mk33 Privacy Policy — How We Protect Your Data

1. Introduction

mk33 ("we", "us", "our") is committed to protecting the privacy and security of all players who use the mk33 online casino and sports betting platform. This Privacy Policy describes how we collect, use, store, share, and protect personal information provided by or automatically collected from users of the Platform, including visitors who have not yet registered an account.

By registering an account or using the mk33 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein. If you do not agree with any part of this Privacy Policy, please discontinue use of the Platform and contact [email protected] to close your account.

2. Information We Collect

mk33 collects only the information necessary to operate the Platform, comply with applicable obligations, and provide a safe, personalised experience for players in Bangladesh. We collect information in three ways: directly from you, automatically through your use of the Platform, and from third-party sources where permitted.

Information You Provide Directly

• Registration details: full name, date of birth, email address, mobile number, and residential address. This information is required to create and verify your mk33 account.
• Identity verification documents (KYC): National Identity Card (NID), passport, or other government-issued photo identification, and proof of address. These documents are collected when required for account verification or withdrawal processing.
• Payment information: details of your payment method (e.g. your bKash or Nagad mobile number, last four digits of a card). Full card numbers are never stored by mk33 — they are processed directly by our payment providers.
• Communications: messages you send to our customer support team, feedback you submit, and any correspondence related to disputes, bonus queries, or account issues.

Information Collected Automatically

• Device and connection data: IP address, browser type and version, operating system, device model, mobile network operator (e.g. Grameenphone, Robi, Banglalink), and screen resolution. This data helps us optimise the Platform for the devices and networks used by players in Bangladesh.
• Usage data: pages visited, time spent on each page, games played, bets placed, betting markets browsed, bonus offers viewed, and session duration. This helps us improve the Platform and personalise your experience.
• Cookie and tracking data: session identifiers, analytics identifiers, and preference settings stored in your browser. See Section 9 for full cookie information.

Information from Third Parties

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks): transaction confirmation data, payment method verification status, and chargeback or dispute notifications.
• Identity verification partners: results of automated document checks and sanctions screening, used for KYC compliance. mk33 does not store raw document images beyond the period required for compliance.
• Fraud prevention and security partners: device fingerprint data and behavioural signals used to detect and prevent fraudulent activity, account takeover, and bonus abuse.

3. How We Use Your Information

mk33 uses collected information only for legitimate purposes directly related to operating and improving the Platform and fulfilling our obligations to players. The specific purposes are as follows.

• Account management: creating, verifying, and maintaining your mk33 account; processing login sessions; enabling password resets; and enforcing account security measures.
• Transaction processing: handling deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other payment methods in BDT; verifying payment sources; resolving payment disputes.
• KYC and compliance: verifying player identity and age (21+); conducting ongoing due diligence; detecting and preventing money laundering, fraud, and underage gambling in accordance with our obligations.
• Customer support: responding to account queries, deposit and withdrawal questions, bonus inquiries, game rule questions, and complaints submitted via email at [email protected].
• Responsible gaming: applying deposit limits, time-out periods, and self-exclusion measures requested by players; monitoring for signs of problem gambling behaviour; fulfilling age-gating obligations.
• Platform improvement: analysing usage patterns and game popularity data to improve the Platform's design, performance, and game selection for Bangladesh players; conducting A/B testing on non-personalised aggregated data.

4. KYC and Identity Verification

mk33 is required to verify the identity of players before processing withdrawals and in certain other circumstances (for example, when a deposit threshold is reached or when unusual account activity is detected). KYC verification is a standard practice on online gambling platforms and is designed to protect players, prevent fraud, and comply with anti-money laundering obligations.

• Acceptable KYC documents include a National Identity Card (NID), a valid passport, or another government-issued photo identification. A proof of address document (such as a recent utility bill, bank statement, or official letter) may also be requested.
• KYC documents are transmitted over HTTPS and stored with encryption. They are accessible only to authorised mk33 compliance staff and, where legally required, to regulatory or law enforcement authorities.
• Players who do not complete KYC verification when requested may have withdrawal requests suspended until verification is complete. If verification cannot be completed, the account balance will be returned to the registered payment method.

mk33 retains KYC documents for a minimum period of five years from the date of account closure, in line with standard anti-money laundering compliance practices. After this period, documents are securely deleted or anonymised.

5. Sharing Your Information

mk33 does not sell, rent, or trade your personal information to any third party for commercial purposes. We share your information only in the limited circumstances described below, and always subject to appropriate confidentiality obligations or legal requirements.

Permitted Sharing Circumstances

• Payment processors: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks, we share the minimum required transaction and identity data with each provider. Payment processors have their own privacy policies governing their use of data.
• Technology and service providers: companies that provide hosting, security, fraud detection, analytics, customer support software, or other operational services to mk33 under strict data processing agreements. These providers are contractually prohibited from using mk33 player data for any purpose beyond the service they provide to us.
• Game providers: Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Ezugi, and other game studios integrated into mk33 may receive your account identifier and session data in order to operate their games within the Platform. They do not receive your full identity or payment details.
• Legal and regulatory authorities: where mk33 is required by law, court order, or regulatory obligation to disclose player information, we will comply with such requirements. Where permitted, we will notify you of any such disclosure request.

6. Payment Data and Financial Privacy

mk33 takes the security of payment data extremely seriously. Full payment card numbers and full mobile banking credentials are never stored on mk33 servers. When you make a deposit via bKash, Nagad, Rocket, or another provider, the payment transaction is processed directly by that provider's secure gateway. mk33 receives only a transaction reference number and confirmation of payment success or failure.

mk33 retains a record of deposit amounts, withdrawal amounts, transaction dates, and payment methods used for each transaction. This transaction history is stored securely and is accessible to you from your account history page. It is used for account reconciliation, dispute resolution, and compliance purposes, and is retained for a minimum of five years in line with standard financial record-keeping requirements.

7. Cookies and Tracking Technologies

mk33 uses cookies and similar tracking technologies to operate the Platform, maintain your session while you are logged in, and understand how the Platform is used. We do not use advertising cookies or third-party marketing trackers.

Types of Cookies We Use

• Essential session cookies: these are strictly necessary for the Platform to function. They maintain your login session, remember your language preference, and keep your betting slip intact while you navigate between pages. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: we use privacy-respecting analytics tools to measure page views, session durations, and feature usage in aggregate. Analytics data is anonymised and is not linked to your account identity. It helps us understand which games and features are most popular with Bangladesh players.
• Preference cookies: these remember your display settings such as language selection (English or Bengali) and notification preferences, so you do not need to re-enter them each visit.

You can control cookie settings through your browser. Disabling essential cookies will prevent you from logging in and using core Platform features. Disabling analytics or preference cookies will not affect your ability to place bets or make transactions, but may affect the personalisation of your experience.

8. Data Retention

mk33 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply: account registration data is retained for the duration of the active account and for a minimum of five years following account closure; transaction records are retained for a minimum of five years; customer support communications are retained for three years; analytics data (anonymised) has no fixed deletion schedule as it contains no personal identifiers.

When the retention period for a data category expires, mk33 will either securely delete the data or anonymise it so that it can no longer be linked to an individual. Players who request account deletion before a mandatory retention period expires will have their account deactivated and visible profile data removed, while transaction and compliance records are retained for the legally required minimum period.

9. Your Privacy Rights

mk33 respects your rights over your personal data. You may exercise any of the following rights by contacting our support team at [email protected]. We will respond to all legitimate requests within 30 days. Some rights may be limited where mk33 has a legal obligation to retain or process the data in question.

• Right of access: you may request a copy of the personal data mk33 holds about you, including your registration details, transaction history, and any KYC documents on file.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. For registered account details such as your name or date of birth, a KYC document may be required to confirm the correct information.
• Right to erasure: you may request deletion of your personal data. Where mk33 has no legal obligation to retain the data, it will be permanently deleted within 30 days. Data subject to mandatory retention periods (e.g. transaction records) will be retained for the legally required period but will not be used for any operational purpose.
• Right to restrict processing: you may request that mk33 restrict the processing of your personal data to storage only while a dispute about its accuracy or lawful basis is resolved.
• Right to withdraw consent: where mk33 processes your data on the basis of consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please email [email protected] with the subject line "Privacy Rights Request" and include your registered name and the email address associated with your account. We may need to verify your identity before fulfilling the request.

10. Data Security

mk33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the mk33 Platform; encrypted storage of sensitive data including KYC documents and account credentials; access controls ensuring that personal data is accessible only to authorised personnel on a need-to-know basis; regular security reviews and vulnerability assessments of our Platform infrastructure.

While mk33 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that affects your personal information, mk33 will notify affected players promptly and take immediate steps to contain and remediate the breach.

11. Children and Minors

The mk33 Platform is strictly for adults aged 21 and above. mk33 does not knowingly collect personal information from any person under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will immediately delete that data, close the associated account, and refund any deposits made to the registered payment method. If you believe a minor has registered an account on mk33, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

mk33 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify registered players by email.

Your continued use of the mk33 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how your data is being protected.

13. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mk33 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6), and we take all privacy-related enquiries seriously.