milwan Privacy Policy —
Your Data, Your Rights

01 Introduction

This Privacy Policy ("Policy") is published by milwan ("milwan", "we", "us", "the Platform", "the Operator") and applies to all personal data collected, processed, stored, and transmitted by milwan through its website at milwan.net, its mobile-optimised platform, and all associated services including milwan Casino, milwan sportsbook, and the milwan Login portal.

milwan processes personal data in accordance with the data protection principles established under its international gaming licence obligations and applicable international privacy standards, including the principles of data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality.

By registering a milwan account, using the milwan platform, or simply browsing milwan.net, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, please discontinue use of the milwan platform and contact the milwan support team to close your account.

02 Personal Data We Collect

milwan collects the following categories of personal data from registered players and platform visitors. The specific data collected depends on the nature of your interaction with the milwan platform:

milwan does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for the purpose of uniquely identifying a natural person — except where a liveness selfie check is required as part of mandatory KYC verification, in which case such data is processed solely for identity confirmation and immediately deleted upon verification completion.

03 How We Collect Your Data

milwan collects personal data through the following channels and methods:

• Direct Registration: When you create your milwan account via the milwan Login registration page, you directly provide identity, contact, and age verification data.
• KYC Document Submission: When you submit documents to complete identity verification before your first withdrawal, milwan receives and processes the documents you upload.
• Financial Transactions: Every deposit and withdrawal you make on milwan generates a transaction record that includes payment method identifiers, amounts, timestamps, and transaction reference numbers.
• Platform Usage: As you navigate the milwan Casino, place cricket bets, or spin the slots, milwan automatically records your gameplay activity, session data, and wagering patterns. This is necessary for game integrity, responsible gaming monitoring, and licence compliance.
• Cookies and Tracking Technologies: milwan uses cookies, web beacons, and similar technologies to collect technical data about your device and browsing behaviour on milwan.net. See Section 8 for full details.
• Customer Support Interactions: When you contact milwan's 24/7 live chat team or send an email to [email protected], the content of those communications is recorded and stored as part of your player record.
• Third-Party Verification Services: milwan may use regulated third-party identity verification providers to cross-check the documents you submit. These providers process your data on milwan's behalf under strict data processing agreements.

04 How We Use Your Personal Data

milwan processes your personal data for the following specific, documented purposes:

• Account Management: To create, maintain, and administer your milwan account, including processing your milwan Login credentials securely and keeping your account details accurate and up to date.
• Identity & Age Verification: To verify that you are a real person, that you are 21 years of age or older, and that you are the legitimate holder of the payment methods linked to your account. This is a non-negotiable legal requirement under milwan's gaming licence.
• Payment Processing: To process your PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, USDT, and Bitcoin — and to maintain accurate financial records for audit purposes.
• Game Delivery & Platform Operation: To deliver the games and services you use on milwan — including milwan Casino table games, slots, cricket betting markets, and Go Goal Bingo — and to ensure they function correctly on your device.
• Responsible Gaming: To monitor your wagering activity for indicators of problem gambling behaviour and to enforce any deposit limits, loss limits, cooling-off periods, or self-exclusion requests you have set. milwan is obligated under its gaming licence to conduct proactive responsible gaming monitoring.
• Anti-Fraud & Security: To detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and other forms of prohibited conduct as defined in milwan's Terms and Conditions.
• Customer Support: To respond to your enquiries, complaints, and support requests efficiently and to maintain a record of resolutions for quality assurance purposes.
• Legal & Regulatory Compliance: To comply with applicable AML obligations, gaming licence requirements, law enforcement requests, and court orders where legally required.
• Marketing Communications: To send you bonus offers, promotional news, and platform updates via email or SMS — but only where you have expressly opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the milwan platform's performance, user experience, and game library selection.

05 Legal Basis for Processing

milwan processes your personal data on one or more of the following lawful bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary for milwan to perform its contract with you — i.e., to operate your player account, process your transactions, and deliver the gaming services you have signed up for.
• Legal Obligation: milwan is legally required to collect and retain certain personal data under its international gaming licence, AML obligations, and applicable financial record-keeping requirements. This processing cannot be opted out of — it is a condition of your account.
• Legitimate Interests: milwan processes technical data, usage data, and communications data on the basis of its legitimate interests in preventing fraud, maintaining platform security, improving its services, and conducting responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: milwan processes your marketing preferences and sends promotional communications only on the basis of your freely given, specific, informed, and unambiguous consent. Consent for marketing is entirely optional and does not affect your ability to use the milwan platform.

06 Data Sharing & Third Parties

milwan does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data is shared only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and crypto payment gateways receive only the data strictly necessary to process your specific transaction. These processors are bound by their own data protection obligations.
• Game Providers: Where milwan hosts games from third-party providers (e.g., live dealer studios, slot developers), those providers may receive a pseudonymous player identifier and gameplay data necessary to deliver the game session. They do not receive your CNIC, full name, or financial details.
• Identity Verification Providers: Regulated KYC service providers receive your identity documents for the purpose of verification. These providers operate under strict data processing agreements with milwan and are prohibited from using your data for any other purpose.
• Regulatory & Law Enforcement Authorities: milwan may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or under its gaming licence obligations. milwan will notify you of such disclosures where legally permitted to do so.
• Legal & Professional Advisors: milwan's lawyers, auditors, and compliance consultants may access personal data on a strictly need-to-know basis in the course of providing professional services to milwan. All such parties are bound by confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of milwan's business or assets, your personal data may be transferred to the acquiring entity. milwan will notify all affected players via registered email before any such transfer takes effect and will ensure the receiving entity assumes equivalent data protection obligations.

07 Data Retention

milwan retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following retention schedule applies:

• Active Account Data: Retained for the full duration of your milwan account's active life, plus a minimum of 5 years following account closure. This retention period is required by milwan's gaming licence and AML obligations.
• Financial Transaction Records: Retained for a minimum of 7 years following the date of each transaction, in accordance with international financial record-keeping standards applicable to licensed gaming operators.
• KYC Verification Documents: Retained for 5 years following account closure or the completion of the business relationship with the player, whichever is later.
• Customer Support Communications: Retained for 3 years following the resolution of the support interaction, or longer if the communication relates to an active dispute or regulatory investigation.
• Technical & Usage Logs: Retained for 13 months from the date of generation for operational and security purposes, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your marketing consent, plus 3 years following withdrawal of consent — as evidence of the lawful basis for any communications sent during the consent period.

Upon expiry of the applicable retention period, milwan will securely delete or irreversibly anonymise your personal data in accordance with recognised data destruction standards. Where deletion is not immediately technically feasible (e.g., data held in encrypted backups), the data will be quarantined from active processing and deleted as soon as the next scheduled backup cycle permits.

08 Cookies & Tracking Technologies

milwan uses cookies and similar tracking technologies on milwan.net to ensure the platform functions correctly, to analyse site usage, and — where you have consented — to deliver personalised content and promotions. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for milwan.net to function and cannot be disabled. They enable core functions such as maintaining your logged-in session, processing your transactions securely, and remembering your language and display preferences between pages.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use milwan.net — such as which pages are visited most often, where users encounter errors, and how long sessions last. This data is used solely to improve the milwan platform and is never used to identify individual users.
• Functional Cookies: These cookies remember choices you have made on milwan — such as your preferred payment method or game lobby view — to provide a more personalised experience on your next visit.
• Marketing & Tracking Cookies: With your explicit consent, milwan may use cookies to track your engagement with milwan promotional materials and to measure the effectiveness of milwan's marketing campaigns. These cookies do not track you across third-party websites.

You can manage your cookie preferences at any time via the cookie settings panel accessible from the milwan.net footer. Please note that disabling strictly necessary cookies will impair the core functionality of the milwan platform, including your ability to log in and place wagers.

09 Your Data Rights

As a milwan player, you hold meaningful rights over your personal data. milwan is committed to honouring these rights promptly and without creating unnecessary barriers. The following rights apply to all milwan players in Pakistan:

• Right of Access: You have the right to request a copy of all personal data milwan holds about you. milwan will provide this in a structured, commonly used, machine-readable format within 30 calendar days of receiving your verified request.
• Right to Rectification: If any personal data milwan holds about you is inaccurate or incomplete, you have the right to request correction. You can update most basic account details directly through your milwan account settings, or contact support for assistance with KYC data corrections.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes it was collected. However, milwan is legally required to retain certain data under its gaming licence and AML obligations — in such cases, milwan will explain which data must be retained and why.
• Right to Restrict Processing: You may request that milwan restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that milwan transfer your data directly to another controller in a structured, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where it is based on milwan's legitimate interests. milwan will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Marketing Consent: You may withdraw your consent to receive marketing communications from milwan at any time via your account settings or by contacting the support team. Withdrawal does not affect the lawfulness of previous marketing communications.

To exercise any of the above rights, contact milwan's Data Protection Officer via the 24/7 live chat or by emailing [email protected] with "Data Rights Request" in the subject line. milwan will verify your identity before processing any data rights request to protect against unauthorised access to your information.

10 Data Security Measures

milwan implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and milwan.net is encrypted using TLS 1.2 or higher. This applies to every page, every login, and every transaction — not just payment pages.
• Encryption at Rest: Personal data and financial records stored in milwan's databases are encrypted at rest using AES-256 encryption. CNIC numbers and payment method identifiers are subject to additional field-level encryption.
• Access Controls: Access to personal data within milwan's internal systems is restricted on a strict need-to-know basis using role-based access controls. Staff who process player data are subject to confidentiality obligations and regular privacy training.
• Two-Factor Authentication: All internal milwan staff accounts with access to player data require two-factor authentication. Players are also strongly encouraged to enable 2FA on their own milwan accounts for an additional layer of protection.
• Penetration Testing: milwan conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: milwan maintains a documented data breach response plan. In the event of a confirmed personal data breach that poses a risk to affected players, milwan will notify affected individuals and relevant regulatory authorities within the timeframes required under its gaming licence obligations.

While milwan takes all reasonable steps to protect your personal data, no digital system is completely immune to security risks. You play a critical role in your own security: use a strong, unique password for your milwan account, enable 2FA, and never share your login credentials with anyone.

11 Children's Privacy & Age Restriction

The milwan platform is strictly intended for adults aged 21 years and older. milwan does not knowingly collect, process, or retain personal data from individuals under the age of 21. This is both a legal requirement under milwan's gaming licence and a fundamental ethical commitment of the milwan platform.

milwan enforces this restriction through mandatory age verification as part of the KYC process — all players must submit a valid CNIC confirming their date of birth before withdrawals are processed. Where milwan has reason to believe that a registered account is held by a person under 21, the account will be suspended immediately pending age verification, and any deposits held in the account will be returned to the originating payment method once the player's identity is confirmed.

Parents and guardians in Pakistan are encouraged to take active steps to prevent underage access to online gambling platforms. This includes using parental control software and maintaining awareness of the sites and apps accessed on devices used by minors in their household.

12 Updates to This Privacy Policy

milwan reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform capabilities. When material changes are made — meaning changes that meaningfully affect how milwan collects, uses, or shares your personal data — milwan will notify registered players via email to the address associated with their account no fewer than 14 calendar days before the updated policy takes effect.

Minor amendments such as typographical corrections, structural reorganisation that does not alter the substance of any provision, or clarifications of existing practice may be published with immediate effect without individual notice. The effective date at the top of this page will always reflect when the current version was last updated.

Your continued use of the milwan platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the revised terms. If you do not agree with any update to this policy, you may close your milwan account at any time by contacting the 24/7 live chat support team.

The most current version of this Privacy Policy is always available at milwan.net/privacy-policy. milwan recommends that players review this page periodically to stay informed of how their data is being handled.