malwin Privacy Policy

1 Who We Are

malwin is an internationally licensed online gaming platform operating at the domain malwin.vip. The platform offers sports betting — including cricket betting covering PSL and international fixtures — live casino games, slot titles, crash games, and instant-win products, all denominated in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, "malwin", "we", "us", and "our" refer to the operator of the malwin platform. "You" and "your" refer to any individual who visits malwin.vip, registers an account, or interacts with any malwin service.

malwin operates under an international online gaming licence. That licence requires us to maintain specific data protection standards, conduct identity verification on all account holders, and retain transaction records for a defined regulatory period. This Privacy Policy reflects all of those obligations.

2 Data We Collect

malwin collects personal data in two ways: data you provide directly, and data collected automatically when you use the platform. The categories below describe what is collected and why.

2.1 Data You Provide

2.2 Data Collected Automatically

3 How We Use Your Data

malwin uses the personal data it collects only for the purposes listed below. Data is never used in a way that is incompatible with the purpose for which it was collected.

• Account Operation: To create and maintain your malwin account, authenticate your login sessions, and manage your PKR wallet balance.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Financial data is passed to payment processors only to the extent necessary to complete the transaction.
• Identity Verification (KYC): To verify that you meet the 21+ age requirement and to confirm your identity in accordance with our international gaming licence obligations and anti-money laundering (AML) procedures.
• Responsible Gaming: To monitor account activity for signs of problematic gambling behaviour, to enforce any deposit limits, loss limits, or self-exclusion measures you have set, and to contact you if our systems flag a concern.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, cheating, bonus abuse, and any other activity that violates the malwin Terms & Conditions.
• Customer Support: To respond to your queries, resolve disputes, and improve our support processes based on interaction history.
• Legal & Regulatory Compliance: To comply with our licensing obligations, respond to lawful requests from regulatory authorities, and maintain records required by applicable law.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve game selection, page performance, and the overall malwin experience for Pakistani players.
• Marketing Communications: To send you promotional offers and bonus notifications by email or in-platform message — but only if you have opted in to marketing communications. You may opt out at any time through your account settings.

4 Legal Basis for Processing

malwin processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to provide the services you have contracted for when you registered a malwin account — including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with our international gaming licence conditions, AML regulations, KYC requirements, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for malwin's legitimate business interests, including fraud prevention, security monitoring, and platform analytics — provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit opt-in, such as receiving promotional emails or push notifications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5 Data Sharing & Third Parties

malwin does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data is shared only in the following limited circumstances:

5.1 Service Providers

malwin works with a small number of carefully vetted third-party service providers who process data on our behalf, including: payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), identity verification providers, cloud hosting infrastructure providers, customer support platform operators, and fraud detection services. All such providers are bound by data processing agreements that restrict them from using your data for any purpose other than providing services to malwin.

5.2 Game Providers

The game titles available on the malwin platform are supplied by third-party game studios and aggregators. These providers may receive anonymised session data necessary to deliver the game. They do not receive your name, contact details, or payment information.

5.3 Regulatory & Law Enforcement Disclosure

malwin may disclose personal data to regulatory bodies, licensing authorities, or law enforcement agencies where required to do so by applicable law, court order, or our licensing obligations. malwin will inform you of such a disclosure where legally permitted to do so.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the malwin business, player data may be transferred to the successor entity. You will be notified of any such change and of any material alteration to this Privacy Policy that results from it.

6 Cookies & Tracking Technologies

malwin uses cookies and similar tracking technologies on the malwin.vip website. A cookie is a small text file stored on your device by your browser. Cookies help malwin keep you securely logged in, remember your preferences, and understand how the platform is being used.

6.1 Cookie Categories

• Strictly Necessary Cookies: Required for the platform to function. These include your authenticated session token and security cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — which pages are visited, how long sessions last, and which features are used. This helps malwin prioritise development effort. These cookies may be declined through your browser settings.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic and unusual login patterns from multiple IP addresses.

6.2 Managing Cookies

Most browsers allow you to view, block, and delete cookies through the browser settings menu. Blocking strictly necessary cookies will prevent you from logging in to your malwin account. Blocking analytics cookies will not affect your ability to use the platform but will mean your usage patterns are not included in malwin's platform improvement analysis.

7 Data Retention

malwin retains personal data for as long as your account remains active and for such further period as is required by law or our licensing obligations. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements applicable to licensed gaming operators.
• Transaction & Payment Records: Retained for a minimum of five (5) years from the date of the transaction, as required by financial regulatory standards.
• Customer Support Communications: Retained for three (3) years following the closure of the relevant support case, to support dispute resolution and quality assurance.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever comes first.
• Technical & Usage Logs: Retained for up to twelve (12) months for security and platform performance purposes, then permanently deleted or anonymised.

When the applicable retention period expires, malwin will securely delete or anonymise your personal data so that it can no longer be associated with you.

8 Your Privacy Rights

Depending on your jurisdiction and the nature of the processing, you may hold some or all of the following rights in relation to your personal data held by malwin:

• Right of Access: You may request a copy of all personal data malwin holds about you. Requests are fulfilled within 30 calendar days.
• Right to Rectification: If any personal data malwin holds is inaccurate or incomplete, you may request that it be corrected.
• Right to Erasure: You may request deletion of your personal data where malwin no longer has a legal basis for retaining it. This right is subject to overriding regulatory retention requirements — for example, transaction records that must be kept for AML compliance cannot be deleted on request.
• Right to Restrict Processing: You may ask malwin to suspend processing of your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request a structured, machine-readable export of personal data you have provided to malwin.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications. Opt-out from marketing emails is available directly from any malwin marketing message.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, contact the malwin support team via live chat or email at [email protected]. malwin will respond within 30 calendar days. No fee is charged for exercising these rights unless a request is manifestly unfounded or excessive.

9 Security Measures

malwin takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

• Transport Encryption: All data transmitted between your browser and malwin.vip is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser address bar confirms this connection is active.
• Password Security: Account passwords are stored as bcrypt hashes with a strong work factor. malwin staff cannot read your password — only a hash comparison is performed at login. You should use a strong, unique password for your malwin account.
• Two-Factor Authentication: malwin supports two-factor authentication (2FA) for account login. Enabling 2FA is strongly recommended and adds a second layer of protection beyond your password.
• Access Controls: Internal access to player data is restricted to authorised personnel with a documented business need. Access permissions are reviewed regularly and revoked promptly when no longer required.
• Incident Response: malwin maintains a data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, malwin will notify affected players without undue delay and take immediate remedial action.

While malwin takes all reasonable steps to protect your data, no internet transmission is completely secure. You are also responsible for maintaining the confidentiality of your own malwin login credentials. Do not share your password with anyone, and contact malwin support immediately if you suspect unauthorised access to your account.

10 Minimum Age & Children's Data

The malwin platform is strictly for adults. The minimum age to hold a malwin account is 21 years. malwin does not knowingly collect personal data from individuals under the age of 21.

Age is verified during the registration and KYC process. Any account found to belong to a person under 21 will be immediately suspended, all funds will be returned, and the account data will be flagged in accordance with our responsible gaming procedures.

If you believe that a person under 21 has registered an account on the malwin platform, please contact our support team immediately at [email protected]. We will investigate and act promptly.

11 Changes to This Policy

malwin may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, malwin will notify registered players by email and display a prominent notice on the malwin.vip platform.

The "Last updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this page periodically. Your continued use of the malwin platform following notification of a material change constitutes acceptance of the updated Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you should stop using the platform and may request account closure by contacting the malwin support team.

12 Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by malwin, please contact the malwin support team:

• Live Chat: Available 24/7 via the malwin.vip platform. Average first response under two minutes.
• Email: [email protected] — responses within four hours during normal business hours, within 24 hours at all other times.

When submitting a data rights request by email, please include your registered account username and email address so that we can locate your records and verify your identity before processing the request. malwin will not fulfill data subject requests from unverified requestors, as doing so could itself constitute a data breach.