mcwcom Privacy Policy

mcwcom collects personal data from you in several ways: directly when you register an account or complete our KYC process, automatically when you use the platform, and occasionally from trusted third-party sources as part of our fraud prevention and identity verification procedures. The categories of personal data we collect are described below.

1.1 Registration & Account Data

When you create an mcwcom account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you are aged 18 or above)
• Residential address (city, district, Bangladesh)
• Email address
• Mobile phone number (used for account verification and SMS OTP)
• Chosen username and password (password is stored as a one-way cryptographic hash — never in plain text)

1.2 KYC & Identity Verification Data

To comply with anti-money laundering (AML) obligations and to process withdrawals, mcwcom may require:

• A copy of your National Identity Card (NID), passport, or birth certificate
• Proof of address (e.g., a recent utility bill, bank statement, or mobile banking statement)
• A selfie photograph for liveness verification
• Source of funds documentation for high-value deposits or withdrawals

1.3 Payment & Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer, we record transaction references, amounts in BDT, timestamps, and the last four digits or masked identifiers of the payment instruments used. Full card numbers and mobile banking PINs are never stored on mcwcom servers — payment processing is handled by our PCI-compliant payment partners.

1.4 Gameplay & Betting Data

We record all bets placed, game sessions played, wager amounts, outcomes, bonus activations and usage, and session start/end times. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection.

1.5 Technical & Device Data

When you access mcwcom via browser or mobile device, we automatically collect:

• IP address and approximate geographic location (country/city level)
• Device type, operating system version, and browser type
• Session duration and page interaction data
• Referral URL (the page you visited before arriving at mcwcom)
• Cookie identifiers and similar tracking technologies (see Section 5)

1.6 Communications Data

If you contact mcwcom support via live chat, email, or telephone, we retain records of those communications for customer service quality, dispute resolution, and compliance purposes. Support chat transcripts are typically retained for 24 months.

mcwcom processes your personal data only where a valid lawful basis exists for doing so. The primary lawful bases we rely on are set out in the table below.

Processing Activity	Lawful Basis
Creating and managing your player account	Performance of a contract (providing gaming services to you)
Processing deposits and withdrawals	Performance of a contract; compliance with payment regulations
KYC identity and age verification	Legal obligation (AML compliance, underage gambling prevention)
Fraud detection and security monitoring	Legitimate interest (protecting players and the platform from fraud)
Responsible gaming monitoring and intervention	Legitimate interest (player welfare) and legal obligation
Sending transactional notifications (deposits, withdrawals, security alerts)	Performance of a contract
Sending promotional communications and bonus offers	Consent (you may opt out at any time)
Retaining records for compliance and dispute resolution	Legal obligation; legitimate interest

mcwcom uses the personal data we collect for the following specific purposes. We do not use your data in ways that are incompatible with these stated purposes without first notifying you and, where required, obtaining your consent.

3.1 Service Delivery

Your account data, payment data, and gameplay data are used to operate your player account, process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and card networks, provide access to cricket betting, live casino games, slots, crash games, and all other mcwcom gaming products, credit and track bonus entitlements, and generate your betting history and account statements.

3.2 Identity Verification & Compliance

KYC documents and personal data are used to verify that you meet mcwcom's eligibility criteria (18+ age, one account per person), comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, prevent fraud, multi-accounting, and identity theft, and respond to lawful requests from competent authorities.

3.3 Security & Fraud Prevention

Technical and device data, IP addresses, and behavioural patterns are analysed by mcwcom's security systems to detect unauthorised account access, bot activity, collusion, and unusual transaction patterns. Where a genuine threat is identified, mcwcom may temporarily suspend an account pending investigation to protect both the player and the platform.

3.4 Responsible Gaming

Gameplay frequency, session duration, deposit velocity, and betting patterns are monitored to identify players who may be showing signs of problem gambling behaviour. mcwcom uses this data to trigger responsible gaming interventions, reach out with support information, and enforce self-exclusion or deposit limits at the player's request or at mcwcom's discretion where player welfare is at risk.

3.5 Customer Support

Communications data from live chat and email interactions is used to resolve queries, investigate complaints, provide account assistance, and maintain a record of interactions that may be relevant to dispute resolution or compliance reviews.

3.6 Platform Improvement

Aggregated and anonymised technical and gameplay data is used to analyse platform performance, identify popular games and betting markets among Bangladesh players, improve load times, fix bugs, and develop new features. Where analytics data is used for this purpose, it is anonymised so that individual players cannot be identified.

3.7 Marketing Communications

With your explicit consent, mcwcom may send you promotional emails or SMS messages about new games, seasonal offers (e.g., BPL cricket specials, Eid promotions, Pohela Boishakh bonuses), and platform updates. You may withdraw your marketing consent at any time by clicking the unsubscribe link in any marketing email, by sending an SMS reply "STOP", or by contacting support via live chat.

mcwcom does not sell your personal data. We share personal data with third parties only where strictly necessary, as described below, and only with partners who are contractually required to maintain the same level of data protection that mcwcom applies.

4.1 Payment Processors

To process your deposits and withdrawals, mcwcom shares necessary transaction data with our payment partners: bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks, and domestic banking partners including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These partners receive only the data required to execute the specific transaction and are not permitted to use it for any other purpose.

4.2 KYC & Identity Verification Providers

mcwcom may use third-party identity verification services to cross-reference KYC documents against authoritative databases. These providers act as data processors on mcwcom's behalf and are bound by strict data processing agreements. They do not retain your documents beyond the period required to complete verification.

4.3 Game Studios

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and anonymous player identifier to initialise game sessions. These studios do not receive your name, contact details, or payment information. Their use of session data is governed by their own privacy policies.

4.4 Legal & Regulatory Disclosure

mcwcom may disclose personal data to law enforcement agencies, financial intelligence units, or courts where required by a valid legal order, warrant, or regulatory obligation. We will notify you of such disclosures where permitted by law to do so.

4.5 Business Transfers

In the event that mcwcom undergoes a merger, acquisition, or asset sale, player data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address before any such transfer takes effect, and you will retain the right to request deletion of your data if you do not wish it to be transferred.

mcwcom uses cookies and similar technologies to operate the platform, remember your preferences, keep your session active while you are logged in, and understand how players interact with the site. This section explains the types of cookies we use and how you can control them.

5.1 Types of Cookies Used

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, authentication tokens, security (CSRF protection), load balancing. These are essential for the platform to function.	Session / up to 24 hours
Functional	Remembering your language preference, preferred game lobby layout, responsible gaming reminder intervals, and display settings.	Up to 12 months
Analytics	Aggregated, anonymised page view counts, session durations, and feature usage statistics. Used to improve platform performance and UX. No individual player is identifiable from this data.	Up to 13 months
Fraud Prevention	Device fingerprinting tokens used to detect multi-accounting and bot activity. These are essential for platform security.	Up to 12 months

5.2 Managing Cookies

Strictly necessary and fraud prevention cookies cannot be disabled as they are essential to the secure operation of the platform. Functional and analytics cookies may be managed via your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling functional cookies may affect your ability to use certain platform features, such as saved game preferences and session continuity.

For guidance on managing cookies in popular browsers used by Bangladesh players:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Samsung Internet (Android): Settings → Privacy → Smart Anti-Tracking
• Safari (iOS): Settings → Safari → Block All Cookies

mcwcom retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention schedule applies as a baseline; specific circumstances (e.g., an active dispute or legal hold) may require longer retention in individual cases.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML compliance, dispute resolution
KYC documents	Duration of account + 5 years after closure	Regulatory obligation
Transaction records	Duration of account + 7 years after closure	Financial record-keeping requirements
Gameplay & betting history	Duration of account + 3 years after closure	Dispute resolution, responsible gaming review
Support communications	24 months from last interaction	Customer service quality, dispute evidence
Marketing consent records	Until consent is withdrawn + 2 years	Consent audit trail
Technical / device logs	12 months on a rolling basis	Security monitoring, fraud detection

6.1 Data Storage Location

mcwcom's primary data storage infrastructure is hosted on secured cloud servers. All personal data relating to Bangladesh players is stored with appropriate technical and organisational safeguards in place, including encryption at rest using AES-256 and access controls restricted to authorised personnel only.

6.2 Data Deletion

Once a retention period expires and no legal hold applies, personal data is securely deleted or anonymised in accordance with mcwcom's data destruction policy. Anonymised aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

As an mcwcom player, you have the following rights with respect to your personal data. To exercise any of these rights, contact mcwcom's Data Support team via live chat or by email at [email protected]. We will respond to all valid requests within 30 calendar days.

7.1 Right of Access

You may request a copy of all personal data that mcwcom holds about you. We will provide this in a structured, commonly used, machine-readable format (CSV or JSON) at no charge, for up to two requests per 12-month period. Additional requests within the same period may be subject to a reasonable administrative fee.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., updating a phone number or email address) can be made directly from your Account Settings panel without contacting support.

7.3 Right to Erasure

You may request that mcwcom delete your personal data. This right is subject to our legal retention obligations — for example, transaction records must be retained for a minimum of 7 years for financial compliance reasons and cannot be deleted on request within that period. Where erasure is possible, we will confirm completion within 30 days.

7.4 Right to Restrict Processing

You may request that mcwcom temporarily suspend the processing of your personal data in circumstances such as while a data accuracy dispute is being investigated, or where you have objected to processing based on legitimate interests and the outcome of that objection is pending.

7.5 Right to Data Portability

You may request that mcwcom provide your personal data in a portable format so that you can transfer it to another service provider. This right applies to data that you have provided to us and that is processed on the basis of your consent or contractual necessity.

7.6 Right to Object to Marketing

You have an absolute right to object to mcwcom processing your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, mcwcom will cease all marketing communications to you within 5 business days and will not contact you for marketing purposes again unless you provide fresh, specific consent.

7.7 Right to Withdraw Consent

Where mcwcom relies on your consent as the lawful basis for processing (primarily for marketing communications), you have the right to withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

mcwcom applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, and unlawful processing. Our security programme encompasses the following controls.

8.1 Technical Controls

• Transport Layer Security (TLS 1.3): All data in transit between your browser or mobile device and mcwcom servers is encrypted using TLS 1.3 or higher.
• Encryption at Rest: Database records containing personal data are encrypted using AES-256. KYC documents are stored in an encrypted object store with strict access policies.
• Password Hashing: Passwords are hashed using bcrypt with a per-user salt. mcwcom staff cannot retrieve your plain-text password — only you know it.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable SMS OTP-based 2FA from Account Settings. mcwcom support agents use mandatory 2FA for all internal system access.
• Intrusion Detection: Automated monitoring systems scan for anomalous access patterns, brute-force login attempts, and unusual data queries in real time.

8.2 Organisational Controls

• Access to personal data is restricted to mcwcom personnel with a documented, role-specific need. All access is logged and reviewed quarterly.
• All personnel with access to personal data are required to complete data protection training upon joining and annually thereafter.
• Third-party service providers are assessed for data security standards before engagement and are bound by data processing agreements that require them to maintain equivalent security controls.

8.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, mcwcom will notify affected players without undue delay once the breach has been confirmed and contained. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures mcwcom has taken or intends to take to address the breach and prevent recurrence.

mcwcom is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 18. Age verification is a mandatory step during the account registration process and again at the KYC stage before any withdrawal is processed.

If mcwcom discovers or has reasonable grounds to believe that a person under the age of 18 has registered an account and provided personal data, we will:

• Immediately suspend the account and block access to all gaming services.
• Delete all personal data associated with the underage account as soon as is practicable, subject only to any retention required by law (e.g., records of any financial transactions that occurred).
• Refund any deposits made, net of any applicable payment processing fees charged by third-party providers, to the original payment source.
• Where required, report the incident to relevant authorities.

Parents and guardians who believe their child may have registered an mcwcom account should contact our support team immediately via live chat or at [email protected]. We take all such reports seriously and will investigate and respond within 24 hours.

mcwcom reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes, we will notify registered players by posting a prominent notice on the mcwcom platform and sending a notification to your registered email address at least 7 days before the changes take effect.

The "Effective" date displayed in the hero section of this page indicates the date of the most recent revision. We encourage all players to review this Policy periodically to stay informed about how we protect their personal data.

10.1 Contacting mcwcom About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mcwcom handles your personal data, please reach out using any of the following methods:

• Live Chat: Available 24/7 directly from the mcwcom platform (BST, UTC+6)
• Email: [email protected] — we aim to respond to all privacy-related enquiries within 5 business days
• Postal Address: Please request our mailing address via live chat support

10.2 Governing Language

This Privacy Policy is written in English. In the event of any inconsistency between an English version and any translation that may be provided for reference purposes, the English version shall prevail.

10.3 Acceptance

By registering an account with mcwcom and using the platform, you confirm that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree to this Policy, you should not create an account or use mcwcom services. For adults aged 18 and above only.