mgloin Privacy Policy — How We Protect Your Data

1. Who We Are

mgloin operates the online gaming platform accessible at mgloin.win. In this Privacy Policy, "mgloin", "we", "us" and "our" refer to the operator of this platform. We are the data controller responsible for the personal information you provide when using our services.

Our platform is designed specifically for players in Pakistan. All services are delivered in PKR, and we support local payment methods including JazzCash, Easypaisa and Raast. Because we operate for a Pakistan audience, we are particularly attentive to the privacy concerns and expectations of players in this market.

If you have any questions about how your data is handled, you can reach our support team at any time via live chat on the platform or by emailing [email protected].

2. Data We Collect

We collect personal data in three ways: information you provide directly, information generated automatically through your use of the platform, and in some cases information from third-party services we use to operate the platform.

Information you provide directly:

• Full legal name and date of birth (required for account registration and age verification)
• Email address and Pakistan phone number
• Username and password (password is stored in encrypted form only)
• Identity verification documents such as CNIC when requested for account verification
• Payment method details to the extent necessary to process deposits and withdrawals
• Any information you share with the support team during a conversation

Information collected automatically:

• IP address and approximate location derived from it
• Device type, operating system and browser version
• Session activity including pages visited, games played, bets placed and time spent on the platform
• Login timestamps and access logs for security purposes
• Cookie and tracking data as described in Section 7

Information from third parties:

• Transaction confirmation data from payment processors (JazzCash, Easypaisa, Raast, banks and card networks) to verify that a deposit or withdrawal was completed successfully
• Identity verification results from third-party KYC providers where we use such services to confirm your identity
• Fraud prevention signals from third-party risk management tools

3. How We Use Your Data

The personal data we collect is used for the following purposes:

We do not use your personal data for automated decision-making that produces significant legal effects, other than standard fraud detection systems that may flag unusual activity for human review.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: Processing your name, contact details and payment information is required to provide the services described in our Terms and Conditions. Without this data, we cannot operate your account.
• Legitimate interests: We process session activity, device information and access logs to protect the security of the platform, prevent fraud and improve our services. These interests do not override your privacy rights.
• Consent: Where we send you marketing communications, we rely on your explicit opt-in consent. You may withdraw this consent at any time without affecting your account.
• Legal obligation: In some cases we are required by law to process or retain certain data — for example, retaining transaction records for anti-money-laundering compliance purposes.

5. Sharing Your Data

mgloin does not sell your personal data. We share it only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, Raast, banks and card networks receive the minimum transaction data needed to process your deposit or withdrawal. They operate under their own privacy policies and security standards.
• Game providers: Third-party game studios that supply games on our platform may receive a player session identifier to deliver the game. They do not receive your name, contact details or payment information.
• Identity verification providers: Where we use a third-party KYC service to verify your CNIC or other documents, your verification data is shared with that provider for the sole purpose of completing the check.
• Fraud and risk management tools: Aggregated risk signals may be shared with fraud prevention services to identify patterns associated with prohibited conduct.
• Legal requirements: We will disclose personal data to law enforcement or regulatory authorities when required to do so by applicable law or a valid legal order. We will notify you where legally permitted to do so.

6. Payment Data

When you make a deposit or request a withdrawal on mgloin, your payment is handled through certified third-party payment gateways. mgloin does not store full card numbers, CVV codes or mobile wallet PINs on its own servers.

What mgloin does retain is a transaction reference number, the payment method type (e.g. JazzCash, Easypaisa or bank transfer), the amount in PKR, the date and time of the transaction, and whether it was a deposit or withdrawal. This information is retained for account management, dispute resolution and legal compliance purposes.

All deposits must originate from a payment method registered in your own name. If a payment is received from a third-party method, it will be reversed and your account may be suspended pending investigation. This policy exists to protect you from unauthorised use of your account.

For card payments, our gateway partners are PCI DSS compliant — meaning they meet the international standard for payment card data security. You can ask our support team for details of the specific gateway used for your preferred payment method.

7. Cookies and Tracking

mgloin uses cookies and similar tracking technologies to operate the platform and improve your experience. A cookie is a small text file stored in your browser. We use the following types:

• Essential cookies: Required for the platform to function. These keep you logged in, maintain your session state and remember your language or display preferences. You cannot opt out of essential cookies without disabling the platform.
• Analytics cookies: Help us understand how players navigate the platform — which games are most visited, where players drop off and how long sessions last. This data is aggregated and does not identify individual players by name.
• Security cookies: Used to detect suspicious login attempts, CSRF attacks and other security threats. These are essential for protecting your account.
• Preference cookies: Remember settings you have chosen such as notification preferences and deposit limit configurations.

You can manage cookies through your browser settings. Blocking essential cookies will prevent the platform from working correctly. Blocking analytics cookies will not affect your ability to play but will limit our ability to improve the platform over time.

mgloin does not use third-party advertising cookies or allow ad networks to track your activity across other websites via our platform.

8. Data Retention

We retain your personal data for as long as your account is active and for a period after account closure as required by law or legitimate business need. The following general retention periods apply:

• Account information (name, contact details, date of birth): Retained for the duration of your account and for up to five years after closure for compliance and dispute resolution purposes.
• Transaction records: Retained for a minimum of five years to comply with financial record-keeping requirements.
• Identity verification documents: Retained for the period required by applicable anti-money-laundering regulations.
• Support communications: Retained for up to two years to allow resolution of any follow-up queries or disputes.
• Session and analytics data: Aggregated analytics data may be retained indefinitely in anonymised form. Individual session logs are retained for up to 12 months.

When data is no longer required and no legal obligation exists to retain it, it is securely deleted or anonymised.

9. Security Measures

mgloin implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include:

• TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data fields at rest, including passwords and verification document references
• Role-based access controls limiting which staff members can access personal data and under what circumstances
• Regular security assessments and penetration testing of the platform infrastructure
• Two-factor authentication options available for player accounts to prevent unauthorised login
• Automated monitoring systems to detect unusual account activity or access patterns

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, mgloin will notify affected players promptly and take immediate steps to contain the breach and prevent further exposure.

10. Your Privacy Rights

As an mgloin player, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via live chat or email — we will respond within a reasonable timeframe:

• Right of access: You can request a copy of the personal data mgloin holds about you. We will provide this in a clear, readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you can ask us to correct it. You can update many details directly in your account settings.
• Right to erasure: You can request deletion of your personal data. We will fulfil this request where no legal obligation requires us to retain the data. Note that transaction records must be retained for compliance purposes even after account closure.
• Right to restrict processing: You can ask us to limit how we use your data while a dispute or correction request is being resolved.
• Right to data portability: You can request your personal data in a structured, machine-readable format so it can be transferred to another service if you wish.
• Right to object: You can object to processing based on legitimate interests, including profiling. We will review any objection and cease processing if we cannot demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications — you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

11. Children and Minors

mgloin is strictly for adults aged 18 years and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has created an account or provided personal data, we will immediately close the account and delete the associated data.

If you are a parent or guardian and believe that a minor has registered on mgloin, please contact our support team immediately at [email protected]. We will investigate and take prompt action.

mgloin uses date-of-birth verification at registration as the first check against underage access. Additional age and identity verification may be requested at any point. We take underage access seriously and have a zero-tolerance policy in this regard.

12. Marketing Communications

mgloin may send promotional communications — including bonus offers, new game announcements and seasonal promotions tied to events such as Pakistan Super League (PSL) matches or T20 internationals — by email or SMS, but only if you have explicitly opted in to receive them during registration or in your account settings.

You can opt out of marketing communications at any time by:

• Updating your notification preferences in your account settings
• Clicking the unsubscribe link in any marketing email we send you
• Contacting our support team directly and requesting to be removed from the marketing list

Opting out of marketing will not affect transactional communications such as deposit confirmations, withdrawal notifications, security alerts or support responses. These are part of the service and cannot be disabled while your account is active.

mgloin does not use your personal data to build advertising profiles or share data with advertising networks. Any personalisation within our own platform — such as showing you game recommendations — is based on your activity on mgloin only and is not shared externally.

13. Changes to This Privacy Policy

mgloin may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

For material changes that significantly affect how we use your personal data, we will notify active players via the registered email address at least seven days before the changes take effect. For minor clarifications or corrections, we may update the page without individual notification.

Your continued use of mgloin after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you should stop using the platform and request account closure before the new policy takes effect.

We recommend bookmarking this page and checking it periodically, particularly if you are a regular player. The date at the top of the page makes it easy to see whether anything has changed since your last visit.

14. Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or the personal data mgloin holds about you, please get in touch with our support team. We aim to respond to all privacy-related enquiries within five business days.

You can reach us via:

• Live chat: Available 24/7 directly on the mgloin platform — the fastest way to get a response
• Email: [email protected]

When contacting us about a privacy request, please include your registered email address and a brief description of your request so we can locate your account and respond efficiently. You may be asked to verify your identity before we action a data access, correction or deletion request.