This Privacy Policy explains how malwin collects, processes, stores, and protects the personal data of players registered on the malwin platform. We take your privacy seriously — your data is handled with the same care that we apply to every other aspect of the malwin experience. By using malwin, you agree to the data practices described in this Policy.
Six core commitments malwin makes to every Pakistani player regarding how personal data is handled on our platform.
malwin uses industry-standard encryption (TLS/SSL) across all data transmissions. Your personal details, PKR payment information, and account credentials are stored using secure, access-controlled infrastructure at all times.
malwin does not sell, rent, or trade your personal data to third parties for marketing purposes. Data shared with third-party service providers is limited strictly to what is necessary for them to deliver their contracted services to malwin.
malwin collects only the personal data that is genuinely necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data for the sake of it.
You have the right to access, correct, and in certain circumstances request deletion of the personal data malwin holds about you. Requests are handled promptly by our dedicated support team operating in Pakistan Standard Time.
malwin uses cookies and similar tracking technologies to improve platform performance and personalise your experience. This Policy explains exactly what cookies are used, why they are used, and how you can manage your preferences.
malwin's data handling practices comply with the requirements of its international gaming licence. KYC and AML data obligations are fulfilled in a manner that balances regulatory necessity with respect for player privacy.
This Privacy Policy ("Policy") is published by malwin ("malwin", "we", "us", "our"), an internationally licensed online gaming operator accessible at malwin.app. This Policy describes how malwin collects, uses, stores, shares, and protects the personal data of individuals ("Players", "you", "your") who register for and use the malwin platform, including its casino games, sportsbook, live dealer services, and customer support channels.
This Policy applies to all personal data collected through the malwin website and associated mobile-optimised interfaces, regardless of the device or location from which you access the platform. It applies to all players accessing malwin from Pakistan, including from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar, Quetta, and all other cities and regions.
By registering a malwin account or continuing to use the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the malwin platform and should contact us to close your account.
This Policy should be read alongside malwin's Terms & Conditions, which govern the overall use of the platform. Together, these two documents form the complete legal framework for your relationship with malwin.
For the purposes of applicable data protection legislation, malwin acts as the data controller in respect of all personal data collected from players using the malwin platform. As data controller, malwin determines the purposes and means by which your personal data is processed.
malwin operates under an international gaming licence and is subject to the data protection and privacy obligations imposed by that licensing framework. All data handling practices described in this Policy are designed to comply with those obligations as well as with generally accepted international data protection principles.
If you have any questions about how malwin processes your personal data, or if you wish to exercise any of your data subject rights described in Section 10 of this Policy, you may contact malwin's data protection point of contact at the following address. This address is provided as plain text only and is not a clickable link:
[email protected] | Available 24/7 — PKT (UTC+5)
malwin collects personal data through a number of different channels and at different stages of your relationship with the platform. The categories of personal data we collect are set out below.
When you create a malwin account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address, Pakistani mobile phone number, and email address. This information is required to create and maintain your account and to verify that you meet the minimum age requirement of 21 years.
As part of our Know Your Customer (KYC) obligations under our international gaming licence, malwin may request documentary evidence of your identity and address. This may include a copy of your Computerised National Identity Card (CNIC), passport, or driving licence, as well as a recent utility bill or bank statement as proof of address. We may also request proof of ownership of your payment method (for example, a screenshot of your JazzCash or EasyPaisa account showing your registered mobile number).
malwin collects financial data necessary to process your deposits and withdrawals. This includes your payment method identifiers (such as your registered JazzCash or EasyPaisa mobile number, or your HBL, UBL, or Meezan Bank account details), transaction amounts, and transaction timestamps. malwin does not store full card numbers or banking passwords.
We collect records of your gaming activity on the malwin platform, including games played, bets placed, amounts wagered, winnings and losses, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory reporting.
When you access the malwin platform, we automatically collect certain technical data about your device and connection. This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and pages viewed on the platform. This data is used for security, fraud prevention, and platform optimisation purposes.
If you contact malwin's customer support team via live chat or email, we retain a record of your communications, including the content of your messages, the date and time of contact, and any resolution provided. This data is retained for quality assurance, training, and dispute resolution purposes.
malwin does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where such data is voluntarily provided by a player in the context of a responsible gaming self-exclusion or vulnerability disclosure request.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, DOB, address, mobile, email | Account creation, age verification |
| KYC Documents | CNIC, passport, proof of address | Identity verification, AML compliance |
| Financial Data | JazzCash/EasyPaisa ID, bank details, transactions | Deposits, withdrawals, fraud prevention |
| Gaming Activity | Bets, game sessions, bonus usage | Account management, responsible gaming |
| Technical Data | IP address, device ID, browser type | Security, fraud detection, analytics |
| Communications | Support chat logs, email records | Customer service, dispute resolution |
malwin uses the personal data it collects for the following purposes:
malwin will never use your personal data to build or contribute to profiles used by third-party advertisers, data brokers, or marketing networks unaffiliated with malwin.
malwin processes personal data on one or more of the following legal bases, depending on the specific processing activity:
malwin does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipient only where necessary and on appropriate terms:
malwin shares the minimum personal and financial data necessary with payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to facilitate deposits and withdrawals. These providers are bound by their own privacy obligations and are not permitted to use your data for any purpose other than processing your transactions.
malwin may use third-party KYC and identity verification service providers to assist with verifying the identity and age of players. These providers process KYC data on malwin's behalf and are contractually prohibited from using that data for any other purpose.
Certain casino games available on malwin are supplied by third-party game studios. In the course of delivering those games, limited technical data (such as a session token and stake/win amounts) may be transmitted to the relevant game provider's infrastructure. Game providers do not receive personally identifiable registration data unless strictly necessary for the operation of the game.
malwin may be required to disclose personal data to regulators, licensing authorities, tax authorities, law enforcement agencies, or courts where required by applicable law or by a valid legal order. malwin will, where permitted by law, notify affected players of such disclosures.
In the event that malwin undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by malwin may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any such transfer and of any resulting changes to this Privacy Policy.
malwin requires all third-party recipients of personal data to implement appropriate technical and organisational security measures and to process that data only in accordance with malwin's instructions and applicable data protection law.
As an internationally licensed gaming operator, malwin may process and store personal data on servers located outside Pakistan. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that available under applicable international standards, malwin will ensure that appropriate safeguards are in place to protect that data.
Such safeguards may include contractual clauses that require the receiving party to protect personal data to the same standard as required under this Policy and applicable law, or reliance on the adequacy of the data protection framework of the destination country as recognised by malwin's licensing authority.
If you would like more information about the specific safeguards in place for international data transfers affecting your personal data, please contact malwin's support team via live chat or at the email address listed in Section 15 of this Policy.
malwin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, and reporting requirements. The following general retention principles apply:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with malwin's data destruction procedures. Anonymised data that can no longer be linked to an individual may be retained indefinitely for statistical and analytical purposes.
The malwin platform uses cookies and similar tracking technologies (collectively, "Cookies") to enable essential platform functionality, improve the player experience, and gather analytics data. A cookie is a small text file stored on your device by your web browser when you visit a website.
You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the malwin platform. Disabling performance or functional cookies will not affect your ability to play but may reduce the quality of your experience.
malwin does not use cookies to track your browsing activity on third-party websites unrelated to the malwin platform.
Subject to applicable law and certain limited exceptions (such as where processing is required for legal compliance or where exercising a right would adversely affect the rights of another person), malwin respects and will facilitate the following data subject rights:
To exercise any of these rights, please contact malwin's support team via live chat or at the email address provided in Section 15. malwin will respond to all data subject requests within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.
All data subject rights requests are handled free of charge. malwin will only decline a request where it has a legal basis to do so, and will explain the reason for any refusal in writing.
malwin implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own malwin account credentials. If you suspect unauthorised access to your account, please contact malwin support via live chat immediately.
The malwin platform is strictly intended for individuals aged 21 years or older. malwin does not knowingly collect personal data from individuals under the age of 21. The registration process requires users to confirm their date of birth, and malwin conducts KYC age verification to enforce this requirement.
If malwin becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately, all associated transactions will be voided, and any personal data associated with the account will be deleted or anonymised in accordance with malwin's data retention obligations, subject to any regulatory requirements to retain records of the incident.
If you believe that a minor has created a malwin account, please report it to malwin's support team immediately via live chat so that the matter can be investigated and resolved without delay.
The malwin platform may reference or display content provided by third-party game suppliers and payment processors. While malwin exercises care in selecting its third-party partners, malwin is not responsible for the privacy practices or content of third-party services. The data handling practices of third-party game providers, payment processors, and other service providers are governed by their own privacy policies.
malwin does not include third-party advertising, affiliate tracking pixels from unaffiliated networks, or social media widgets on the main platform interface in a manner that would expose your personal data to unrelated third parties without your knowledge.
malwin may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or regulation, or changes to the malwin platform and services. The date of the most recent revision is displayed at the top of this page.
Where changes to this Policy are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — malwin will notify registered players via email or through an in-platform notification prior to the changes taking effect. Your continued use of the malwin platform following such notification constitutes your acceptance of the updated Policy.
Where a change to this Policy requires your fresh consent (for example, where we wish to process your data for a new purpose that requires consent), malwin will seek that consent separately before commencing the new processing activity.
If you have any questions about this Privacy Policy, about how malwin handles your personal data, or if you wish to exercise any of your data subject rights described in Section 10, please contact malwin's support team. Support is available 24 hours a day, seven days a week, via live chat on the malwin platform.
For written privacy-related correspondence and formal data protection complaints, you may also contact malwin at the following email address. Please note that this address is provided as plain text only and is not a clickable link:
[email protected] | Available 24/7 — PKT (UTC+5)
malwin will acknowledge all formal privacy complaints within 48 hours and will endeavour to provide a substantive written response within 30 calendar days of receipt. If you are not satisfied with malwin's response to your privacy complaint, you may have the right to escalate the matter to the relevant supervisory authority under applicable data protection law.
Now that you know how malwin protects your privacy, explore 800+ certified games, live PSL cricket betting, and full PKR banking — all in a secure, licensed environment. 21+ only. Play responsibly.