milyon is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains exactly what information we collect when you use milyon, why we collect it, how we store and protect it, who we may share it with, and the rights you have over your own data under Philippine law.
These cards summarise milyon's core privacy commitments. The full legal detail is in the policy sections below — all players are expected to read the complete document.
Your personal and financial data is stored on encrypted servers. milyon uses SSL/TLS for all data in transit and AES-256 encryption standards for data at rest, consistent with PCI DSS requirements for financial platforms.
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), you have the right to access, correct, and request deletion of your personal data held by milyon, subject to legal and regulatory retention requirements.
milyon does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data sharing with third parties occurs only as described in this policy and for operational necessity.
milyon's data practices comply with PAGCOR licensing requirements, including KYC (Know Your Customer) data collection obligations and anti-money laundering (AML) record-keeping standards.
milyon collects only the personal data that is necessary for the purposes described in this policy. We do not collect data beyond what is required for account management, regulatory compliance, and platform operation.
In the unlikely event of a personal data breach affecting your information, milyon will notify affected players and the National Privacy Commission (NPC) within the timeframes required under RA 10173 and its implementing rules.
This Privacy Policy ("Policy") is issued by milyon ("milyon," "we," "our," or "us") and applies to all personal data collected, processed, stored, and shared in connection with your use of the milyon online gaming platform, accessible at milyon.asia and all associated web interfaces operated by milyon.
milyon is committed to processing personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and all other applicable data protection legislation in force in the Philippines. milyon is registered with the National Privacy Commission (NPC) as a personal information controller.
This Policy governs data collected from: (a) registered account holders; (b) visitors to the milyon website who have not registered an account; (c) individuals who contact milyon's customer support team; and (d) individuals whose data is processed in connection with milyon's regulatory compliance obligations, including KYC and AML requirements under PAGCOR licensing conditions.
milyon collects personal data in the following categories, limited to what is necessary for the purposes described in Section 3 of this Policy:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Registration Data | Full legal name, date of birth, mobile number, email address, username, password (hashed) | Account creation |
| Identity Verification | Government-issued ID type and number (Passport, PhilSys, Driver's Licence, UMID, SSS ID), ID document images, selfie verification photos | KYC verification process |
| Financial Data | GCash account number, PayMaya details, bank account details (BPI, BDO, Metrobank), cryptocurrency wallet addresses, transaction history, deposit and withdrawal records | Deposit / withdrawal activity |
| Gaming Activity | Game session logs, wager amounts, game results, bonus usage, session durations, responsible gaming limit settings | Platform usage |
| Technical Data | IP address, device type and OS, browser type and version, cookie identifiers, session tokens, geolocation data (country/region level) | Platform access |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Support interactions |
milyon does not intentionally collect sensitive personal information as defined under the DPA (including health information, biometric data beyond facial identification for KYC, political opinions, or religious beliefs) except where strictly required by regulatory obligations. Where such data is collected incidentally — for example, a health condition mentioned in a responsible gaming communication — it is handled with heightened security and access controls.
milyon processes personal data on the following legal bases and for the following purposes:
milyon does not sell, rent, or trade your personal data. We may share personal data with third parties only in the following circumstances and to the extent strictly necessary:
All third parties who receive personal data from milyon as data processors are required to process such data only on milyon's documented instructions and to implement appropriate security measures as required under the DPA.
milyon retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention schedule:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AMLA / PAGCOR requirements |
| KYC identity documents | Duration of account + 5 years after closure | AMLA / PAGCOR requirements |
| Financial transaction records | Minimum 5 years from transaction date | AMLA Section 9 |
| Gaming activity logs | 2 years from session date | PAGCOR licensing, dispute resolution |
| Support communications | 2 years from last interaction | Legitimate interests (dispute resolution) |
| Marketing consent records | Until consent withdrawn + 1 year | Legal compliance |
| Technical / server logs | 90 days rolling | Security and fraud prevention |
When personal data is no longer required and the applicable retention period has expired, milyon will securely delete or anonymise it in accordance with the NPC's standards for data disposal.
The milyon platform uses cookies and similar tracking technologies (including browser local storage and session tokens) to operate the platform, maintain your logged-in session, personalise your experience, and analyse platform usage.
The categories of cookies used by milyon include:
You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair or prevent your ability to use the milyon platform. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience.
milyon implements a layered security architecture to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure:
While milyon takes all reasonable precautions to protect personal data, no online platform can guarantee absolute security. In the event of a personal data breach that poses a real risk to affected individuals, milyon will notify affected players and the NPC within 72 hours of discovery, in accordance with its breach notification obligations under RA 10173.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by milyon:
To exercise any of the above rights, contact milyon's Data Protection Officer through the support email address displayed on the milyon website. milyon will respond to data subject requests within 15 business days of receipt. In cases of particular complexity, this period may be extended by an additional 15 business days, with notice provided to you.
The milyon platform is strictly restricted to individuals aged 21 years and above, in accordance with Philippine gambling regulations. milyon does not knowingly collect personal data from individuals under 21 years of age.
If milyon discovers that personal data has been collected from an individual who does not meet the minimum age requirement, that account will be immediately closed, all associated data will be deleted (subject to any mandatory regulatory retention obligations), and any funds deposited by an underage individual will be handled in accordance with applicable regulatory guidance.
If you are a parent or guardian and believe your child may have registered a milyon account, please contact milyon's support team immediately through live chat. milyon will investigate and take appropriate action without undue delay.
Some of milyon's third-party service providers — including game studio partners, KYC verification technology providers, and cloud infrastructure providers — may process personal data outside the Philippines. Where such cross-border transfers occur, milyon ensures that appropriate safeguards are in place, including:
milyon's primary data storage infrastructure is located within data centres serving the Southeast Asian region. Where data is processed by overseas sub-processors, milyon maintains accountability for the protection of that data throughout the processing chain.
milyon may send you promotional communications — including bonus offers, game announcements, tournament invitations, and platform updates — by SMS, email, or in-platform notification, where you have provided consent to receive such communications.
You may withdraw your consent for marketing communications at any time by:
Withdrawal of marketing consent will not affect the lawfulness of any processing carried out before withdrawal, nor will it affect milyon's ability to send you transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, or regulatory notices — which are sent on the basis of contract performance and legal obligation rather than consent.
milyon reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this Policy will be revised with each amendment.
For material changes — those that significantly affect how your personal data is processed or that reduce your rights — milyon will provide advance notice through your registered email address or through a prominent notice on the milyon website before the changes take effect. Continued use of the milyon platform after the effective date of any amendment constitutes acceptance of the revised Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how milyon protects your personal data. If you have questions about any aspect of this Policy, please contact us through the live chat support function available on the milyon website.
milyon has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act of 2012. The DPO can be reached through:
milyon will acknowledge all data protection inquiries within 3 business days and provide a substantive response within 15 business days. For complex requests, an extension notice will be provided within the initial 15-day period.
If you are not satisfied with milyon's response to a data protection concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines.
Your data is protected under Philippine law and PAGCOR oversight. Create your account and enjoy 500+ games, live dealers, and sports betting — safely and securely.