milyon Privacy Policy

1. Introduction

milyon ("milyon," "We," "Us," "Our") is committed to protecting the privacy and personal data of all individuals ("Player," "You," "Your") who use our online gaming platform at milyon.cam and any associated services, features, or applications. This Privacy Policy has been drafted in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission (NPC).

This Privacy Policy describes the types of personal information milyon collects from you, the purposes for which we collect and use that information, how we store and protect it, the circumstances under which we may share it with third parties, and the rights available to you regarding your personal data. By registering for a milyon account and using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

This Privacy Policy should be read together with milyon's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

milyon collects personal data from you in various ways during your relationship with us. The categories of personal data we may collect include, but are not limited to, the following:

2.1 Registration and Account Data

When you register for a milyon account, we collect information necessary to verify your identity and create your account. This includes:

• Full legal name as it appears on a valid government-issued ID;
• Date of birth (to verify that you meet the 21+ age requirement under PAGCOR regulations);
• Email address and mobile phone number;
• Residential address (city, province, postal code);
• Username and encrypted password;
• Nationality and citizenship information.

2.2 Identity Verification (KYC) Data

In compliance with PAGCOR regulations and the Philippines' Anti-Money Laundering Act (AMLA), milyon is required to verify the identity of all players. As part of our Know Your Customer (KYC) process, we may collect:

• Copies of valid government-issued identification (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID, PRC ID, voter's ID);
• Proof of residential address (e.g., utility bill, bank statement);
• Selfie photographs for identity matching purposes;
• Source of funds documentation where required by law.

2.3 Financial and Transaction Data

milyon collects data related to your financial transactions on the platform, including:

• Deposit and withdrawal transaction records, amounts, dates, and methods;
• Payment method details (e.g., GCash mobile number, PayMaya account reference, BPI/BDO/Metrobank account name — we do not store full bank account numbers or card numbers);
• Bonus and promotional credit histories;
• Running balance and account statement records.

2.4 Gaming and Behavioral Data

As you use the milyon platform, we automatically collect data about your gaming activity, including:

• Games played, bet amounts, game outcomes, and session durations;
• Responsible gaming tool usage (deposit limits set, self-exclusion requests);
• Interaction with promotions and bonuses;
• Customer support communications and chat transcripts.

2.5 Technical and Device Data

When you access milyon's platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Access timestamps, session durations, and page navigation data;
• Cookie identifiers and analytics data (see Section 9 for details).

3. How We Use Your Personal Data

milyon uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your milyon account, including authentication and account security;
• Identity Verification: To verify your identity, confirm that you meet the 21+ age requirement, and comply with KYC obligations under PAGCOR regulations and AMLA;
• Transaction Processing: To process deposits, withdrawals, and bonus credits; to detect and prevent fraudulent transactions; and to comply with financial reporting obligations;
• Gaming Services: To provide access to milyon's full range of games — including slots, live casino, bingo, sabong, and sports betting — and to personalize your gaming experience;
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance via live chat and email;
• Responsible Gaming: To monitor gaming behavior for signs of problem gambling, to implement responsible gaming tools at your request, and to fulfill our obligations under PAGCOR's responsible gaming guidelines;
• Marketing and Promotions: To send you information about milyon promotions, bonuses, and new games — subject to your communication preferences and applicable opt-out options;
• Legal and Regulatory Compliance: To comply with applicable Philippine laws, including PAGCOR regulations, AMLA, and the Data Privacy Act of 2012;
• Security and Fraud Prevention: To detect, investigate, and prevent cheating, fraud, money laundering, and other illegal activities on the platform;
• Platform Improvement: To analyze usage patterns, conduct internal research, and improve the functionality, security, and user experience of the milyon platform.

4. Legal Basis for Processing

milyon processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and its Implementing Rules:

• Consent: Where you have provided your consent to the processing of your personal data, such as for marketing communications;
• Contractual Necessity: Where processing is necessary for the performance of our contract with you — specifically, to provide the gaming services described in our Terms and Conditions;
• Legal Obligation: Where processing is required to comply with applicable Philippine law, including PAGCOR licensing requirements, AMLA obligations, and NPC directives;
• Legitimate Interests: Where processing is necessary for milyon's legitimate interests, such as fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your fundamental rights and freedoms.

5. Sharing of Personal Data

milyon does not sell your personal data to third parties. We may share your personal data in the following limited circumstances:

5.1 Regulatory Authorities

milyon is required by law to share player information with PAGCOR and other Philippine government agencies (including the Anti-Money Laundering Council, the Bureau of Internal Revenue, and law enforcement agencies) when required by regulation, court order, or applicable law.

5.2 Payment Service Providers

To process deposits and withdrawals, we share necessary transaction data with authorized payment service providers, including GCash, PayMaya, and partner banks (BPI, BDO, Metrobank). These providers process your data only as necessary to facilitate your transactions and are bound by their own privacy and security obligations.

5.3 Technology and Service Providers

milyon works with trusted third-party technology providers to operate and maintain the platform — including game software providers, cloud infrastructure services, and cybersecurity partners. These providers access personal data only to the extent necessary to perform their services and are contractually obligated to maintain confidentiality and data security.

5.4 Identity Verification Services

To perform KYC verification, milyon may share identity documents and related data with accredited identity verification service providers. These providers are bound by strict data processing agreements and may not use your data for any purpose other than identity verification.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of milyon's business, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

6. Data Retention

milyon retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal, regulatory, and contractual obligations. Specifically:

• Account data is retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations;
• Transaction records are retained for a minimum of five (5) years in accordance with Philippine financial record-keeping requirements;
• KYC documentation is retained for the duration of your relationship with milyon and for a minimum of five (5) years thereafter;
• Gaming activity logs are retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes;
• Marketing preferences and communication records are retained until you withdraw your consent or for two (2) years from your last interaction with milyon, whichever comes first.

When personal data is no longer required, milyon will securely dispose of it in accordance with the NPC's data disposal guidelines.

7. Data Security

milyon employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and milyon's servers;
• Encryption of sensitive data at rest, including KYC documents and payment information;
• Multi-factor authentication (MFA) for platform access;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Role-based access controls ensuring that milyon staff can only access the personal data necessary for their specific responsibilities;
• Comprehensive incident response procedures and breach notification protocols in compliance with NPC requirements.

While milyon takes all reasonable precautions to protect your personal data, no system is completely immune from security threats. You are encouraged to use a strong, unique password for your milyon account and to enable any available account security features.

8. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by milyon:

• Right to be Informed: You have the right to be informed of how your personal data is being collected and processed, as described in this Privacy Policy;
• Right of Access: You have the right to request a copy of the personal data milyon holds about you, along with information about how it is being processed;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data in your milyon account;
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to milyon's legal retention obligations;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe milyon has violated your data privacy rights.

To exercise any of these rights, please contact milyon's Data Protection Officer via the support channels described in Section 12 of this Policy. milyon will respond to your request within fifteen (15) working days, as required by the Data Privacy Act.

9. Cookies and Tracking Technologies

milyon uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The types of cookies milyon uses include:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session management, authentication, and security functions. These cannot be disabled;
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations;
• Analytics Cookies: Used to collect aggregate data about how players interact with the milyon platform, helping us identify areas for improvement. Data collected is anonymized where possible;
• Security Cookies: Used to detect fraudulent account activity, bot traffic, and other security threats.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the milyon platform.

10. Protection of Minors

milyon's platform is strictly intended for individuals aged 21 years and above, as required under PAGCOR regulations. milyon does not knowingly collect personal data from individuals under the age of 21. If milyon becomes aware that personal data has been collected from a minor, that data will be promptly deleted and the account will be permanently closed.

If you believe a minor has registered on the milyon platform, please contact our support team immediately so that we may take appropriate action.

11. Changes to This Privacy Policy

milyon reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, milyon will notify registered players via email or through a prominent notice on the platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the milyon platform following any amendments constitutes your acceptance of the updated Privacy Policy.

12. Contact and Data Protection Officer

milyon has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact milyon's support and privacy team at any time:

• Support: Available 24/7 via live chat on the milyon platform — response in under 2 minutes;
• Email: [email protected] — this is displayed as plain text and is not a clickable link;
• Response Time: milyon will acknowledge privacy-related requests within five (5) working days and resolve them within fifteen (15) working days, in line with NPC guidelines.

If you are not satisfied with milyon's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.