mk33 Privacy Policy — How We Protect Your Data

1 Who We Are

mk33 is an online betting and casino platform accessible at mk33.io, serving players primarily based in Bangladesh. When this Privacy Policy refers to "mk33", "we", "us" or "our", it refers to the mk33 platform and the team responsible for operating it. When it refers to "you", "your" or "the Player", it means any individual who visits, registers on, or uses any part of the mk33 platform.

mk33 acts as the data controller in respect of the personal information collected through the platform. This means we determine the purposes and means by which personal data is processed, and we are responsible for ensuring that processing is carried out in accordance with the principles set out in this Privacy Policy.

For all privacy-related enquiries, data rights requests, or questions about this Policy, you may contact our support team at [email protected]. All communications are handled in English, 24 hours a day, seven days a week, with a target response time of one hour for standard queries.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected, processed and stored by mk33 in connection with the following activities:

• Registration and account creation on the mk33 platform.
• Use of any mk33 product or service, including sports betting, live cricket betting, casino games, slots, crash games, and the Super Wheel.
• Deposits and withdrawals processed via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank and other accepted payment channels.
• Communications you send to mk33, including support requests, dispute submissions and promotional opt-ins.
• Your browsing activity on the mk33 website and mobile interface, including data collected through cookies and analytics tools.
• Identity and payment verification carried out as part of our Know Your Customer (KYC) process.

This Policy does not cover the data practices of third-party game providers (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming or Spribe) or third-party payment service providers. Where mk33 shares your data with these parties for the purpose of delivering services, this is described in Section 7 of this Policy. For their own independent data practices, please refer to the respective provider's privacy documentation.

3 Personal Data We Collect

mk33 collects the following categories of personal data in the course of providing its services to players in Bangladesh:

3.1 Identity Data

Full legal name, date of birth, gender, and copies of government-issued identification documents such as your National Identity Card (NID), passport or birth certificate, collected as part of KYC verification.

3.2 Contact Data

Email address, mobile phone number, and residential address in Bangladesh, including division, district, upazila and postal code.

3.3 Account Data

Your mk33 username, hashed password, account creation date, login history (timestamp and IP address), and account status (active, suspended, self-excluded).

3.4 Financial Data

Payment method details used for deposits and withdrawals, including your bKash, Nagad or Rocket mobile wallet number, bank account details for direct bank transfers, transaction reference numbers, deposit and withdrawal amounts denominated in BDT, and transaction timestamps.

3.5 Gaming and Betting Data

Records of all bets placed, games played, wagering amounts, winnings and losses, bonus credits awarded and redeemed, and session duration logs. This data is retained for responsible gaming, dispute resolution and audit purposes.

3.6 Technical and Usage Data

IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited on the mk33 platform, time spent on each page, and error logs generated during your session.

3.7 Communications Data

The content of any messages you send to mk33 support, including support tickets, live chat transcripts, email correspondence, and formal dispute or complaint submissions.

4 How We Collect Your Data

mk33 collects personal data through the following channels:

4.1 Direct Collection

You provide data directly to mk33 when you: complete the registration form; undergo KYC verification by uploading identity documents; make a deposit or request a withdrawal; contact customer support; opt in to a promotional offer; or complete any other form or interaction on the mk33 platform.

4.2 Automated Collection

When you access the mk33 website or mobile interface, our servers automatically collect technical and usage data including your IP address, device identifiers and browsing behaviour. This data is collected through server logs, cookies, pixel tags and similar tracking technologies described in Section 8.

4.3 Third-Party Sources

In limited circumstances, mk33 may receive data about you from third-party sources, including: payment providers (confirming transaction status and your ownership of a payment method); identity verification services (cross-referencing NID or passport data during KYC); fraud prevention databases (checking whether your details are flagged for known fraudulent activity); and responsible gaming databases maintained to enforce self-exclusion requests across participating operators.

5 How We Use Your Data

mk33 uses the personal data it collects for the following specific purposes:

• Account Registration and Management: To create and maintain your mk33 account, verify your identity, and manage your account settings and preferences.
• Service Delivery: To process bets, settle winnings, operate casino and slot games, and provide access to all mk33 products available to players in Bangladesh.
• Payment Processing: To execute deposits and withdrawals via bKash, Nagad, Rocket, Upay and Bangladeshi banks, and to maintain accurate financial records of all transactions in BDT.
• KYC and Identity Verification: To verify that you are who you say you are, that you are at least 21 years of age, and that your payment methods are registered in your own name.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent activity, money laundering, multi-accounting, and other forms of abuse on the mk33 platform.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion requests, apply deposit and loss limits, and send session time reminders as set by you in your account settings.
• Customer Support: To respond to your enquiries, process complaints and disputes, and improve the quality of our support service.
• Promotions and Marketing: Where you have opted in, to send you information about mk33 promotions relevant to Bangladesh players, including BPL season bonuses, Eid offers and Pohela Boishakh specials. You may opt out of marketing communications at any time by contacting [email protected].
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the design, performance and content of the mk33 platform.
• Legal Compliance: To comply with applicable laws, regulatory requirements and court orders, including the retention of financial transaction records and the reporting of suspicious activity to relevant authorities.

6 Legal Basis for Processing

mk33 processes your personal data on the following legal bases:

• Contractual Necessity: The majority of data processing by mk33 is necessary to perform the contract between mk33 and you as a registered player — specifically, to operate your account, process bets and transactions, and deliver the services you have signed up for.
• Legal Obligation: mk33 is required to collect and retain certain categories of data to comply with anti-money-laundering (AML) obligations, responsible gaming requirements, and financial record-keeping duties. This processing is mandatory and cannot be refused by the Player.
• Legitimate Interests: mk33 processes certain technical and usage data on the basis of its legitimate interests in operating a secure, functional and commercially viable betting platform. This includes fraud detection, platform analytics and security monitoring. We apply a balancing test to ensure these interests do not override your fundamental privacy rights.
• Consent: Where mk33 sends you direct marketing communications about promotions and offers, this is done only on the basis of your prior consent. You may withdraw this consent at any time by contacting [email protected], and withdrawal of consent will not affect the lawfulness of any processing carried out before withdrawal.

7 Data Sharing and Third Parties

mk33 does not sell your personal data. We share your data only in the following limited and controlled circumstances:

7.1 Payment Processors

When you make a deposit or request a withdrawal, mk33 shares the minimum necessary transaction and identity data with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank or BRAC Bank) to execute the transaction. These providers process your data in accordance with their own privacy policies and applicable financial regulations.

7.2 Game Providers

Third-party game studios (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming and Spribe) receive session data necessary to deliver and log game outcomes. This typically includes a player session token and bet/win values. Game providers do not receive your full personal profile or financial account details.

7.3 Identity and KYC Verification Services

mk33 may use third-party identity verification services to cross-check documents submitted during KYC. These services receive the identity documents and data you submit and return a verification result. They are contractually prohibited from using your data for any purpose other than verification.

7.4 Fraud Prevention and AML Services

To protect the integrity of the mk33 platform and comply with anti-money-laundering obligations, mk33 may share limited account and transaction data with fraud prevention and AML screening services. Where suspicious activity is identified, mk33 may be legally required to disclose relevant data to law enforcement agencies or financial intelligence authorities without prior notice to the Player.

7.5 Legal Authorities

mk33 will disclose personal data to competent legal authorities, courts or regulators where required to do so by law, court order, or lawful regulatory directive. In such cases, mk33 will disclose only the minimum data required by the relevant order or request.

7.6 Business Transfers

In the event that mk33 undergoes a business reorganisation, merger or acquisition, player data may be transferred to the acquiring entity as part of that transaction. mk33 will provide reasonable notice to active players in such an event and will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.

8 Cookies and Tracking Technologies

mk33 uses cookies and similar tracking technologies on its website and mobile interface to ensure platform functionality, maintain session security, and understand how players navigate and use the platform.

8.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. They allow the website to remember your actions and preferences over a period of time so you do not have to re-enter them whenever you return to the site or browse from one page to another.

8.2 Types of Cookies Used by mk33

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using core mk33 features. Disabling analytics cookies will not affect your ability to use the platform but will limit mk33's ability to improve the user experience over time. Instructions for managing cookies in popular browsers are available in each browser's help documentation.

9 Data Retention

mk33 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention schedule applies:

When a retention period expires, mk33 will either securely delete the relevant data or anonymise it such that it can no longer be linked to any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and research purposes.

10 Data Security

mk33 applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and mk33 servers is encrypted using industry-standard TLS protocols. Our certificate is maintained and renewed to the highest current standard.
• Password Hashing: Your account password is never stored in plain text. mk33 uses a strong, salted cryptographic hashing algorithm to store password credentials so that even in the unlikely event of a data breach, raw passwords cannot be extracted.
• Access Controls: Personal data held by mk33 is accessible only to authorised personnel on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive regular training on data handling practices.
• Two-Factor Authentication (2FA): mk33 offers optional 2FA for player accounts to provide an additional layer of security against unauthorised login attempts.
• Intrusion Detection and Monitoring: mk33's infrastructure is monitored continuously for anomalous activity. Automated alerts are triggered on detection of unusual login patterns, large transaction volumes or other indicators of account compromise.
• Regular Security Reviews: mk33 conducts periodic security assessments of its platform infrastructure and data handling practices to identify and address vulnerabilities promptly.

11 Your Data Rights

As a player on the mk33 platform, you hold the following rights in respect of the personal data we hold about you. To exercise any of these rights, contact mk33 at [email protected] with the subject line "Data Rights Request". We will respond within five (5) business days.

• Right of Access: You have the right to request a copy of the personal data mk33 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your mk33 account settings.
• Right to Erasure: In certain circumstances, you may request that mk33 delete the personal data we hold about you. Note that this right is not absolute — we may be required to retain certain data to comply with legal obligations (for example, financial transaction records under AML rules) even after your account is closed.
• Right to Restriction of Processing: You may request that mk33 restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to mk33 in a structured, commonly used and machine-readable format, so that you can transfer it to another service provider if you wish.
• Right to Object: You have the right to object to mk33 processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of mk33's legitimate interests, subject to our ability to demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

12 Children and Minors

The mk33 platform is strictly for adults aged 21 years and above. mk33 does not knowingly collect personal data from individuals under the age of 21. The registration process requires all players to confirm that they meet the minimum age requirement, and age verification is enforced through the KYC process.

If mk33 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds to the originating payment method following a verification process.

If you believe that a minor has registered on the mk33 platform, please notify us immediately at [email protected] so that we can take prompt action. Protecting young people from exposure to online gambling is a shared responsibility that mk33 takes seriously.

13 Changes to This Privacy Policy

mk33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform features. When we make material changes to this Policy, we will:

• Update the "Effective Date" at the top of this document.
• Notify active players via the email address registered on their mk33 account.
• Display a prominent notice on the mk33 platform for a minimum of 14 days following the change.

Your continued use of the mk33 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you must cease using the platform and may request account closure in accordance with the mk 33 Terms & Conditions.

We encourage you to review this Privacy Policy periodically, even when you have not received a notification, to stay informed about how mk33 protects your personal data. The most current version of this Policy is always available at mk33.io/privacy-policy.

14 Contact and Data Requests

For all privacy-related enquiries, data rights requests, or concerns about how mk33 handles your personal information, please contact our support team using the details below. All privacy communications are handled in English by a dedicated team member.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request – [Your Username]"
• Response Time: Within 5 business days for data rights requests; within 1 hour for general support queries
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Language: English

When submitting a data rights request, please include your registered mk33 username, the email address associated with your account, and a clear description of the request you are making. This will allow us to locate your data promptly and respond as efficiently as possible.