Last Updated: 1 January 2025

Milvin Privacy Policy – How We Protect Your Data in Pakistan

At Milvin, your personal information is treated with the same care we give to your funds. This Privacy Policy explains exactly what data we collect, why we need it, who we share it with, and the rights you have over it as a Pakistani player. We don't bury the important stuff in fine print — here it is, clearly stated.

Our Data Protection Commitments at a Glance

Six plain-language pledges Milvin makes to every Pakistani player. These summaries do not replace the full policy sections below.

Your Data Is Encrypted

All data transmitted between your device and Milvin's servers is encrypted using TLS/SSL. Sensitive data like passwords is hashed and never stored in plain text anywhere in our system.

We Never Sell Your Data

Milvin does not sell, rent, or trade your personal information to third parties for commercial marketing purposes. Your data stays within the purpose for which you provided it.

You Control Your Data

You can request a copy of your personal data, ask us to correct inaccuracies, or request deletion of data we no longer need — all by contacting our support team directly.

Minimal Data Collection

Milvin only collects data that is genuinely necessary for operating your account, processing transactions, verifying identity, and complying with legal obligations. Nothing extra.

Regulated Sharing Only

Where we do share data — with payment processors or identity verification partners — it is governed by strict contractual agreements that prevent those parties from using your data for any other purpose.

Marketing Is Opt-In

Milvin will only send you promotional communications if you explicitly opt in. You can unsubscribe at any time from your account settings or by contacting support — no lengthy forms required.

milvin

Milvin is built mobile-first for Pakistani players — and our data protection practices are designed around how Pakistani players actually use the platform.

01Introduction

This Privacy Policy describes how Milvin ("we", "us", "our") collects, stores, uses, and protects the personal data of players who register and use the platform at milvin.biz ("the Platform"). It applies to all interactions with Milvin, including account registration, deposits, betting and gaming activity, customer support communications, and use of our mobile interface.

By registering an account with Milvin, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described here. This Policy should be read alongside Milvin's Terms and Conditions, which form the overall agreement governing your use of the platform.

Milvin takes data privacy seriously. As a platform built specifically for Pakistani players, we understand that trust is everything. Pakistani users routinely provide mobile numbers, CNIC details, and financial information to digital services — and the standards we apply to protecting that information are non-negotiable for us. Every member of Milvin's team who handles player data is trained on data protection obligations.

Plain language note: This Policy is written to be clearly understood, not to bury key points in legal language. If you have questions about anything here, our support team is available 24/7 at support@milvin.biz.

02Data We Collect

Milvin collects only the personal data that is genuinely necessary for operating your account and providing our services. We do not collect data speculatively or for purposes beyond those described in this Policy. Here is exactly what we collect:

2.1 Registration Data

When you create a Milvin account we collect:

  • Full name (as it appears on your CNIC or passport)
  • Date of birth (to verify you are aged 18 or over)
  • Pakistani mobile number
  • Email address
  • Chosen username and password (password is hashed — we never see it in plain text)
  • City and province of residence

2.2 Identity Verification Data

Before processing your first withdrawal, Milvin collects:

  • CNIC number and a scan or photo of your CNIC (front and back), or passport bio-page
  • A live selfie or photograph for face-matching against your ID document
  • Proof of address where requested for larger withdrawal amounts

Identity documents are processed by a certified third-party identity verification partner and are not stored on Milvin's primary servers beyond the retention period described in Section 6.

2.3 Transaction Data

Every deposit, withdrawal, bet, and game result on Milvin generates a transaction record. This includes the amount, date and time, payment method reference (e.g., Easypaisa transaction ID), and balance before and after the transaction. This data is essential for account management, dispute resolution, and regulatory compliance.

2.4 Technical Data

When you access Milvin, our systems automatically record:

  • IP address at login
  • Device type and operating system
  • Browser type and version
  • Session duration and pages visited
  • App version (where applicable)

Technical data is used for security monitoring, fraud detection, and improving platform performance. It is not used to build commercial marketing profiles.

2.5 Customer Support Communications

When you contact Milvin's support team, we retain records of all communications including live chat transcripts, email correspondence, and support ticket content. This allows us to provide consistent service and resolve disputes fairly.

2.6 Data You Choose to Provide

If you participate in promotions, surveys, or competitions run by Milvin, you may provide additional information voluntarily. We only use this data for the stated purpose of that activity.

milvin

From Islamabad to Karachi, every Milvin player's data is protected under the same Privacy Policy — consistent standards across all of Pakistan.

03How We Use Your Data

Milvin uses your personal data for the following purposes only:

Purpose Data Used
Creating and managing your account Registration data, technical data
Processing deposits and withdrawals Transaction data, payment method details, identity data
Verifying your age and identity CNIC / passport data, selfie photograph
Preventing fraud and money laundering All categories, including transaction patterns and IP data
Resolving customer support queries Support communications, account and transaction data
Improving platform performance Technical and session data (anonymised where possible)
Sending account notifications Mobile number, email address
Sending promotional communications Mobile number, email (only with your explicit consent)
Complying with legal and regulatory obligations Identity, transaction, and communication data as required
Responsible gaming monitoring Betting history, deposit and loss patterns

Milvin does not use your data to build commercial advertising profiles, does not profile you for third-party marketing, and does not make automated decisions that produce legal or significant effects on you without human review.

05Who We Share Your Data With

Milvin does not sell, rent, or trade your personal data. We share data only in the specific circumstances described below, and only to the minimum extent necessary:

5.1 Payment Processors

When you deposit or withdraw using Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer, or a debit card, we share the transaction details necessary to complete that payment with the relevant payment service provider. These providers operate under their own privacy policies and are contractually prevented from using your data for any purpose beyond processing the specific transaction.

5.2 Identity Verification Partners

For CNIC verification and age confirmation, Milvin works with a certified identity verification service. Your ID document images and selfie are transmitted to this service over encrypted connections. The verification partner processes this data solely for the purpose of verifying your identity and is bound by strict data processing agreements.

5.3 Regulatory and Law Enforcement Authorities

Milvin may be required by law to disclose personal data to relevant Pakistani regulatory authorities, law enforcement agencies, or courts. Any such disclosure is made only to the extent legally required and is documented in our compliance records. Where legally permitted, Milvin will attempt to notify the affected player before complying with such a request.

5.4 Technology Service Providers

Milvin uses cloud hosting, database, and technical service providers to operate the platform. These providers may process personal data as part of delivering their services to Milvin. All such providers are under strict contractual data processing agreements that prevent them from accessing, using, or retaining your data beyond what is necessary for the service they provide to Milvin.

5.5 No Third-Party Marketing

Milvin will never share your personal data with third parties for the purpose of marketing their own products or services to you. If you receive what appears to be a marketing communication from a third party claiming to represent Milvin, please report it to our support team immediately as it may be a phishing attempt.

06Data Retention

Milvin retains personal data for as long as it is needed for the purpose for which it was collected, or as required by legal and regulatory obligations. Below is a summary of our standard retention periods:

Account Registration Data

Retained for the duration of your active account plus 5 years following account closure, to comply with anti-money laundering record-keeping obligations.

Identity Documents (CNIC / Passport)

Retained for 5 years from the date of verification or from the date of account closure, whichever is later, as required by KYC and AML regulations.

Transaction Records

All deposit, withdrawal, bet, and game records are retained for 7 years for financial record-keeping and regulatory compliance purposes.

Customer Support Communications

Retained for 3 years from the date of the most recent communication in a given thread, to allow for accurate dispute resolution and service quality review.

Technical and Session Logs

Retained for 12 months for security monitoring and fraud detection purposes, after which they are deleted or anonymised.

Marketing Consent Records

Retained until you withdraw consent, plus 12 months to document your opt-in and opt-out history for compliance purposes.

When data reaches the end of its retention period, it is either securely deleted or anonymised so it can no longer be associated with your identity. We do not retain data "just in case" — every piece of data has a defined retention period and a defined deletion process.

milvin

Whether you're in Skardu or Karachi, your Milvin data is governed by the same consistent protection standards throughout Pakistan.

07Security Measures

Milvin implements a multi-layered security framework to protect your personal data. The measures we have in place include:

  • TLS/SSL encryption on all connections between your device and our servers — the padlock in your browser confirms this is active.
  • Password hashing using industry-standard algorithms — your password is never stored in a format that anyone at Milvin can read.
  • Two-factor authentication (2FA) available to all players — we strongly encourage you to enable this in your account settings.
  • Access controls — Milvin staff can only access player data on a strict need-to-know basis, with all access logged and audited.
  • Regular security audits and penetration testing conducted by independent security professionals.
  • Fraud detection systems that monitor login patterns, transaction behaviour, and device fingerprints for signs of unauthorised access.
  • Data segregation — player funds are held in accounts separate from Milvin's operating funds, and player data is stored in databases separate from operational systems.

7.1 Data Breach Procedure

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Milvin will notify affected players by email and platform notification within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the data affected, the likely consequences, and the steps Milvin is taking to address it.

While Milvin takes all reasonable technical and organisational measures to protect your data, no digital platform can guarantee absolute security. You also have a role to play — use a strong, unique password for your Milvin account, enable 2FA, and log out after each session on shared devices.

08Your Data Rights

As a Milvin player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@milvin.biz. We will respond within 30 days, and we will not charge you for making a request.

You have the right to request a copy of all personal data Milvin holds about you. This is commonly called a Subject Access Request (SAR). Milvin will provide a structured copy of your data within 30 days of your request. For complex requests involving large volumes of data, we may extend this by up to 30 additional days — we will let you know if this applies.

If you believe any personal data Milvin holds about you is inaccurate or incomplete, you have the right to request that we correct it. For most account details (name, phone number, email), you can update these directly in your account settings. For more significant corrections (such as correcting identity document details), contact support with supporting documentation.

You can request that Milvin deletes your personal data. We will delete all data that we are not legally required to retain. Some data — particularly identity and transaction records — must be kept for regulatory compliance periods (see Section 6). We will clearly explain what has been deleted and what must be retained, and why, in response to any deletion request.

Where Milvin processes your data on the basis of legitimate interests (such as fraud monitoring or platform analytics), you have the right to object to that processing. We will review your objection and stop processing unless we have compelling legitimate grounds that override your interests. You have an absolute right to object to any processing of your data for direct marketing purposes.

For data you have provided to Milvin directly and that we process on the basis of your consent or contract performance, you have the right to receive that data in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service if you wish. Contact support to make a portability request.

Where Milvin processes your data on the basis of your consent — primarily for marketing communications — you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal, and it does not affect any other aspect of your Milvin account. To withdraw consent, update your communication preferences in account settings or contact support.

09Cookies and Tracking Technologies

Milvin uses cookies and similar technologies to operate and improve the platform. Here is a breakdown of what we use and why:

9.1 Essential Cookies

These cookies are required for the platform to function. They manage your login session, maintain your bet slip state, and ensure the platform responds correctly to your actions. You cannot opt out of essential cookies and continue to use the platform — they are the technical foundation that keeps your session active and secure.

9.2 Analytics Cookies

Milvin uses anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. This helps us prioritise improvements. Analytics data is aggregated and cannot be used to identify individual players. You can opt out of analytics cookies in your account preferences.

9.3 Preference Cookies

These cookies remember your platform preferences — such as language settings, odds format (decimal or fractional), and display options — so you don't have to reconfigure them each time you log in. They improve your experience but are not essential to core functionality.

9.4 No Third-Party Advertising Cookies

Milvin does not place third-party advertising cookies on your device. We do not use advertising networks, retargeting platforms, or social media tracking pixels that build commercial profiles of our players. What you do on Milvin stays on Milvin.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your Milvin account. Disabling preference cookies will reset your display settings on each visit.

10Protection of Minors

Milvin is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is performed during the registration process and again before the first withdrawal is processed.

If Milvin discovers or has reason to believe that an account belongs to a person under 18, the account will be immediately suspended, all funds will be withheld pending investigation, and the matter may be referred to appropriate authorities. Any data collected from an underage user will be deleted as soon as practicable after discovery, except where retention is required for legal compliance purposes.

If you believe a minor has registered on Milvin, please report this to our support team immediately at support@milvin.biz. We take all such reports seriously and will investigate promptly.

11International Data Transfers

Milvin's primary operations are focused on Pakistan and the platform is designed to serve Pakistani players. Some of our technology service providers — such as cloud infrastructure providers — may process data on servers located outside Pakistan. Where international data transfers occur, Milvin ensures that:

  • Data is transferred only to service providers who maintain equivalent levels of data protection to those described in this Policy.
  • Appropriate contractual safeguards (standard data processing agreements) are in place before any transfer occurs.
  • Transfers are strictly limited to what is necessary for the service being provided.
  • No personal data is transferred to any party for commercial marketing or profiling purposes.

Milvin does not transfer your personal data to any country or jurisdiction where applicable data protection law provides materially weaker protections than those described in this Policy without ensuring appropriate contractual safeguards are in place.

12Changes to This Privacy Policy

Milvin may update this Privacy Policy from time to time. When material changes are made, we will notify active players via email (to the registered email address on your account) and via a notice displayed on the platform no less than 7 days before the changes take effect. Minor changes — such as correcting grammatical errors, updating our contact details, or adding clarity to existing statements — may be made without prior notice.

The date of the most recent update is displayed at the top of this page. If you continue to use Milvin after any update to this Policy, you confirm that you have read and accepted the updated terms. If you disagree with any change, you should stop using the platform and contact support to close your account.

Previous versions of this Privacy Policy are available on request from our support team.

13Contact and Data Requests

For any questions about this Privacy Policy, to exercise any of your data rights, or to raise a privacy-related complaint, please contact Milvin's data team through the following channels:

  • Email: support@milvin.biz — for all data requests and privacy queries, please use the subject line "Privacy Request – [Your Account Reference]"
  • Live Chat: Available 24/7 from within your logged-in Milvin account

Milvin will acknowledge all privacy-related requests within 24 hours and will provide a substantive response or request any additional verification within 30 days. In cases of unusual complexity, we may extend this by up to an additional 30 days — you will be notified in advance if this applies to your request.

If you are not satisfied with how Milvin has handled a privacy concern after contacting us, you have the right to raise the matter with the relevant data protection authority in your jurisdiction.

We respond to all privacy emails within a few hours during Pakistan Standard Time business hours. Complex access requests that require collating data across multiple systems may take up to the full 30-day window — we will keep you informed of progress throughout.

Your Data Is Protected — Now Enjoy the Platform

Register your Milvin account and bet on cricket, football, poker, baccarat, and virtual sports — all in PKR, with transparent data practices and instant Easypaisa and JazzCash payments.

18+ only.  |  Responsible Gaming  |  Terms and Conditions