Privacy Policy

1 Introduction

millyon ("we," "us," or "our") is committed to safeguarding the privacy and personal data of every player who uses the millyon platform at millyon.net. We understand that when you share your personal information with us — whether you're registering from Quezon City, making a deposit from Davao, or reaching out for support from Cebu — you are placing genuine trust in us to handle that data responsibly.

This Privacy Policy sets out in clear, accessible terms how millyon collects your personal data, the purposes for which we use it, the circumstances under which it may be shared, how long we keep it, and the rights you hold under Philippine law. We encourage you to read this document carefully alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of your overall agreement with millyon.

Privacy at millyon is not an afterthought — it is built into the way we design our platform, train our staff, and engage with our players every single day. We never use your data in ways you would not reasonably expect, and we will always be transparent when our practices change.

2 Who We Are

millyon is a PAGCOR-licensed online gaming operator providing casino games, sports betting, live dealer experiences, bingo, slots, sabong, and related entertainment services to eligible players in the Philippines through the website millyon.net.

For the purposes of the Philippine Data Privacy Act of 2012, millyon acts as the Personal Information Controller (PIC) in respect of all personal data collected from registered players and website visitors. Our Data Protection Officer (DPO) can be contacted at the details provided in Section 14 of this Policy.

Where millyon engages third-party service providers — such as payment processors, identity verification services, and software game providers — those parties act as Personal Information Processors (PIPs) on our behalf and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable Philippine law.

3 Personal Data We Collect

Depending on how you interact with the millyon platform, we may collect the following categories of personal data:

4 How We Collect Your Data

millyon collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, submit a form, or update your account settings;
• Automatically through your use of the platform — including technical data collected via cookies, server logs, and analytics tools when you browse millyon.net or engage with platform features;
• From third-party verification providers — identity verification and anti-money laundering (AML) screening services may provide additional data points to confirm your identity and comply with PAGCOR's KYC requirements;
• From payment service providers — including GCash, PayMaya, BPI, BDO, Metrobank, ShopeePay, and card payment networks, which may share transaction confirmation data with millyon to facilitate deposits and withdrawals;
• From PAGCOR and regulatory bodies — where required by law, millyon may receive information from PAGCOR or other competent Philippine authorities related to player eligibility, self-exclusion registries, or compliance matters.

5 Why We Use Your Personal Data

millyon processes your personal data for the following specific purposes:

• Account creation and management — to register your account, verify your identity, maintain your player profile, and enable access to millyon's gaming services;
• KYC and regulatory compliance — to fulfill our obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine statutes that require identity verification and ongoing due diligence;
• Transaction processing — to facilitate deposits and withdrawals via GCash, PayMaya, Instapay, PESONet, BPI, BDO, Metrobank, Visa, Mastercard, ShopeePay, and other approved payment channels;
• Platform security and fraud prevention — to detect and prevent unauthorized access, account takeover, bonus abuse, money laundering, and other fraudulent or criminal activity on the millyon platform;
• Responsible gaming — to enforce deposit limits, session reminders, self-exclusion requests, and other player protection measures, and to identify signs of problematic gambling behavior in accordance with PAGCOR's Responsible Gaming Framework;
• Customer support — to respond to your inquiries, investigate complaints, and resolve disputes efficiently;
• Platform improvement and analytics — to analyze usage patterns, improve game offerings, enhance user experience, and inform product development decisions using aggregated and anonymized data;
• Marketing and promotions — to send you relevant offers, bonus updates, and platform news where you have opted in to receive such communications. You may withdraw this consent at any time through your account settings;
• Legal compliance and dispute resolution — to comply with court orders, regulatory demands, law enforcement requests, and to establish, exercise, or defend legal claims.

6 Legal Basis for Processing

Every instance of personal data processing by millyon is grounded in one or more of the following lawful bases as recognized under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity — processing is required to perform our contract with you, including providing gaming services, processing transactions, and maintaining your account;
• Legal obligation — processing is necessary to comply with applicable Philippine law, including PAGCOR licensing conditions, AMLA requirements, and NPC regulations;
• Legitimate interests — processing is necessary for millyon's legitimate business interests, including fraud prevention, platform security, and analytics, provided those interests are not overridden by your fundamental rights and freedoms;
• Consent — for certain processing activities such as direct marketing communications, the use of non-essential cookies, and the processing of sensitive personal information, millyon relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

7 Sharing Your Personal Data

millyon does not sell or rent your personal data to third parties. We may share your data only in the following limited circumstances:

• Licensed service providers (PIPs) — including KYC and identity verification providers, payment processors, cloud hosting providers, customer support platforms, and cybersecurity services. All such providers are contractually obligated to process your data only on millyon's instructions and in compliance with Philippine data protection law;
• PAGCOR and regulatory authorities — millyon is required to share certain player data, gaming activity records, and financial transaction details with PAGCOR as a condition of its operating license. We may also be required to disclose information to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities;
• Law enforcement agencies — where millyon receives a valid legal demand, court order, or subpoena from a competent Philippine authority, we will comply with the disclosure requirement to the extent mandated by law;
• Business transfers — in the event of a merger, acquisition, or sale of millyon's business or assets, your personal data may be transferred to the relevant successor entity. We will notify you of any such transfer and the applicable privacy terms before your data is subject to a materially different privacy policy;
• With your explicit consent — where you have expressly authorized us to share your data with a specific third party for a purpose clearly explained at the time of consent.

8 Cookies and Tracking Technologies

millyon uses cookies and similar technologies — including web beacons, pixel tags, and local storage — to operate and improve the platform. The following types of cookies are used on millyon.net:

• Strictly necessary cookies — essential for the platform to function, including session management, login state, and security tokens. These cookies cannot be disabled without impairing platform functionality;
• Performance and analytics cookies — collect anonymized or aggregated information about how players use millyon.net, such as pages visited, session duration, and error reports, to help us improve the platform experience;
• Functionality cookies — remember your preferences such as language settings, game preferences, and responsible gaming configurations to personalize your experience;
• Marketing cookies — used only where you have consented, to identify your interests and deliver relevant promotional content within the millyon platform. These cookies do not track your activity on external websites.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the availability or performance of some platform features. For detailed cookie management instructions, refer to your browser's help documentation.

9 Data Security

millyon implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption — all data transmitted between your device and millyon.net is encrypted using TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial account details and identity documents, is encrypted using AES-256 or equivalent standards;
• Access controls — personal data is accessible only to authorized millyon personnel and service providers who require it to perform their specific functions. Role-based access controls and least-privilege principles are enforced across our systems;
• Two-factor authentication (2FA) — 2FA is available and strongly recommended for all player accounts to reduce the risk of unauthorized access;
• Security monitoring — millyon operates continuous monitoring of its systems for suspicious activity, unauthorized access attempts, and anomalous transaction patterns;
• Staff training — all millyon personnel with access to personal data undergo regular data protection and security awareness training;
• Penetration testing and audits — millyon conducts periodic security assessments and third-party audits to identify and remediate vulnerabilities in its systems and processes.

While millyon takes every reasonable precaution, no security system is entirely impenetrable. You play an important role in protecting your own account — please use a strong, unique password, enable 2FA, and contact us immediately at [email protected] if you suspect any unauthorized access.

10 Data Retention

millyon retains your personal data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable Philippine law and regulatory obligations. The following general retention principles apply:

• Active account data — retained for the duration of your registered account relationship with millyon and for a period of at least five (5) years following account closure, in accordance with PAGCOR licensing requirements and AMLA record-keeping obligations;
• Transaction records — financial transaction data, including deposit and withdrawal records, is retained for a minimum of five (5) years from the date of each transaction to comply with AMLA and PAGCOR requirements;
• KYC documents — identity verification documents are retained for the period required by PAGCOR and AMLC regulations, typically five (5) years from the end of the customer relationship;
• Customer support records — support correspondence is retained for up to three (3) years from the date of the interaction, unless a longer period is required in connection with an ongoing dispute or legal proceeding;
• Marketing data — where you have consented to marketing communications, your marketing preferences and contact details are retained until you withdraw your consent or request erasure, subject to any overriding legal retention obligations;
• Technical and analytics data — aggregated, anonymized analytics data may be retained indefinitely as it no longer constitutes personal data once properly anonymized.

Upon expiry of the applicable retention period, millyon will securely delete or irreversibly anonymize your personal data. Where deletion is not immediately possible due to technical constraints, the data will be isolated from active processing until deletion can be carried out.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (R.A. 10173), you have the following rights in respect of your personal data held by millyon:

• Right to be informed — you have the right to be clearly informed about how your personal data is collected, used, and processed, as set out in this Privacy Policy;
• Right of access — you may request a copy of the personal data millyon holds about you, including information about the purposes of processing, the categories of data held, and any third parties to whom it has been disclosed;
• Right to rectification — you have the right to request correction of any inaccurate, incomplete, or outdated personal data in your millyon account;
• Right to erasure — subject to applicable legal and regulatory retention obligations, you may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where consent has been withdrawn, or where processing is unlawful;
• Right to object — you have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests, in which case millyon will cease processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to data portability — where technically feasible and where processing is based on your consent or a contract, you may request your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint — if you believe millyon has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Children's Privacy and Age Restriction

millyon is a real-money gambling platform. In strict compliance with PAGCOR's regulations and Philippine law, the millyon platform is accessible only to individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21.

During the registration and KYC verification process, millyon takes active steps to verify the age of all applicants. Any account found to have been created by or used by a person under 21 years of age will be immediately suspended, all associated personal data will be securely deleted (except where retention is required by law), and the matter will be reported to PAGCOR.

If you believe that a minor has accessed or used the millyon platform, please notify us immediately at [email protected] so that we may take prompt action. Protecting minors from gambling harm is a responsibility millyon takes with the utmost seriousness.

13 Updates to This Privacy Policy

millyon reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR requirements, or NPC guidance. All revisions will be published on this page at millyon.net/privacy-policy, with the effective date updated at the top of the document.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — we will provide advance notice via your registered email address or through a prominent platform notification prior to the changes taking effect.

Your continued use of the millyon platform following the publication of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with any update, please discontinue use of the platform and contact us to close your account in accordance with the process described in our Terms & Conditions.

14 Contact Us & Data Protection Officer

millyon has appointed a Data Protection Officer (DPO) to oversee our compliance with the Philippine Data Privacy Act of 2012 and to serve as your primary point of contact for all privacy-related matters, including data subject requests, consent withdrawals, and privacy complaints.

For any privacy-related inquiry or to exercise your data subject rights, please contact us using the following details:

• Platform: millyon — millyon.net
• Data Protection Officer Email: [email protected]
• Subject line: "Privacy Inquiry" or "Data Subject Request"
• Operating jurisdiction: Republic of the Philippines
• Regulatory authority: Philippine Amusement and Gaming Corporation (PAGCOR)

For complaints that remain unresolved after contacting our DPO, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters in the country.