MGLion Privacy Policy — Your Data,
Your Rights, Our Responsibility

MGLion is the online gaming platform operated at mglion.ws, serving players across Pakistan. For the purposes of this Privacy Policy, MGLion is the data controller — meaning we are the entity that determines the purposes and means of processing your personal data. When this Policy refers to "MGLion", "we", "us", or "our", it refers to the operator of mglion.ws and its associated services.

This Privacy Policy applies to all personal data collected through the MGLion website, mobile-optimised site, account system, payment processing, customer support channels, and any other service offered under the MGLion brand. It covers data collected from both registered players and visitors who browse the platform without registering.

This Policy should be read alongside MGLion's Terms and Conditions, which govern the broader relationship between MGLion and its players. Registering an account at MGLion constitutes acceptance of both documents.

MGLion collects personal data through several distinct channels. Understanding what is collected at each stage helps you make an informed decision about what you share with us.

MGLion does not collect data without a clear reason. Every category of data collected at MGLion is processed for one or more of the following specific purposes, each with its own legal basis.

• Account creation and management: Your registration data — mobile number, username, and date of birth — is processed to create and maintain your MGLion account. This is necessary for the performance of the contract between you and MGLion. Without this data, we cannot provide you with access to the platform.
• Identity verification (KYC): We process your CNIC and selfie to verify your identity before releasing any withdrawal. This is a legal obligation — MGLion is required to verify the identity of players and to maintain records of that verification as part of its anti-money laundering and responsible gaming compliance framework.
• Payment processing: Payment reference information is processed to facilitate deposits and withdrawals in PKR. This is necessary for the performance of the contract. MGLion's payment processor handles the actual transaction data; MGLion retains only the minimum reference information required to identify and reverse transactions if needed.
• Fraud prevention and security: Technical data — including IP addresses, device identifiers, and session logs — is processed to detect and prevent fraudulent activity, multi-accounting, and abuse of the MGLion platform. This processing is in MGLion's legitimate interests as a platform operator and in the broader interests of all players who use the platform honestly.
• Responsible gaming compliance: Transaction and betting history is processed to monitor for patterns that may indicate problem gaming behaviour. MGLion is committed to responsible gaming and this monitoring is carried out in the player's own interests and in accordance with MGLion's responsible gaming obligations.
• Customer support: Communication data from support interactions is processed to resolve your enquiries and complaints. These records are also maintained for internal training purposes, with personal identifiers anonymised for training use.
• Marketing communications: Where you have opted in to receive promotional communications from MGLion, your mobile number and marketing preference data is used to send you relevant bonus offers and platform updates. This processing is based on your consent. You can withdraw consent at any time.

MGLion shares your personal data with third parties only where it is strictly necessary for the operation of the platform or required by law. We do not sell your data and we do not share it with marketing companies, data brokers, or any organisation that would use it for their own commercial purposes independent of MGLion.

The categories of third parties who may receive your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and our card payment gateway receive payment reference data — the account numbers and transaction amounts needed to process your deposits and withdrawals. These processors handle the actual movement of funds; MGLion provides only the reference data they require to identify and complete transactions.
• Identity verification providers: MGLion uses a third-party KYC service to verify the authenticity of CNIC documents submitted by players. Your CNIC images and selfie are transmitted to this service over encrypted connections. The KYC provider processes your data solely for verification purposes and is contractually prohibited from using it for any other purpose.
• Game content providers: MGLion's live dealer games and some RNG games are powered by licensed third-party game providers. These providers may receive your session data — game round IDs, bet amounts, outcomes — to facilitate the game sessions you join. Player identity data is not passed to game providers.
• Regulatory and law enforcement bodies: MGLion is required to share certain information with regulatory and law enforcement authorities where required by applicable law. This includes reporting obligations related to anti-money laundering legislation. MGLion will share data in response to valid legal requests and will, where legally permitted, notify affected players.
• IT infrastructure providers: MGLion's platform is hosted on cloud infrastructure provided by reputable hosting companies. These providers process data only as instructed by MGLion and are bound by data processing agreements that restrict them from using the data for any purpose other than providing the hosting service.

MGLion applies a combination of technical controls and internal procedures to protect your personal data against unauthorised access, loss, or misuse. Security is not treated as an afterthought at MGLion — it is embedded into the platform architecture from the ground up.

• SSL/TLS encryption: All data transmitted between your browser or device and MGLion's servers is encrypted using Transport Layer Security (TLS). This applies to every page of the MGLion platform, not just login and payment pages.
• Password hashing: Your MGLion account password is never stored in plain text. It is hashed using a modern cryptographic algorithm before being stored. Even MGLion's own technical staff cannot retrieve your plain-text password.
• Segregated storage: Player account data and player financial data are stored in separate systems with separate access controls. A breach of one system does not automatically expose data from the other.
• Access control: Internal access to player data is restricted on a strict need-to-know basis. Customer support staff can access account information necessary to resolve your queries; they do not have access to raw payment data or KYC documents unless specifically required for a verified support request.
• Regular security reviews: MGLion conducts regular reviews of its security architecture and access logs to detect any anomalies or potential vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, MGLion will notify affected players promptly via their registered mobile number and take immediate steps to contain and remediate the incident.

Despite these measures, no digital platform can guarantee absolute security. If you have reason to believe your MGLion account has been compromised, contact support immediately so the account can be secured pending investigation.

MGLion retains personal data only for as long as it is necessary for the purpose for which it was collected. The retention periods below reflect both operational necessity and legal requirements.

When data reaches the end of its retention period, it is deleted securely or anonymised in a way that means it can no longer be associated with you as an individual. If you close your MGLion account, the above retention periods still apply from the date of closure — we cannot delete data immediately on account closure where legal retention obligations apply.

MGLion uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve the experience for players. A cookie is a small text file placed on your device when you visit a website. It allows the site to recognise your device on subsequent visits.

MGLion uses the following categories of cookies:

• Strictly necessary cookies: These are required for the platform to function. They manage your login session, maintain your account state while you navigate the site, and handle security functions. You cannot opt out of these cookies and still use the MGLion platform.
• Functional cookies: These remember your preferences — such as your preferred language and display settings — so you do not have to re-select them every visit. They are set for your convenience and can be disabled through your browser settings, though doing so may affect some non-essential platform functions.
• Analytics cookies: MGLion uses anonymised analytics to understand how players move through the platform — which pages are visited most, where players drop off in a registration flow, and how long live casino sessions typically last. This data is aggregated and cannot be traced back to individual players. It is used purely to improve the platform.
• Security cookies: These help MGLion identify and block suspicious activity — such as multiple failed login attempts from the same device or unusually rapid changes in account behaviour — that may indicate a fraud attempt or account takeover.

MGLion does not use advertising tracking cookies or share cookie data with third-party advertising networks. You can manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your MGLion account.

As a player whose personal data is processed by MGLion, you have a number of rights. These rights are genuine and exercisable — MGLion does not make them difficult to use. To exercise any of the rights below, contact MGLion's support team at support@mglion.ws with "Data Rights Request" in the subject line.

MGLion is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we discover or receive credible information that an account has been registered by someone under 18 — whether through our own KYC processes, a third-party report, or any other means — the account will be closed immediately and all data associated with it deleted, subject only to any legal retention obligations that may apply.

MGLion's CNIC verification requirement provides a hard check against underage registration: a valid Pakistani CNIC cannot be issued to anyone under 18. If you believe a minor has accessed the MGLion platform, please contact us immediately at support@mglion.ws so we can investigate and act promptly.

If you are a parent or guardian and believe your child has created an MGLion account without your knowledge, please contact our support team directly. We will verify the situation and close the account. Any deposits made will be returned to the payment source after verification.

MGLion reviews this Privacy Policy periodically and updates it when necessary to reflect changes in how we process data, changes in the services we offer, or changes in applicable law. The "Last Updated" date at the top of this page is changed whenever material amendments are made.

When significant changes are made to this Policy — particularly changes that affect how your data is used or shared, or that affect your rights — MGLion will notify registered players via a notification displayed upon login and, where appropriate, via their registered mobile number. The updated Policy will always be available on this page.

We encourage you to review this Policy whenever you receive a notification of changes. Continued use of the MGLion platform following notification of an updated Privacy Policy constitutes your acknowledgement of the updated document. If you have any questions about a change to this Policy, contact our support team before continuing to use the platform.

If you have any question about this Privacy Policy, want to exercise any of your data rights, or have a concern about how MGLion is handling your personal data, you can contact us through any of the following channels.