Your Privacy Matters to mk77 — Here Is How We Protect It

1 Introduction

mk77 is committed to protecting the privacy of every player who uses our online casino and cricket betting platform. We understand that personal data is sensitive, and we take our responsibility to handle it carefully — and in full compliance with applicable data protection principles — very seriously.

This Policy applies to all personal data collected through the mk77 website (https://mk77.io), our customer support channels, and any other interaction you have with mk77 as a registered player or website visitor. It covers data collected in relation to account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, promotional communications, and customer support interactions.

mk77 operates primarily for players based in Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. Where we refer to "applicable law" in this Policy, we include data protection obligations that mk77 has voluntarily adopted as part of its commitment to international best practice for player privacy.

2 Personal Data We Collect

mk77 collects only the data that is necessary to operate the platform, verify player identity, process financial transactions, and maintain a safe gaming environment. The categories of personal data we collect are outlined below.

2.1 Account Registration Data

2.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering obligations and to protect players from fraud, mk77 may request one or more of the following documents:

• Government-issued National Identity Card (NID) — front and back scan or photograph.
• Valid Bangladeshi passport — data page photograph.
• Utility bill or bank statement dated within 90 days confirming residential address.
• Screenshot or confirmation of the mobile wallet account (bKash, Nagad, Rocket, or Upay) registered in the player's name.

2.3 Financial Transaction Data

When you make a deposit or request a withdrawal, mk77 records the transaction amount, payment method, mobile wallet number or bank account details (masked where possible), transaction reference numbers, and timestamps. mk77 does not store full bank card numbers on our servers.

2.4 Gameplay and Betting Activity

mk77 logs your gameplay and betting history, including games played, wager amounts, game outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

2.5 Technical and Device Data

2.6 Communications Data

When you contact our support team via live chat or email, mk77 retains a record of the correspondence. This includes the content of messages, timestamps, and any attachments you provide. These records are used to manage your query, improve support quality, and, where relevant, as evidence in dispute resolution.

3 How We Collect Your Data

mk77 collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through cookies, server logs, and analytics tools as you navigate the mk77 website. See Section 7 for full details on cookies.
• From payment providers — bKash, Nagad, Rocket, Upay, and partner banks may share transaction confirmation data with mk77 to verify deposits and process withdrawals.
• From fraud prevention services — mk77 uses third-party fraud detection tools that may flag unusual patterns based on device fingerprinting or behavioural signals. These tools do not independently identify you; they provide risk scores that our team reviews manually where necessary.
• From game providers — our technology partners such as Pragmatic Play, Evolution Gaming, NetEnt, and Ezugi may share session-level gameplay data with mk77 for settlement, dispute resolution, and responsible gaming purposes.

4 Why We Use Your Personal Data

mk77 uses your personal data for the following purposes:

5 Legal Basis for Processing

mk77 processes your personal data on one or more of the following legal bases:

• Contractual necessity — processing is required to fulfil our obligations under the Terms & Conditions you agreed to at registration. This includes account management, payment processing, and KYC verification.
• Legitimate interests — mk77 has a legitimate interest in maintaining platform security, preventing fraud, and improving our services, provided those interests do not override your fundamental privacy rights.
• Legal obligation — certain data processing is required by law, including transaction record-keeping for anti-money-laundering compliance purposes.
• Consent — for optional activities such as marketing communications, we rely on your explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

mk77 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for each purpose:

• Payment processors and mobile wallet providers — bKash, Nagad, Rocket, Upay, and partner banks receive only the transaction data required to process your deposit or withdrawal. They are bound by their own strict privacy and security obligations.
• Game technology providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session-level data to facilitate gameplay, settle wagers, and enable dispute resolution. No unnecessary personal identifiers are shared.
• Identity verification and fraud prevention services — third-party KYC and anti-fraud partners receive limited personal data (such as name, date of birth, and document images) solely to verify your identity and flag potential fraud risks.
• Legal and regulatory authorities — mk77 will disclose personal data to law enforcement or other governmental bodies where legally required to do so under applicable law, or where we believe disclosure is necessary to protect the rights, safety, or property of mk77 or its players.
• Business successors — in the event of a merger, acquisition, or asset transfer involving mk77, player data may be transferred to the acquiring entity. You will be notified prior to any such transfer, and the receiving entity will be required to honour this Policy.

7 Cookies & Tracking Technologies

mk77 uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. A cookie is a small text file placed on your device when you visit the mk77 website. Cookies do not contain executable code and cannot access other files on your device.

Types of cookies we use:

• Strictly necessary cookies — required for the platform to function. These include session authentication tokens, security tokens, and language preference cookies. These cannot be disabled without breaking core platform functionality.
• Analytics cookies — mk77 uses anonymised analytics tools to understand how players navigate the site, which pages perform well, and where users encounter difficulties. This data is aggregated and cannot be used to identify individual players.
• Functional cookies — these remember your preferences such as preferred game categories, display settings, and notification choices to improve your experience across sessions.
• Fraud prevention cookies — these help our security systems identify unusual device behaviour or access patterns that may indicate account compromise or bot activity.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using the mk77 platform. mk77 does not use third-party advertising or retargeting cookies.

8 Data Retention

mk77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

When data is no longer required, mk77 securely deletes or anonymises it so that it can no longer be associated with any individual player.

9 Your Privacy Rights

As an mk77 player, you hold the following rights over your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 10 business days.

• Right of access — you may request a copy of all personal data mk77 holds about you, along with information about how it is being used.
• Right to rectification — if any of your personal data is inaccurate or incomplete, you have the right to request a correction. For account details, you may also update basic information directly through your account settings.
• Right to erasure — you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that certain data must be retained for legal compliance reasons (see Section 8) and cannot be erased on request.
• Right to restrict processing — you may ask mk77 to temporarily halt the processing of your data while a dispute regarding its accuracy or the legitimacy of processing is resolved.
• Right to data portability — you may request that mk77 provide your personal data in a structured, machine-readable format (such as CSV) so that it can be transferred to another service provider.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support.
• Right to object — you may object to processing carried out on the basis of mk77's legitimate interests. We will assess your objection and cease the processing unless we have compelling grounds that override your interests.

10 Children's Privacy and the 21+ Rule

The mk77 platform is strictly for adults aged 21 years and above. mk77 does not knowingly collect personal data from any person under the age of 21. If we discover or are notified that a registered account belongs to a person under 21, we will immediately suspend the account, void all associated wagers, and delete the personal data of the underage individual except where retention is required for legal reporting purposes.

If you are a parent or guardian and believe that a minor in your care has registered an account with mk77, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

11 Third-Party Links and Embedded Content

The mk77 platform may contain references to our game provider partners (such as Pragmatic Play, Evolution Gaming, NetEnt, and Ezugi) or payment partners (such as bKash, Nagad, and Rocket) within informational content on the site. mk77 does not embed third-party tracking pixels, advertising networks, or social media widgets on any page of the platform.

Where game content is delivered via an embedded game frame from a licensed provider, that provider operates under their own privacy and data processing agreements. mk77 selects game providers that maintain industry-standard data protection practices. However, mk77 is not responsible for the privacy practices of third-party game studios once data leaves the mk77 platform environment.

12 Security Measures

mk77 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and mk77 servers — the same standard applied by leading Bangladeshi financial institutions.
• Encryption at rest for all sensitive database fields, including identity document data and financial records.
• One-way password hashing using a strong cryptographic algorithm — mk77 staff cannot read your password, and it is never stored in plain text.
• Two-step SMS verification available to all players as an optional additional layer of account security.
• Automated fraud monitoring that continuously reviews login patterns, transaction behaviour, and device characteristics to detect and respond to suspicious activity.
• Role-based access controls ensuring that mk77 staff can only access the data necessary for their specific job function. All data access is logged and audited.
• Regular security reviews conducted by our internal technical team to identify and remediate potential vulnerabilities.

13 Updates to This Privacy Policy

mk77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes, we will notify registered players via the email address on file at least 14 days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Policy periodically so that you remain informed about how your data is being handled. Your continued use of the mk77 platform following the effective date of any update constitutes your acceptance of the revised Policy.

Prior versions of this Policy are available on request by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mk77 handles your personal data, please contact our dedicated Privacy team. We aim to respond to all privacy-related enquiries within 5 business days.

Email: [email protected]

Please use the subject line "Privacy Policy Enquiry" and include your registered username to help us locate your account and respond as efficiently as possible.

For formal data subject access requests (see Section 9), please use the subject line "Privacy Rights Request". We will acknowledge your request within 2 business days and complete the response within 10 business days.