mliwin Privacy
Policy

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through mliwin.net is the operating entity that holds the applicable international gaming licence under which mliwin conducts its real-money gaming activities (hereinafter referred to as "mliwin", "we", "us", or "our").

As data controller, mliwin determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection obligations under our licensing framework and relevant international privacy standards.

mliwin collects personal data from you in the following circumstances: when you register an account, when you complete KYC (Know Your Customer) verification, when you make deposits or request withdrawals, when you use our games and services, when you contact our support team, and when you interact with our platform through normal browsing activity. The categories of personal data we collect are as follows:

mliwin does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data beyond what is strictly required for mandatory KYC identity verification under our licensing obligations.

mliwin processes your personal data only where a valid legal basis exists for doing so. The legal bases upon which we rely are:

• Contractual Necessity: Processing is necessary to perform our obligations under the player agreement — including account management, payment processing, game operation, and withdrawal processing. Without this processing, mliwin could not provide you with its services.
• Legal Obligation: Processing is required by our international gaming licensing obligations, including mandatory anti-money laundering (AML) compliance, age verification under responsible gaming regulations, and fraud prevention requirements.
• Legitimate Interests: Processing is carried out for mliwin's legitimate business interests — including platform security, fraud detection, responsible gaming monitoring, and service improvement analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Where processing is based on your consent — such as for optional marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

mliwin uses the personal data it collects for the following specific purposes:

• To create and manage your mliwin account, including account authentication, profile maintenance, and access control.
• To verify your identity and age in compliance with our international gaming licensing obligations. All players must be 21 years of age or older; KYC documentation is mandatory before withdrawals are processed.
• To process deposits and withdrawals in PKR through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard payment channels.
• To deliver gaming services — including cricket betting, live casino games, slot titles, coin games, and card games — and to ensure the integrity and fairness of those services.
• To comply with anti-money laundering obligations, including monitoring transaction patterns and reporting obligations to relevant authorities where required by law.
• To manage responsible gaming — including monitoring account activity for signs of problem gambling, communicating responsible gaming resources to at-risk players, and administering deposit limits, cooling-off periods, and self-exclusions.
• To provide customer support through our Urdu and English 24/7 support team, including responding to account queries, payment issues, and dispute resolution.
• To send service communications — including account confirmations, deposit receipts, withdrawal notifications, security alerts, and material policy changes.
• To improve our platform through anonymised analytics, A/B testing, and usage pattern analysis — all conducted in a manner that does not identify individual players.
• To detect and prevent fraud, including identification of suspicious login attempts, irregular wagering patterns, and payment fraud.
• To send marketing communications about mliwin promotions, bonus offers, and new game launches, where you have provided consent or where permitted under legitimate interests (subject always to your right to opt out).

mliwin does not sell, rent, or commercially trade your personal data to third parties. We share your personal data only in the following limited and controlled circumstances:

• Payment Processors: Your financial data is shared with payment service providers (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard) solely to the extent necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Your identity documents and verification data are shared with our licensed KYC verification partners who operate under strict data processing agreements and applicable data protection obligations.
• Game Software Providers: Where third-party game providers power specific games on the mliwin platform, limited technical session data may be shared with those providers for game operation purposes. Such providers are contractually bound to use that data solely for game delivery.
• Regulatory Authorities: mliwin may be required to disclose player data to our licensing authority, financial intelligence units, or other competent authorities where required by applicable law, regulation, or a valid court order.
• Fraud Prevention & AML Services: Your data may be cross-referenced with industry fraud prevention and AML screening databases where required by our licensing obligations.
• Professional Advisors: In limited circumstances, mliwin may share data with legal counsel, auditors, or other professional advisors who are bound by confidentiality obligations.

All third parties with whom mliwin shares personal data are required to implement appropriate technical and organisational security measures and to process that data only in accordance with mliwin's instructions and for the specific purposes for which it was shared.

mliwin retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention schedule applies as a general guide:

Upon expiry of the applicable retention period, mliwin will securely delete or anonymise your personal data in a manner that renders individual identification impossible. Where anonymisation is applied, the resulting anonymised dataset is no longer personal data and falls outside the scope of this Privacy Policy.

mliwin implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and mliwin's servers — including login credentials, payment information, and account data — is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Hashed Password Storage: mliwin does not store passwords in plain text. All passwords are stored using one-way cryptographic hashing with salting, making them unreadable even to mliwin's own technical staff.
• Two-Factor Authentication: mliwin supports and strongly encourages the use of SMS OTP two-factor authentication on all player accounts, adding an additional layer of identity verification beyond the password alone.
• Access Controls: Access to player personal data within mliwin's internal systems is restricted on a strict need-to-know basis. Only staff with a legitimate business reason are granted access, and all access is logged and audited.
• Vulnerability Management: mliwin conducts regular security assessments, penetration testing, and vulnerability scanning of its platform infrastructure.
• Incident Response: mliwin maintains a data breach incident response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, mliwin will notify affected players and relevant authorities in accordance with applicable legal requirements.

mliwin uses cookies and similar tracking technologies on the mliwin.net platform. Cookies are small text files stored on your device that allow us to recognise your browser, maintain your session, and deliver a personalised and secure experience. The categories of cookies mliwin uses are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your mliwin session. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences — such as language settings, game display configurations, and responsible gaming limit settings — so you do not need to re-enter them on each visit.
• Analytical Cookies: Used to collect anonymised information about how players interact with the mliwin platform — including which games are visited most frequently, how users navigate between sections, and where technical errors occur. This information is used solely to improve the platform.
• Marketing Cookies: Where you have provided consent, marketing cookies may be used to deliver relevant mliwin promotional content. You may withdraw consent for marketing cookies at any time through your browser or cookie settings.

You may configure your browser to reject all cookies or to alert you when cookies are being set. However, disabling strictly necessary cookies will prevent mliwin from functioning correctly and will make login and account access impossible.

mliwin operates as an internationally licensed gaming platform. As a result, some of your personal data may be processed or stored on servers located outside Pakistan. Where such international data transfers occur, mliwin ensures that appropriate safeguards are in place to provide a level of data protection equivalent to the standards described in this Privacy Policy.

Safeguards for international transfers may include contractual data transfer agreements between mliwin and its service providers, adherence to internationally recognised data protection frameworks, or transfer to recipients in jurisdictions that offer an adequate level of data protection as determined by the applicable regulatory framework governing our licensing.

As a registered mliwin player, you hold a number of rights over your personal data under applicable data protection principles. You may exercise any of the following rights by contacting mliwin's support team at [email protected]:

• Right of Access: You have the right to request a copy of the personal data mliwin holds about you, along with information about how that data is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your mliwin account.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding retention obligations under our licensing framework.
• Right to Restrict Processing: You may request that mliwin restricts its processing of your data in certain circumstances — for example, while we investigate a dispute about the accuracy of the data.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your data where that processing is carried out on the basis of legitimate interests, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

mliwin does not knowingly collect personal data from individuals under the age of 21. The platform's real-money gaming services are strictly restricted to adults aged 21 and above in accordance with our international gaming licensing obligations. Age verification is a mandatory step in the mliwin registration and KYC process — no player can access real-money gaming features without confirming their age through verified documentation.

Pakistani parents and guardians are encouraged to use device-level parental controls and to actively monitor internet usage to prevent minors from accessing online gaming platforms. mliwin does not direct any of its marketing communications toward individuals who are, or who appear to be, under the age of 21.

Where you have provided consent at the time of registration, or where mliwin has a legitimate interest in doing so under applicable law, we may send you promotional communications about mliwin bonuses, new game launches, PSL betting promotions, seasonal casino offers, and other platform news. These communications may be delivered via email, SMS to your registered Pakistani mobile number, or in-platform notifications.

You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link included in any mliwin marketing email; (b) updating your communication preferences in your mliwin account settings; or (c) contacting mliwin support at [email protected] to request removal from marketing lists.

Please note that opting out of marketing communications does not affect the delivery of essential service communications — including deposit receipts, withdrawal confirmations, security alerts, account notifications, and material policy updates. These communications are essential to the operation of your mliwin account and cannot be disabled.

The mliwin platform may include content delivered by or links to third-party services — including game software providers, payment processors, and analytics services. mliwin does not control the privacy practices of those third parties and is not responsible for the content of their privacy policies or their data handling practices. Where you interact directly with a third-party service accessible through the mliwin platform, the privacy policy of that third party governs the processing of your data by them.

All third-party service providers that process personal data on mliwin's behalf do so under contractual data processing agreements that impose obligations consistent with the standards described in this Privacy Policy.

mliwin reserves the right to update or amend this Privacy Policy from time to time in response to changes in applicable law, our licensing obligations, our business practices, or the services we offer. Where material changes are made to this Privacy Policy, mliwin will notify registered players via email or via a prominent notice on the platform at least 14 days before the updated policy takes effect.

The effective date displayed at the top of this page reflects the most recent revision. Your continued use of the mliwin platform after an updated Privacy Policy takes effect constitutes your acknowledgement of and agreement to the revised terms. If you do not agree to the revised Privacy Policy, you should cease using the platform and request account closure before the revised policy takes effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy, mliwin's data handling practices, or the exercise of your data rights, please contact our Data Protection team:

Email: [email protected]

mliwin's support team is available 24 hours a day, 7 days a week, in both Urdu and English. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

If you are not satisfied with mliwin's response to a privacy complaint, you may have the right to escalate your complaint to the supervisory authority responsible for data protection in the jurisdiction in which mliwin holds its gaming licence. Details of the relevant supervisory authority are available from mliwin upon request.