MGLine Privacy Policy – How We Protect Your Data in Pakistan

1. Who We Are

This Privacy Policy applies to MGLine, the online gaming and betting platform available at mgline.ws. When this policy refers to "MGLine", "we", "us" or "our", it means the MGLine platform and the team operating it.

For the purposes of data protection, MGLine is the data controller — meaning we are responsible for deciding how and why your personal data is processed. If you have any questions about how MGLine handles your personal information, the right place to start is our support team at support@mgline.ws, who will either answer directly or direct your query to the appropriate person.

This policy covers all personal data collected through the MGLine website, your registered account, your gaming activity, and your PKR payment transactions. It does not cover data collected by third-party websites or services that you may access through links in MGLine communications — those are governed by the privacy policies of those third parties.

2. Data We Collect

MGLine collects personal data in two broad categories: information you provide directly, and information generated automatically through your use of the platform.

3. How We Collect Your Data

MGLine collects your personal data through the following means:

• Registration: When you create your MGLine account, you provide your name, mobile number, email address, date of birth and chosen username. This information is required to open your account.
• Identity Verification (KYC): When you request a withdrawal above certain thresholds or where required by our compliance procedures, MGLine may ask you to submit a copy of your CNIC or other government-issued ID. This is standard practice for licensed gaming platforms and is required to meet our anti-money laundering obligations.
• Deposits and Withdrawals: When you make a PKR deposit via Easypaisa, JazzCash, NayaPay, SadaPay, Bank IBFT or card, transaction details are passed to MGLine by the payment processor to confirm the deposit and credit your account.
• Platform Usage: MGLine automatically logs your IP address, device information, browser details, and session data when you use the platform. This is standard web server logging and is used for security, fraud prevention and technical support.
• Communications: If you contact MGLine support by Live Chat or email, the contents of that communication are retained for quality assurance, training and dispute resolution.
• Cookies and Similar Technologies: MGLine uses cookies and session storage to maintain your login state, remember your preferences, and analyse how the platform is used. See Section 8 for details.

4. Why We Use Your Data

MGLine uses your personal data for the following specific purposes — and only these purposes:

• Account operation: To create and manage your MGLine account, authenticate your logins, and maintain your gaming history and PKR balance.
• Payment processing: To process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, Bank IBFT and Visa/Mastercard, and to reconcile transactions against your balance.
• Identity verification: To verify that you meet the minimum age requirement of 18 years and to comply with our anti-money laundering and know-your-customer obligations.
• Customer support: To respond to your queries, resolve disputes, and investigate complaints relating to your MGLine account or any game or payment.
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeovers, bonus abuse, and other forms of platform misuse. This includes automated analysis of login patterns, transaction behaviour and device fingerprinting.
• Responsible gaming: To identify patterns of play that may indicate a player is experiencing gambling-related harm, and to enforce self-exclusion and deposit limits set by you or applied by MGLine.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the MGLine platform — page performance, navigation, game loading times and similar technical metrics. This analysis does not identify you individually.
• Legal compliance: To comply with applicable laws and regulations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required by our operating licence.
• Communications: To send you account-related notifications such as deposit confirmations, withdrawal updates, and responsible gaming alerts. MGLine does not send unsolicited promotional emails without your explicit opt-in consent.

5. Legal Basis for Processing

Every use of your personal data by MGLine has a legal basis. The primary bases we rely on are:

• Contract performance: Processing necessary to fulfil our obligations under the MGLine Terms and Conditions — operating your account, processing PKR payments, settling bets. Without this processing, MGLine cannot function as a platform.
• Legal obligation: Processing required to comply with applicable law — identity verification (KYC/AML), record-keeping, and responding to lawful requests from regulators or law enforcement.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where our interest in maintaining a secure and functional platform does not override your privacy rights.
• Consent: Where you have opted in to receive promotional communications from MGLine. You can withdraw this consent at any time by contacting support@mgline.ws.

6. Who We Share Your Data With

MGLine does not sell your personal data to any third party — ever. We share your data only where strictly necessary, and only with the following categories of recipient:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and our bank transfer and card processing partners. We share only the transaction data they require to process your PKR deposit or withdrawal. These processors are contractually bound to handle your data securely and are not permitted to use it for their own commercial purposes.
• Game providers: When you launch a game, a session token is passed to the game provider's server. Game providers may log your session and gameplay data for technical and compliance purposes. MGLine works only with certified game providers who are subject to industry-standard data protection obligations.
• Identity verification providers: Where MGLine uses a third-party KYC service to verify your identity documents, your submitted ID data is shared with that provider. The provider verifies the document and confirms the result to MGLine. Your document image is not retained by MGLine beyond the verification process.
• IT and cloud service providers: MGLine uses reputable cloud infrastructure and security services. These providers host and process data on our behalf and are contractually restricted from using it for any purpose other than providing the service.
• Regulatory and law enforcement authorities: Where we receive a lawful request from a regulator, court or law enforcement agency, MGLine will comply with the minimum disclosure required by law. We will notify you of any such disclosure where legally permitted to do so.

7. PKR Payments & Financial Data

Because MGLine operates exclusively in Pakistani Rupees and uses Pakistan's local payment infrastructure, the way we handle financial data is worth explaining in specific detail:

• Easypaisa and JazzCash: When you deposit via Easypaisa or JazzCash, your mobile wallet number is shared with the payment gateway to initiate and confirm the transaction. MGLine stores only the transaction reference, amount, and timestamp — not your full wallet credentials.
• NayaPay and SadaPay: The same principle applies. MGLine receives a payment confirmation and transaction reference. We do not store your NayaPay or SadaPay login credentials.
• Bank IBFT: For bank transfers, MGLine receives the sender account number, bank name, transaction amount and reference number to confirm receipt of funds.
• Visa/Mastercard: Card transactions are processed by a PCI-DSS Level 1 certified payment processor. MGLine receives only a masked card number (last four digits) and transaction reference. Full card numbers are never stored on MGLine servers.
• PKR balance: Your MGLine PKR balance is stored in our secure account database and is accessible only to you via your authenticated account session, and to authorised MGLine personnel for payment processing and support purposes.
• AML monitoring: MGLine monitors transaction patterns for signs of money laundering or financial crime. Unusual activity triggers a review process. Where required, we may request source-of-funds documentation. This is a legal obligation for any financial services or gaming platform, not a discretionary policy.

8. Cookies & Tracking Technologies

MGLine uses the following types of cookies and local browser storage:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language preference, and store your session state as you navigate between pages. Without these cookies, MGLine cannot operate correctly.
• Security cookies: Used to detect suspicious or unusual login activity, enforce two-factor authentication where applicable, and protect your account against session hijacking.
• Analytics cookies: MGLine uses aggregated, anonymised analytics to understand how players navigate the platform — which pages load slowly, which features are used most, and where players encounter errors. This data does not identify you personally and is used solely to improve the MGLine experience.
• Functional cookies: Store non-sensitive preferences such as your preferred game view, table stakes or notification settings so you do not have to reconfigure them on each visit.

MGLine does not use advertising cookies or allow third-party advertising networks to place cookies on the platform. There are no retargeting pixels or cross-site tracking technologies on MGLine pages.

You can control or delete cookies through your browser settings. Note that disabling essential cookies will prevent you from logging into your MGLine account. Disabling analytics cookies will have no effect on your ability to use the platform.

9. Data Retention

MGLine retains your personal data for as long as your account is active and for a defined period after account closure. The specific retention periods are:

• Account and identity data: Retained for the duration of your account plus 5 years after closure. This retention period is required by anti-money laundering regulations and our operating licence obligations.
• Financial transaction records (PKR deposits and withdrawals): Retained for 7 years from the date of each transaction. This is a standard financial record-keeping requirement.
• Gaming history: Retained for 2 years from the date of each gaming session. Retained primarily for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for 2 years from the date of the last communication. Retained for quality assurance and to provide context for any future queries.
• Technical logs (IP address, device data): Retained for 90 days for security and fraud investigation purposes, then automatically deleted.
• KYC documents: Retained for the duration of your account plus 5 years after closure, in line with AML requirements.

Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

10. Data Security

MGLine takes the security of your personal data seriously. The measures we have in place include:

• Encryption in transit: All data transmitted between your browser and MGLine servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to every page of the platform, including login, deposit, withdrawal, and gaming.
• Encryption at rest: Sensitive personal data stored on MGLine servers — including identity details and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data on MGLine's internal systems is restricted to authorised personnel who require it to perform their specific job function. Access rights are reviewed regularly and revoked when no longer required.
• Intrusion detection: MGLine operates automated intrusion detection and anomaly monitoring systems. Any suspicious activity on the platform or on internal systems triggers an immediate alert and review process.
• Regular security audits: MGLine's platform and infrastructure undergo regular independent security assessments. Any vulnerabilities identified are remediated promptly.
• Incident response: In the event of a data breach that poses a risk to your rights, MGLine will notify affected users promptly and take all steps to contain and remediate the incident.

Security strength at a glance

11. Your Rights Over Your Data

As an MGLine player, you have the following rights in relation to your personal data. All requests can be submitted to support@mgline.ws and will be acknowledged within 48 hours:

MGLine will respond to all data rights requests within 30 days of receipt. For complex requests, we may require up to 90 days and will keep you informed of progress. Requests are free of charge unless they are manifestly unfounded or excessive.

12. Children's Privacy

MGLine is an 18+ platform and we take our obligation to exclude minors extremely seriously. The MGLine platform is not directed at or intended for use by anyone under the age of 18.

We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and you believe your child has registered on MGLine, please contact us immediately at support@mgline.ws with the relevant details. We will investigate promptly and, if a minor's account is identified, close it and delete all associated personal data as quickly as possible.

During registration and identity verification, MGLine checks that the date of birth provided indicates the player is 18 or older. Where there is any doubt about a player's age, we will request age verification documentation before allowing continued use of the platform.

13. Changes to This Privacy Policy

MGLine may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Where a change materially affects the way we handle your personal data, MGLine will notify you via the email address registered to your account before the change takes effect. For minor updates — such as clarifications of existing practices or corrections of typographical errors — we will update the page without direct notification.

Your continued use of MGLine after any Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not accept a material change, you can close your account by contacting support@mgline.ws and requesting deletion of your data, subject to our legal retention obligations.

14. Contact Us & Data Requests

For any question, concern or formal request relating to this Privacy Policy or your personal data held by MGLine, please use the following channels:

• Email (privacy requests): support@mgline.ws — please use the subject line "Privacy Request" for data access, correction or deletion requests.
• Live Chat: Available 24/7 through your MGLine account dashboard for general privacy questions. For formal data requests, email is preferred so we have a written record.
• Response time: Privacy requests acknowledged within 48 hours. Substantive response and action within 30 days.

MGLine takes privacy complaints seriously. If you submit a complaint and are not satisfied with the outcome of our internal review, you may escalate to the relevant data protection authority in the jurisdiction applicable to your situation.

For questions about responsible gaming data — such as self-exclusion records or deposit limit history — please also see our Responsible Gaming page, which explains how MGLine manages player safety data specifically.