mnbet Privacy Policy

Registration and Identity Data

When you create a mnbet account, we collect the following information which you provide directly:

• Full legal name as it appears on a government-issued identity document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Mobile phone number and email address (used for account verification, support, and security alerts).
• Residential address (used for identity verification and anti-money laundering compliance).
• Government-issued identity document details (National ID, passport, or equivalent) — collected during KYC verification as required under applicable obligations.

Transaction and Payment Data

When you make deposits or request withdrawals, we collect the following transaction-related data:

• Payment method details — for mobile wallet transactions (bKash, Nagad, Rocket), the registered mobile wallet number. For bank transfers, the account holder name and bank reference. We do not store full card numbers or full bank account numbers.
• Deposit amounts, withdrawal amounts, and transaction timestamps.
• Transaction reference numbers provided by the payment processor.
• Betting history, game session records, and account balance history — retained for regulatory compliance, dispute resolution, and fraud prevention purposes.

Technical and Usage Data

When you access the Platform, we automatically collect the following technical data:

• IP address, device type, operating system version, and browser type — used to detect fraud, enforce geographic restrictions, and maintain platform security.
• Session duration, pages visited, features used, and navigation patterns within the Platform — used for analytics, product improvement, and responsible gaming monitoring.
• Cookie identifiers and similar tracking technologies — see Section 5 (Cookies) for full details.

The four legal bases on which mnbet relies are:

• Contractual necessity — processing required to perform the contract between you and mnbet (e.g., account creation, payment processing, bet settlement).
• Legal obligation — processing required to comply with applicable law, including AML, KYC, and responsible gaming regulations.
• Legitimate interests — processing carried out in pursuit of mnbet's legitimate business interests (e.g., fraud prevention, platform security, analytics), provided those interests are not overridden by your fundamental rights and freedoms.
• Consent — processing carried out on the basis of your explicit, freely given consent (e.g., marketing communications, optional cookies). Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Service Providers and Data Processors

mnbet engages third-party service providers to assist in delivering the Platform and its services. These providers process personal data only on our instructions and are contractually bound to handle it securely. Categories of service providers include:

• Payment processors and mobile wallet operators (bKash, Nagad, Rocket, and banking partners) — for deposit and withdrawal processing.
• Identity verification and KYC service providers — for age and identity verification required by applicable obligations.
• Platform infrastructure and hosting providers — for secure data storage and Platform operation. All hosting is on servers protected by industry-standard security measures.

Legal and Regulatory Disclosure

mnbet may disclose personal data to regulatory bodies, law enforcement agencies, courts, or other governmental authorities where required to do so by applicable law or valid legal process (such as a court order or regulatory notice). In such cases, we will disclose only the minimum personal data necessary to comply with the legal obligation, and where legally permissible, we will notify the relevant player of the disclosure.

We use the following categories of cookies:

• Strictly necessary cookies — required for the Platform to function. These include session cookies that keep you logged in, security tokens, and cookies that remember your language preference. These cannot be disabled.
• Functional cookies — remember your preferences and settings (e.g., preferred payment method, game display settings) to provide a more personalised experience.
• Analytics cookies — collect aggregated, anonymised information about how users interact with the Platform. Used to identify popular features, diagnose technical issues, and prioritise product improvements.
• Marketing cookies — used only where you have given explicit consent, to deliver relevant promotional content and measure the effectiveness of marketing campaigns.

Our security measures include, but are not limited to:

• SSL (Secure Sockets Layer) encryption on all data transmitted between your device and the mnbet Platform, ensuring that personal and financial information cannot be intercepted in transit.
• Encrypted storage of sensitive personal data, including identity documents and payment references, using industry-standard encryption algorithms.
• Access controls restricting internal access to personal data to only those mnbet personnel who require it to perform their specific job functions, governed by role-based access management policies.
• Regular security assessments and penetration testing of Platform infrastructure to identify and address vulnerabilities before they can be exploited.

Your rights include:

• Right of access — you may request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to rectification — you may request that inaccurate or incomplete personal data we hold about you be corrected or completed.
• Right to erasure — you may request deletion of personal data we hold about you where there is no overriding lawful basis to retain it.
• Right to restriction — you may request that we restrict the processing of your personal data in certain circumstances (e.g., while a rectification request is being assessed).
• Right to data portability — where processing is based on your consent or a contract, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object — you may object to the processing of your personal data where it is carried out on the basis of legitimate interests, including profiling for direct marketing purposes.