Your privacy matters to us as much as your gaming experience. This Privacy Policy explains clearly what data Milwin collects from Pakistani players, why we collect it, how it is stored and protected, and exactly what rights you have over your own information.
This Privacy Policy describes how Milwin ("we", "us", "the platform") collects, uses, stores, and protects personal information provided by players and visitors of milwin.biz. It covers all services available on the platform including sports betting, cricket wagering, Teen Patti, Poker, Baccarat, Roulette, Ludo Games, and all promotional programmes.
Milwin is committed to handling your personal data with genuine care. We collect what we need to operate the platform properly, we protect it to a high standard, and we do not use it for purposes you would not reasonably expect. This Policy is written in plain, straightforward English so that players across Pakistan can understand exactly what happens with their information — not buried in legal language designed to confuse.
By registering an account on Milwin, making a deposit, or using any of our services, you acknowledge that you have read and understood this Privacy Policy. If you have any questions about how your data is handled at any point, contact us directly at support@milwin.biz — we will give you a clear, direct answer.
Quick Summary: We collect your data to run the platform and process payments. We protect it properly. We do not sell it. You can see it, correct it, or ask us to delete it.
Milwin collects personal data through several channels. Below is a complete account of what we collect and where it comes from.
When you create a Milwin account, we collect:
For large withdrawals, bonus eligibility verification, or when legally required, Milwin may request:
Every deposit and withdrawal generates a transaction record. Milwin logs:
Full card numbers are never stored by Milwin. Card payments are processed through certified third-party payment gateways that handle and store card data under their own PCI DSS compliance obligations.
Milwin maintains complete records of all gaming activity including bets placed, game outcomes, amounts wagered, winnings, and session durations. This data is essential for game integrity audits, dispute resolution, and responsible gaming monitoring.
When you use milwin.biz, we automatically collect:
All communications between you and the Milwin support team — including emails, live chat transcripts, and any documents shared — are recorded and stored as part of your account record.
Note on Sensitive Data: Milwin does not collect or process sensitive personal data categories such as biometric data, religious beliefs, health information, or political opinions. The only identity document we may request is your CNIC, which is a standard requirement in Pakistan for financial account verification.
Milwin uses personal data for specific, defined purposes. We do not use your data for anything beyond what is described here.
| Purpose | Data Used | Why It's Necessary |
|---|---|---|
| Account creation & management | Registration data | To provide you with a Milwin account |
| Age & identity verification | DOB, CNIC | Legal requirement; 18+ policy enforcement |
| Processing deposits & withdrawals | Financial transaction data | To move funds accurately to/from your account |
| Game operation & integrity | Gaming activity data | To run certified fair games and settle bets |
| Anti-money laundering (AML) | Transaction data, identity data | Legal obligation; fraud prevention |
| Responsible gaming monitoring | Gaming activity, session data | To identify and support players showing risk signs |
| Customer support | Account data, support communications | To resolve queries, disputes and complaints |
| Platform security | Technical data, IP address | To detect and prevent fraud and unauthorised access |
| Service improvement | Aggregated, anonymised usage data | To improve platform features and performance |
| Promotional communications | Contact details (opt-in only) | To inform you of relevant bonuses and offers |
Milwin does not use personal data for profiling, automated decision-making with legal consequences, or for selling advertising space targeted at individual players.
Milwin processes personal data on the following legal grounds:
The majority of data processing at Milwin is necessary to fulfil the contract between us and you as a registered player. Without processing your registration data, financial data, and gaming activity, we cannot operate your account, process your bets, or pay your winnings.
Certain processing is required by law. Identity verification and transaction monitoring for anti-money laundering (AML) purposes are legal requirements that Milwin must comply with. We cannot waive these requirements for any player regardless of account history.
Milwin processes some data on the basis of legitimate interest — specifically, fraud detection, platform security, game integrity auditing, and responsible gaming monitoring. These activities protect both individual players and the integrity of the platform as a whole.
Where Milwin sends optional promotional communications — such as email notifications about new bonuses or seasonal promotions — this is done only with your explicit consent given during registration or in your account preferences. You can withdraw this consent at any time by updating your preferences or by emailing support@milwin.biz.
Milwin does not sell personal data. We share data only in the specific circumstances described below, and only to the minimum extent necessary.
To process deposits and withdrawals, Milwin shares transaction data with certified payment processors including the gateway operators behind Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payment networks. These processors receive only the data required to complete your specific transaction. They are contractually bound to process your data only for this purpose and to maintain appropriate security standards.
Where automated identity verification is used — for example, to cross-reference CNIC data — this is processed through certified third-party verification services operating under strict data processing agreements.
Milwin will disclose personal data to relevant authorities if legally required to do so — for example, in response to a lawful court order, regulatory investigation, or law enforcement request. We cannot notify you of such disclosures in all cases, but will do so where legally permissible.
To protect the platform and its players, Milwin participates in industry fraud prevention networks. Where an account is identified as engaging in fraudulent activity — including identity fraud, payment fraud, or systematic bonus abuse — relevant identifying information may be shared within these networks to prevent repeat offences on other platforms.
In plain terms: Your data goes to payment processors when you make transactions, to verification services when identity checks are needed, and to authorities when the law requires it. That is it. Nobody else gets your data.
Financial security is a top priority at Milwin. Given that the platform handles real PKR transactions for hundreds of thousands of Pakistani players, the integrity of payment data is something we invest in seriously.
All data transmitted between your device and milwin.biz is encrypted using TLS (Transport Layer Security) encryption. This is the same standard used by online banking in Pakistan. All data stored on Milwin's servers is encrypted at rest.
Milwin does not store full card numbers. When you make a card payment, your card data is processed directly by our certified payment gateway, which handles it under PCI DSS (Payment Card Industry Data Security Standard) compliance. Milwin only retains a tokenised reference that allows us to link the transaction to your account without retaining sensitive card information.
For Easypaisa and JazzCash transactions, Milwin stores only the mobile number associated with the wallet and the transaction reference numbers. No mobile wallet credentials or PIN information ever passes through Milwin's systems.
Access to player financial data within Milwin is restricted on a strict need-to-know basis. Not all Milwin staff have access to payment records — only those whose role specifically requires it, and all such access is logged and auditable.
Milwin undergoes regular third-party security audits. These audits test both the technical infrastructure and the data handling procedures to identify and address any vulnerabilities before they can be exploited.
Milwin uses cookies and similar technologies on milwin.biz to make the platform work correctly and to understand how it is being used.
These are cookies that the platform cannot function without. They maintain your login session, remember your currency and language preferences, and enable the games to run. You cannot opt out of essential cookies without disabling core platform functionality.
Milwin uses anonymised analytics to understand how players navigate the platform — which pages are most visited, where players drop off, and which features are used most frequently. This data is aggregated and cannot be used to identify individual players. It informs our product improvement decisions.
Certain cookies are used specifically for fraud detection and security purposes — for example, to identify unusual login patterns or to flag accounts being accessed from multiple geographic locations simultaneously.
You can manage or delete cookies through your browser settings. Deleting essential cookies will affect your ability to use Milwin normally — you may need to log in again and your preferences may be reset. Deleting analytical or security cookies will not significantly affect your gaming experience but may reduce our ability to detect suspicious activity on your account.
No Third-Party Ad Tracking: Milwin does not allow third-party advertising networks to place tracking cookies on milwin.biz. The cookies we use are Milwin's own and those of our directly contracted service providers only.
Milwin retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with legal obligations. The general retention periods are:
When data is no longer required for the purposes for which it was collected and legal retention obligations have been met, Milwin deletes or anonymises it securely.
As a Milwin player, you have meaningful rights over your personal data. These are real rights you can exercise at any time by contacting us at support@milwin.biz.
You can request a complete copy of all personal data Milwin holds about you. We will provide this within 30 days of your request at no charge. The response will include what data we hold, where we got it from, and how we use it.
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. Most basic account information can be updated directly in your account settings. For identity documents, contact support.
You can request that Milwin delete your personal data. We will do so where we are not legally required to retain it. Financial and identity records subject to legal retention obligations cannot be deleted before the minimum retention period expires.
You can ask Milwin to restrict processing of your data in certain circumstances — for example, if you contest the accuracy of data we hold while we verify it. During restriction, we will store but not actively process the relevant data.
You can request your personal data in a machine-readable format — typically CSV or JSON — for your own records or to transfer to another service. This applies to data you directly provided to us during registration and account use.
You can object to Milwin processing your data for marketing purposes at any time. You can also object to processing based on legitimate interest, though we may need to continue processing if we have compelling legitimate grounds that override your objection.
To exercise any of the rights above, send an email to support@milwin.biz with the subject line "Data Rights Request" and describe what you are requesting. Please include your registered Milwin username and mobile number so we can identify your account. We will respond within 30 days. Where requests are complex or numerous, we may extend this to 60 days — we will inform you if this is the case.
There is no charge for exercising your data rights. We will never penalise you for making a legitimate request about your personal data.
Milwin's services are strictly for players aged 18 and above. We do not knowingly collect personal data from anyone under 18. The age verification requirement during registration exists specifically to prevent underage persons from accessing the platform.
If Milwin discovers that a registered account belongs to a person under 18, the account will be immediately closed, all gaming activity will be voided, and any balance will be returned to the payment method used for the deposit. The personal data associated with the underage account will be deleted except where retention is required by law.
If you believe that a person under 18 has created a Milwin account, please contact us immediately at support@milwin.biz. We take this seriously and will investigate and act quickly.
Despite all security measures, no system is entirely immune to security incidents. Milwin has a formal procedure for responding to data breaches that is designed to minimise harm to players and respond as quickly as possible.
Milwin's security systems monitor for unusual access patterns and potential breaches continuously. On detection of a suspected breach, the incident response team is activated immediately to contain the threat and assess the scope of any data exposure.
If a breach is confirmed that is likely to result in risk to your personal data, Milwin will notify affected players as promptly as possible. Notification will be made via the email address or mobile number registered to your account and will clearly describe what data may have been affected, what steps Milwin has taken, and what actions you should take to protect yourself.
Where required by applicable regulations, Milwin will also notify relevant authorities of serious data breaches within the required timeframe.
What you can do: Ensure your Milwin account has a strong, unique password and that you are not using the same password on other services. Enable any available two-factor authentication on your account. Contact support immediately if you notice any suspicious activity.
Milwin may update this Privacy Policy from time to time. When we make material changes — changes that affect how we handle your personal data in a significant way — we will notify registered players via email or in-platform notification at least 7 days before the changes take effect.
Minor updates such as clarifications of existing practices or corrections of typographical errors may be made without advance notice. The "Last Updated" date at the top of this page will always reflect when the Policy was most recently revised.
If you continue to use Milwin after a Privacy Policy update takes effect, you are accepting the updated Policy. If you do not accept a material change, you should stop using the platform and contact support to arrange account closure and balance withdrawal before the change takes effect.
We recommend reviewing this page periodically if you are a regular Milwin user — particularly before making significant deposits or providing any additional personal information.
If you have any questions, concerns, or requests relating to this Privacy Policy or how Milwin handles your personal data, please get in touch directly. We have a straightforward and responsive process for privacy-related queries.
For general questions about your Milwin account or games, please also check our FAQ page — many common questions are answered there. For questions specifically about how your data is protected or how to exercise your data rights, email us directly for the most complete and accurate response.
These are not just policy statements. They are things Milwin actually does — every day — to protect your personal data.
Every byte of data that moves between your device and milwin.biz travels through TLS encryption — the same technology that protects online banking in Pakistan. Data at rest on Milwin's servers is also encrypted. Anyone intercepting the connection between you and the platform gets nothing useful.
Milwin never stores your full card number or mobile wallet credentials. Card payments go directly through a PCI DSS-certified gateway. Easypaisa and JazzCash transactions use only your mobile number as reference. Even if Milwin's own systems were compromised, your payment credentials would not be at risk.
The data usage table in Section 3 of this Policy lists every single purpose for which Milwin uses your data. It is not hidden behind vague language about "improving services" or "third-party partners." You can see exactly what data is used for what purpose and why it is necessary.
Within Milwin, access to player data is restricted based on role. Support staff can see the account information they need to help you. Finance staff can see transaction records. Developers cannot access live player data. Every access to sensitive data is logged and auditable — no unauthorised browsing of player records is possible.
Milwin commissions independent third-party security audits on a regular schedule. These audits cover both technical infrastructure and operational data-handling procedures. The findings are used to make continuous improvements. This is the same standard of scrutiny applied to our RNG fairness audits — external, independent, and documented.
The rights listed in Section 9 are real and exercisable — not decorative. Milwin responds to data access requests within 30 days at no charge. If you want to know what data we hold about you, get a copy, correct it, or ask us to delete it, the process is a single email. We do not create obstacles to legitimate data rights requests.
Milwin handles your data with the same care we put into every part of the platform. Register free, deposit in PKR via Easypaisa or JazzCash, and start playing Pakistan's most trusted online gaming platform today.