Your Privacy Matters
at mcw999

This Privacy Policy is issued by the operator of the mcw999 platform, accessible at https://mcw999.bid (referred to throughout this document as "mcw999", "we", "us", or "our"). mcw999 is Bangladesh's premier online casino and sports betting platform, offering cricket betting, live casino, and slot games to adult players aged 18 and above.

For the purposes of this Privacy Policy, mcw999 acts as the data controller in respect of all personal information collected from players and visitors to the Platform. This means mcw999 determines the purposes and means by which your personal data is processed.

If you have any questions about this Privacy Policy or about how mcw999 handles your personal data, please contact us at [email protected].

mcw999 collects the following categories of personal data from players and platform visitors. All data collection is proportionate to the purpose for which it is collected.

mcw999 collects personal data through the following channels:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or updating your account profile.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, browser fingerprint, and session data. This data is collected using server logs and first-party cookies.
• Payment processors: Confirmation data (transaction reference numbers, amounts, payment method type) passed back to mcw999 by payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) upon completion of a transaction. mcw999 never receives or stores full card numbers or mobile banking credentials directly.
• KYC verification partners: Identity verification results (pass/fail, document type verified) returned by our third-party KYC service provider following a document check. The raw document images are processed by the KYC provider and are not permanently stored by mcw999 beyond the legally required retention period.
• Game providers: Aggregate game-session data (round IDs, stake amounts, return amounts, RTP outcomes) transmitted by game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to facilitate correct balance settlement and dispute resolution.

mcw999 processes your personal data for the following specific purposes. We do not use personal data for any purpose that is incompatible with these stated uses without first obtaining your explicit consent.

• Account management: Creating and maintaining your player account, authenticating your identity at login, and managing your account preferences and history.
• Transaction processing: Verifying and executing deposit and withdrawal requests, resolving payment disputes, and maintaining accurate BDT balance records.
• Identity verification (KYC): Confirming that you meet the minimum age requirement of 18 years and verifying the source of funds where required by our responsible gaming and anti-money-laundering procedures.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, unauthorised access, bonus abuse, money laundering, and the creation of multiple accounts by the same individual.
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling behaviour, enforcing player-set deposit and loss limits, and processing self-exclusion requests.
• Customer support: Responding to queries, complaints, and account issues raised through live chat, email, or WhatsApp support channels.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use the Platform, identify technical issues, and improve game selection, navigation, and performance.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign messages to players who have opted in to receive such communications. You may opt out of marketing communications at any time by contacting support.
• Legal compliance: Retaining records as required for compliance with applicable laws, and responding to lawful requests from regulatory or law enforcement authorities.

mcw999 processes personal data on the following legal bases depending on the purpose of the processing:

• Contractual necessity: Processing required to perform the contract between mcw999 and the player — including account creation, transaction processing, and customer support. Without this processing, we cannot provide the Platform service.
• Legal obligation: Processing required for compliance with applicable laws — including anti-money-laundering obligations, age verification requirements, and the retention of financial records.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and aggregate analytics, where our legitimate interests in protecting the integrity of the Platform and improving player experience do not override the privacy rights of individual players.
• Consent: Processing for direct marketing communications, where you have affirmatively opted in to receive promotional messages from mcw999. Consent for marketing can be withdrawn at any time and does not affect the lawfulness of prior processing.

mcw999 does not sell, rent, or trade personal data. We share personal data only with the following categories of third-party recipients, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa network processors, and Mastercard network processors — for the purpose of executing deposit and withdrawal transactions. These providers operate under their own privacy policies and are bound by data processing agreements with mcw999.
• KYC and identity verification providers: Third-party identity verification services used to authenticate player identity and age, and to screen against sanctions and politically exposed persons (PEP) lists as required.
• Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — who receive the minimum game-session data required to deliver live game functionality and settle outcomes correctly.
• IT infrastructure and hosting providers: Secure cloud hosting and content delivery network (CDN) providers who process data on mcw999's behalf under strict contractual data processing terms.
• Regulatory and law enforcement authorities: Where mcw999 receives a lawful, properly issued request from an authorised authority, we may be required to disclose specific player data. mcw999 will notify affected players of such disclosures where legally permitted to do so.

mcw999 uses cookies and similar first-party tracking technologies to operate the Platform. We do not use third-party advertising cookies or behavioural tracking pixels that transmit your data to external advertising networks.

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Note that disabling session and authentication cookies will impair your ability to log in to and use the Platform.

mcw999 retains personal data for as long as your account remains active and for a defined period following account closure, as set out below. Retention periods reflect the minimum necessary to fulfil the purpose for which the data was collected and to comply with applicable legal obligations.

• Account and identity data: Retained for the duration of the active account relationship, plus 5 years following permanent account closure. This retention period supports the resolution of any post-closure disputes and satisfies record-keeping obligations.
• Financial transaction records: Retained for 7 years following the date of the transaction, in line with standard financial record-keeping practices.
• KYC verification documents: Retained for 5 years following account closure or the completion of the KYC process, whichever is later.
• Support communications: Retained for 3 years following the closure of the support ticket or last interaction in the thread.
• Game session logs: Retained for 2 years from the date of each session, for the purposes of dispute resolution and regulatory compliance.
• Marketing consent records: Retained for the duration of your account relationship and for 1 year following account closure, to evidence the basis on which marketing communications were sent.

Upon the expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data derived from player activity may be retained indefinitely for internal platform analytics.

mcw999 has implemented a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• TLS 1.3 / SSL 256-bit encryption for all data transmitted between player devices and the Platform.
• AES-256 encryption for personal data stored in our databases.
• Salted password hashing — passwords are never stored or transmitted in plain text.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data, with comprehensive audit trails of all internal data access events.
• SMS one-time password (OTP) verification for logins from unrecognised devices or IP addresses.
• Regular internal security reviews and penetration testing of the Platform infrastructure.
• Secure, geographically redundant data centre hosting with physical access controls.

As a player on the mcw999 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the mcw999 support team at [email protected]. We will respond to all data rights requests within 7 business days.

• Right of access: You have the right to request a copy of all personal data that mcw999 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You may request that mcw999 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the legal basis), or where the data has been unlawfully processed. Note that this right is subject to overriding legal retention obligations — for example, we are required to retain certain financial records for a statutory period regardless of an erasure request.
• Right to restriction of processing: In certain circumstances, you may request that mcw999 restrict the processing of your personal data — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where mcw999 relies on legitimate interests as the legal basis for processing. mcw999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (for example, for direct marketing), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

The mcw999 Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data to the Platform, we will immediately close the account, delete the associated personal data, and take steps to prevent further access.

If you are a parent or guardian and believe that a minor in your care has registered an account with mcw999, please contact us immediately at [email protected]. We take underage access extremely seriously and will act on all such reports promptly. We recommend that parents and guardians make use of parental control tools and browser-level content filtering software to prevent minors from accessing online gambling platforms.

mcw999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the structure of the Platform. The effective date at the top of this document will be revised each time a material change is made.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — we will notify you by email to your registered address at least 14 days before the change takes effect. For non-material clarifications or corrections, we may update the policy without advance notice.

Your continued use of the mcw999 Platform following the publication of any amendment to this Privacy Policy constitutes your acknowledgement of, and agreement to be bound by, the updated terms. If you do not agree with any changes, you should stop using the Platform and contact our support team to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or to mcw999's handling of your personal data, please reach out through any of the following channels:

• Email: [email protected] — for formal data rights requests, data breach reports, or detailed privacy enquiries. We aim to acknowledge all emails within 24 hours and provide a substantive response within 7 business days.
• Live Chat: Available 24/7 directly on the Platform for general privacy questions and immediate account-level data concerns.
• WhatsApp: Available 10:00 AM – 11:00 PM BST (UTC+6) for privacy-related questions that require a conversational response. Contact details are shown within your logged-in account dashboard.

When submitting a data rights request by email, please include your registered mcw999 username and the email address associated with your account so that we can verify your identity before processing the request. mcw999 will not process data rights requests from unverified individuals to protect the privacy of all account holders.