mmbet Privacy Policy

01 Information We Collect

mmbet collects personal data from you in several ways: directly when you register an account and interact with our platform, automatically when you browse mmbet.ws, and from third parties such as payment processors and identity verification services. We only collect information that is necessary and proportionate to the purposes described in this Policy.

Information You Provide Directly

When you register an mmbet account or interact with our services, you may provide the following categories of personal data:

• Identity Data: Your full legal name, date of birth, and gender as provided during account registration.
• Contact Data: Your mobile phone number, email address, and residential address in Bangladesh (e.g., in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, or another division).
• Account Credentials: Your chosen username and an encrypted form of your password. mmbet never stores your password in plain text.
• Identity Verification Documents: Copies of government-issued photo identification (national ID, passport, or driving licence) and proof of address, submitted as part of our Know Your Customer (KYC) process.
• Payment Information: Mobile wallet identifiers (such as the registered phone number for your bKash, Nagad, Rocket, or Upay account) and bank account references where bank transfer is used. Raw card numbers are handled exclusively by our PCI-DSS compliant payment partners and are not stored by mmbet.
• Communications Data: Records of messages you send to the mmbet support team, including the content of support chat sessions, email correspondence sent to [email protected], and any feedback or complaint submissions.

Information Collected Automatically

When you access mmbet.ws, certain technical information is collected automatically by our servers and analytics systems:

Data Type	Examples	Purpose
Device & Browser Data	Browser type, OS version, screen resolution, device model	Platform compatibility, fraud detection
Network Data	IP address, ISP, approximate geographic region	Security, geolocation compliance
Session Data	Login timestamps, session duration, pages visited	Security monitoring, responsible gaming
Gameplay Data	Bets placed, games played, win/loss records, bet amounts in ৳	Account management, bonus eligibility, AML monitoring
Cookie & Analytics Data	Page views, click paths, referral source	Platform improvement, anonymous usage analytics

Information from Third Parties

mmbet may receive personal data about you from third-party sources in limited circumstances, including:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard, used to reconcile deposits and withdrawals.
• Identity Verification Services: Results of age and identity verification checks performed by third-party KYC providers, where mmbet uses such a service to validate submitted documents.
• Fraud Prevention Services: Risk scores and flagging data from fraud detection systems used to protect the mmbet platform and its players.

02 How We Use Your Data

mmbet uses the personal data it collects for specific, legitimate purposes directly related to providing and improving the platform. We do not use your data for purposes that are incompatible with those stated here. The primary legal bases on which mmbet processes your data are: (a) the performance of a contract (operating your player account), (b) legal obligation (AML, KYC, and responsible gaming regulations), and (c) legitimate interests (fraud prevention, platform security, and service improvement).

Account Management

Your identity, contact, and credential data are used to create and manage your mmbet account, verify your eligibility (including the 18+ age requirement), authenticate your login sessions, and communicate important account-related information such as transaction confirmations and security alerts.

Payment Processing

Payment-related data is used solely to process deposits and withdrawals in Bangladeshi Taka (৳), reconcile transactions, apply bonus credits, and maintain accurate financial records for each player account. We apply the principle of data minimisation: only the payment data necessary to execute a specific transaction is accessed at any given time.

Legal Compliance

mmbet is required to collect and retain certain personal data to comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and responsible gaming mandates. This includes retaining records of player identity verification, transaction history, and account activity logs for the periods specified in Section 5 (Data Retention) of this Policy.

Fraud Prevention and Platform Security

Automatically collected data — including IP addresses, device identifiers, and session behaviour patterns — is used by mmbet's security systems to detect and prevent fraudulent activity, multi-account violations, bonus abuse, money laundering, and unauthorised account access. This processing is carried out in the legitimate interests of mmbet and its players.

Responsible Gaming Monitoring

Gameplay data, session duration records, and deposit/loss patterns are analysed to support mmbet's responsible gaming obligations. This includes identifying players who may be showing signs of problem gambling behaviour and triggering responsible gaming interventions such as reality-check notifications and support team outreach.

Platform Improvement and Analytics

Anonymised and aggregated usage data is used to understand how players interact with mmbet.ws, identify technical issues, optimise page performance, and improve the overall user experience. This analytical processing does not involve identifying individual players and uses data in aggregated form only.

03 Cookies & Tracking

mmbet.ws uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, and collect anonymous usage analytics. This section explains the categories of cookies in use and how you can manage them.

What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits, maintain session state (so you remain logged in between page loads), and record certain browsing preferences. Cookies placed by mmbet do not contain your password or payment details.

Categories of Cookies Used by mmbet

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login authentication, security tokens, CSRF protection	No — required for platform to function
Functional	Remembering your language preference (English), display settings	Yes — disabling may affect user experience
Analytics	Anonymous page view counts, feature usage patterns, error reporting	Yes — data is aggregated and non-identifying

Third-Party Tracking

mmbet does not allow third-party advertising networks to place tracking cookies on mmbet.ws. Any third-party scripts present on the platform (such as payment gateway integrations) operate under strict data processing agreements and are limited to the minimum data access required to perform their function.

Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your mmbet account. Instructions for managing cookies in common browsers are available in each browser's help documentation.

04 Data Sharing & Disclosure

mmbet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared with third parties only where strictly necessary to operate the platform, comply with legal obligations, or protect the safety and security of our players. All third-party recipients of mmbet player data operate under binding data processing agreements that restrict their use of the data to the specified purpose.

Payment Processing Partners

To process deposits and withdrawals, mmbet shares relevant transaction data with our payment processing partners. For mobile wallet transactions in Bangladesh, this includes bKash, Nagad, Rocket, and Upay. For card and bank transactions, this includes Visa, Mastercard, Dutch-Bangla Bank, and City Bank. These partners receive only the data necessary to execute and confirm the specific transaction and are bound by their own financial regulatory obligations regarding data protection.

Identity Verification (KYC) Providers

Where mmbet uses a third-party KYC service to validate identity documents submitted by players, the relevant document images and personal data are shared with that provider solely for the purpose of identity verification. KYC providers used by mmbet operate secure, encrypted document processing systems and do not retain player documents beyond the period required for verification.

Fraud Prevention and Security Services

mmbet may share anonymised device fingerprint data, IP addresses, and behavioural signals with fraud detection service providers. This sharing is conducted in the legitimate interests of protecting the platform and its players from fraudulent activity. No directly identifying information (such as full name or National ID number) is shared with fraud detection services beyond what is necessary for a specific investigation.

Legal and Regulatory Disclosure

mmbet may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law or valid legal process. mmbet will make reasonable efforts to notify affected players of such disclosure requests unless legally prohibited from doing so. Any such disclosure is documented in mmbet's internal compliance records.

Business Transfers

In the event that mmbet undergoes a corporate restructuring, merger, acquisition, or sale of assets, player personal data held at that time may form part of the transferred assets. In such an event, mmbet will take all reasonable steps to ensure that the recipient entity is bound by privacy obligations at least as protective as those set out in this Policy, and will notify affected players via the email address on file before any transfer of their data takes place.

05 Data Retention

mmbet retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below apply to the principal categories of personal data held by mmbet.

Data Category	Retention Period	Basis
Account identity & registration data	Duration of account + 5 years after closure	AML / KYC legal obligation
KYC verification documents	Duration of account + 5 years after closure	AML / KYC legal obligation
Transaction records (deposits & withdrawals)	7 years from transaction date	Financial record-keeping obligation
Bet and gameplay records	5 years from the date of the activity	Dispute resolution, responsible gaming
Support communications	3 years from last interaction	Legitimate interests (dispute resolution)
Session logs & IP records	12 months from session date	Security, fraud detection
Anonymous analytics data	26 months (aggregated, non-identifying)	Platform improvement

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (where no individual can be re-identified) may be retained indefinitely for statistical purposes. Where you request deletion of your data before the end of a legally mandated retention period, mmbet will delete all data that is not subject to a legal retention obligation and will inform you of any data that must be retained and the reason for its retention.

06 Data Security

mmbet implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, mmbet's security programme reflects current industry best practice for online gaming and financial services platforms operating in the Bangladesh market.

Technical Security Measures

• Transport Encryption: All data in transit between your device and mmbet.ws is encrypted using TLS 1.2 or higher. The mmbet.ws domain is HTTPS-only; HTTP connections are automatically redirected.
• Data at Rest Encryption: Sensitive data stored in mmbet databases — including identity verification records, hashed passwords, and KYC documents — is encrypted at rest using AES-256 encryption.
• Password Hashing: Player passwords are never stored in plain text. Passwords are salted and hashed using a one-way cryptographic algorithm before storage, meaning that even mmbet staff cannot view your password.
• Access Controls: Access to player personal data within mmbet's internal systems is restricted on a strict need-to-know basis. Staff access is logged, reviewed, and revoked promptly upon role change or departure.
• Payment Tokenisation: Raw payment credentials (mobile wallet numbers, card numbers) are tokenised at the point of capture by our PCI-DSS compliant payment partners. mmbet servers never receive or store raw payment credentials.

Organisational Security Measures

• Regular internal security reviews and vulnerability assessments of the mmbet platform.
• Mandatory data protection and security awareness training for all mmbet staff with access to personal data.
• Formal incident response procedures for data breach detection, containment, and notification.
• Data processing agreements with all third-party processors, including security and confidentiality obligations.

Security Incident Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mmbet will notify affected players without undue delay via the email address on file. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures mmbet has taken or will take to address the breach.

07 Your Privacy Rights

As a player on the mmbet platform, you hold specific rights in relation to the personal data we hold about you. mmbet is committed to facilitating the exercise of these rights promptly and without unnecessary friction. To exercise any of the rights described below, contact the mmbet privacy team at [email protected] with the subject line "Privacy Rights Request".

Right of Access

You have the right to request a copy of the personal data that mmbet holds about you. Upon a verified access request, mmbet will provide a structured summary of your personal data within a reasonable period. This includes your account identity data, transaction history, KYC status, and any support communications on file.

Right to Rectification

If any personal data mmbet holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most contact details directly from your account settings after mmbet login. For corrections to identity data (such as your name or date of birth), you may be required to submit supporting documentation.

Right to Erasure

You have the right to request the deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent on which processing is based; or the data has been processed unlawfully. mmbet will honour erasure requests promptly, subject to any legal retention obligations that apply (see Section 5). Data subject to a legally mandated retention period cannot be erased until that period expires, but will be restricted from active use.

Right to Restriction of Processing

In certain circumstances — such as where you contest the accuracy of data held, or where processing is unlawful but you prefer restriction over erasure — you have the right to request that mmbet restricts its processing of your personal data. During a restriction period, your data may be stored but will not be actively used for purposes beyond those required by legal obligation.

Right to Data Portability

Where processing of your data is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive the personal data you have provided to mmbet in a structured, machine-readable format, and to transmit that data to another controller where technically feasible.

Right to Object

You have the right to object at any time to the processing of your personal data for purposes based on mmbet's legitimate interests, including fraud prevention analytics and platform usage profiling. Where you raise a valid objection, mmbet will cease the relevant processing unless compelling legitimate grounds that override your interests can be demonstrated.

Right to Withdraw Consent

Where mmbet processes your data on the basis of your explicit consent (for example, for promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent to marketing communications, contact [email protected] or update your preferences from your account settings page.

08 Contact & Policy Updates

How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mmbet handles your personal data, please contact the mmbet privacy team using the details below. We aim to respond to all privacy enquiries within five (5) business days (Bangladesh Standard Time, UTC+6).

Privacy enquiries: [email protected]
Subject line: Privacy Rights Request
Response time: Within 5 business days (BST, UTC+6)
Support availability: 24 hours a day, 7 days a week

Complaints

If you are not satisfied with how mmbet has handled a privacy-related concern, you have the right to escalate your complaint to the appropriate supervisory authority in your jurisdiction. mmbet encourages players to contact us directly in the first instance so that we have the opportunity to resolve any concern before escalation is required.

Changes to This Privacy Policy

mmbet may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, the revised Policy will be published on this page with a new effective date, and registered players will be notified via the email address on file. The version number and effective date at the top of this page will always reflect the most current version.

Your continued use of the mmbet platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend that you review this page periodically to stay informed of how mmbet protects your personal data.