Mill Win Privacy Policy — How We Handle Your Personal Data

1. What Personal Data We Collect

When you register and use Mill Win, we collect personal data across a number of categories. The type of data we hold about you depends on how you interact with the platform — registering an account, making a PKR deposit, placing a bet or contacting support all generate different types of data.

We only collect data that is necessary for the purposes described in this policy. We do not collect sensitive personal data such as biometric data or health information unless specifically required for a legal obligation and only with your explicit consent.

2. How We Collect Your Data

Mill Win collects personal data through several routes depending on your interactions with the platform.

• Direct registration: When you create your Mill Win account you provide your name, email address, date of birth and contact number directly through the registration process.
• Identity verification: If we ask you to verify your identity — which may be required before processing a withdrawal or at periodic account review stages — you may submit documents such as a CNIC copy. These are handled through our secure verification process.
• Deposits and withdrawals: When you make a PKR deposit via JazzCash, Easypaisa, Raast, bank transfer or card, payment-related data is captured to process the transaction and maintain your account history.
• Platform use: As you use the casino, live casino, betting and bingo sections of Mill Win, data about your gaming activity is automatically recorded at the server level. This includes bets placed, games played, session times and outcomes.
• Device and technical data: Standard technical data such as your IP address, device type and browser is collected automatically when you access the platform. This is used for security monitoring and platform optimisation.
• Support interactions: When you contact Mill Win support via live chat or email, the content of those communications is stored and associated with your account record.
• Cookies and tracking: Mill Win uses cookies on the platform. Full details are in Section 7.

3. How We Use Your Personal Data

Mill Win uses your personal data only for the purposes described below. We do not use your data for purposes that are incompatible with the original reason it was collected.

• Account management: To create, maintain and secure your Mill Win account, process your login and manage your preferences and VIP tier status.
• Processing PKR transactions: To receive deposits and process withdrawal requests via JazzCash, Easypaisa, Raast, bank transfer and other supported payment methods.
• Delivering gaming services: To operate the casino, live casino, sports betting and bingo sections, settle bets, apply bonus credits and maintain accurate game and transaction records.
• Identity verification: To confirm your identity and age as required to maintain a safe and fair platform for all players.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account sharing and other conduct that breaches our terms and conditions.
• Customer support: To respond to your queries, resolve disputes and assist with account issues.
• Responsible gaming: To monitor gaming activity and apply responsible gaming tools such as deposit limits, session timers and self-exclusion where requested or where patterns of concern are identified.
• Platform improvement: To analyse aggregated, anonymised usage data and improve the performance, layout and game selection of the Mill Win platform.
• Communications: To send you transactional communications such as deposit confirmations, withdrawal notifications, security alerts and updates to these policies.

Where we wish to send you promotional communications about bonuses or new games, we will do so only if you have opted in to receive such messages. You can opt out at any time through your account notification settings.

4. Legal Basis for Processing

Mill Win processes your personal data on the following legal bases depending on the type of data and the purpose for which it is used.

• Contract performance: Processing your account data, gaming activity and PKR payment transactions is necessary to deliver the services you signed up for when you registered with Mill Win.
• Legitimate interests: Security monitoring, fraud detection, platform improvement and responsible gaming oversight are carried out on the basis of Mill Win's legitimate interest in operating a safe and fair platform.
• Legal obligations: Identity verification and transaction record-keeping may be required to fulfil platform compliance obligations.
• Consent: Marketing communications and non-essential cookies are processed only where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

5. Who We Share Your Data With

Mill Win does not sell your personal data to third parties. We share data only where it is necessary to deliver our services or meet platform obligations, and only with the categories of recipient described below.

• Payment processors: JazzCash, Easypaisa, Raast and other payment partners receive the transaction data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and data protection standards.
• Identity verification providers: Third-party identity verification services may receive a copy of documents you submit during the verification process. These providers are used solely for the purpose of confirming your identity and age.
• Fraud prevention and security services: We use specialised services to monitor for fraudulent activity, unusual account patterns and security threats. These services process limited technical and transaction data.
• Game software providers: Third-party game studios whose slots, table games and live casino products are available on Mill Win may process gameplay data as part of delivering those games. Game providers operate under contractual data processing agreements.
• Platform infrastructure providers: Hosting, cloud storage and content delivery services that underpin the Mill Win platform may process data as part of normal infrastructure operations. These providers are bound by data processing agreements.
• Legal and regulatory requirements: Mill Win may disclose your data where required to do so by a valid legal process, court order or other binding obligation.

All third parties with whom Mill Win shares personal data are required to process that data securely and only for the specific purposes for which it was shared. We do not permit third parties to use your data for their own marketing or commercial purposes.

6. PKR Payment Data and Financial Information

Financial data requires additional care and Mill Win treats it accordingly. When you make a PKR deposit or request a withdrawal, your payment details are processed through encrypted connections. Mill Win does not store full card numbers or full bank account numbers on its own servers — this data is tokenised by our payment processing partners.

Your transaction history at Mill Win — deposits made, withdrawals requested and processed, bonuses credited — is stored in your account record. This history is available to you through your account dashboard and is retained for the period described in Section 9.

• PKR transaction records are used to process your payments, resolve disputes and maintain accurate account balances.
• Withdrawal requests are matched against the payment method used for deposits. This is a security measure to prevent funds being sent to accounts not registered in your name.
• If a payment transaction is queried or disputed, Mill Win may share the relevant transaction reference data with the payment provider to investigate and resolve the matter.
• Financial data is never shared with advertising networks, data brokers or marketing platforms.

7. Cookies and Tracking Technologies

Mill Win uses cookies — small text files stored on your device — to make the platform work correctly, keep you logged in, remember your preferences and understand how the platform is being used.

• Essential cookies: Required for the platform to function. These handle your login session, security tokens and core platform features. They cannot be disabled without breaking the service.
• Functional cookies: Remember your preferences such as language settings, preferred deposit method and notification choices. These improve your experience on return visits.
• Analytics cookies: Help Mill Win understand which sections of the platform are most used, how players navigate between casino, betting, live casino and bingo sections, and where technical issues occur. Data collected through analytics cookies is aggregated and anonymised.
• Marketing cookies: Used only if you have consented to receive personalised promotional communications. These track whether you have viewed or acted on a promotion.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your Mill Win account. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce the quality of your experience.

8. Data Security

Mill Win uses a range of technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. These measures are reviewed and updated regularly as part of our platform security programme.

• All data transmitted between your device and Mill Win servers is encrypted using TLS (Transport Layer Security).
• Passwords are stored in hashed form. Mill Win staff cannot read your password and will never ask you for it.
• Payment data is handled through tokenised payment processing. Full card and bank account numbers are not stored on Mill Win servers.
• Access to personal data within Mill Win's systems is restricted to staff and systems that need it to deliver the services described in this policy.
• Security monitoring systems operate continuously to detect and respond to unusual activity across accounts and transactions.

While Mill Win takes data security seriously and applies appropriate measures, no online platform can guarantee absolute security. You are also responsible for keeping your own account credentials secure. If you suspect your account has been compromised, contact Mill Win support immediately.

9. How Long We Keep Your Data

Mill Win retains your personal data for as long as your account is active and for a period after closure as described below. Retention periods are set based on the purpose for which the data was collected and any applicable obligations.

• Account and identity data: Retained for the duration of your account and for a period of five years following permanent account closure. This allows us to resolve any disputes and respond to requests relating to your account history.
• Financial and PKR transaction records: Retained for a minimum of five years from the date of each transaction. This reflects standard record-keeping practice for financial transaction data.
• Gaming activity records: Retained for five years. This data is used for dispute resolution, responsible gaming monitoring and fraud investigation.
• Support communications: Retained for two years from the date of the interaction unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is resolved.
• Technical and device data: Retained for up to 12 months from collection for security and platform performance monitoring purposes.

When data is no longer needed for any of the purposes described in this policy, it is securely deleted or anonymised so that it can no longer be associated with you.

10. Your Rights Over Your Personal Data

As a Mill Win player you have rights over the personal data we hold about you. These rights are described below. To exercise any of them, contact Mill Win support with your request. We will respond within a reasonable timeframe.

• Right of access: You can request a copy of the personal data Mill Win holds about you, including your account information, transaction history and gaming activity records.
• Right to correction: If any personal data we hold about you is inaccurate or out of date, you can ask us to correct it. Some data — such as your registered name — may require supporting documentation before it can be changed.
• Right to deletion: You can ask Mill Win to delete your personal data. Note that we may not be able to delete all data immediately if it is subject to a retention obligation — for example, financial transaction records. We will explain what can and cannot be deleted and when.
• Right to restrict processing: You can ask Mill Win to pause processing of your data in certain circumstances — for example, while a correction request is being reviewed.
• Right to data portability: You can request your account data in a structured, machine-readable format. This applies to data you provided directly to Mill Win during registration and account use.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications or non-essential cookies — you can withdraw that consent at any time through your account settings or by contacting support.

Exercising your rights will not result in any negative consequences for your Mill Win account. However, certain rights — such as deletion of financial records — may not be exercisable in full during mandatory retention periods.

11. Minors and Age Restrictions

Mill Win is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age verification is part of our account registration and verification process, and we may request proof of age at any point during a player's time on the platform.

If Mill Win identifies or is notified that an account belongs to a person under 18, the account will be immediately suspended, all play suspended, and any balance handled in accordance with our terms and conditions. Any data collected in connection with an underage account will be deleted as quickly as possible subject to any obligations that require us to retain records of the incident.

If you are a parent or guardian and believe your child has registered on Mill Win, contact support immediately so the account can be reviewed and closed.

12. Changes to This Privacy Policy

Mill Win may update this Privacy Policy from time to time to reflect changes in how we operate, the services we offer or applicable data protection standards. When material changes are made, registered players will be notified via the email address on their account.

The date at the top of this page shows when the policy was last reviewed. Continuing to use the Mill Win platform after a policy update constitutes acceptance of the updated terms. If you do not agree with a material change, you may close your account as described in our Terms and Conditions.

If you have questions about this Privacy Policy or want to exercise any of your data rights, contact Mill Win support. Our support team handles all privacy-related requests and will escalate to the appropriate team within Mill Win.