mcbaji Privacy Policy

🏢 1. Data Controller

mcbaji operates the platform accessible at mcbaji.app and acts as the data controller in respect of all personal data collected through the platform. For all privacy-related enquiries, correction requests, deletion requests, or complaints, you may contact the mcbaji data team at [email protected]. mcbaji aims to respond to all data-related requests within 30 calendar days of receipt.

📂 2. Personal Data We Collect

mcbaji collects personal data in the following categories, depending on how you interact with the platform:

2.1 Registration Data

• Full name as provided at registration.
• Mobile phone number used to create your account.
• Date of birth, collected for age-verification purposes (21+ requirement).
• Password (stored in hashed, non-reversible form — mcbaji staff cannot view your plain-text password).

2.2 Identity Verification Data

Where identity verification is required (for example, before processing a large withdrawal or in response to a compliance review), mcbaji may request:

• A copy of a government-issued identity document (National ID card, passport, or driver's licence).
• A recent utility bill or bank statement confirming your address.
• A selfie photograph for facial verification, where required by our compliance process.

2.3 Financial and Payment Data

• Mobile financial service account details (bKash, Nagad, Rocket, or Upay number) used to process deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal requests, and wallet balance movements.
• Bank account details where bank transfer methods are used.

mcbaji does not store full card numbers or mobile banking PINs. Payment authentication is handled directly by your mobile financial service provider.

2.4 Usage and Technical Data

• IP address and approximate geographic location at the time of login.
• Device type, operating system, and browser or app version.
• Pages visited, games played, bets placed, session duration, and navigation patterns within the platform.
• Cookies and similar tracking technologies (see Section 8 for full details).

2.5 Communications Data

• Messages sent to the mcbaji support team via email or live chat, including the content of those messages and any attachments.
• Feedback, complaints, and survey responses you voluntarily submit.

⚙️ 3. How We Use Your Personal Data

mcbaji uses the personal data we collect for the following purposes:

3.1 Account Management

To create, maintain, and secure your mcbaji account, verify your identity, process your login credentials, and communicate important account-related notices to you.

3.2 Payment Processing

To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to maintain accurate transaction records; and to investigate and resolve payment disputes.

3.3 Compliance and Legal Obligations

To comply with applicable anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any other legal or regulatory obligations that apply to mcbaji's operations. This may include retaining transaction records for prescribed statutory periods.

3.4 Platform Operation and Improvement

To operate, maintain, and improve the mcbaji platform, including diagnosing technical issues, analysing usage patterns to improve the user experience, and testing new features before they are released.

3.5 Responsible Gaming

To monitor account activity for patterns consistent with problem gambling behaviour, to enforce self-exclusion requests and deposit limits set by you, and to fulfil our responsible gaming obligations.

3.6 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeover attempts, collusion, and other forms of prohibited conduct described in the mcbaji Terms & Conditions.

3.7 Customer Support

To respond to your enquiries, process complaints, and provide assistance with account, payment, or gaming issues via the mcbaji support team at [email protected].

3.8 Promotional Communications

With your consent, to send you information about promotions, bonuses, and platform updates relevant to your interests. You may withdraw consent for marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to continue using the platform.

⚖️ 4. Legal Basis for Processing

mcbaji processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — operating your account, processing payments, and delivering the platform services.
• Legal obligation: Processing required to comply with applicable AML, KYC, and other regulatory requirements.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where our interests are not overridden by your rights.
• Consent: Processing for marketing communications, where you have explicitly opted in. You may withdraw this consent at any time.

🤝 5. Sharing Your Personal Data

mcbaji does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only where strictly necessary:

5.1 Payment Service Providers

bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are subject to their own regulatory obligations.

5.2 Game Technology Providers

Game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive anonymised session and game-round data to enable game delivery and resolve technical disputes. These providers do not receive your name, phone number, or payment details.

5.3 Identity Verification Services

Where identity verification is required, your documents may be processed by a third-party KYC verification service operating under strict data processing agreements with mcbaji.

5.4 Legal and Regulatory Authorities

mcbaji may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law, court order, or where mcbaji reasonably believes disclosure is necessary to protect the rights, property, or safety of mcbaji, its players, or third parties.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of mcbaji's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new controller before your data is subject to a different privacy policy.

🗄️ 6. Data Retention

mcbaji retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory requirements. Specific retention periods are as follows:

• Active account data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, in accordance with AML record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years following each transaction date.
• Identity verification documents: Retained for the period required by applicable law, typically 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 2 years following the resolution of each support case.
• Marketing consent records: Retained until you withdraw consent and for 1 year thereafter as evidence of consent management.

Following expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.

👤 7. Your Data Rights

You have the following rights in respect of the personal data mcbaji holds about you. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". mcbaji will respond within 30 calendar days.

7.1 Right of Access

You may request a copy of the personal data mcbaji holds about you, together with information about how it is used and with whom it has been shared.

7.2 Right to Rectification

You may request correction of any inaccurate or incomplete personal data held about you. For straightforward corrections (e.g., a misspelled name), you may also update your details directly in your Account settings.

7.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing has been unlawful. This right is subject to mcbaji's legal obligations to retain certain records as described in Section 6.

7.4 Right to Restrict Processing

You may request that mcbaji restricts processing of your personal data in certain circumstances, for example while a rectification request is being assessed.

7.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.

7.6 Right to Object

You may object to processing based on legitimate interests, including profiling for fraud prevention purposes. mcbaji will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

7.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

🍪 8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the mcbaji platform. They help the platform remember your preferences, keep your session active, and collect anonymous usage analytics.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled.
• Functional cookies: Remember your language preference, display settings, and login status between visits.
• Analytics cookies: Collect anonymised data about how users interact with the platform (pages visited, session length, error events) to help us improve the service.

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your mcbaji account. Disabling analytics cookies will not affect your ability to use the platform but will limit our ability to improve the service based on usage data.

🔒 9. Data Security

mcbaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, loss, or destruction. These measures include:

• Industry-standard SSL/TLS encryption for all data in transit between your device and the mcbaji platform.
• Encryption of sensitive data fields at rest, including password hashes and identity document copies.
• Strict role-based access controls ensuring that mcbaji staff can only access personal data relevant to their job function.
• Regular security reviews and vulnerability assessments of platform infrastructure.
• Mandatory security training for all mcbaji staff who handle personal data.

While mcbaji takes all reasonable precautions, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for ensuring the devices you use to access the platform are secure.

🔞 10. Minors and Age Restriction

The mcbaji platform is strictly intended for adults aged 21 years and above. mcbaji does not knowingly collect personal data from persons under the age of 21. If you are a parent or guardian and believe that a minor has created an account or submitted personal data to mcbaji, please contact [email protected] immediately. mcbaji will take prompt action to close the account and securely delete any associated personal data.

🔗 11. Third-Party Services

The mcbaji platform integrates with third-party game providers and payment services to deliver its full feature set. When you interact with a game supplied by a third-party provider, or initiate a payment through bKash, Nagad, Rocket, or Upay, you are also subject to that provider's own privacy policy. mcbaji is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party services you use in connection with the mcbaji platform.

✏️ 12. Changes to This Privacy Policy

mcbaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Where changes are material, we will endeavour to provide reasonable notice via a platform announcement or email to your registered address. The "Last updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the platform following any update constitutes your acceptance of the revised Policy. The current version of this Policy is always available at mcbaji.app/privacy-policy.