mb777 Privacy Policy — How We Protect Your Data

mb777 ("we", "us", "the Platform") is committed to safeguarding the privacy of all individuals who use our website at mb777.lat and the associated services (collectively, the "Service"). This Privacy Policy ("Policy") explains how we collect, use, disclose, and protect your personal data when you interact with the Service. It also sets out your rights in relation to your personal data and how you can exercise them.

By registering an account or otherwise using the Service, you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data as described herein. If you do not agree, please do not use the Service. This Policy should be read alongside our Terms and Conditions, which govern the use of the Service more broadly.

mb777 uses the personal data we collect for the following purposes. We process your data only where we have a legitimate reason to do so:

• Account management: creating and maintaining your mb777 account, authenticating your identity on login, processing password resets, and sending essential account notifications such as deposit confirmations and security alerts.
• Service delivery: processing your bets, facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card providers, crediting winnings, and resolving transaction disputes.
• Regulatory compliance: conducting KYC identity checks, anti-money laundering monitoring, responsible gaming assessments, age verification, and cooperating with law enforcement or regulators where required by applicable law.
• Service improvement: analysing aggregated, anonymised usage patterns to improve game performance, page load times, customer support quality, and overall platform stability. Individually identifying data is not used for this purpose.
• Marketing communications: sending you promotional offers, bonus notifications, and event updates (such as BPL season promotions and Eid special offers) where you have opted in to marketing. You may opt out at any time by contacting [email protected].
• Fraud and security: detecting and preventing fraudulent activity, account takeovers, bonus abuse, money laundering, and use of prohibited software or automated betting tools. This processing is essential to protect the integrity of the Service and the interests of all players.

mb777 does not sell your personal data to any third party. We may share your data with the following categories of recipients strictly on a need-to-know basis:

• Payment processors and financial institutions: including bKash, Nagad, Rocket, Upay, and card acquiring banks, to the extent required to process your deposits and withdrawals. These partners process your financial data under their own privacy policies and PCI-DSS compliance obligations.
• Game software providers: including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and Microgaming, who receive session data needed to run their games within the mb777 platform. These providers are contractually prohibited from using your data for any purpose outside game delivery.
• Regulatory and law enforcement authorities: where mb777 is required by applicable law, court order, or regulatory instruction to disclose personal data. We will disclose only the minimum information strictly required to comply with the relevant obligation.
• Technical service providers: hosting, infrastructure, analytics, and customer support platforms that process data on mb777's behalf under strict data processing agreements. These processors are not permitted to use your data for their own purposes.

mb777 does not transfer your personal data outside your jurisdiction without ensuring appropriate safeguards are in place, such as contractual data protection clauses or equivalent protections recognised under applicable data protection law.

mb777 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include: SSL/TLS encryption for all data in transit; encrypted storage of sensitive personal data at rest; strict internal access controls ensuring that only authorised personnel can access personal data on a need-to-know basis; regular security assessments and penetration testing of our systems; and multi-factor authentication for administrative access to data systems.

Despite these measures, no internet transmission or electronic storage system is completely secure. mb777 cannot guarantee absolute security of your data. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, mb777 will notify affected users without undue delay and take all steps reasonably available to mitigate the impact of the breach.

Subject to applicable law, you have the following rights in relation to the personal data mb777 holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your verified request:

• Right of access: you may request a copy of all personal data mb777 holds about you, together with information about how it is used and with whom it has been shared.
• Right to rectification: if any personal data mb777 holds about you is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations.
• Right to restriction of processing: in certain circumstances you may request that mb777 restrict the processing of your data — for example, while a rectification request is being investigated or while you contest the lawfulness of processing.
• Right to data portability: where processing is based on your consent or on a contract, and is carried out by automated means, you may request a machine-readable copy of the personal data you provided to mb777, to transfer to another service provider.
• Right to object: you have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, though mb777 may be entitled to continue processing where we can demonstrate compelling legitimate grounds that override your interests.

mb777 will not charge a fee for handling data rights requests. We may ask you to verify your identity before processing your request to protect against fraudulent access to another person's data. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

The Service is strictly intended for individuals aged 21 years and above. mb777 does not knowingly collect personal data from persons under the age of 21. If you are a parent or guardian and believe that a person under 21 in your care has registered an account or provided personal data to mb777, please contact us immediately at [email protected]. Upon verification of your report, mb777 will promptly close the account and delete all associated personal data in accordance with applicable law.