mm71 Privacy Policy — How We Protect Your Personal Data

1 Who We Are

mm71 is an online betting and gaming platform operating at mm71.io, serving players in Bangladesh with cricket betting, live casino, slots, crash games, and other sports wagering products. For the purposes of this Privacy Policy, mm71 is the data controller responsible for the personal data you provide to us when using our platform.

We are committed to handling your personal data responsibly, lawfully, and in a manner that respects your privacy. This Policy applies to all personal data collected through the mm71 website, mobile browser interface, and any communications you have with our support team.

If you have any questions about our data practices or wish to exercise your data rights, you may contact us at any time using the details provided in Section 15 of this Policy.

2 Data We Collect

mm71 collects personal data in three main ways: data you provide directly, data generated automatically through your use of the platform, and data received from third-party service providers. The categories of personal data we collect are set out in the table below.

Category	Examples	How Collected
Identity Data	Full name, date of birth, gender, nationality, government-issued ID number	Provided by you during registration and KYC verification
Contact Data	Email address, phone number, residential address	Provided by you during registration or account update
Financial Data	Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction history, deposit and withdrawal amounts in ৳	Generated automatically via deposit and withdrawal activity
Technical Data	IP address, browser type and version, device type, operating system, screen resolution, session duration	Collected automatically via server logs and analytics
Behavioural Data	Games played, bets placed, bet amounts, win/loss history, time spent on platform, pages visited	Generated automatically through your platform activity
Communications Data	Support chat transcripts, emails sent to [email protected], feedback and survey responses	Provided by you when contacting support
Verification Documents	Copies of National ID (NID), passport, utility bills, bank statements submitted for KYC	Provided by you during identity verification

3 How We Use Your Data

mm71 uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal data are as follows:

• Account management: To create and maintain your mm71 player account, authenticate your identity at login, and manage your account settings and preferences.
• Identity verification: To verify that you meet the eligibility criteria for using mm71, including age verification (21+) and Know Your Customer (KYC) compliance checks.
• Transaction processing: To process deposits and withdrawals in Bangladeshi Taka (৳) through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank transfer), and to maintain accurate financial records.
• Platform operation: To deliver the betting, gaming, and casino products available on mm71, including live cricket betting on BPL and other tournaments, slots, crash games, and live casino tables.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities.
• Responsible gaming: To monitor player behaviour for signs of problem gambling and to administer responsible gaming tools including deposit limits, session timers, cooling-off periods, and self-exclusion.
• Legal compliance: To comply with applicable anti-money laundering (AML) requirements, data retention obligations, and any lawful requests from competent authorities.
• Customer support: To respond to your queries, resolve disputes, and provide technical assistance through our 24/7 support team.
• Service improvement: To analyse aggregated, anonymised usage data to improve platform performance, game offerings, user interface design, and overall player experience.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal promotions (such as BPL season offers, Eid promotions, or Pohela Boishakh specials) where you have given consent or where permitted under applicable law. You may opt out at any time — see Section 12.

4 Legal Basis for Processing

mm71 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform our contract with you — specifically, to operate your betting account, process transactions, and deliver gaming services.
• Legal obligation: Processing that is required to comply with applicable laws, including identity verification, AML reporting, and financial record-keeping obligations.
• Legitimate interests: Processing undertaken to pursue mm71's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, and aggregated analytics for service improvement.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to direct marketing communications. You may withdraw consent at any time by contacting [email protected], without any negative consequence to your account or gameplay.

Where mm71 relies on legitimate interests as the legal basis for a processing activity, we have carried out a balancing assessment to ensure that our interests do not outweigh your fundamental privacy rights. You have the right to object to processing based on legitimate interests — see Section 9.

5 Data Sharing & Disclosure

mm71 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: We share financial transaction data with payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) to facilitate deposits and withdrawals. These partners process data under their own privacy policies and are independently regulated.
• Identity verification providers: We use third-party KYC and age-verification services to confirm player identity and age. These providers receive identity documents and personal data only for the purpose of completing verification checks.
• Game studios and content providers: When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe, technical data (such as a session token and game result data) is shared with the relevant studio to enable gameplay and resolve game disputes.
• Fraud prevention and analytics services: Anonymised or pseudonymised technical and behavioural data may be shared with fraud-detection and analytics platform providers for the purpose of detecting suspicious activity and improving platform performance.
• Legal and regulatory authorities: mm71 will disclose personal data to competent legal and regulatory authorities where required to do so by law, court order, or other lawful process. We will notify you of such a disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of mm71's business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance where reasonably practicable.

6 Cookies & Tracking Technologies

mm71 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. The types of cookies we use are as follows:

• Essential cookies: These cookies are necessary for the platform to function correctly. They enable core features such as user authentication, session management, and security. You cannot opt out of essential cookies while using the mm71 platform.
• Functional cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience. They do not track your browsing activity on other websites.
• Analytics cookies: These cookies collect anonymised data about how users navigate the mm71 platform, which pages are most visited, and where users encounter errors. This information helps us improve platform usability and performance.
• Marketing cookies: With your consent, these cookies track your interaction with mm71 promotions and may be used to deliver personalised offers. You may withdraw consent for marketing cookies at any time via your browser settings or by contacting our support team.

You can control cookie settings through your browser's privacy or settings menu. Please note that disabling certain cookies may affect the functionality of the mm71 platform. Detailed information about the specific cookies in use is available on request from our support team.

7 Data Retention

mm71 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a period of five years after account closure, in line with standard financial services record-keeping practices.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in compliance with anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years from the date of verification, or such longer period as may be required by applicable law.
• Customer support communications: Retained for three years from the date of each communication, unless an ongoing dispute or legal matter requires a longer retention period.
• Behavioural and analytics data: Aggregated analytics data is retained indefinitely in anonymised form. Individual-level behavioural data linked to your account is retained for the duration of your account and deleted or anonymised within 12 months of account closure.
• Marketing preferences and consent records: Retained for the duration of your account and for two years after account closure, to demonstrate compliance with consent requirements.

When personal data is no longer required, mm71 will securely delete or anonymise it in a manner that prevents reconstruction of the original data. You may request early deletion of your personal data in accordance with your rights described in Section 9, subject to any applicable legal retention obligations that override your deletion request.

8 Data Security

mm71 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and mm71 servers is encrypted using 256-bit SSL/TLS protocols. This applies to all platform pages, including login, deposit, and withdrawal flows.
• Encryption at rest: Sensitive personal data stored in mm71 databases is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to systems containing personal data is restricted to authorised mm71 personnel on a strict need-to-know basis. All access is logged and regularly audited.
• Security monitoring: mm71 operates continuous intrusion-detection and security-monitoring systems. Anomalous activity triggers automated alerts and a structured incident response process.
• Penetration testing: mm71 engages independent security professionals to conduct regular penetration tests on its platform infrastructure and applications.
• Staff training: All mm71 staff who handle personal data receive mandatory data protection and security awareness training on appointment and at regular intervals thereafter.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, mm71 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

9 Your Data Rights

As an mm71 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your account details and a description of the right you wish to exercise. We will respond within 30 days of receiving your request.

• Right of access: You have the right to request a copy of the personal data that mm71 holds about you. We will provide this in a clear, structured format free of charge.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update certain data (such as your contact details) directly via your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that certain data may be retained to comply with legal obligations even after a deletion request.
• Right to restrict processing: You have the right to request that mm71 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider, where technically feasible.
• Right to object: You have the right to object to processing of your personal data where mm71 relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where mm71 processes your data on the basis of consent (primarily for marketing), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

mm71 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable administrative fee or decline to act on the request, and we will inform you of our reasoning.

10 Children's Privacy

The mm71 platform is strictly intended for adults aged 21 years and above. mm71 does not knowingly collect, process, or retain personal data from any person under the age of 21. This is not simply a legal requirement — it reflects mm71's genuine commitment to preventing underage gambling.

If mm71 becomes aware or has reasonable grounds to suspect that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete the personal data concerned, and refund any deposits made during the period, subject to verification. If you are a parent or guardian and believe your child has created an mm71 account, please contact us immediately at [email protected] and we will take prompt action.

Age verification checks are a mandatory part of the mm71 registration and KYC process. Players who cannot satisfy our age verification requirements will not be permitted to access real-money features of the platform.

11 Third-Party Links & Services

The mm71 platform may contain references to third-party game studios, payment networks, and service providers whose products are integrated into our platform. Where such third-party services are accessed through mm71, your interaction with those services may be subject to the privacy policies of the respective third party.

mm71 is not responsible for the privacy practices of third-party game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe, or payment networks such as Visa and Mastercard. We encourage you to read the privacy policies of any third-party service you interact with. mm71's Privacy Policy governs only the data we directly collect and control.

mm71 does not include external links to unrelated third-party websites on our platform. Any integration with a third-party service is strictly for the purpose of delivering our core betting and gaming products to players in Bangladesh and is subject to contractual data-protection obligations.

12 Marketing Communications

With your consent, mm71 may send you promotional communications about new games, deposit bonuses, seasonal promotions (BPL, IPL, T20 World Cup, Eid, Pohela Boishakh, Victory Day specials), and other offers relevant to your interests as an mm71 player in Bangladesh.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from mm71.
• Updating your communication preferences in your account settings dashboard.
• Contacting our support team at [email protected] with a request to unsubscribe.

Please allow up to 5 business days for your opt-out request to take effect across all communication channels. After opting out of marketing, you will still receive essential transactional communications related to your account — such as deposit confirmations, withdrawal notifications, security alerts, and support responses — as these are necessary for the operation of your account and cannot be disabled.

mm71 does not send unsolicited SMS marketing messages. Any SMS messages sent by mm71 are transactional in nature (such as one-time password delivery or deposit confirmation) and are sent only when triggered by your own account activity.

13 International Data Transfers

mm71 operates as an international online platform. In the course of providing our services to players in Bangladesh, your personal data may be processed by systems and personnel located in countries outside Bangladesh. This includes data centres, cloud infrastructure providers, and the headquarters of certain third-party game studios and payment processors with whom mm71 works.

Wherever personal data is transferred outside Bangladesh, mm71 takes steps to ensure that adequate safeguards are in place to protect your data to a standard consistent with this Privacy Policy. These safeguards may include:

• Contractual clauses that bind the recipient to data protection standards consistent with this Policy.
• Transfers to recipients in countries that maintain data protection standards recognised as adequate for the purposes of international data transfer.
• Technical safeguards including encryption of data in transit and at rest, regardless of where it is stored.

If you would like more information about the specific safeguards applied to any particular international data transfer, please contact us at [email protected].

14 Changes to This Privacy Policy

mm71 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will notify registered players by email or via a prominent notice on the mm71 platform at least 14 days before the changes take effect, where reasonably practicable.

Minor changes — such as clarifications, formatting corrections, or updates that do not affect your rights or our core data practices — may be made without specific notification. The "Last Revised" date at the top of this Policy will always reflect when the most recent update was made.

Continued use of the mm71 platform after the revised Privacy Policy has taken effect constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should stop using the platform and contact our support team to discuss your options, including account closure and data deletion.

We encourage you to review this Privacy Policy periodically. Archived versions of previous policies are available on request from [email protected].

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or mm71's data practices, please contact our support team using the details below. We are committed to handling all privacy-related enquiries promptly and professionally.

• Support Email: [email protected] (plain text — not a clickable link)
• Response Time: Privacy enquiries are typically acknowledged within 24 hours and resolved within 30 days
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Language: Support is provided in English

For data rights requests (access, rectification, erasure, portability, objection), please include your registered account email address, a description of the right you wish to exercise, and any supporting information. We may need to verify your identity before processing the request to ensure we are acting on the instructions of the correct account holder.

For questions relating to responsible gaming, self-exclusion, or deposit limits, please visit our Responsible Gaming page. For general account and platform questions, visit our FAQ page.