Privacy Policy for ma71

ma71 collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of the site, and from third parties such as payment processors and identity verification services where applicable. The categories of data we collect are described below.

Registration and identity data: When you create a ma71 account, we collect your full legal name, date of birth, gender, email address, and a mobile number registered in Bangladesh. This data is used to create and manage your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

Identity verification documents: To comply with anti-money-laundering (AML) requirements and to confirm player age, ma71 may request copies of government-issued identity documents such as a National Identity Card (NID), passport, or birth certificate, along with proof of address and proof of payment method ownership.

Financial and transaction data: We record details of all deposits, withdrawals, and betting transactions conducted on your account, including transaction amounts in Bangladeshi Taka (৳), payment method identifiers (such as your bKash or Nagad mobile number), transaction timestamps, and processing status. We do not store full bank account numbers or mobile banking PINs.

Usage and behavioural data: We automatically collect data about how you interact with the ma71 platform, including pages visited, games played, bets placed, session duration, click paths, device type, operating system, browser type and version, screen resolution, and IP address. This data helps us improve platform performance and detect suspicious activity.

Communications data: If you contact ma71 support via live chat or email, we retain records of those communications, including the content of your messages and any attachments, for a period of up to five years for quality assurance and dispute resolution purposes.

The following table summarises the primary categories of data collected, the source of that data, and the legal basis on which it is processed:

ma71 uses the personal data it collects for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected, and we do not process your data in a way that is likely to cause you harm or distress.

• Account creation and management: We use your registration data to open and maintain your player account, authenticate your identity at each login, manage your account settings and preferences, and communicate essential service updates.
• Identity and age verification: We use identity documents and date-of-birth data to confirm that you meet the 18+ age requirement and to satisfy our KYC obligations. Verified status unlocks full platform functionality, including withdrawals above stated thresholds.
• Payment processing: Transaction data is used to execute deposits and withdrawal requests accurately, to maintain an accurate account balance, and to investigate and resolve payment disputes.
• Fraud prevention and AML compliance: Behavioural data, transaction patterns, and IP address information are analysed to detect and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct as defined in the ma71 Terms & Conditions.
• Responsible gaming: Usage data, session duration, and betting frequency are monitored to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, ma71 may proactively reach out to offer responsible gaming resources and self-exclusion options.
• Platform improvement: Aggregated and anonymised usage data is analysed to understand player preferences, identify technical issues, optimise the user interface, and develop new features and game offerings.
• Marketing communications: Where you have given explicit consent, we use your email address and mobile number to send promotional offers, bonus notifications, and platform news. You can withdraw this consent at any time without affecting your account status.
• Legal and regulatory compliance: We may use or disclose your data where required to do so by applicable law, court order, or legitimate regulatory authority request.

ma71 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data is shared only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: We share transaction data with our payment processing partners — including bKash, Nagad, Rocket, Upay, and banking institutions such as Dutch-Bangla Bank, BRAC Bank, and City Bank — strictly for the purpose of processing deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• Identity verification providers: Where an automated or third-party KYC solution is used to verify your identity documents, the relevant data is transmitted to that provider under a data processing agreement that restricts its use to the verification purpose only.
• Game and software providers: In order to deliver games on the platform, certain session data (such as player ID and game session tokens) is transmitted to our game providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full personal profile.
• Analytics and platform technology providers: Aggregated, anonymised usage data may be shared with analytics platform providers to support platform performance monitoring. No personally identifiable information is included in these data flows.
• Legal and regulatory authorities: ma71 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law or a valid legal process. Where permitted by law, we will attempt to notify you of such a disclosure request.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ma71's business assets, personal data held on players may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections being maintained.

All third parties with whom ma71 shares personal data are contractually required to handle that data in accordance with applicable data protection standards and to use it solely for the purpose for which it was disclosed. ma71 does not permit any third-party recipient to use your data for their own independent marketing or commercial purposes without your separate consent.

ma71 uses cookies and similar tracking technologies — including local storage, session storage, and pixel tags — to operate the platform effectively and to understand how players engage with the site. The main categories of cookies used are described below.

Strictly necessary cookies cannot be disabled without preventing the platform from functioning correctly. You may manage functional and analytics cookies through your browser's settings, or by clearing your browser's cookie store. Please note that disabling certain cookies may affect the quality of your experience on the ma71 platform.

ma71 does not currently use third-party behavioural advertising or retargeting cookies. If this changes in the future, this policy will be updated accordingly and you will be given the opportunity to provide or withhold your consent before such cookies are placed.

ma71 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure. This reflects standard AML record-keeping requirements applicable to financial service platforms operating in Bangladesh.
• Identity verification documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later. Original documents are not stored; only verified status and relevant data fields are retained after the verification process is completed.
• Transaction records: All deposit and withdrawal records are retained for a minimum of seven years in line with financial record-keeping standards. This includes transaction amounts, timestamps, payment method references, and processing outcomes.
• Support communications: Chat transcripts and email correspondence with the ma71 support team are retained for up to five years for dispute resolution and quality assurance purposes.
• Marketing consent records: Records of when and how you provided or withdrew consent for marketing communications are retained for the full duration of your account and for three years following account closure.
• Anonymised analytics data: Aggregated, anonymised usage data that cannot reasonably be re-identified is retained indefinitely for platform improvement and statistical analysis purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Where deletion is not technically feasible — for example, in backup systems — data is isolated from active processing and scheduled for deletion at the next available maintenance cycle.

ma71 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:

• TLS/SSL encryption in transit: All data transmitted between your browser or device and the ma71 platform is encrypted using Transport Layer Security (TLS 1.2 or higher). The padlock icon in your browser's address bar confirms an active encrypted connection.
• Encryption at rest: Personal data stored on ma71 infrastructure is encrypted at rest using AES-256 or equivalent standards. Database access is strictly restricted to authorised systems and personnel.
• Role-based access control: Access to player personal data within ma71's internal systems is restricted on a strict need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and regular data protection training.
• Penetration testing and vulnerability management: ma71 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities. Critical patches are applied on a priority basis.
• Incident response: ma71 maintains a documented data breach response procedure. In the event of a security incident that affects your personal data in a material way, we will notify affected players within a reasonable timeframe after becoming aware of the breach.
• Secure payment handling: Payment transaction data is handled exclusively through certified payment gateways. ma71 does not store full payment credentials such as complete bKash account PINs, full bank account numbers, or card authentication values.

While ma71 applies robust security measures, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account secure: use a strong and unique password, do not share your login credentials with anyone, and contact support immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

As a ma71 player, you hold a number of rights over the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected] with your account username and a clear description of your request. We aim to respond to all privacy rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data ma71 holds about you. We will provide this in a structured, readable format within a reasonable timeframe. We may charge a modest administrative fee for repeated or manifestly unfounded requests.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly within your player account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations — for example, we cannot delete AML-required transaction records before the applicable retention period has expired.
• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while we verify the accuracy of data you have disputed, or while a complaint is pending.
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, machine-readable format, and to request that it be transmitted to another service provider where technically feasible.
• Right to withdraw consent: Where ma71 processes your data on the basis of your consent — primarily for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on ma71's legitimate interests, unless ma71 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

ma71 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where updates to this Policy are material — meaning they substantially change how we collect, use, or share your personal data — we will provide advance notice via on-platform notification or email at least 14 days before the changes take effect. Your continued use of the ma71 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms.

We encourage you to review this Privacy Policy each time you use the platform, particularly if you have been away for a period of time. The current version will always be available at ma71.net/privacy-policy.

Data controller contact: If you have any questions, concerns, or complaints about this Privacy Policy or about the way ma71 handles your personal data, please contact our support team using the details below. We are committed to resolving privacy concerns promptly and fairly.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the ma71 platform
• WhatsApp: +880 1700 000000
• Response target: We aim to acknowledge all privacy enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6) and to provide a substantive response within 30 days.