milyun Privacy Policy

1. Introduction

milyun ("milyun," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the milyun online casino platform at milyun.net (the "Platform"). This Privacy Policy describes how milyun collects, uses, stores, discloses, and protects your personal information when you access or use the Platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC"). By registering an account or using the milyun Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with the milyun Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, milyun is the personal information controller responsible for your personal data collected through the Platform. milyun has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws.

You may contact our DPO at any time regarding data privacy matters. Contact details are provided in Section 15 of this Policy.

3. Personal Data We Collect

milyun collects the following categories of personal data from users of the Platform:

3.1 Identity & Contact Data

• Full legal name
• Date of birth
• Gender
• Nationality and country of residence
• Email address
• Mobile phone number
• Residential address

3.2 Identity Verification Data (KYC)

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents (e.g., utility bills, bank statements)
• Proof of payment method (e.g., GCash account screenshot, bank account details)
• Selfie or facial image for identity verification purposes

3.3 Financial Data

• Deposit and withdrawal transaction history
• Payment method details (GCash number, bank account details, debit card details — stored in tokenized form only)
• Account balance and bonus balance information

3.4 Gaming & Behavioral Data

• Game history, wager amounts, and outcomes
• Session duration and frequency of play
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Bonus and promotion participation history

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookies and similar tracking technologies (see Section 10)
• Login timestamps and session logs

3.6 Communications Data

• Records of communications with milyun customer support (live chat transcripts, email correspondence)
• Survey responses and feedback submissions

4. How We Collect Your Data

milyun collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and behavioral data collected automatically through cookies, log files, and similar technologies when you access and use the Platform.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; payment data from payment processors (GCash, Maya, banks).
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

5. How We Use Your Personal Data

milyun uses your personal data for the following purposes:

• Account management: To register, verify, and maintain your milyun player account.
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver promotions and bonuses.
• Identity verification (KYC): To verify your identity and age (21+) as required by PAGCOR regulations and anti-money laundering laws.
• Fraud prevention & security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Regulatory compliance: To comply with PAGCOR licensing requirements, AML obligations, and other applicable Philippine laws and regulations.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor gaming behavior, enforce self-imposed limits, and identify players who may be at risk of problem gambling.
• Marketing communications: To send you promotional offers, newsletters, and updates about milyun — only where you have provided consent or where permitted by law. You may opt out at any time.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features and performance of the milyun Platform.

6. Legal Basis for Processing

milyun processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
• Contractual necessity: Where processing is necessary to perform the contract between you and milyun (i.e., the Terms & Conditions), including account registration, game access, and payment processing.
• Legal obligation: Where processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements, AML obligations, and tax reporting.
• Legitimate interests: Where processing is necessary for milyun's legitimate business interests, such as fraud prevention, Platform security, and service improvement, provided such interests are not overridden by your rights and freedoms.

7. Data Sharing & Disclosure

milyun does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

7.1 Service Providers

Third-party vendors who assist milyun in operating the Platform, including KYC and identity verification providers, payment processors (GCash, Maya, banks), cloud hosting providers, customer support platforms, and analytics services. All service providers are contractually bound to process your data only on milyun's instructions and in accordance with applicable data protection laws.

7.2 Regulatory Authorities

PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law, court order, or regulatory directive.

7.3 Game Providers

Third-party game software providers may receive limited technical data (such as player session tokens) necessary to deliver game content. These providers do not receive your full identity or financial data.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of milyun's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7.5 With Your Consent

milyun may share your data with other third parties where you have given explicit consent to such sharing.

8. Data Retention

milyun retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AML laws.
• Transaction and financial records are retained for a minimum of five (5) years in accordance with Philippine tax and AML requirements.
• Customer support communications are retained for three (3) years from the date of the last interaction.
• Marketing consent records are retained until you withdraw consent or for three (3) years from the date of last engagement, whichever is earlier.
• Technical logs and cookies data are retained for periods ranging from session-only to twelve (12) months, depending on the type of data.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with milyun's data disposal procedures.

9. Data Security

milyun implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the milyun Platform.
• Encryption of sensitive data at rest, including financial and identity information.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning.
• Multi-factor authentication for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, milyun will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

10. Cookies & Tracking Technologies

milyun uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security functions. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, display settings) to personalize your experience.
• Analytics cookies: Collect anonymized data about how users interact with the Platform to help us improve performance and usability.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by milyun:

• Right to be informed: The right to be notified of how your personal data is collected and processed, as described in this Policy.
• Right of access: The right to request a copy of the personal data milyun holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to milyun's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. milyun will respond to all data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines.

12. Minors & Age Restriction

The milyun Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. milyun does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform.

If milyun becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental consent, we will take immediate steps to delete such data and close the associated account. If you believe a minor has registered on the Platform, please contact our support team immediately.

13. International Data Transfers

milyun primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers located outside the Philippines (for example, cloud infrastructure providers or game software vendors with international operations).

Where such transfers occur, milyun ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those required under the Data Privacy Act of 2012. milyun will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

14. Changes to This Privacy Policy

milyun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, milyun will notify registered users via email or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date of the most recent revision is indicated at the top of this page. Your continued use of the milyun Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically.

15. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by milyun, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.