- Introduction
- Data We Collect
- How We Use Your Data
- Legal Basis for Processing
- Data Sharing
- Cookies & Tracking
- Data Security
- Data Retention
- Your Rights
- Children's Privacy
- Policy Updates
- Contact Us
01Introduction
MGLion ("we", "us", "the Platform") is an online sports betting and casino operator serving players in Pakistan via the website mglion.im and any associated mobile applications. This Privacy Policy explains how MGLion collects, processes, stores and protects personal data in connection with the services we provide.
By registering an account on MGLion, making a deposit or using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the MGLion platform and contact support to arrange account closure.
Who controls your data: MGLion acts as the data controller in relation to personal information collected through the platform. We determine the purposes and means of processing your data as described in this policy. For any data-related enquiries, contact support@mglion.im with the subject line "Data Privacy".
This policy applies to all personal data collected from users of the MGLion platform regardless of how they access it – desktop browser, mobile browser or app. It covers information provided directly by users at registration, information generated through use of the platform and information collected automatically through technical means such as cookies and log files.
02Data We Collect
MGLion collects personal data through several different routes. The table below provides a clear breakdown of the categories of data we collect, where it comes from and why it is needed.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, photograph | Provided by you at registration or verification |
| Contact Data | Mobile number, email address, city of residence | Provided by you at registration |
| Financial Data | Easypaisa/JazzCash account reference, bank IBAN, transaction history | Provided during deposit/withdrawal or from payment processors |
| Account Activity Data | Betting history, game history, deposits, withdrawals, bonus usage | Generated automatically through platform use |
| Technical Data | IP address, device type, browser, OS, session timestamps | Collected automatically via cookies and server logs |
| Communications Data | Support chat transcripts, emails, complaint correspondence | Provided when you contact MGLion support |
| Verification Data | CNIC scan, proof of address document, selfie for liveness check | Provided during KYC verification process |
Data We Do Not Collect
MGLion does not collect sensitive personal data categories such as religious beliefs, political opinions, biometric data (beyond identity verification selfies used solely for document matching), health information or sexual orientation. We do not require this information and will not ask for it at any stage of account use.
Payment Security: MGLion does not store complete payment card numbers, CVV codes or Easypaisa/JazzCash PINs. Payment transactions are processed through certified payment gateway providers. MGLion only retains anonymised transaction references and amounts necessary for account reconciliation and fraud prevention.
End-to-End Encryption
All data transmitted between your device and MGLion servers is protected by TLS 1.3 encryption. Data stored in our systems is encrypted at rest using AES-256 industry-standard protocols.
Never Sold
MGLion will never sell, rent or trade your personal data to any third party for marketing or commercial purposes. Your information belongs to you and stays within the MGLion ecosystem.
You Stay in Control
You can request access to, correction of or deletion of your personal data at any time by contacting MGLion support. Requests are processed within 30 days.
Minimal Collection
MGLion only collects personal data that is genuinely necessary for operating the platform, meeting legal obligations and ensuring account security. We don't collect data just because we can.
Opt-Out Marketing
Promotional communications from MGLion are always opt-in at registration and easily cancelled at any time via your account preferences or by emailing support@mglion.im.
Defined Retention Periods
MGLion keeps your data only as long as is necessary for the purposes it was collected or as required by law. Full retention periods for each data category are set out in Section 8.
03How We Use Your Data
MGLion uses the personal data we collect only for the specific purposes described below. We do not use your data for purposes that are incompatible with those originally stated unless we obtain your explicit consent to do so.
Account Management and Service Delivery
Your identity, contact and financial data are used to create and maintain your MGLion account, process deposits and withdrawals, settle bets and provide the full range of platform services. This use is foundational – without it we cannot operate your account.
Identity Verification (KYC)
MGLion is required to verify the identity of account holders as part of its anti-money laundering obligations. Verification data including CNIC scans and proof of address documents are used solely for this purpose and processed using certified third-party identity verification providers operating under strict data processing agreements.
Fraud Prevention and Security
Technical data including IP address, device fingerprint and session patterns are analysed to detect and prevent fraudulent activity, identify duplicate accounts and protect the integrity of the MGLion platform. This processing is necessary to protect both MGLion and honest players from harm.
Customer Support
When you contact MGLion's support team, the information you provide along with your account history is used to resolve your query. Support communications are recorded and retained as described in the data retention section of this policy.
Responsible Gaming
Account activity data is monitored to identify patterns that may indicate problematic gambling behaviour. This analysis allows MGLion to proactively reach out to players who may benefit from responsible gaming tools and to enforce responsible gaming limits. This use of data is in the genuine interest of player welfare.
Platform Improvement
Aggregated and anonymised technical and activity data is used to improve the MGLion platform – optimising page performance, identifying bugs, improving the betting interface and understanding which features are most useful to Pakistani players. This analysis does not involve processing identifiable personal data.
Marketing Communications
Where you have opted in to marketing communications at registration, we may send you information about MGLion promotions, bonuses and new features via email or SMS. Every marketing communication includes a clear unsubscribe link. You can also manage your communication preferences at any time in your account settings.
04Legal Basis for Processing
MGLion processes your personal data on the following legal grounds:
- Contract performance: Processing necessary to provide the betting and gaming services you have signed up for, including account management, bet settlement and payment processing.
- Legal obligation: Processing required to comply with applicable laws including anti-money laundering regulations, identity verification requirements and fraud prevention obligations.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring and anonymised platform improvement analytics where these interests are not overridden by your data protection rights.
- Consent: Processing for optional marketing communications where you have given explicit opt-in consent. You may withdraw this consent at any time.
05Data Sharing and Third Parties
MGLion does not sell your personal data to any third party. We share data only in the specific and limited circumstances described below, and only with partners who operate under strict data processing agreements that prohibit any use of your data beyond the purposes for which it is shared.
Payment Processors
To process deposits and withdrawals, MGLion shares necessary transaction data with payment service providers including Easypaisa, JazzCash, NayaPay, SadaPay and banking partners. These providers receive only the minimum data necessary to complete the transaction and are not authorised to use it for any other purpose.
Identity Verification Providers
KYC verification is carried out with certified identity verification partners. Verification documents and data are shared with these providers solely for the purpose of identity confirmation and are not retained by the provider beyond the verification process.
IT Infrastructure Providers
MGLion uses cloud hosting and infrastructure services to operate the platform. These providers may have technical access to data stored on their systems as part of providing hosting services, but operate under comprehensive data processing agreements and are prohibited from independently processing MGLion user data.
Regulatory and Legal Authorities
MGLion may be required by law to disclose account information and transaction data to regulatory authorities, law enforcement agencies or courts. In such circumstances MGLion will share only what is strictly required by the applicable legal obligation and will notify the affected account holder where permitted to do so.
No Cross-Border Transfers Without Safeguards: If MGLion transfers your personal data outside Pakistan, we ensure that appropriate safeguards are in place with the receiving party to maintain the same level of data protection as applies within Pakistan. This typically means contractual data protection clauses or use of providers with equivalent international data protection certifications.
06Cookies and Tracking Technologies
MGLion uses cookies and similar tracking technologies on its website and application. Cookies are small text files placed on your device that help us deliver a better, more secure and more personalised experience. Below is a clear explanation of the types of cookies we use and what they do.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Session management, login authentication, security tokens, bet slip functionality. These are required for the platform to function. | No – platform will not work without these | |
| Anonymised usage data to understand how players use the platform, which pages are most visited and where performance can be improved. | Yes – can be disabled in cookie settings | |
| Language preference, odds format preference (decimal/fractional), timezone, remembering logged-in state. | Yes – disabling affects personalisation |
MGLion does not use third-party advertising cookies or tracking pixels from ad networks. Analytics data collected via cookies is aggregated and anonymised before analysis – individual browsing sessions are not reviewed at a personal level. You can manage your cookie preferences in your browser settings or through the cookie preferences panel accessible from the MGLion website footer.
07Data Security
MGLion takes the security of your personal data seriously. The following technical and organisational measures are in place to protect data held on the platform:
- Encryption in transit: All data transferred between your device and MGLion servers is protected by TLS 1.3 encryption, indicated by the HTTPS protocol in your browser.
- Encryption at rest: Personal data stored in MGLion's databases is encrypted using AES-256, an industry-standard encryption protocol.
- Access controls: Access to personal data within MGLion is restricted on a strict need-to-know basis. Staff with access to personal data are trained in data protection requirements and subject to confidentiality obligations.
- Two-factor authentication: Available on all MGLion player accounts. We strongly recommend enabling 2FA to add an additional layer of security to your account.
- Regular security audits: MGLion's systems undergo periodic security assessments and penetration testing to identify and address potential vulnerabilities before they can be exploited.
- Incident response: In the unlikely event of a data breach affecting your personal data, MGLion has procedures in place to identify, contain and assess the breach and to notify affected users and relevant authorities in accordance with applicable legal requirements.
Your Role in Account Security: No security system is impenetrable. You can significantly reduce the risk to your own account by using a strong, unique password for MGLion, enabling two-factor authentication, never sharing your login credentials with anyone and ensuring you log out from shared devices. MGLion's support team will never ask for your password.
08Data Retention
MGLion retains personal data only for as long as is necessary for the purposes described in this policy or as required by applicable law. The following retention periods apply to the main categories of data we hold:
- Account data (identity, contact): Retained for the lifetime of your active account plus 5 years after account closure. Extended retention is required by anti-money laundering regulations.
- Financial transaction data: Retained for 7 years from the date of each transaction in line with financial record-keeping requirements.
- KYC verification documents: Retained for the lifetime of the account plus 5 years. Securely deleted thereafter.
- Betting and gaming history: Retained for 5 years from account closure for dispute resolution and regulatory purposes.
- Support communications: Retained for 3 years from the date of the communication.
- Technical/log data: Retained for 12 months for security monitoring and fraud detection purposes.
- Marketing consent records: Retained until consent is withdrawn plus 12 months as evidence of consent status.
At the end of the applicable retention period, personal data is securely and permanently deleted from MGLion's systems. Where data anonymisation is possible and the anonymised data remains useful for platform improvement purposes, anonymised data may be retained indefinitely as it no longer constitutes personal data.
09Your Data Rights
As a user of the MGLion platform you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at support@mglion.im with the subject line "Data Rights Request". We will respond within 30 days.
Your Rights at a Glance
-
Right of Access
Request a copy of the personal data MGLion holds about you. We will provide this in a commonly used electronic format within 30 days of a verified request. -
Right to Rectification
Request correction of any inaccurate personal data MGLion holds. We will update your records and confirm the change within 14 days. -
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected. Note that some data must be retained for legal compliance reasons even after an erasure request. -
Right to Restriction
Request restriction of processing of your data in certain circumstances – for example where you contest the accuracy of the data while we investigate. -
Right to Portability
Request your personal data in a structured, commonly used machine-readable format where technically feasible. This applies to data processed on the basis of consent or contract. -
Right to Object
Object to processing based on legitimate interests, including direct marketing. Marketing objections take effect immediately. Other objections are assessed case by case. -
Right to Withdraw Consent
Withdraw consent for any processing based on consent (such as marketing communications) at any time without affecting the lawfulness of prior processing.
MGLion will never charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive. If we are unable to fulfil a data rights request we will explain why in writing within 30 days of the request.
10Children's Privacy
MGLion's services are strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is performed during the registration process and again during KYC verification. If MGLion discovers that an account has been created by a person under 18, the account will be immediately closed, all bets will be voided and any deposited funds will be returned to the originating payment method after identity verification of the legal guardian.
If you believe that a minor has created a MGLion account or has had access to an account, please contact us immediately at support@mglion.im. We take child protection extremely seriously and will act on any such report without delay. Parents and guardians should also consider using parental control software to restrict access to gambling websites for minors in their household.
11Updates to This Privacy Policy
MGLion reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements or platform features. The effective date and version number at the top of this page are updated with each revision. Where changes are material we will notify registered users via email and in-platform notification at least 7 days before the changes take effect.
Continued use of the MGLion platform after the effective date of a policy update constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically. The current version is always available at mglion.im/privacy-policy. If you do not accept any change to this policy you should contact us to discuss your options, which may include account closure with full withdrawal of any balance.
12Contact Us – Privacy Queries
If you have any question about how MGLion handles your personal data, want to exercise one of your data rights, or have a concern about a privacy matter, please get in touch using the contact details below. We aim to respond to all privacy-related enquiries within 5 business days.
Subject: Data Privacy
For questions about your account or betting-related matters, please visit our FAQ page. For our full platform terms please see the Terms and Conditions. For responsible gaming support please visit our Responsible Gaming page.