mgloin Privacy Policy — Pakistan Players' Data Protection Guide

mgloin is committed to protecting the privacy of every player who uses the platform. We understand that sharing personal information — your name, mobile number, financial details — with an online platform requires a significant degree of trust. We take that trust seriously and handle your data with the care and transparency it deserves.

This policy tells you clearly what personal data mgloin collects, why we need it, what we do with it, and what rights you have to control it. It is not written to obscure anything — it is written to inform you. If you read something here that raises a concern, we encourage you to get in touch with us directly before making any decision about your account. We would rather answer a question than lose a player's trust by leaving them uncertain.

Privacy is not just a regulatory obligation at mgloin — it is a genuine value. We collect the minimum data necessary to provide our service well, we do not sell your data, and we give you meaningful tools to understand and manage what we hold about you.

For the purposes of data protection law, mgloin is the data controller responsible for the personal information collected through the mgloin.net platform and its associated services. As data controller, mgloin determines what personal data is collected, for what purposes it is processed, and how long it is retained.

You can contact mgloin's data protection point of contact at any time by emailing support@mgloin.net with "Privacy" in the subject line. All privacy-related enquiries, access requests, and complaints are handled by our compliance team and will receive a response within two business days.

mgloin collects personal data across several categories, depending on how you interact with the platform. The table below summarises the main types of data we hold and the context in which each is collected.

mgloin collects personal data through several channels — always in the context of providing you with the gaming service. We do not purchase data from third-party brokers or collect information from social media profiles without your explicit action.

• Directly from you: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting the support team, or opting into a promotion.
• Automatically during platform use: Technical and behavioural data collected via our web server logs, analytics tools, and session tracking when you access mgloin.net — including your IP address, device information, and navigation patterns within the platform.
• From our payment processors: Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT transfers), or the card payment gateway — confirming that a deposit or withdrawal has been processed and the associated amount in Rs PKR.
• From identity verification providers: Where mgloin uses a third-party KYC service to verify CNIC documents or confirm identity, we receive the outcome of that verification and a reference identifier — we do not receive a copy of the raw document unless you submit it directly.
• From cookies and similar technologies: As described in the Cookies section of this policy, mgloin uses cookies and local storage to maintain your session, remember your preferences, and gather anonymised analytics data about platform performance.

Every piece of data mgloin holds is used for a specific, legitimate purpose. We do not process personal data "just in case" — each use is tied to a clear need connected to operating the platform, meeting legal obligations, or serving your interests as a player.

• Account creation and management: Your identity, contact, and authentication data is used to create and maintain your mgloin player account, authenticate your logins, and communicate important account information to you.
• Processing financial transactions: Your financial and identity data is used to process your Rs PKR deposits and withdrawals via your chosen payment method, verify that funds originate from an account in your name, and maintain accurate transaction records.
• Delivering games and platform features: Your gameplay data and technical device information is used to deliver the games you play, maintain your session state, and ensure the platform performs correctly on your device and connection.
• Bonus and promotion administration: Your gameplay data and transaction history is used to calculate wagering progress, credit cashback amounts, verify eligibility for promotions, and enforce the one-account-per-player rule.
• Fraud prevention and security: Technical data including IP addresses, device fingerprints, and behavioural patterns is used by mgloin's security systems to detect and prevent fraud, bonus abuse, collusion, bot activity, and money laundering.
• Regulatory compliance and KYC: Identity and financial data is used to comply with the anti-money laundering (AML) and Know Your Customer (KYC) obligations attached to mgloin's gaming licence — including verifying identity for large withdrawals and reporting suspicious activity to relevant authorities where legally required.
• Customer support: Communication records and account data are used to handle your support queries, investigate complaints, and improve the quality of mgloin's support service.
• Responsible gaming monitoring: Gameplay and financial data is used by mgloin's responsible gaming systems to identify patterns that may indicate problematic play, and to enforce player-set limits and self-exclusion decisions.
• Marketing communications: Where you have opted in to receive marketing messages, your contact details and gameplay preferences are used to send you relevant mgloin promotions, bonus offers, and platform news. You can opt out at any time.
• Platform improvement and analytics: Anonymised and aggregated behavioural data is used to understand how players navigate mgloin, which features are most used, and where improvements should be prioritised.

mgloin processes personal data under one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to create and operate your mgloin account, process your deposits and withdrawals, and deliver the gaming service you have signed up for. Without this processing, mgloin cannot provide the service.
• Legal obligation: Processing required for mgloin to comply with applicable law — including KYC/AML obligations under our gaming licence, tax record-keeping requirements, and mandatory cooperation with law enforcement or regulatory bodies.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and analytics — where the benefit to mgloin and its players outweighs any privacy intrusion, subject to appropriate safeguards.
• Consent: Marketing communications and non-essential cookies, where mgloin obtains your explicit opt-in. You may withdraw consent for these activities at any time without affecting the lawfulness of prior processing or your ability to continue using your mgloin account.

mgloin does not sell your personal data to any third party — ever. Data sharing is limited to the categories below, and in every case it is subject to strict contractual controls that require the recipient to handle your data with the same level of care that mgloin applies internally.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and card payment gateways receive the transaction data necessary to process your PKR deposits and withdrawals. These processors are independently PCI DSS or equivalent certified and handle payment data under their own privacy frameworks.
• Gaming software providers: The companies whose slot, card game, virtual sports, poker, and esports products are delivered through mgloin receive session identifiers and bet data necessary to deliver the game to you. They do not receive your full identity data unless specifically required for a licence condition.
• KYC and identity verification providers: Where mgloin uses a third-party service to verify your identity document, that provider receives the document data you submit and returns a verification outcome. They are contractually prohibited from using your data for any other purpose.
• Fraud prevention and security services: mgloin uses specialised third-party tools for bot detection, fraud pattern analysis, and security monitoring. These tools receive technical data (IP addresses, device fingerprints, behavioural signals) but not your full personal identity unless an active investigation requires it.
• Regulatory and licensing authorities: mgloin's gaming licence requires us to provide player data to our licensing authority on request and to file suspicious activity reports with relevant financial intelligence units where legally required. We have no discretion to refuse these disclosures when legally mandated.
• Law enforcement: mgloin will share personal data with law enforcement agencies in response to a valid legal order, court order, or equivalent legal process. We will notify you of such disclosures where we are legally permitted to do so.

Some of the third-party service providers used by mgloin — including certain gaming software providers and cloud infrastructure services — may process data in jurisdictions outside Pakistan. Where this occurs, mgloin ensures that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to that applied within Pakistan.

These safeguards typically include standard contractual clauses that require the recipient to apply data protection standards consistent with internationally recognised frameworks. mgloin does not transfer personal data to jurisdictions that lack an adequate level of data protection without first putting appropriate safeguards in place. If you would like more information about the specific safeguards applied to any particular international data transfer, please contact us at support@mgloin.net.

mgloin retains personal data only for as long as it is necessary for the purposes described in this policy — or for as long as applicable law requires us to keep it. The table below shows the standard retention periods applied to different categories of data.

When the applicable retention period expires and no legal obligation requires the data to be kept longer, mgloin securely deletes or anonymises the data. Anonymised analytical data — where it is no longer possible to identify an individual — may be retained indefinitely for platform improvement purposes.

mgloin takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mgloin's servers — the same encryption standard used by major international banks.
• Encrypted data storage — sensitive fields including identity data, financial records, and authentication credentials are encrypted at rest using industry-standard algorithms.
• Access controls — internal access to personal data is restricted on a need-to-know basis. mgloin staff can only access the player data directly required for their specific role, and all access is logged and audited.
• Two-factor authentication available on all mgloin accounts — players are strongly encouraged to enable 2FA in their account security settings.
• Regular security assessments — mgloin engages third-party security professionals to conduct penetration testing and vulnerability assessments on a regular basis.
• Staff training — all mgloin employees with access to personal data receive mandatory privacy and data security training when they join and at regular intervals thereafter.
• Incident response procedures — mgloin maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify you as soon as practicable and will cooperate with any regulatory investigation.

Despite these measures, no internet-based service can guarantee absolute security. You also play a role in keeping your account secure — by using a strong, unique password, enabling 2FA, and not sharing your login credentials with anyone. If you believe your account has been compromised, please contact the mgloin support team immediately.

mgloin uses cookies — small text files stored on your device — and similar technologies such as local storage and session tokens to operate the platform effectively. Some cookies are essential for the site to function; others are used for analytics and, where you have consented, for personalised marketing.

• Essential / strictly necessary cookies: These are required for core platform functionality — maintaining your login session, remembering your language and currency preferences, and ensuring security features such as CSRF protection work correctly. You cannot opt out of these without disabling the platform entirely.
• Functional cookies: These remember choices you have made — such as your preferred lobby view or notification settings — so you do not need to reset them every session. You can disable these in your browser settings without affecting core functionality.
• Analytics cookies: mgloin uses anonymised analytics tools to understand how the platform is used — which pages are visited most, where players encounter friction, and how the mobile experience compares to desktop. These cookies collect no personally identifiable information and the data is aggregated before analysis. You may opt out via your browser's cookie settings.
• Marketing cookies: Where you have opted in to receive mgloin promotional communications, marketing cookies may be used to measure the effectiveness of those campaigns. You can withdraw consent for marketing cookies at any time via your account settings or browser controls.

Most web browsers allow you to control cookie behaviour through the browser settings — including blocking all cookies, accepting only first-party cookies, or clearing stored cookies. Blocking essential cookies will prevent you from logging into your mgloin account. For guidance on managing cookies in your specific browser, refer to that browser's help documentation.

As a mgloin player, you have several rights over the personal data we hold about you. These are not just theoretical — they are enforceable, and mgloin is committed to honouring every request promptly and without charge.

mgloin is a gambling platform and is strictly for players aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If mgloin discovers that personal data has been collected from a person under 18, we will immediately close that account, forfeit all balances, return any deposits to the originating payment method where traceable, and delete the personal data from our systems as quickly as our legal retention obligations permit.

If you are a parent or guardian and believe that your child may have created an account at mgloin, please contact us immediately at support@mgloin.net. We treat such reports as urgent and will investigate and take action within 24 hours of notification.

mgloin may update this Privacy Policy from time to time to reflect changes in our data practices, new features introduced to the platform, or changes in applicable law. When we make material changes — those that could meaningfully affect your rights or how your data is used — we will notify you by email to your registered address at least 7 days before the changes take effect.

The updated policy will always be available on this page, with the "Last Updated" date at the top reflecting when the current version became effective. We encourage you to review this page periodically so you are always aware of how mgloin handles your personal data. Continued use of the mgloin platform after a policy update takes effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, want to understand how a specific piece of your data is used, wish to exercise a data right, or have a concern about mgloin's privacy practices, please get in touch. We take all privacy enquiries seriously and respond to every message personally — not with an automated acknowledgement and no follow-up.

The best way to reach the mgloin privacy team is by email at support@mgloin.net with "Privacy" in the subject line. Alternatively, you can raise the matter via the live chat function within your mgloin account, which is monitored 24/7. For formal data rights requests, please include your registered mobile number and clearly state which right you are exercising to help us process your request as quickly as possible.