Privacy Policy — How mlwb Protects Your Personal Data

This Privacy Policy applies to all personal data processed by mlwb in connection with the operation of the platform available at https://mlwb.io. It covers all players who access the platform from Bangladesh or any other jurisdiction, and applies to all mlwb services including sports betting, live casino, slots, crash games, virtual sports, and any future products made available through the platform.

By registering an account on mlwb or by continuing to use the platform after this policy has been made available, you acknowledge that you have read and understood the data practices described herein. This Privacy Policy should be read alongside the mlwb Terms & Conditions, which govern your use of the platform more broadly.

mlwb collects personal data in the following categories:

Category	Examples	Purpose
Identity Data	Full name, date of birth, gender, nationality	Account registration, identity verification, age verification (21+)
Contact Data	Email address, mobile number, residential address	Account communications, support, transaction notifications
Financial Data	bKash/Nagad/Rocket mobile number, transaction history, deposit and withdrawal records	Payment processing, fraud prevention, financial reporting
Account Activity Data	Betting history, game sessions, bonus usage, login timestamps	Platform operation, responsible gaming monitoring, dispute resolution
Verification Documents	National ID card, passport, utility bill images	Know Your Customer (KYC) compliance, fraud prevention
Technical Data	IP address, device type, browser, operating system, session duration	Platform security, fraud detection, service optimisation
Communication Data	Support chat logs, email correspondence	Customer service, dispute resolution, quality assurance

mlwb does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information except where strictly required for responsible gaming purposes (for example, self-exclusion requests), in which case such information is handled with the highest level of care and is not used for any other purpose.

mlwb collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated technical collection: Data collected automatically when you access and use the platform, including IP addresses, device identifiers, browser type, and session logs. This collection is necessary for platform security and fraud detection.
• Payment processors: Transaction confirmation data received from payment partners such as bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. mlwb does not receive or store your full mobile banking PIN or password.
• Third-party game providers: Game session data provided by studio partners such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi, limited to the game rounds played on your account and the outcomes of those rounds.
• Identity verification services: Where mlwb uses a third-party verification provider to assist with document checks, that provider may return a verification result and a confidence score. The underlying document images are not retained by the third party beyond what is required to complete the verification.

mlwb uses your personal data for the following purposes:

• Account management: Creating and maintaining your mlwb account, processing your login, and enabling you to access all platform features.
• Identity and age verification: Confirming that you are aged 21 or above and that your account details are accurate, as required before processing withdrawals above defined thresholds.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; reconciling transaction records; and investigating disputed transactions.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and maintaining records of player-requested restrictions.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, multi-accounting, money laundering, and unauthorised access. This includes automated monitoring of login patterns and transaction behaviour.
• Customer support: Responding to your support enquiries, resolving betting disputes, and providing assistance with account issues.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, stability, and feature set of the mlwb platform. No individually identifiable data is used for this purpose.
• Legal compliance: Retaining transaction records and identity documents as required by applicable anti-money laundering and financial regulations.
• Service communications: Sending you transaction confirmations, security alerts, and important account notices by email or SMS. mlwb does not send unsolicited marketing communications unless you have opted in to receive them.

mlwb processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the services set out in the mlwb Terms & Conditions, including account operation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including identity verification and transaction record retention.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Where mlwb relies on your consent — for example, to send optional promotional communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

mlwb does not sell your personal data. We share personal data only in the following strictly limited circumstances:

• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your financial transactions.
• Game studio providers: Account identifiers and session data are shared with Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt solely to deliver the games you access on the mlwb platform.
• Identity verification providers: Where a third-party KYC service is used, identity document data is shared for the sole purpose of verifying your identity. These providers are contractually bound to data security requirements and may not retain or use your data for any other purpose.
• Legal and regulatory authorities: Where mlwb is required by law or a valid legal order to disclose personal data to a government authority, law enforcement agency, or court, we will comply with such requirements. Where permitted by law, mlwb will notify you of any such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of mlwb's assets, personal data may be transferred to the successor entity. You will be notified of any such transfer and the applicable privacy terms before it takes effect.

mlwb uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, and detect fraudulent activity. The categories of cookies used are as follows:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect your account. These cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Used to remember your preferences such as language settings and display options across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform, which pages are visited most frequently, and where users encounter errors. This data helps mlwb improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and unusual account behaviour.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the mlwb platform, including the ability to log in and place bets.

mlwb implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and mlwb's servers.
• Encrypted storage of sensitive account data, including hashed password storage using industry-standard algorithms.
• Restricted access controls ensuring that only authorised mlwb personnel can access personal data, and only to the extent necessary for their specific role.
• Regular security assessments and penetration testing of the mlwb platform infrastructure.
• Incident response procedures to detect, investigate, and respond to data security breaches in a timely manner.

While mlwb takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password and by not sharing your login credentials with any other person.

mlwb retains personal data for the following periods:

• Account data: Retained for the duration of your active account, and for a period of five (5) years following account closure, to meet legal and regulatory obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account and for five (5) years following account closure.
• Support correspondence: Retained for three (3) years from the date of the final communication in each support case.
• Technical and security logs: Retained for ninety (90) days, after which they are automatically deleted unless retained as part of an active security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.

As a data subject, you hold the following rights with respect to your personal data held by mlwb:

• Right of access: You may request a copy of the personal data mlwb holds about you at any time.
• Right to rectification: You may request that inaccurate or incomplete personal data held about you be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to mlwb's legal retention obligations.
• Right to restrict processing: You may request that mlwb restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: You may request that mlwb provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you believe your rights and interests override those of mlwb.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact the mlwb data team at [email protected] with the subject line "Data Subject Request". mlwb will acknowledge your request within 72 hours and respond in full within 30 days. In some cases, mlwb may ask you to verify your identity before processing a data request.

The mlwb platform is strictly for adults aged 21 and above. mlwb does not knowingly collect personal data from any person under the age of 21. If mlwb discovers that personal data has been collected from a person who is under the age of 21, that account will be immediately closed, all associated data will be deleted, and any funds held will be returned to the depositing payment method following verification.

If you believe that a minor has registered an account on mlwb, please notify us immediately at [email protected]. We take underage access very seriously and will act on all such reports as a priority.

mlwb reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, mlwb will update the "Last updated" date at the top of this document and will notify active players via email or an on-platform notification at least 14 days before the changes take effect.

Your continued use of the mlwb platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should close your account before the effective date by contacting the support team.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how mlwb has handled your personal data, please contact us using the details below:

• Email: [email protected]
• Subject line for data enquiries: "Privacy Policy Enquiry" or "Data Subject Request"
• Response time: Within 30 days for formal data subject requests; within 24 hours for general privacy enquiries
• Support hours: 24 hours a day, 7 days a week

mlwb takes all privacy complaints seriously. If you contact us with a complaint and are not satisfied with our response, you have the right to escalate the matter through the dispute resolution process set out in the mlwb Terms & Conditions.