data infrastructure is hosted on secure servers in Milwinn's operating jurisdiction. In some cases, data may be processed by our technology partners in other countries — for example, by our cloud hosting provider or game software supplier. Where this occurs, Milwinn ensures that appropriate safeguards are in place to protect your data to the same standard as required in Pakistan, including contractual data protection clauses with all international partners.

Milwinn does not transfer personal data to countries that do not provide an adequate level of data protection without first implementing appropriate safeguards such as standard contractual clauses or obtaining your explicit consent.

13 Changes to This Privacy Policy

Milwinn reviews and updates this Privacy Policy regularly to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes — changes that meaningfully affect how we collect or use your data — we will notify you by email and display a prominent notice on the Milwinn platform before the changes take effect.

The "Last Updated" date at the top of this page indicates when the current version came into effect. Minor clarifications or corrections that do not change the substance of the policy may be made without individual notification. If you continue to use Milwinn after a material change to this policy has been communicated to you, that constitutes your acceptance of the updated version.

Previous versions of this policy are available on request by contacting support@milwinn.com.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or how Milwinn handles your personal data, please get in touch:

  • Email: support@milwinn.com — use subject line "Privacy Policy Query" for fastest routing
  • Response time: All privacy queries are acknowledged within 48 hours; full responses within 30 days
  • Data Rights Requests: Use the subject line "Data Rights Request" and include your registered email address

If you are not satisfied with how Milwinn has responded to a privacy concern, you have the right to escalate your complaint to the relevant data protection or regulatory authority in Milwinn's operating jurisdiction. Milwinn will cooperate fully with any such investigation.

Before escalating a complaint, we encourage you to contact Milwinn directly at support@milwinn.com — the vast majority of privacy concerns can be resolved quickly and informally when raised directly with our team. We take every privacy query seriously and are committed to responding fairly and transparently.

How We Keep Your Data Safe Every Day

256-Bit SSL Encryption
Every piece of data that passes between your device and Milwinn's servers is encrypted using 256-bit SSL — the same standard used by major international banks. Your CNIC details, Easypaisa credentials, and account information are never transmitted in plain text.
Encrypted Database Storage
Sensitive data — including payment details and identity documents — is stored in encrypted form in Milwinn's databases. Even if a database were somehow accessed without authorisation, the data would be unreadable without the decryption keys, which are stored separately under strict access controls.
Strict Access Controls
Only Milwinn staff with a specific operational need are permitted to view player personal data. All access to player records is logged, audited, and reviewed. No member of Milwinn staff can access your full payment credentials — they are masked in all internal systems.
Annual Security Audits
Milwinn undergoes independent third-party security audits and penetration testing at least once per year. Any vulnerabilities identified are remediated on a priority basis. Audit results inform Milwinn's ongoing security improvement programme.
No Third-Party Data Sales
Milwinn has never sold player data to advertisers, data brokers, or any other commercial third party and commits never to do so. Your name, contact details, and betting history are not available for purchase by any entity outside Milwinn's operating structure.
Simple Marketing Opt-Out
Unsubscribing from Milwinn's promotional communications takes one click or one reply. Opt-outs are processed immediately and you will not receive further marketing within 24 hours. Your opt-out preference is stored permanently unless you choose to re-subscribe.

Your Privacy Is Protected — Play on Milwinn With Confidence

Milwinn protects your data with bank-grade encryption, never sells your information, and gives you full control over what we hold. Register today and experience Pakistan's most trusted online casino platform.