mk77 Privacy Policy for Bangladesh Players

Section 1

Data We Collect

mk77 collects personal data from players in a variety of ways — directly through the registration process, automatically as you use the platform, and in limited circumstances from trusted third-party sources. We apply the principle of data minimisation: we collect only what is reasonably necessary to provide, secure, and improve our services.

1.1 Information You Provide Directly

When you register an account, deposit funds, contact support, or otherwise interact with mk77, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., National ID card number or passport number).
• Contact Data: Email address, mobile phone number, and residential address (district, division, and postal code within Bangladesh — e.g., Dhaka, Chittagong, Sylhet, Khulna).
• Account Credentials: Username and encrypted password. mk77 does not store passwords in plain text at any point.
• Financial Data: Mobile banking account references (bKash, Nagad, Rocket, Upay number), transaction history, deposit and withdrawal records, and account balance information. Full card numbers for Visa or Mastercard are handled exclusively by our payment processor and are never stored on mk77 servers.
• KYC Verification Documents: Scanned or photographed copies of government-issued photo ID, proof of address documents (utility bills, bank statements), and proof of payment method ownership when required during the identity verification process.
• Communications Data: The content of messages you send to mk77 support staff via Live Chat, email ([email protected]), or any other support channel.

1.2 Information Collected Automatically

When you access the mk77 platform, certain technical and behavioural data is collected automatically:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages and sections visited within the platform, games launched, betting activity (wager amounts, game titles, outcomes), session start and end times, and navigation paths.
• Location Data: Approximate geographic location derived from your IP address, used to comply with geographic access restrictions and to detect potentially fraudulent login attempts from unusual locations. mk77 does not use GPS or precise device-level location tracking.
• Log Data: Server-side logs capturing request timestamps, response codes, referral URLs, and error events for security monitoring and platform maintenance purposes.

1.3 Information from Third Parties

In limited circumstances, mk77 may receive personal data about you from third parties, including: identity verification service providers used during the KYC process; payment processors and mobile banking partners (bKash, Nagad, Rocket, Upay) confirming transaction status; and fraud detection and anti-money-laundering (AML) screening services. Data received from third parties is subject to the same protections as data collected directly from you.

Section 2

How We Use Your Data

mk77 uses the personal data we collect for specific, legitimate purposes directly related to the operation of the platform and the delivery of our services to players across Bangladesh. We do not use your data for purposes incompatible with those disclosed in this Policy.

Purpose	Data Categories Used	Legal Basis
Account creation and management	Identity, Contact, Credentials	Contractual necessity
Payment processing and transaction records	Financial, Identity	Contractual necessity
Identity verification (KYC)	Identity, KYC Documents	Legal obligation
Fraud detection and security monitoring	Device, Usage, Location, Log	Legitimate interest
Anti-money-laundering (AML) compliance	Financial, Identity, Transaction history	Legal obligation
Customer support and dispute resolution	Identity, Contact, Communications	Contractual necessity
Platform personalisation and game recommendations	Usage, Device	Legitimate interest
Responsible gaming monitoring and intervention	Usage, Financial, Identity	Legal obligation / Legitimate interest
Marketing communications (where opted in)	Contact, Usage	Consent
Platform analytics and performance improvement	Usage, Device, Log	Legitimate interest

2.1 Marketing Communications

mk77 may send you promotional emails or platform notifications about bonuses, new games, cricket betting promotions related to events such as the Bangladesh Premier League or IPL, and seasonal offers tied to events like Eid or Pohela Boishakh — but only if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your marketing consent at any time by contacting our support team or adjusting your notification preferences within your account.

2.2 Automated Decision-Making

mk77 uses automated systems to detect unusual betting patterns, suspicious financial transactions, and potential account security breaches. These systems may result in automated actions such as temporary account holds pending human review. Where an automated decision materially affects your account (for example, a withdrawal hold), you have the right to request human review of that decision by contacting mk77 support.

Section 3

Data Sharing & Disclosure

mk77 does not disclose your personal data to external parties except in the specific, limited circumstances described below. All third parties with whom we share data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection standards.

3.1 Service Providers

mk77 works with a number of trusted third-party service providers who process personal data on our behalf in order to deliver the platform's services:

• Game Providers: Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, and Spribe may receive limited usage data (such as session identifiers and wager information) necessary for game delivery, RNG certification, and fair play auditing. These providers do not receive your full identity data.
• Payment Processors: bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard receive the transactional data necessary to process deposits and withdrawals. These partners operate under their own privacy policies and regulatory frameworks.
• KYC & Fraud Prevention Providers: Third-party identity verification and AML screening services receive identity and financial data as required to complete KYC checks and fulfil our legal compliance obligations.
• Cloud & Infrastructure Providers: mk77's hosting and database infrastructure is provided by enterprise-grade cloud service providers operating under strict data processing agreements that prohibit independent use of player data.
• Analytics Providers: Anonymised and aggregated platform usage statistics may be processed by analytics service providers to help us understand player behaviour and improve the platform. Individual player identities are not shared with analytics providers.

3.2 Legal and Regulatory Disclosure

mk77 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies when required to do so by applicable law, court order, or regulatory directive. This includes disclosures required in connection with anti-money-laundering investigations, fraud investigations, or age verification compliance. mk77 will disclose only the minimum data necessary to satisfy the legal requirement.

3.3 Business Transfers

In the event that mk77 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, player personal data may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, mk77 will notify affected players via email or a platform notification prior to any transfer, and the acquiring entity will be bound by the privacy commitments in this Policy or will provide players with a revised policy before the transfer takes effect.

Section 4

Cookies & Tracking

mk77 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform effectively, remember your preferences, maintain your login session, and collect anonymised analytics data. This section explains what types of cookies mk77 uses and how you can control them.

4.1 Types of Cookies Used

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain login sessions, process transactions, enforce security measures. These cannot be disabled without breaking core platform functionality.	Session / up to 30 days
Functional	Remember your language preference, display settings, and game lobby layout choices.	Up to 12 months
Analytics	Collect anonymised data on page visits, click paths, game launch rates, and session duration to help us improve the platform.	Up to 24 months
Security & Fraud	Detect unusual login behaviour, flag potentially compromised sessions, and prevent automated bot access.	Session / up to 90 days

4.2 Managing Your Cookie Preferences

You can control and delete cookies through your web browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge, and their mobile equivalents on Android and iOS) allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your mk77 account and using core platform features. Disabling functional cookies will mean that your preferences are not remembered between sessions. Disabling analytics cookies will not affect your ability to use the platform but will limit our ability to improve the user experience.

Instructions for managing cookies in common browsers are available in each browser's help documentation. mk77 does not currently respond to "Do Not Track" (DNT) browser signals, as there is no uniform standard for interpreting these signals across platforms.

Section 5

Data Retention

mk77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. Once the retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player.

5.1 Retention Periods by Data Category

Data Category	Retention Period	Reason
Account and identity data	Duration of active account + 5 years after closure	Legal and regulatory compliance, dispute resolution
KYC verification documents	5 years after account closure	AML and identity verification regulatory requirements
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Support communications	3 years from last interaction	Dispute resolution and quality assurance
Usage and analytics data (anonymised)	Up to 24 months on a rolling basis	Platform improvement; anonymised so no personal impact
Marketing consent records	Until consent is withdrawn + 1 year	Demonstrating compliance with consent requirements
Security and log data	90 days on a rolling basis	Active fraud and security monitoring

5.2 Account Closure and Data Deletion

When you request account closure, mk77 will deactivate your account immediately. Your personal data will be retained for the periods specified above before being securely deleted or anonymised. You may request confirmation of the deletion of your data once the applicable retention periods have passed by contacting our support team. Please note that data retained for legal or regulatory compliance reasons cannot be deleted in response to a deletion request until the mandatory retention period has expired.

Section 6

Data Security

Protecting your personal data is a core operational priority for mk77. We implement a combination of technical, organisational, and procedural security measures designed to prevent unauthorised access, disclosure, alteration, or destruction of your personal data.

6.1 Technical Security Measures

• Transport Layer Encryption: All data exchanged between your browser or app and the mk77 platform is encrypted using 256-bit SSL/TLS encryption, preventing interception during transmission.
• Password Hashing: Player passwords are never stored in plain text. They are hashed using industry-standard cryptographic algorithms before being stored in our databases.
• Two-Factor Authentication (2FA): mk77 strongly encourages all players to enable 2FA on their accounts for an additional layer of login security.
• Database Encryption: Sensitive personal data fields stored in our databases are encrypted at rest, in addition to being protected at the database infrastructure level.
• Access Controls: Access to production systems and player data is restricted to authorised personnel only, governed by the principle of least privilege. All access is logged and reviewed.
• Intrusion Detection: mk77 operates automated intrusion detection and network monitoring systems that flag and respond to suspicious activity in real time.

6.2 Organisational Measures

mk77 staff who handle personal data are trained in data protection best practices and are bound by confidentiality obligations. Access to player data is granted on a need-to-know basis only. mk77 conducts regular internal reviews of data handling procedures and security controls.

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, mk77 will take immediate steps to contain the breach and assess its impact. Affected players will be notified as promptly as possible with a clear description of the nature of the breach, the categories of data affected, the likely consequences, and the measures mk77 has taken or proposes to take to address it. Notifications will be delivered via the email address registered on your account.

Section 7

Your Privacy Rights

As a player on the mk77 platform, you hold a number of rights with respect to your personal data. mk77 is committed to honouring these rights and will respond to valid requests within a reasonable timeframe — typically within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data that mk77 holds about you. This is sometimes called a Subject Access Request (SAR). Upon receiving a valid request, mk77 will provide you with a summary of the categories of data held, the purposes for which it is processed, and the sources from which it was obtained. To submit an access request, please contact our support team with your registered email address and account username.

7.2 Right to Rectification

If any personal data that mk77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details (such as your email address or phone number) directly through your account settings. For corrections to identity data (such as name or date of birth), please contact support and provide appropriate documentation confirming the correct information.

7.3 Right to Erasure

You have the right to request that mk77 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other legal basis for continued processing. Please note that this right is subject to exceptions: data that mk77 is required to retain for legal, regulatory, or compliance reasons (such as AML transaction records) cannot be erased until the mandatory retention period has expired.

7.4 Right to Restrict Processing

You may request that mk77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or where you have objected to processing and we are considering whether our legitimate interests override your objection. During a restriction period, mk77 will continue to store your data but will not actively process it beyond what is necessary to comply with legal obligations.

7.5 Right to Object

You have the right to object to the processing of your personal data where mk77 relies on legitimate interests as the legal basis for that processing. You also have an unconditional right to object to the use of your personal data for direct marketing purposes at any time. To exercise your right to object, please contact our support team at [email protected].

7.6 Right to Data Portability

Where mk77 processes your personal data on the basis of your consent or contractual necessity, and the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. You may also request that mk77 transmit that data directly to another service provider where technically feasible.

7.7 Withdrawing Consent

Where mk77 processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw your consent, contact our support team or update your notification preferences in your account settings.

Section 8

Policy Updates & Contact

mk77 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, new platform features, changes in data processing practices, or improvements to the clarity of our disclosures. The "Last Updated" date at the top of this page will always reflect the most recent revision.

8.1 Notification of Changes

Where a change to this Privacy Policy is material — meaning it affects the way we collect, use, or share your personal data in a manner that is significantly different from what was previously disclosed — mk77 will notify registered players via email to the address on their account, or via a prominent notice on the platform, at least 14 days before the change takes effect. For minor updates (such as typographical corrections or clarifications that do not alter the substance of the Policy), mk77 may update the Policy without advance notice. Continued use of the mk77 platform after the effective date of any revised Policy constitutes your acceptance of that revision.

8.2 How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mk77 handles your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the mk77 platform. Average response time is under 5 minutes.
• Email: [email protected] — please include your registered username and a brief description of your enquiry. We aim to respond within 2 business days.

Our support team is available to assist players across all regions of Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Support is provided in English and Bengali, seven days a week.

8.3 Governing Policy

This Privacy Policy is governed by and construed in accordance with the principles of fair information practice and the applicable data protection framework. In the event of any conflict between this Privacy Policy and the mk77 Terms & Conditions, the Terms & Conditions shall prevail to the extent of any inconsistency. This Policy constitutes the complete and authoritative statement of mk77's data protection practices and supersedes all prior versions.