mb777 Privacy Policy
This Privacy Policy explains how mb777 collects, processes, stores, and protects the personal data of players registered on our platform in Bangladesh. We are committed to handling your information with transparency, security, and respect for your rights as a data subject.
Minimal Data Collection
mb777 collects only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with applicable legal obligations. We do not collect data speculatively or for purposes unrelated to your mb777 account.
Encrypted at Every Step
All data transmitted between your device and the mb777 platform is protected by TLS 1.3 encryption. Sensitive data at rest — including payment information and identity documents — is stored using AES-256 encryption on access-controlled infrastructure.
No Third-Party Selling
mb777 does not sell, rent, or trade your personal data to third-party marketing companies, data brokers, or advertisers. Your information is shared only with service providers who are contractually bound to process it solely on our behalf.
You Control Your Data
Registered mb777 players have the right to access, correct, and request deletion of their personal data. You may also object to certain processing activities and withdraw consent for marketing communications at any time through your account settings.
Clear Retention Limits
mb777 does not retain your personal data indefinitely. Specific retention periods apply to each category of data, aligned with our legal obligations and operational requirements. Once the retention period expires, data is securely deleted or anonymised.
Transparent Processing
We clearly disclose the legal basis for every category of data processing on the mb777 platform. We do not process personal data for undisclosed purposes. This policy is written in plain English so all players, regardless of legal background, can understand it.
When you register for an mb777 account, use our platform, or contact our support team, we collect certain categories of personal data. The specific data collected depends on how you interact with mb777 and which services you use. Below is a comprehensive overview of the personal data categories we process.
Identity & Registration Data
- Full legal name as it appears on your National Identity Card (NID) or passport
- Date of birth (used to verify you are 18 years of age or older)
- Gender (where provided voluntarily during registration)
- Nationality and country of residence
- Government-issued identification document numbers (NID, passport number)
Contact Data
- Email address used to create and manage your mb777 account
- Bangladesh mobile number (required for bKash, Nagad, Rocket, or Upay transactions)
- Residential address (required for KYC verification at withdrawal stage)
- District or division of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
Financial & Payment Data
- bKash account number, Nagad number, Rocket number, or Upay number used for deposits and withdrawals
- Bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, or other supported banks) where bank transfer is used
- Transaction history including deposit amounts, withdrawal amounts, dates, and payment method identifiers
- Source of funds documentation provided during enhanced KYC verification
Gaming & Betting Activity Data
- Games played, wagers placed, bet amounts, game outcomes, and session durations
- Sports markets bet on, including cricket (BPL, IPL, T20, ICC), football, and other events
- Bonus claims, wagering progress, and promotional offer interactions
- Responsible gaming tool usage (deposit limit settings, session time limits, self-exclusion requests)
Technical & Device Data
- IP address and approximate geographic location derived from it
- Device type, operating system, and browser version
- Session timestamps, login history, and logout records
- Cookie identifiers and similar tracking technologies (see the Cookies section below)
- Referring URL where you arrived at mb777 from another website
Support & Communications Data
- Records of all communications between you and the mb777 support team, including email threads and live chat transcripts
- Complaint records and their resolutions
- Survey responses and feedback provided voluntarily
mb777 processes personal data only for specific, documented purposes and only where a valid legal basis exists for doing so. The table below summarises the primary purposes for which we use your personal data, the categories of data involved, and the legal basis that justifies each processing activity.
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity, contact | Contract performance |
| Age and identity verification (KYC) | Identity, financial | Legal obligation |
| Processing deposits and withdrawals | Financial, identity | Contract performance |
| Providing casino and sports betting services | Gaming activity, technical | Contract performance |
| Fraud detection and prevention | Technical, financial, identity | Legitimate interests |
| Anti-money laundering compliance | Identity, financial, activity | Legal obligation |
| Customer support and dispute resolution | Support, identity | Contract performance |
| Responsible gaming monitoring | Gaming activity, contact | Legal obligation / legitimate interests |
| Marketing and promotional communications | Contact, activity | Consent (opt-in) |
| Platform analytics and improvement | Technical, activity (anonymised) | Legitimate interests |
Marketing Communications
mb777 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and special offers if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in the account dashboard or by contacting support at [email protected]. Withdrawal of consent does not affect any other aspect of your account or your ability to use the platform.
Automated Decision-Making
mb777 uses automated systems to detect unusual account activity, flag potential bonus abuse, and identify patterns consistent with problem gambling behaviour. Where an automated process results in a decision that materially affects your account — such as a temporary suspension or a withdrawal hold — you have the right to request human review of that decision by contacting our support team. We will respond to such requests within 5 business days.
mb777 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
Service Providers & Data Processors
We engage trusted third-party service providers to perform specific functions on our behalf. These include identity verification providers, payment processors (including bKash, Nagad, and banking partners), game software providers (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Microgaming, NetEnt), fraud prevention services, and IT infrastructure providers. All such providers are bound by data processing agreements that restrict them to processing your data solely on mb777's documented instructions and prohibit any secondary use of your data.
Financial Intelligence & Law Enforcement
mb777 may be required by applicable law to disclose personal data to financial intelligence units, law enforcement agencies, or regulatory authorities in Bangladesh or other relevant jurisdictions. This includes disclosures required under anti-money laundering regulations, counter-terrorism financing obligations, or in response to a valid court order or equivalent legal process. Where legally permitted to do so, mb777 will notify you of such a disclosure.
Business Transfers
In the event that mb777 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. Prior to any such transfer, we will notify registered players via their account email address and will ensure that the receiving entity commits to processing your data in a manner consistent with this Privacy Policy.
Protection of Rights
mb777 may disclose personal data where we have a good-faith belief that such disclosure is reasonably necessary to protect the rights, property, or safety of mb777, our players, or the public — for example, to investigate and prevent fraud, enforce our Terms & Conditions, or respond to credible security threats directed at the platform.
mb777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, or to resolve disputes and enforce agreements. The following retention periods apply to the principal categories of personal data we hold.
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | Anti-money laundering legal obligation |
| Financial transaction records | 5 years after transaction date | Legal obligation / audit requirements |
| Gaming & betting activity logs | 3 years after last activity | Dispute resolution / responsible gaming |
| Support communication records | 3 years after case closure | Dispute resolution / quality assurance |
| Marketing preferences & opt-in records | Until consent is withdrawn, then 1 year | Consent management / legal compliance |
| Technical & access logs | 12 months | Security monitoring / fraud prevention |
| Self-exclusion records | Minimum 5 years | Responsible gaming legal obligation |
At the end of the applicable retention period, personal data is either permanently deleted from mb777's systems or anonymised in a manner that renders it impossible to re-identify the individual concerned. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
As a player registered on the mb777 platform, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact the mb777 data team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days.
Right of Access
You have the right to request a copy of the personal data mb777 holds about you. We will provide a summary of all personal data categories held, the purposes for which they are processed, and the third parties with whom they have been shared. Identity verification may be required before we release data to ensure we do not disclose your information to an unauthorised third party.
Right to Rectification
If any of the personal data mb777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For data that can be updated directly in your account profile (such as email address or contact number), you may make corrections without contacting support. For identity data that has been verified through KYC, corrections must be supported by appropriate documentary evidence.
Right to Erasure
You may request that mb777 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to mb777's legal obligation to retain certain categories of data for specified periods (see Data Retention above). We will clearly explain which data can be deleted immediately and which must be retained.
Right to Restriction
You have the right to request that mb777 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are considering whether our legitimate interests override your rights. Where processing is restricted, we will continue to store your data but will not use it for any other purpose.
Right to Data Portability
For personal data that you provided to mb777 and that we process on the basis of your consent or contract performance, you have the right to receive that data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.
Right to Object
You have the right to object to mb777 processing your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring or platform analytics. Where you object, mb777 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for legal claims.
mb777 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security programme covers technical controls, organisational procedures, and staff training. Below is an overview of the primary measures in place.
Encryption
All data in transit between your device and mb777 servers is encrypted using TLS 1.3. Personal data stored at rest — including KYC documents, payment credentials, and account records — is encrypted using AES-256. Encryption keys are managed using hardware security modules (HSMs) with strict access controls and regular rotation schedules.
Access Controls
Access to personal data within mb777's systems is granted on a strict need-to-know basis. All internal access is logged, monitored, and subject to periodic audit. Multi-factor authentication is mandatory for all staff with access to production systems containing player data. Privileged access reviews are conducted quarterly.
Vulnerability Management
mb777 conducts regular penetration testing of its platform infrastructure, web application, and API endpoints. Critical and high-severity vulnerabilities identified during testing are remediated within defined SLA timeframes. A responsible disclosure programme is in place to allow external security researchers to report potential vulnerabilities.
Incident Response
mb777 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to players, mb777 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, describing the nature of the incident, the data categories affected, and the remediation steps being taken.
mb777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify registered players by sending an email to the address associated with their account and by displaying a prominent notice on the mb777 platform upon next login.
Minor updates that do not materially affect your rights or our processing activities may be made without individual notification. The effective date displayed at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way mb777 handles your personal data, please contact us using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.
Data Privacy Contact
Email: [email protected] (use subject line: "Privacy Enquiry")
Response Time: We aim to acknowledge all privacy enquiries within 3 business days and provide a full response within 30 calendar days.
Language: All privacy communications are handled in English.
mb777 takes all privacy complaints seriously. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter through appropriate dispute resolution channels.
Questions About Your Privacy?
Our support team is available around the clock to address any questions about how mb777 handles your personal data. You can also explore our FAQ for quick answers, or review our Terms & Conditions for a full picture of your rights and obligations.