milyon Privacy Policy

1.1 This Privacy Policy applies to the milyon online gaming platform, accessible at milyon.bio, and governs the collection, use, storage, and disclosure of personal information relating to all registered players and visitors to the Platform.

1.2 milyon is committed to protecting the privacy of its players. We process personal data only for legitimate purposes, retain it only for as long as necessary, and apply appropriate technical and organisational safeguards consistent with the sensitivity of the data involved.

1.3 By registering an account on milyon, depositing funds, or using any milyon service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Privacy Policy should be read alongside milyon's Terms and Conditions, which are incorporated by reference.

1.4 milyon serves players primarily based in the Philippines and processes personal data consistent with applicable Philippine privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

2.1 The data controller responsible for the personal data of milyon players is the operator of milyon.bio. For the purposes of this Privacy Policy, references to "milyon," "we," "us," or "our" refer to this operator entity.

2.2 All data privacy enquiries, requests to exercise data subject rights, and formal complaints regarding milyon's data processing practices should be directed to milyon's designated Data Privacy contact:

3.1 milyon collects the following categories of personal data from players. The specific data collected varies depending on the stage of account use (pre-registration browsing, account creation, KYC verification, active play).

3.2 milyon does not collect or store full payment card numbers, CVV codes, or full bank account numbers. Payment processing is handled by milyon's licensed payment service providers, who operate under their own data security standards.

4.1 milyon collects personal data through the following mechanisms:

• Direct provision by you: Information you submit when registering, completing KYC, making a deposit, contacting support, or activating responsible gaming tools;
• Automated technical collection: Data collected automatically when you access milyon.bio, including IP addresses, session data, device identifiers, and browser information via cookies and similar technologies;
• Payment providers: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment partners when you initiate a deposit or withdrawal;
• Identity verification providers: Results and confirmation data from milyon's KYC verification partners when you submit government ID documents;
• Fraud detection systems: Automated risk signals generated by milyon's internal and third-party fraud prevention tools based on account and transaction behaviour patterns.

5.1 milyon processes personal data for the following purposes:

• Creating and managing your milyon player account;
• Authenticating your identity when you log in, including 2FA verification;
• Processing deposits and withdrawals in Philippine Pesos via your chosen payment method;
• Providing access to milyon's game library, wallet, bonus system, and responsible gaming tools;
• Responding to support queries, resolving disputes, and managing account recovery requests.

• Verifying player age (minimum 21 years) and identity as required under PAGCOR regulatory guidelines and Philippine KYC requirements;
• Conducting anti-money laundering (AML) screening and transaction monitoring consistent with Philippine AML obligations;
• Maintaining records required by applicable gaming, financial, and data protection regulations;
• Responding to lawful requests from Philippine regulatory authorities, including the AMLC and NPC.

• Monitoring gaming activity to identify patterns consistent with problem gambling and proactively contacting players where milyon has genuine concern for player wellbeing;
• Processing and enforcing self-exclusion requests, deposit limits, and cooling-off periods;
• Preventing excluded players from opening new accounts using alternative registration details.

• Analysing anonymised or aggregated gaming data to improve the milyon platform, game lobby, payment flows, and user interface;
• Sending transactional communications (deposit confirmations, withdrawal processing updates, KYC status notifications) to your registered contact details;
• Sending promotional communications about milyon bonuses and offers, where you have provided consent or where permitted under applicable law.

6.1 milyon processes personal data only where a valid legal basis exists. The primary legal bases applicable to milyon's data processing activities are:

7.1 milyon does not sell player personal data to third parties. milyon does not share personal data with third parties for their independent marketing purposes.

7.2 milyon shares personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment service providers (GCash / Maya / GrabPay / BPI / BDO / Metrobank / 7-Eleven CLiQQ): To facilitate deposit and withdrawal processing. These providers receive only the data required to process the specific transaction;
• KYC and identity verification providers: To verify government-issued Philippine identification documents during the KYC process. Document images are processed under strict data security agreements;
• Game providers (e.g., PG Soft, JILI, Evolution Gaming, Pragmatic Play): Game session data is shared with licensed game providers to facilitate gameplay and resolve disputes. No personally identifiable information beyond session identifiers is shared with game providers in the ordinary course;
• Fraud prevention and AML screening services: Transaction and account data is shared with licensed fraud prevention and AML screening providers consistent with milyon's compliance obligations;
• Regulatory authorities: milyon will disclose player data to PAGCOR, the AMLC, the NPC, or other competent Philippine authorities where required by law, court order, or regulatory direction;
• IT infrastructure and cloud service providers: Data hosting and infrastructure providers who process data on milyon's behalf under binding data processing agreements.

7.3 All third-party service providers who process personal data on milyon's behalf are required to process that data only on milyon's documented instructions and to maintain security standards consistent with the sensitivity of the data processed.

8.1 milyon retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

8.2 After the applicable retention period, personal data will be securely deleted or anonymised. Anonymised data (which can no longer be linked to an individual) may be retained indefinitely for statistical and platform improvement purposes.

9.1 milyon implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between players and milyon.bio;
• Encryption of sensitive data fields (including identity data and financial references) in milyon's databases;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication options for player accounts to reduce the risk of unauthorised account access;
• Automated monitoring of accounts for suspicious activity, including login anomalies and unusual transaction patterns;
• Regular internal security reviews of systems that process personal data;
• Data processing agreements with all third-party processors requiring maintenance of appropriate security standards.

9.2 In the event of a personal data breach that poses a risk to player rights and freedoms, milyon will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, consistent with the requirements of the Data Privacy Act of 2012.

10.1 milyon uses cookies and similar tracking technologies on milyon.bio to provide, maintain, and improve the Platform. Cookies are small data files stored on your device by your browser when you visit milyon.bio.

10.2 milyon uses the following categories of cookies:

10.3 You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of milyon.bio. milyon does not use cross-site tracking cookies to build advertising profiles on players outside of milyon.bio.

11.1 Under the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules, milyon players have the following rights in relation to their personal data:

11.2 To exercise any of the above rights, submit a written request to [email protected] (plain text — not a clickable link) with the subject line "Data Subject Request." milyon will respond within 15 business days. We may need to verify your identity before processing the request.

11.3 If you are not satisfied with milyon's response to a data privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. milyon encourages players to contact us first to resolve concerns directly before escalating to the NPC.

12.1 The milyon Platform is strictly intended for individuals who are 21 years of age or older, consistent with the minimum legal gambling age in the Philippines under PAGCOR regulatory guidelines. milyon does not knowingly collect or process personal data from individuals under 21 years of age.

12.2 Age verification is a mandatory step in milyon's KYC process. Players must confirm their date of birth at registration and submit a valid Philippine government-issued ID confirming their age as part of the verification process.

12.3 If milyon becomes aware that personal data has been collected from an individual under 21 years of age, milyon will immediately suspend the relevant account, delete or quarantine the data collected, return any balance held, and take such further steps as are required under applicable law.

12.4 Parents and guardians who believe that their child or ward may have accessed the milyon Platform are encouraged to contact milyon support immediately at [email protected] so that the matter can be investigated and resolved promptly.

13.1 milyon's primary player base and operations are in the Philippines. Some personal data may be processed by milyon's third-party service providers (including game providers, KYC vendors, and infrastructure partners) in jurisdictions outside the Philippines.

13.2 Where personal data is transferred outside the Philippines, milyon ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act of 2012. These safeguards include:

• Data processing agreements requiring overseas processors to maintain data protection standards equivalent to those required under Philippine law;
• Transfers to game providers and technology partners who are certified or otherwise regulated under recognised international data protection frameworks;
• Limiting the scope of data shared with overseas processors to the minimum necessary for the specific service being provided.

13.3 Players may request details of specific overseas transfers and the safeguards applied by contacting milyon's data privacy contact at [email protected].

14.1 milyon may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we provide. The "Last Updated" date at the top of this document indicates when the current version took effect.

14.2 For material changes — those that significantly affect how milyon processes player personal data, or that reduce player privacy rights — milyon will provide at least 14 days' advance notice via email to registered players before the changes take effect.

14.3 We encourage players to review this Privacy Policy periodically. Continued use of the milyon Platform following notification of changes constitutes acknowledgement of the updated Policy.

15.1 For all data privacy enquiries — including data subject requests, questions about this Policy, or complaints about milyon's data processing practices — please contact milyon's data privacy team:

15.2 If you are not satisfied with milyon's response to your privacy complaint, you may escalate your complaint to the National Privacy Commission of the Philippines. The NPC oversees compliance with the Data Privacy Act of 2012 and accepts complaints from data subjects regarding alleged violations of their data privacy rights.

15.3 milyon is committed to resolving data privacy concerns directly and promptly. We treat all privacy complaints seriously and will investigate and respond to each formal complaint received.