MGLion Privacy Policy

1. Introduction

MGLion ("the Platform", "we", "us", "our") operates the website at mglion.vu and the associated mobile application. We are committed to protecting the personal information of every player who registers and uses the MGLion platform, including all Pakistani players who deposit and transact in PKR.

This Privacy Policy explains in plain terms what personal data we collect from you, why we collect it, how we store and protect it, who we share it with under what circumstances, how long we keep it, and what rights you have as the person that data belongs to.

This Policy applies to all data collected through the MGLion website, the MGLion mobile app for Android and iOS, and any correspondence or communication you have with our support team. It applies from the moment you begin the registration process and continues for as long as your account exists, and in certain cases for a defined period after account closure.

This Privacy Policy should be read alongside the MGLion Terms and Conditions. Where these two documents overlap, both apply. If you have any questions about either document, please contact us at [email protected].

2. What Personal Data We Collect

The personal data MGLion collects falls into several categories depending on how you interact with the platform. We only collect data that is necessary for the purposes described in this Policy.

We do not collect special category data such as health information, political opinions, or biometric data as part of the standard registration and gaming process.

3. How We Collect Your Data

MGLion collects personal data through several channels. Understanding these helps you know exactly when and how your information is gathered:

• Directly from you: When you fill in the registration form, complete identity verification, make a PKR deposit or withdrawal request, contact our support team, or submit any other information through the platform or app.
• Automatically during use: When you log in and use the platform, our systems automatically record your IP address, device information, browser or app version, pages visited, games played, bets placed, and session duration. This happens every time you use MGLion.
• From payment providers: When you transact via JazzCash, Easypaisa, Raast, bank transfer, or card, our payment processing partners share transaction reference data with us to confirm your deposit or withdrawal. We do not receive your full JazzCash or Easypaisa PIN or full card number.
• From identity verification services: If we use a third-party identity verification provider to check documents you submit during KYC, that provider may share a verification result and document summary with us.
• Via cookies and similar technologies: Our website and app use cookies and local storage to maintain your session, remember preferences, and collect analytics data. Full details are in Section 9 on Cookies.

4. How We Use Your Personal Data

MGLion uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose not listed here without first obtaining your consent or having a clear legal basis to do so.

• Account management: To create and maintain your MGLion account, verify your identity, process your login, and manage account settings and preferences.
• Processing PKR transactions: To process PKR deposits and withdrawals through your chosen payment method, whether that is JazzCash, Easypaisa, Raast, bank transfer, or card. Transaction records are maintained for financial record-keeping purposes.
• Providing gaming services: To deliver the Live Casino, Casino Slots, Fish Games, and Sports Betting services, including recording game outcomes, processing winnings, and applying bonuses to your account.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling behaviour, to apply deposit limits or self-exclusion restrictions you have requested, and to send responsible gaming reminders where appropriate. This is something MGLion takes seriously and your activity data genuinely helps us fulfil this responsibility.
• Platform security and fraud prevention: To detect and prevent fraud, money laundering, unauthorised account access, duplicate account creation, and any other misuse of the platform. Device and IP data play a key role in this.
• Customer support: To respond to your queries, process complaints, and maintain records of communications to help resolve ongoing issues efficiently.
• Platform improvement: To analyse how players use the platform and identify areas for improvement in user experience, game offerings, and payment processing.
• Promotional communications: If you have opted in to receive marketing messages, we may send you information about new games, promotions, deposit bonuses, and PSL cricket or T20 betting market offers. You can opt out of these at any time from within your account settings.
• Legal and regulatory obligations: To comply with applicable legal requirements relating to record keeping, financial transactions, and the prevention of financial crime.

5. Who We Share Your Data With

MGLion does not sell your personal data to any third party for marketing or commercial purposes. We share your data only with carefully selected partners who require it to help us deliver the platform's services, and only to the extent necessary for those purposes.

• Payment processors: JazzCash, Easypaisa, Raast, and banking or card processing partners receive the transaction data needed to process your PKR deposits and withdrawals. Each partner operates under its own privacy policy and data protection standards.
• Identity verification providers: Where a third-party KYC service is used to verify the identity documents you submit, that provider receives copies of your documents and returns a verification result. They are contractually prohibited from using your data for any other purpose.
• Game providers: Some games available on MGLion are provided by third-party game studios. Your game activity data (stakes, results, session duration) may be shared with the relevant provider to deliver the game and process results. Game providers do not receive your financial or identity documents.
• Fraud and security services: We work with specialist fraud prevention and device fingerprinting partners to identify suspicious account activity, duplicate registrations, and potential financial crime. These providers process device and behavioural data on our behalf.
• IT infrastructure and hosting providers: Our platform is hosted on third-party cloud and server infrastructure. Providers operating this infrastructure have access to platform data as part of their hosting service and operate under strict confidentiality agreements.
• Legal and regulatory authorities: In cases where we are legally required to disclose information – for example, in response to a valid legal request related to financial crime investigation – we will share the minimum data required to comply with that obligation.

All third-party partners who process personal data on behalf of MGLion are required to handle that data securely and in accordance with applicable data protection standards. We do not transfer personal data to parties in countries that do not maintain adequate data protection standards without appropriate safeguards in place.

6. PKR Payment Data & Security

Because MGLion processes real PKR deposits and withdrawals, financial data receives a particularly high level of protection. Here is specifically how we handle payment information:

• No full card storage: MGLion does not store your full debit or credit card number on its own servers. Card payment processing is handled by PCI-DSS compliant payment partners who maintain the required infrastructure for secure card data handling.
• JazzCash and Easypaisa: We receive only transaction reference numbers and confirmation statuses from JazzCash and Easypaisa. Your mobile wallet PIN is never transmitted to or stored by MGLion.
• Bank account details: If you use bank transfer or Raast, we store the account details you provide solely for the purpose of processing your withdrawals to that account. These are encrypted at rest.
• Transaction records: A full record of every PKR deposit and withdrawal on your account is maintained. This record is visible to you in your account transaction history at all times. Records are retained for the periods described in Section 7.

7. How Long We Keep Your Data

MGLion retains personal data for only as long as is necessary for the purpose for which it was collected, or as required by applicable legal and financial record-keeping obligations.

• Active account data: All personal, financial, and activity data associated with an active MGLion account is retained for the full duration of that account's existence.
• Financial transaction records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of each transaction. This is a standard requirement for financial record-keeping.
• Identity verification documents: Copies of identity documents submitted during KYC are retained for a minimum of five years from account closure or the date of the last transaction, whichever is later.
• Support communications: Records of live chat sessions and email correspondence with support are retained for two years from the date of the most recent message in each conversation.
• Game and betting history: Full game activity logs, including bet records and results, are retained for a minimum of three years from the date of each game session.
• Marketing consent records: If you have opted in to receive marketing communications, a record of that consent is retained for as long as you remain opted in plus two years after you opt out.

When the applicable retention period expires, your data is either securely deleted or anonymised so that it can no longer be associated with you as an individual.

8. How We Keep Your Data Secure

Protecting the personal and financial data of MGLion players is a core operational priority. We maintain the following security measures as standard across the platform:

• Encryption in transit: All data transmitted between your device and MGLion – including login credentials, PKR payment details, and personal information – is encrypted using TLS. This applies to both the website and the mobile app.
• Encryption at rest: Sensitive personal and financial data stored on our servers is encrypted at rest, meaning it is unreadable even if the underlying storage is somehow accessed without authorisation.
• Access controls: Access to player personal data within MGLion's systems is restricted to authorised staff on a need-to-know basis. All internal data access is logged and auditable.
• Account security: Your MGLion account is protected by the password you create. We strongly recommend using a unique, strong password and not sharing it with anyone. MGLion staff will never ask for your password.
• Fraud monitoring: Our platform continuously monitors account activity for unusual patterns, including login attempts from unfamiliar devices, rapid PKR transfers, and signs of account sharing. Suspicious activity triggers an internal review process.
• Breach response: In the event of a data security incident that affects your personal data in a material way, MGLion will notify you as promptly as possible and take immediate steps to contain and investigate the incident.

While we take every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You also play a role in keeping your account secure by maintaining a strong password and contacting us immediately if you believe your account has been accessed without your permission.

9. Cookies & Similar Technologies

The MGLion website and mobile app use cookies and similar technologies including local storage and session tokens. Here is a breakdown of what we use and why:

MGLion does not use third-party advertising cookies or any cookies that track your behaviour across other websites for the purpose of serving targeted advertisements. The cookies we use are limited to what is necessary to operate the platform and improve the player experience.

You can manage cookie preferences through your browser settings. Instructions for the most popular browsers are available through each browser's help documentation. Note that disabling essential cookies will prevent you from logging in to your MGLion account.

10. Your Data Rights

As a player on MGLion, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with your registered username and the right you wish to exercise. We will respond within a reasonable timeframe.