m71a8 Privacy Policy

1 Data We Collect

m71a8 collects personal data through several channels: during the account registration process, through your ongoing use of the platform, via our payment processing partners, and through automated technical means such as cookies and server logs. The categories of data we collect are described below.

1.1 Identity & Contact Data

When you create a player account on m71a8, we collect the following identity and contact information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for age verification — you must be 18 or older)
• Email address
• Mobile phone number (Bangladesh-registered preferred, used for SMS verification)
• Residential address, including district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh)
• National Identity Card (NID) number or passport number, collected during KYC verification

1.2 Financial & Transaction Data

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partnered bank channels, we collect and retain the following financial data:

• Mobile financial service (MFS) account numbers associated with your bKash, Nagad, or Rocket account
• Bank account details where bank transfer is used as a payment channel
• Transaction IDs, deposit amounts (in BDT, ৳), withdrawal amounts, timestamps, and processing status
• Records of bonuses credited, wagering activity, and net gaming balances

We do not store card numbers, CVV codes, or full payment credentials for Visa or Mastercard payments. All payment processing involving third-party gateways is handled via encrypted tokenisation on the provider's infrastructure.

1.3 Technical & Usage Data

When you access m71a8.app, our servers and analytics systems automatically record the following technical data:

• IP address and approximate geographic location (city/region level, not GPS coordinates)
• Device type, operating system, and browser version
• Session start and end times, pages visited, and features interacted with
• Referring URL (the page you visited before arriving at m71a8.app)
• Error logs and crash reports

1.4 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and the outcome of any resolution. This data is used to improve service quality and to maintain an audit trail for dispute resolution.

2 How We Use Your Data

m71a8 processes your personal data only for legitimate, clearly defined purposes. We do not sell your personal data to third parties. The table below summarises the primary purposes for which we use your data and the legal basis for each:

Purpose	Data Used	Legal Basis
Account registration & identity verification	Identity, contact, KYC documents	Contractual necessity
Processing deposits & withdrawals (bKash, Nagad, Rocket)	Financial & transaction data	Contractual necessity
Age verification (18+ compliance)	Date of birth, NID/passport	Legal obligation
Fraud prevention & anti-money-laundering (AML)	All data categories	Legal obligation / legitimate interest
Responsible gaming monitoring	Usage data, transaction history	Legal obligation / legitimate interest
Customer support & dispute resolution	Communications, transaction data	Contractual necessity / legitimate interest
Platform improvement & analytics	Technical & usage data (anonymised)	Legitimate interest
Promotional communications & bonus offers	Contact data, usage patterns	Consent (opt-in required)
Legal compliance & regulatory reporting	All data categories as required	Legal obligation

2.1 Marketing Communications

m71a8 will only send you promotional emails, SMS messages, or in-platform notifications about bonus offers, seasonal promotions (such as Eid specials, BPL season promotions, Pohela Boishakh campaigns, or Independence Day offers), and new game releases if you have explicitly opted in to marketing communications during registration or through your account settings. You may withdraw your consent at any time by updating your notification preferences in the account settings panel or by contacting [email protected].

2.2 Automated Decision-Making

m71a8 uses automated systems for fraud detection, responsible gaming monitoring, and bonus eligibility assessment. These systems may result in automated decisions such as temporary account restrictions, deposit limit flags, or bonus suspension. Where an automated decision materially affects your account, you have the right to request human review of that decision by contacting our support team.

3 Data Sharing & Disclosure

m71a8 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

3.1 Payment Processing Partners

To facilitate deposits and withdrawals, we share necessary transaction data with our payment processing partners, including the operators of bKash, Nagad, Rocket, and Upay integrations. These partners receive only the minimum data required to execute the transaction (typically: your registered MFS number, transaction amount in BDT, and a platform-generated reference ID). They are contractually prohibited from using this data for any purpose other than processing the specific transaction.

3.2 Game Technology Providers

m71a8's casino and sports betting products are powered by third-party software providers including Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and Spribe. These providers receive anonymised session data and game outcome records necessary to deliver fair, real-time gameplay. Personal identity data is not shared with game providers.

3.3 Legal & Regulatory Disclosure

m71a8 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when:

• Required to do so by applicable law, court order, or mandatory regulatory reporting obligation
• Necessary to investigate, prevent, or take action against suspected fraud, money laundering, or other illegal activity
• Required to protect the rights, property, or safety of m71a8, its players, or the public

We will notify you of any such disclosure to the extent we are legally permitted to do so.

3.4 Business Transfers

In the event that m71a8 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players via email and on-platform notification at least 30 days before any such transfer takes place, and you will have the option to request account closure and data deletion before the transfer is finalised.

4 Cookies & Tracking

m71a8 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and understand how players interact with our services. This section explains what cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device on subsequent visits, maintain your session while you are logged in, and store lightweight preference data. Cookies do not give us access to your device beyond what you explicitly provide.

4.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Maintain your login session, secure your account, prevent cross-site request forgery (CSRF). Cannot be disabled without breaking platform functionality.	Session / up to 30 days
Preference Cookies	Remember your language preference, odds format, and notification settings.	Up to 12 months
Analytics Cookies	Collect anonymised data on page visits, session duration, and feature usage to help us improve the platform. No personally identifiable information is included.	Up to 24 months
Fraud Prevention Cookies	Detect unusual login patterns, identify bot activity, and flag potentially fraudulent sessions.	Up to 90 days

4.3 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies via their privacy or security settings menus. Please note that disabling essential cookies will prevent you from logging in to your m71a8 account and using core platform features. Disabling analytics cookies will not affect your ability to play or bet.

5 Data Security

m71a8 implements a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
• Encrypted data storage for all sensitive fields (passwords are hashed using bcrypt with a high cost factor; they are never stored in plain text)
• Two-factor authentication (2FA) available for all player accounts via SMS OTP
• IP allowlisting and anomaly detection for account login events
• Regular third-party penetration testing of our web infrastructure
• Strict internal access controls — only authorised m71a8 personnel with a verified business need can access player data, and all such access is logged
• Secure data centres with physical access controls, fire suppression, and redundant power systems

5.1 Data Breach Response

In the unlikely event of a data breach that poses a risk to your rights or freedoms, m71a8 will notify affected players within 72 hours of becoming aware of the breach. Notification will be sent to the email address registered on your account and, where appropriate, displayed as a platform-wide alert. The notification will include: the nature of the breach, the categories of data affected, the likely consequences, and the steps we have taken or are taking to address the breach and mitigate its impact.

6 Data Retention

m71a8 retains your personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

• Active account data (identity, contact, financial): Retained for the duration of your account and for 5 years after account closure, in compliance with anti-money-laundering record-keeping requirements.
• Transaction records (deposits, withdrawals, bets): Retained for 7 years after the transaction date for financial audit and legal compliance purposes.
• KYC verification documents: Retained for 5 years after account closure or the date of the last transaction, whichever is later.
• Customer support communications: Retained for 3 years after the date of the interaction.
• Analytics data (anonymised): Retained indefinitely in aggregated, non-identifiable form.
• Marketing consent records: Retained for the duration of your opt-in consent, plus 2 years after withdrawal of consent.

After the applicable retention period expires, your data is securely deleted or anonymised. You may request earlier deletion under the circumstances described in the "Your Privacy Rights" section below.

7 Your Privacy Rights

As a player on m71a8, you have the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our Data Protection Officer at [email protected] with a clear description of your request. We will respond within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of all personal data we hold about you. Upon receipt of a verified access request, we will provide a structured summary of your data in a readable format within 30 days.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For name corrections or date-of-birth amendments, we may require supporting documentation (such as a government-issued ID) to verify the change.

7.3 Right to Erasure

You may request deletion of your personal data ("right to be forgotten") where:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds

Please note that this right is subject to our legal obligations to retain certain data for the periods described in Section 6. We cannot delete transaction records, KYC documents, or AML-related records that we are legally required to retain, even upon request.

7.4 Right to Restrict Processing

You may request that we restrict (pause) processing of your personal data in certain circumstances, such as while a rectification request is pending, or while you contest the basis for processing.

7.5 Right to Data Portability

Where we process your data on the basis of consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format (such as JSON or CSV) for transfer to another service provider.

7.6 Right to Object

You may object to processing of your personal data where we rely on legitimate interests as the legal basis. You have an absolute right to object to processing for direct marketing purposes at any time.

7.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

8 Contact & DPO

m71a8 takes data protection seriously and has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us using the details below.

When submitting a data request, please include your registered email address and, where applicable, the last four digits of the mobile number linked to your bKash or Nagad account so we can verify your identity before processing the request. We will not act on data requests from unverified individuals to protect against fraudulent requests by third parties.

8.1 Updates to This Policy

m71a8 may update this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable laws. We will notify registered players of material changes via email and on-platform notification at least 14 days before the revised Policy takes effect. The "Last updated" date at the top of this document will reflect the date of the most recent revision. We encourage you to review this Policy regularly to stay informed about how we protect your data.