Privacy Policy — How mmbd Protects Your Personal Data

mmbd collects personal information from you in several ways: directly when you register an account or interact with the platform, automatically as you use our services, and in some cases from third-party sources such as payment processors and identity verification providers. We collect only the information that is necessary for the purposes described in this Privacy Policy.

1.1 Information You Provide Directly

When you create a mmbd account, make a deposit or withdrawal, contact our support team, or participate in a promotion, you may provide us with:

• Full legal name, date of birth, and gender
• Residential address including city, district, and postal code
• Email address and mobile phone number
• Copies of government-issued identity documents (National ID Card, passport, or driving licence) submitted for KYC verification
• Proof of address documents (utility bills, bank statements) dated within three months
• Payment account details, including the mobile wallet numbers (bKash, Nagad, Rocket, Upay) and bank account identifiers used to fund your mmbd account
• Any correspondence you send to us, including support tickets and complaint submissions

1.2 Information Collected Automatically

When you access the mmbd platform, our systems automatically record certain technical data about your device and session, including:

• IP address and approximate geographic location derived from it
• Device type, operating system, browser type and version
• Pages visited, time spent on each page, and navigation paths through the site
• Game session data: games played, wager amounts, game outcomes, session duration
• Login timestamps and session identifiers
• Referral source (e.g., the URL from which you arrived at mmbd.bet)

1.3 Information from Third Parties

We may receive personal information about you from trusted third-party sources in the following circumstances:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) confirm transaction status and provide transaction reference numbers
• Identity verification providers may confirm the authenticity of documents you submit for KYC
• Fraud prevention and AML screening services may flag accounts against watchlists or sanctions databases
• Analytics partners may provide aggregated, anonymised data about site traffic patterns

In all cases, mmbd requires third-party data providers to confirm that they have a lawful basis for sharing your information with us.

mmbd processes personal data only for lawful, specified purposes. The table below summarises the primary purposes for which we use your information and the corresponding legal basis for each:

mmbd does not use your personal data to make solely automated decisions that produce significant legal effects concerning you without first providing a mechanism for human review. If you have concerns about automated processing applied to your account, please contact us at [email protected].

mmbd does not sell your personal data to third parties. We do not share your information for third-party advertising purposes. However, in the normal course of operating the mmbd platform, we share limited personal data with the following categories of third parties, each subject to contractual data protection obligations:

3.1 Payment Service Providers

To process deposits and withdrawals, we share your payment account identifiers and transaction amounts with the relevant payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank). These providers receive only the data they strictly require to execute the transaction and are bound by their own privacy policies and financial regulations.

3.2 Game Studio Partners

Games on the mmbd platform are supplied by third-party studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. When you launch a game from one of these providers, a session token and anonymised player identifier are transmitted to the studio's servers to load and run the game. mmbd does not share your full name, contact details, or payment information with game studios.

3.3 Identity Verification & Compliance Providers

To meet our KYC and AML obligations, we may share identity document images and personal details with accredited identity verification service providers. These providers process your data under strict contractual data processing agreements and are prohibited from using your data for any purpose other than verification.

3.4 Legal & Regulatory Authorities

mmbd will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by a valid legal obligation, court order, or where disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event that mmbd undergoes a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and, where required by law, given the opportunity to object before your data is transferred to a new data controller.

mmbd uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse site traffic, and — where you have given consent — to deliver relevant promotional content. A cookie is a small text file stored on your device by your browser at the request of a website.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may opt out of analytics and marketing cookies at any time by adjusting your browser settings to block or delete cookies. Please note that disabling functional cookies may affect your experience on the mmbd platform, as certain preferences may no longer be saved between sessions.

Most modern browsers allow you to view and delete cookies stored on your device through the browser's privacy or settings menu. Refer to your browser's help documentation for instructions specific to your browser version.

mmbd takes the security of your personal data seriously. We implement a combination of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

5.1 Technical Safeguards

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and mmbd servers
• Encrypted storage for sensitive data fields including passwords (hashed using industry-standard algorithms), identity document images, and payment credentials
• Firewalls and intrusion detection systems monitoring all inbound and outbound network traffic
• Two-factor authentication (2FA) available for all player accounts and mandatory for staff accessing internal systems
• Regular penetration testing conducted by independent security professionals

5.2 Organisational Safeguards

• Access to personal data is restricted to mmbd staff and contractors on a strict need-to-know basis
• All staff with access to personal data receive regular data protection training
• Third-party service providers are contractually required to maintain equivalent security standards
• mmbd maintains an internal incident response plan; in the event of a data breach, affected users will be notified promptly in accordance with applicable law

5.3 Data Retention

mmbd retains your personal data for as long as your account is active and for a period thereafter as required to meet legal, regulatory, and audit obligations. As a general guide:

• Account and KYC records — retained for a minimum of five years after account closure, in line with anti-money-laundering record-keeping requirements
• Transaction records — retained for a minimum of five years from the date of each transaction
• Support correspondence — retained for three years from the date of the last interaction
• Marketing consent records — retained for as long as you have an active account or until you withdraw consent, whichever is earlier
• Technical logs (IP addresses, session data) — retained for 12 months from the date of generation

After the applicable retention period, your data is securely deleted or anonymised. Anonymised aggregate data may be retained indefinitely for statistical and business planning purposes.

As a user of the mmbd platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team in writing at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your verified request.

• Right of access: You may request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to legal retention obligations — we may be required to retain certain records even after you close your account.
• Right to restrict processing: You may request that we limit how we use your personal data while a dispute about its accuracy or our right to process it is resolved.
• Right to data portability: Where processing is based on your consent or on contract performance and carried out by automated means, you may request a structured, machine-readable copy of the personal data you have provided to us.
• Right to object: You may object to processing based on our legitimate interest at any time, including objecting to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

mmbd sends promotional emails, SMS messages, and in-platform notifications about bonuses, new game releases, and seasonal offers such as Eid promotions, Pohela Boishakh specials, and BPL cricket betting offers. We will only send marketing communications to you if you have given explicit consent during registration or subsequently opted in through your account settings.

7.1 Opting Out

You may withdraw your consent to receive marketing communications at any time using any of the following methods:

• Clicking the "Unsubscribe" link included at the bottom of every marketing email
• Logging into your mmbd account and updating your communication preferences in the account settings panel
• Sending a written opt-out request to [email protected]

Once you opt out, mmbd will cease sending marketing communications within five business days. Please note that opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, KYC requests, or security alerts — these will continue to be sent as they are necessary for the operation of your account.

7.2 Profiling for Marketing

mmbd may use information about your gaming activity — such as the game categories you play most frequently or your average deposit amount — to tailor promotional offers to your interests. This profiling is conducted only where you have provided marketing consent. You may object to this profiling at any time by contacting [email protected], without withdrawing your broader marketing consent if you still wish to receive general promotions.

mmbd reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or feedback from users. The "Last updated" date at the top of this page will be revised whenever a material change is made. For significant changes that affect your rights or the way we use your data, mmbd will provide notice via a prominent banner on the mmbd.bet homepage and, where your contact details are available, by email to your registered address.

Your continued use of the mmbd platform after any change to this Privacy Policy constitutes acceptance of the updated version. If you do not agree with a revised Privacy Policy, you should close your account and cease using the mmbd platform. Closing your account does not affect mmbd's right to retain data for the periods specified in Section 5.3 above, where required by law.

All previous versions of this Privacy Policy are archived and available on request by emailing [email protected].