mgbd Privacy Policy — How We Collect, Use & Protect Your Personal Data

mgbd is an online betting and casino entertainment platform operated for the Bangladesh market and accessible at mgbd.io. We take the privacy and security of our players' personal data seriously and are committed to handling that data with the highest standards of care, transparency, and integrity.

This Privacy Policy ("Policy") sets out the types of personal data that mgbd collects about you when you interact with the mgbd platform, the purposes for which that data is processed, the legal basis on which processing is carried out, the circumstances under which data may be shared with third parties, the period for which data is retained, and the rights that you hold in relation to your personal data.

This Policy applies to all personal data collected through: (a) the mgbd.io website; (b) the account registration and login process; (c) all real-money betting, casino, and instant game activity on the platform; (d) all deposit and withdrawal transactions; (e) all communications between you and the mgbd support team; and (f) any promotional, bonus, or tournament participation.

This Policy should be read alongside the mgbd Terms & Conditions and the mgbd Responsible Gaming Policy, both of which are published on this website and incorporated by reference into this Policy.

For the purposes of this Privacy Policy, mgbd acts as the data controller in respect of all personal data collected from players using the mgbd.io platform. As data controller, mgbd determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, subject access requests, correction requests, and deletion requests should be directed to the mgbd data protection contact as follows:

mgbd collects the following categories of personal data. The specific data collected in each category depends on how you use the platform and the services you access:

mgbd does not intentionally collect sensitive personal data (such as data relating to racial or ethnic origin, religious beliefs, health conditions, or political opinions) unless this is directly and unavoidably relevant to a responsible gaming or self-exclusion request. Any such data collected in that limited context is processed strictly for the purpose of player protection and is not used for any other purpose.

mgbd collects personal data through the following channels:

• Direct submission: Data you provide directly when registering an account, completing the KYC process, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you access and navigate the mgbd.io platform.
• Payment providers: Transaction confirmation data received from payment processing partners (bKash, Nagad, Rocket, Upay, and supported banks) necessary to verify that a deposit or withdrawal has been completed successfully.
• Identity verification providers: Where mgbd uses a third-party KYC verification service to validate the authenticity of identity documents, that service may return a verification status and risk score associated with your submitted documents.
• Fraud detection services: Technical identifiers (such as device fingerprints and IP reputation scores) used to detect and prevent fraudulent account activity, multi-accounting, and bonus abuse.

mgbd processes personal data only where a lawful basis for that processing exists. The lawful bases applicable to mgbd's data processing activities are as follows:

• Contractual necessity: Processing that is required to perform the contract between you and mgbd — that is, to operate your account, process deposits and withdrawals, settle bets, and deliver the platform services you have registered to use.
• Legal obligation: Processing required to comply with applicable anti-money-laundering obligations, age verification requirements, and record-keeping duties that apply to the mgbd platform as an online entertainment operator serving the Bangladesh market.
• Legitimate interests: Processing carried out to pursue mgbd's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and platform improvement through aggregate usage analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where mgbd processes personal data on the basis of your freely given, specific, and informed consent — for example, sending you promotional communications about bonuses and offers. You may withdraw consent at any time by contacting [email protected], and withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
• Vital interests: In exceptional circumstances, mgbd may process personal data where it is necessary to protect the vital interests of a player — for example, in the context of a responsible gaming intervention or a self-exclusion request where the player's wellbeing is at stake.

The personal data collected by mgbd is used for the following purposes. Where multiple lawful bases apply to a single purpose, both are noted:

• Account creation and management: To create and administer your mgbd player account, verify your identity, and maintain accurate records of your account status and activity. (Basis: contractual necessity)
• Payment processing: To process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain a complete and accurate financial transaction record for your account. (Basis: contractual necessity)
• Identity verification (KYC): To verify that you meet mgbd's eligibility criteria — including the 21+ age requirement — before permitting real-money activity and before processing withdrawal requests. (Basis: legal obligation)
• Responsible gaming monitoring: To monitor account activity for signs of problem gambling behavior, to enforce deposit limits and self-exclusion requests, and to comply with responsible gaming obligations. (Basis: legal obligation; legitimate interests)
• Fraud and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct. (Basis: legitimate interests; legal obligation)
• Customer support: To respond to your support queries, manage disputes, and maintain a record of communications for quality assurance and dispute resolution purposes. (Basis: contractual necessity)
• Promotional communications: To send you information about bonuses, promotions, and platform updates — where you have consented to receive such communications. (Basis: consent)
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance, design, and content of the mgbd platform. Analytics used for this purpose are aggregated and do not identify individual players. (Basis: legitimate interests)
• Legal compliance: To comply with any legal obligation requiring mgbd to retain, disclose, or report personal data to a competent authority, including in the context of anti-money-laundering investigations. (Basis: legal obligation)

mgbd uses cookies and similar tracking technologies on the mgbd.io platform to support the operation of the platform, to maintain session security, and to collect usage data for analytics purposes. The categories of cookies used by mgbd are as follows:

• Strictly necessary cookies: Required for the platform to function. These cookies maintain your logged-in session, preserve your account settings between pages, and enable secure payment processing. These cookies cannot be disabled without affecting your ability to use the platform.
• Performance cookies: Used to collect anonymised data about how players navigate and use the mgbd.io platform, including which pages are visited most frequently and whether error messages are encountered. This data is used in aggregate form to improve platform performance.
• Functional cookies: Used to remember preferences you have set on the platform — such as game display settings or responsible gaming limit configurations — to personalise your experience across sessions.
• Security cookies: Used to support fraud detection and prevention functions, including the detection of unusual login patterns or suspicious account activity that may indicate unauthorised access.

mgbd does not use third-party advertising cookies or behavioural tracking cookies that build a profile of your activity across external websites. All cookies set by mgbd are limited to the mgbd.io domain and are used solely for the purposes described in this section.

You may configure your browser to refuse cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the mgbd platform.

mgbd does not sell, rent, or trade your personal data to any third party. Personal data is shared with third parties only in the following limited and defined circumstances:

• Payment processing partners: Your payment details and transaction data are shared with the relevant payment provider (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) to the extent necessary to process your deposit or withdrawal transaction.
• Identity verification providers: Where a third-party KYC service is used to assist with the verification of identity documents, your submitted documents and personal details are shared with that provider solely for the purpose of verification. Such providers are bound by contractual obligations of confidentiality and data security.
• Game providers: Your player account identifier (not your full personal profile) is shared with certified game providers (such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe) to the extent necessary to record game activity, settle game rounds, and manage game-specific bonus mechanics.
• Fraud prevention services: Technical identifiers (device fingerprints, IP addresses, behavioural patterns) may be shared with fraud detection service providers to support the detection and prevention of fraudulent platform activity.
• Legal authorities: mgbd will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by applicable law or where disclosure is necessary to prevent or investigate suspected criminal activity, including money laundering or fraud.
• Business transfers: In the event that mgbd undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by mgbd may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any change to this Privacy Policy that results from it.

mgbd retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the retention periods described below:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with mgbd's internal data disposal procedures. Anonymised aggregate data (from which individual players cannot be identified) may be retained indefinitely for platform analytics purposes.

mgbd implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and mgbd servers is encrypted using 256-bit SSL/TLS protocols. All payment data is transmitted over encrypted channels.
• Encryption at rest: Sensitive personal data stored on mgbd servers, including identity verification documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to personal data within mgbd's internal systems is governed by a role-based access control framework. Staff members are granted access only to the data required for their specific responsibilities, and all access is logged and audited.
• Password security: Player passwords are stored using a one-way cryptographic hashing function with salting. mgbd staff cannot view your password in plain text and will never ask you for it.
• Intrusion detection: mgbd operates continuous network monitoring and intrusion detection systems to identify and respond to suspicious access attempts or anomalous activity on platform infrastructure.
• Incident response: In the event of a personal data breach that poses a risk to player rights and freedoms, mgbd will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay.

While mgbd takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your mgbd account credentials confidential and for notifying mgbd immediately at [email protected] if you suspect any unauthorised access to your account.

As a player whose personal data is processed by mgbd, you hold the following rights in relation to that data. To exercise any of these rights, contact mgbd at [email protected] with the subject line "Data Rights Request" and include your registered account email address and a clear description of the request:

• Right of access: You have the right to request a copy of the personal data that mgbd holds about you, along with information about how that data is processed. mgbd will respond to valid access requests within 30 days.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by mgbd be corrected. Where data has been shared with third-party processors, mgbd will notify those processors of the correction where feasible.
• Right to erasure: You have the right to request that mgbd delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that this right is subject to mgbd's legal obligation to retain certain data for anti-money-laundering and regulatory purposes, as described in Section 9.
• Right to restriction of processing: You have the right to request that mgbd restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is under consideration.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on mgbd's legitimate interests. mgbd will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to data portability: Where processing is based on contractual necessity or consent and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.

The mgbd platform is strictly intended for adults aged 21 years and above. mgbd does not knowingly collect personal data from any person under the age of 21. The platform implements mandatory age verification as part of the account registration process to enforce this restriction.

If mgbd becomes aware that personal data has been collected from a person under the age of 21 — whether through a failure of the age verification process or any other means — that account will be immediately suspended, all real-money activity will be reversed where possible, and the personal data will be securely deleted from mgbd's systems as promptly as practicable.

If you are a parent or guardian and believe that your child has registered an account on mgbd, please contact mgbd immediately at [email protected] so that appropriate action can be taken without delay.

The mgbd.io platform does not contain links to external third-party websites as a matter of standard platform policy. However, certain game provider interfaces — accessed from within the mgbd platform — are operated by certified third-party game studios (such as Evolution Gaming, Pragmatic Play, Spribe, and others). These game interfaces may collect limited technical data as part of their game delivery function.

mgbd is not responsible for the privacy practices of third-party game providers operating within their own game environments. Players are encouraged to review the privacy policies of individual game providers if they wish to understand how those providers process technical data collected within their game interfaces.

mgbd does not endorse, control, or accept responsibility for the content or data practices of any external party whose interface may be accessed through the platform.

mgbd reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform operations, applicable legal requirements, or industry best practices. The effective date at the top of this page will be updated each time a revision is made.

Where a change to this Policy is material — meaning it significantly affects the way mgbd processes your personal data or the rights available to you — mgbd will notify active players via the contact method (email address or registered mobile number) associated with their account. Notification will be sent no less than 14 days before the revised policy takes effect, giving you adequate time to review the changes and, where applicable, withdraw consent or close your account.

Non-material changes — such as corrections to spelling or grammar, clarifications that do not alter the substance of the policy, or updates to contact details — may be made without prior notice. Your continued use of the mgbd platform following the publication of any revised Privacy Policy constitutes your acceptance of the changes.

All previous versions of this Privacy Policy are retained in mgbd's internal records and are available on request by contacting [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which mgbd handles your personal data, please contact the mgbd data protection team using the details below. mgbd is committed to resolving all privacy-related concerns promptly and transparently.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the mgbd Privacy Policy.