Milbet Privacy Policy – How We Protect Pakistan Players

Milbet operates the online gaming platform accessible at milbet.world. This Privacy Policy explains how Milbet ("we", "us", "our") collects, stores, uses and protects the personal data of players who access the platform from Pakistan.

This policy applies to everyone who visits milbet.world, creates a player account, makes a deposit, places a bet, accesses live dealer games, uses the PSL betting section, or contacts the Milbet support team – regardless of whether they are a registered player or a visitor browsing without an account.

By registering an account on Milbet, you acknowledge that you have read and understood this Privacy Policy. If you are not comfortable with how we handle data, you should not register an account. For questions about data handling at any time, our support team is available 24/7 in Urdu and English.

Milbet collects personal data in three ways: information you provide directly when registering and using your account, data generated automatically by your use of the platform, and in some cases, data received from third-party payment processors for verification purposes.

Milbet does not collect sensitive data such as health information, biometric data beyond CNIC photo verification, or financial data beyond what is needed to process PKR payments. We do not scrape social media profiles or purchase data lists from third-party data brokers.

Every piece of data Milbet holds about you is tied to a specific operational purpose. We do not collect data "just in case". The purposes for which we process your personal data are:

• Account creation and operation: To register you as a player, maintain your account, enable login authentication and keep your balance accurate.
• Identity verification (KYC): To confirm you are who you say you are, meet our age verification obligations (18+), and prevent fraudulent accounts. This is also required by our payment processing partners for transactions above defined PKR thresholds.
• Payment processing: To process PKR deposits from Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT transfers and Visa/Mastercard, and to send withdrawal payments to your registered payment method.
• Game delivery and betting settlement: To record bets, calculate winnings, settle markets, credit bonuses and track wagering requirements accurately.
• Responsible gaming compliance: To monitor for patterns associated with problem gambling, enforce player-requested limits, and deliver responsible gaming interventions when warranted.
• Security and fraud prevention: To detect and prevent account takeover, money laundering, bonus abuse and any other activity that violates the Milbet Terms and Conditions.
• Customer support: To respond to enquiries, resolve disputes and maintain a record of communications for reference and quality purposes.
• Marketing (with consent): To send promotional offers, bonus notifications and personalised game recommendations to players who have opted in to marketing communications.

Milbet processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing your identity data, payment data and account activity data is necessary to fulfil the contract between you and Milbet – i.e., to deliver the gaming services you have registered to use. Without this processing, we cannot operate your account.
• Legitimate interests: Processing device and technical data for security, fraud detection and platform improvement is based on Milbet's legitimate interest in maintaining a safe and fair platform. This interest is balanced against your rights and does not override them.
• Legal obligation: Retaining transaction records and KYC documentation for defined periods is required by applicable financial services and anti-money laundering obligations. Milbet cannot waive these requirements even at a player's request during the mandatory retention period.
• Consent: Sending marketing communications is done only with your consent. You can withdraw this consent at any time without affecting the operation of your account.

Milbet does not sell your personal data. We do not share it with advertising networks, data brokers, marketing agencies or any third party that would use it for purposes unrelated to the operation of your Milbet account. Sharing of data is limited to the following necessary categories of recipients:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card networks receive the minimum payment data necessary to process your PKR deposits and withdrawals. These parties operate under their own privacy policies and are bound by Pakistani financial services regulations.
• Identity verification services: Where automated CNIC verification tools are used, the relevant verification service receives the data necessary to complete the check. Verification providers are contractually prohibited from retaining or using your data for any purpose beyond the verification request.
• Game software providers: Live dealer game providers and slot game studios receive your session and bet data as part of the technical integration that delivers games to your screen. They do not receive your payment or identity data.
• Legal and regulatory authorities: Milbet will disclose personal data to law enforcement, regulatory authorities or courts where required to do so by applicable law or by a lawful order. We will notify affected players where we are legally permitted to do so.
• Anti-fraud and responsible gaming networks: In cases of suspected fraud or where a player has self-excluded, Milbet may share limited relevant data with industry-standard anti-fraud or responsible gaming databases to prevent harm.

All financial transactions on Milbet take place in Pakistani Rupees (PKR). Payment data is handled with the highest level of care given its sensitivity. Milbet does not store full card numbers, CVV codes or mobile wallet PINs on its own servers. Where card payments are involved, payment processing is handled by a PCI-DSS compliant payment gateway – Milbet only receives a masked card reference and transaction confirmation.

For Easypaisa, JazzCash and other mobile wallet transactions, Milbet receives your registered mobile wallet number to associate deposits and withdrawals with your account. This number is encrypted in storage and used only for payment processing purposes.

Your full CNIC number, where collected for KYC, is stored in encrypted form in a separate secured database from your account and game activity data. Access to KYC data is restricted to a small number of authorised compliance team members and is logged for audit purposes.

Milbet retains personal data only for as long as required to serve the purpose for which it was collected, meet legal obligations, or resolve disputes. The retention periods below apply to active accounts; closed accounts are subject to mandatory post-closure retention:

After retention periods expire, data is securely deleted or anonymised so that it can no longer be attributed to an individual. Anonymised aggregate data (e.g., betting trend statistics with no personal identifiers) may be retained indefinitely for platform improvement purposes.

Milbet takes data security seriously and implements multiple layers of protection to guard against unauthorised access, accidental loss, or disclosure of player data. The security measures in place include:

• Transport Layer Security: All connections between your device and Milbet servers use 256-bit SSL/TLS encryption, the same standard used by major Pakistani banks.
• Data encryption at rest: Sensitive data fields including CNIC numbers, payment method identifiers and passwords are encrypted in our databases. Even in the event of a database breach, this data cannot be read in plain text.
• Access controls: Employee access to player data is restricted on a need-to-know basis. All access to sensitive data is logged and regularly audited. Staff with access to KYC data undergo background checks.
• Two-factor authentication: Player accounts support OTP-based login verification via mobile number to prevent account takeover even where a password is compromised.
• Intrusion detection: Milbet's infrastructure runs continuous intrusion detection and DDoS protection systems. Anomalous access patterns trigger automated alerts and investigation.
• Vulnerability management: Regular penetration testing and security audits are conducted to identify and remediate vulnerabilities before they can be exploited.

In the unlikely event of a data breach that affects player personal data, Milbet will notify affected players without undue delay, describe the nature of the breach, the data involved and the steps we are taking to contain it.

Milbet uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is being used so we can improve it. Below are the categories of cookies we use and your control over each:

You can also manage cookies through your browser settings. Blocking essential cookies will prevent you from logging in to your Milbet account. Blocking other cookies will not affect your ability to play but may reduce the personalisation of your experience.

As a Milbet player, you have the following rights over your personal data. To exercise any of these rights, contact the Milbet support team providing your account username and the specific request. We will respond within 10 business days.

Milbet is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the account registration process, and Milbet reserves the right to request documentary evidence of age (CNIC) at any point.

If Milbet becomes aware that an account has been registered by a person under 18, the following steps will be taken immediately:

• The account will be suspended pending investigation
• All betting activity will be voided and any winnings forfeited
• The account will be permanently closed
• Any deposited real money (excluding winnings) will be returned to the payment source
• The case will be reported to relevant responsible gaming authorities if required

If you believe a minor has registered on Milbet, please contact our support team immediately. We take these reports seriously and act on them without delay.

Milbet may send promotional communications including bonus offers, new game announcements, PSL betting promotions, VIP Club updates and personalised offers by SMS, email or in-app notification. Marketing communications are sent only to players who have opted in at registration or through their account settings.

You can opt out of marketing communications at any time by:

• Updating your notification preferences in your account settings
• Clicking the unsubscribe link in any marketing email from Milbet
• Replying STOP to any marketing SMS
• Contacting the Milbet support team and requesting to be removed from all marketing lists

Opting out of marketing does not affect your ability to use the Milbet platform or access your account. You will still receive transactional messages – such as deposit confirmations, withdrawal notifications and security alerts – which are necessary for account operation and cannot be opted out of.

Milbet will never send unsolicited commercial messages to mobile numbers or email addresses not registered on the platform, and will never share your contact details with third-party marketing organisations.

Milbet may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in the services we offer, or changes in applicable law. When material changes are made – changes that affect how your data is used or your rights as a player – we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent in-platform notice upon your next login
• Send a notification to your registered email or mobile number (where the change is significant)

Minor updates – such as clarifications, formatting changes or additions that benefit the player – may be made without advance notice. We recommend checking this page periodically for the most current version of the Milbet Privacy Policy.

Your continued use of the Milbet platform after the effective date of any change to this policy constitutes your acceptance of the updated version. If you do not agree with a material change, you should stop using the platform and may request deletion of your data subject to applicable retention obligations.

If you have any questions, concerns or requests relating to your personal data and how Milbet handles it, please contact us using one of the following methods. Our support team is available 24 hours a day, 7 days a week, in Urdu and English:

• Live chat: Available from your logged-in account. For privacy and data requests, please state "data request" at the start of your message so it is routed to the appropriate team member.
• Email: support@milbet.world – include "Privacy Request" in the subject line and your account username in the message body.
• VIP Account Manager (Gold+ members): Contact your assigned account manager directly via WhatsApp for privacy-related requests linked to your VIP account.

For formal data subject access requests, deletion requests or objections to data processing, please contact us via email with sufficient detail to allow us to identify your account and action the request. We will acknowledge receipt within 2 business days and provide a substantive response within 10 business days. Requests that are complex or numerous may take longer, in which case we will inform you of the extended timeline.