MGLine Privacy Policy — Your Data Belongs to You, Not to Advertisers

This Privacy Policy is issued by MGLine, the operator of mgline.bet ("MGLine", "we", "us", "our"). MGLine is an online gaming platform built specifically for Pakistani players, offering cricket betting, football betting, Aviator crash games, online casino, Ludo and the MGLine refer-a-friend programme.

For the purposes of this Privacy Policy, MGLine acts as the data controller for personal information collected through mgline.bet. This means we are responsible for deciding how and why your personal data is processed. If you have any questions about this policy or about how MGLine handles your data, you can reach us at support@mgline.bet at any time.

MGLine collects only the personal data that is genuinely necessary to provide our services, maintain account security, process payments and comply with our legal obligations. Here is a clear breakdown of the categories of data we collect and the specific information within each category:

MGLine does not collect full card numbers, CVV codes or banking passwords. Payment authentication is handled directly by your bank, Easypaisa, JazzCash or other payment provider — MGLine only receives confirmation of the transaction result and a token reference.

Every piece of data MGLine holds is used for a specific, legitimate purpose. We do not process your data for any purpose that you haven't been informed about in this policy. Here are the ways in which MGLine uses your personal information:

• Account Creation and Management: Your name, mobile number and email are used to create and maintain your MGLine account. This is the most fundamental use of your data — without it, we simply cannot operate your account.
• Payment Processing: Financial data and your payment method details are shared with our payment partners (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and card networks) solely to process your deposits and withdrawals in PKR. MGLine does not store complete payment credentials.
• Identity Verification and Fraud Prevention: MGLine uses identity data and technical data (including IP address and device fingerprinting) to verify that each account belongs to a real person, that the person is over 18 and that suspicious activity — such as multiple accounts from the same device or unusual transaction patterns — is detected and investigated promptly.
• Responsible Gaming Monitoring: MGLine uses gaming data — including bet frequency, deposit patterns and session duration — to identify members who may be showing signs of problem gambling. This data is used to trigger protective outreach and to ensure our responsible gaming tools are working as intended.
• Platform Security: Technical data including IP addresses and device identifiers is used to detect and respond to security threats, prevent account takeovers and ensure the platform is operating correctly.
• Customer Support: Communication data is retained so that our support team can provide consistent, informed assistance and so that disputes about bet settlements, payments or account activity can be investigated accurately.
• Legal Compliance: MGLine is required by applicable laws and regulations to retain certain financial and identity records for a defined minimum period. This data is retained only for as long as legally required and accessed only where a legal obligation requires it.
• Service Communications: MGLine sends transactional messages (deposit confirmations, withdrawal notifications, security alerts) to your registered mobile number and email. These are not marketing messages — they are operational notifications about your account. You cannot opt out of transactional communications while your account is active.

MGLine does not use your data for targeted advertising, does not build behavioural marketing profiles and does not use your data to personalise advertisements on any other platform or service.

MGLine shares your personal data with a limited number of third parties, each of whom has a specific and necessary role in delivering our services. We do not share your data with anyone else. The categories of recipients are:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank networks and Visa/Mastercard card processors receive the minimum data necessary to execute your transactions. They operate under their own privacy policies and regulatory obligations.
• Identity Verification Services: For accounts requiring enhanced verification (primarily for larger withdrawal amounts), MGLine works with third-party identity verification providers who check your CNIC details against government records. These providers are contractually bound to use your data only for verification purposes.
• Fraud Prevention Partners: MGLine uses specialised fraud detection software that analyses technical data (IP addresses, device signatures, transaction patterns) to identify fraudulent activity. This analysis is conducted in a privacy-preserving way — individual data is not shared beyond what the detection system requires.
• Legal and Regulatory Authorities: MGLine will disclose personal data to law enforcement, regulatory bodies or courts where we are legally required to do so, or where disclosure is necessary to protect the safety and legal rights of MGLine or its members. We do not proactively share data with authorities beyond these circumstances.
• Technology Infrastructure Providers: MGLine's platform runs on cloud infrastructure provided by reputable international technology companies. These providers may technically process data as part of hosting and storage services, but they do not have access to your data for their own purposes and are bound by strict data processing agreements.

MGLine uses cookies and similar technologies to make the platform work correctly, to keep you logged in securely and to understand how the platform is being used so we can improve it. We do not use cookies for advertising or for cross-site tracking.

The cookies MGLine uses fall into three categories:

• Essential Cookies: Required for the platform to function. These handle your login session, security tokens and regional settings. You cannot disable essential cookies without preventing MGLine from working.
• Functional Cookies: Remember your preferences — such as your preferred language and last-used payment method — to save you time on repeat visits. These can be disabled without affecting core functionality.
• Analytics Cookies: MGLine uses anonymised analytics data to understand which parts of the platform are most used, where users encounter problems and how to improve performance. No individual user is identified in analytics data.

MGLine takes data security seriously and implements a layered set of technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction. The security measures MGLine operates include:

• TLS/SSL Encryption (256-bit): All data transmitted between your device and MGLine's servers is encrypted using industry-standard TLS encryption. The padlock icon in your browser confirms this encryption is active every time you use MGLine.
• Encrypted Data Storage: Sensitive data fields — including identity information and financial records — are encrypted at rest in MGLine's databases using AES-256 encryption. Even in the unlikely event of a database breach, this data cannot be read without the encryption keys.
• Two-Factor Authentication (2FA): MGLine strongly recommends enabling 2FA on your account. When enabled, a unique code is required at every login in addition to your password, preventing account access even if your password is compromised.
• Real-Time Fraud Monitoring: MGLine's systems monitor all account activity in real time for patterns associated with account takeover attempts, fraudulent transactions and other security threats. Suspicious activity triggers automatic account protection and immediate support notification.
• Regular Security Audits: MGLine's infrastructure undergoes regular independent security assessments. Identified vulnerabilities are patched on a priority basis before they can be exploited.
• Staff Access Controls: Access to player personal data within MGLine is restricted to staff members who genuinely need it to perform their job functions. All staff with data access are bound by confidentiality obligations.

MGLine does not keep your personal data longer than necessary. The retention periods we apply are based on the type of data and the legal or operational reason for keeping it:

• Active Account Data: Personal and contact data is retained for as long as your MGLine account remains active. If you close your account, this data is deleted within 90 days except where retention is required by law.
• Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction. This is a standard requirement under Pakistani financial regulations and anti-money laundering rules. After this period, transaction records are securely deleted.
• Identity Verification Documents: Copies of identity documents (CNIC scans) submitted for enhanced verification are retained for 5 years after account closure. Access to these documents is restricted to compliance staff only.
• Gaming Session Logs: Detailed gaming logs are retained for 2 years for the purpose of dispute resolution and responsible gaming monitoring. Anonymised statistical data may be retained longer for platform improvement.
• Support Communications: Customer support chat logs and emails are retained for 2 years from the date of the interaction. After this period, transcripts are deleted and only metadata (date, type of query) is retained for reporting purposes.
• Technical and Security Logs: IP address logs and device access records are retained for 12 months for fraud detection and security purposes, then deleted.

When data reaches the end of its retention period, MGLine deletes it securely using industry-standard data destruction methods. Data held in backups is purged on a rolling basis in line with the same retention schedules.

As an MGLine member, you have specific rights over the personal data we hold about you. MGLine is committed to honouring these rights promptly and without unnecessary barriers. Here is what you are entitled to:

MGLine's services are strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an age declaration and we verify age for accounts requesting higher-value withdrawals.

If MGLine discovers or is informed that an account has been created by a person under 18, we will immediately close that account, refund any real money deposits made and delete all personal data associated with the account from our systems within 14 days. Any bonus funds used will be forfeited.

If you believe a minor has created an MGLine account, please contact us immediately at support@mgline.bet with as much detail as you can provide. We take these reports seriously and act on them the same day.

MGLine reviews this Privacy Policy at least once per year and updates it whenever there is a material change to how we collect or use personal data, when we add a new data processing activity or when legal requirements change.

For material changes — such as a new category of data being collected or a new category of third party receiving data — MGLine will notify all active members via their registered email address at least 7 days before the change takes effect. You'll also always be able to see the "Last Updated" date at the top of this page.

If you continue to use MGLine after a policy update takes effect, you are deemed to have accepted the revised policy. If you don't agree with any change, you have the right to close your account before the change takes effect and request deletion of your data.

For any privacy-related question, data access request, complaint or concern, please contact MGLine through any of the following channels. All privacy queries are handled by our dedicated team who are trained specifically on data protection obligations:

• Email: support@mgline.bet — mark the subject line "Privacy Query" for faster routing. Response typically within 2 hours during business hours.
• Live Chat: Available on every page of MGLine — 24/7 including weekends and public holidays. Best for urgent security concerns.
• WhatsApp / Telegram: Contact details available from the Help section of your account dashboard after logging in.

For formal data subject access requests, erasure requests or portability requests, please email us and include your full name, registered mobile number and a clear description of what you are requesting. We will ask you to verify your identity before releasing or deleting any data. All formal requests are acknowledged within 48 hours and resolved within 30 calendar days.