mn880 Privacy
Policy

1 Data Controller

The data controller responsible for your personal information collected through mn880.io is the operator of the mn880 Platform. For all data protection enquiries, including requests to exercise your rights, you may contact our Data Protection Officer (DPO) at the email address provided in Section 14 of this Policy.

All personal data collected from players accessing the Platform from Bangladesh is processed in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2 Data We Collect

mn880 collects the following categories of personal data, depending on how you interact with the Platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, national ID number, passport number	Registration and KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration
Financial Data	bKash or Nagad wallet number, bank account details, transaction history	Deposit and withdrawal processing
Account Data	Username, encrypted password, account balance, betting history, bonus usage	Ongoing Platform use
Technical Data	IP address, browser type, device identifiers, operating system, session timestamps	Automatic collection on site access
Usage Data	Pages visited, games played, bet placement patterns, session duration, click paths	Automatic collection during Platform use
KYC Documents	Scanned copies of national ID card, passport, utility bill, selfie photo	Identity and age verification
Communications Data	Live chat transcripts, support emails, complaint records	When you contact mn880 support

mn880 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is contained in a standard government-issued identity document submitted for KYC purposes.

3 How We Collect Your Data

mn880 collects personal data through the following means:

• Direct collection: Data you provide voluntarily when registering an account, completing identity verification, submitting a deposit or withdrawal request, or contacting the mn880 support team.
• Automatic collection: Technical and usage data collected automatically via server logs, cookies, local storage, and similar tracking technologies whenever you access or interact with mn880.io.
• Third-party sources: Identity and age verification data confirmed by licensed KYC/AML service providers; transaction confirmation data received from payment processors including bKash, Nagad, Rocket, and Upay; fraud prevention signals from third-party risk management services.
• Inferred data: Behavioural patterns derived from your usage data (for example, responsible gaming risk scores calculated from session frequency and deposit patterns) that are used solely to protect player welfare and fulfil our responsible gaming obligations.

4 Purpose and Legal Basis for Processing

mn880 processes your personal data only where a valid legal basis exists. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

Purpose	Legal Basis
Creating and managing your mn880 Account	Performance of contract
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer	Performance of contract
Verifying your identity and age (KYC)	Legal obligation; performance of contract
Complying with anti-money laundering (AML) obligations	Legal obligation
Detecting and preventing fraud, cheating, and prohibited conduct	Legitimate interest; legal obligation
Providing responsible gaming tools (deposit limits, self-exclusion, session caps)	Legal obligation; legitimate interest
Sending transactional communications (account confirmations, withdrawal receipts)	Performance of contract
Sending promotional communications about mn880 bonuses and offers	Consent (which may be withdrawn at any time)
Improving Platform performance, game offering, and user experience	Legitimate interest
Resolving disputes, complaints, and legal claims	Legitimate interest; legal obligation

Where mn880 relies on legitimate interest as the legal basis for processing, we have assessed that our legitimate interest in operating a secure, fair, and commercially viable Platform does not override your rights and freedoms, having regard to the reasonable expectations of players using an online betting service.

5 Data Sharing and Disclosure

mn880 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. Your data may be shared in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Sonali Bank, Islami Bank, and other financial institutions as required to process your deposits and withdrawals. Only the minimum data necessary for the transaction is shared.
• KYC and AML service providers: Licensed identity verification and anti-money laundering screening partners who process your submitted documents and identity data on our behalf under strict contractual obligations.
• Game technology providers: Third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Spribe, and Microgaming may receive pseudonymised session and game-play data necessary to deliver their game services and resolve game disputes.
• IT and hosting providers: Infrastructure, cloud hosting, and cybersecurity service providers who process Platform data on behalf of mn880 under data processing agreements that require them to maintain confidentiality and implement appropriate security measures.
• Fraud prevention and risk management services: Third-party services that help mn880 detect and prevent fraud, abuse, and money laundering. These services process technical and behavioural data under strict contractual and legal frameworks.
• Legal and regulatory authorities: Where mn880 is legally required to disclose data to a court, government authority, law enforcement body, or financial regulator, we will comply with such obligations. Where permitted by law, mn880 will attempt to notify you of such disclosure before it occurs.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of mn880's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to that entity assuming the obligations set out in this Privacy Policy.

6 International Data Transfers

Some of the third-party service providers mn880 works with — including cloud hosting providers, game studios, and fraud prevention services — may process personal data in countries outside Bangladesh. Where such transfers occur, mn880 takes all reasonable steps to ensure that your personal data is protected to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international transfers include: contractual clauses that require receiving parties to protect personal data, transfers only to providers operating in jurisdictions with recognised data protection frameworks, and technical measures including encryption in transit and at rest.

7 Data Retention Periods

mn880 retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The general retention periods mn880 applies are as follows:

• Active account data (identity, contact, account history): Retained for the duration of your account and for a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• KYC verification documents (national ID, passport, utility bills): Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Financial transaction records (deposits, withdrawals, bet history): Retained for a minimum of five years following each transaction, in accordance with financial record-keeping obligations.
• Technical and usage data (server logs, session data): Retained for up to 24 months from the date of collection, unless a longer period is required for an active investigation or legal proceeding.
• Support communications (chat transcripts, complaint emails): Retained for up to three years from the date of the last interaction, unless required longer for dispute resolution purposes.
• Marketing consent records: Retained until consent is withdrawn, plus three years, as evidence that the communication was lawfully sent.

Upon expiry of the applicable retention period, mn880 will securely delete, destroy, or anonymise personal data so that it can no longer be attributed to any identifiable individual.

8 Cookies and Tracking Technologies

mn880.io uses cookies and similar tracking technologies to operate the Platform, maintain your logged-in session, remember your preferences, and analyse how the site is used. The categories of cookies mn880 uses are described below:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and cookies that store your selected language. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your preferences, such as display settings and responsible gaming tool configurations. These improve your experience but are not essential to the Platform's core operation.
• Analytical cookies: Used to collect aggregated, anonymised information about how visitors use mn880.io — including which pages are visited most frequently, how long sessions last, and which features are most used. This data helps mn880 improve the Platform.
• Fraud prevention and security cookies: Used by mn880 and its fraud detection partners to identify suspicious patterns, detect bot activity, and protect the Platform from abuse and unauthorised access.

mn880 does not use advertising or cross-site tracking cookies. Your browsing activity on mn880.io is not shared with advertising networks or used to serve targeted advertisements on other websites.

You may control cookie settings through your browser. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. For functional and analytical cookies, you may opt out via your browser settings without affecting your ability to access mn880.

9 Security Measures

mn880 implements technical, organisational, and procedural security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mn880.io
• bcrypt hashing for all stored passwords — passwords are never stored or transmitted in plain text
• Two-factor authentication (2FA) available to all players and strongly recommended
• Role-based access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis
• Regular penetration testing and security audits conducted by independent third-party security specialists
• Automated intrusion detection and anomaly monitoring systems operating 24/7
• Physical and logical access restrictions on servers and data storage systems
• Mandatory data protection and security training for all mn880 staff with access to personal data

While mn880 takes all reasonable steps to protect your personal data, no system of data security is entirely immune to breach. In the event of a personal data breach that poses a risk to your rights and freedoms, mn880 will notify affected players promptly and take all steps necessary to contain and remediate the breach.

10 Your Data Rights

You have the following rights in respect of your personal data held by mn880. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request" and your registered account email address:

• Right of access: You may request a copy of all personal data mn880 holds about you. mn880 will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving a verified request.
• Right to rectification: If any personal data mn880 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request that mn880 delete your personal data. This right is subject to exceptions where retention is required for legal compliance (for example, AML record-keeping obligations) or for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: You may request that mn880 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and that objection is being assessed.
• Right to data portability: You may request that mn880 provide your personal data in a structured, machine-readable format so that it may be transferred to another service provider, where this is technically feasible.
• Right to object: You have the right to object to mn880 processing your personal data where that processing is based on legitimate interest. You also have an absolute right to object to your personal data being used for direct marketing purposes, which mn880 will honour immediately upon receipt of your objection.
• Right to withdraw consent: Where mn880 processes your personal data based on your consent (for example, to send promotional emails about mn880 bonuses and offers), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mn880 will respond to all verified data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, and mn880 will notify you of the extension and the reason for it within the initial 30-day period. mn880 does not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

11 Minors and Age Verification

mn880 is strictly an adults-only platform. Access to mn880.io and all associated services is prohibited for any person under the age of 21. mn880 does not knowingly collect personal data from individuals under 21 years of age.

Age verification is a mandatory step of the mn880 registration and KYC process. If mn880 discovers at any time that personal data has been collected from a person who is under 21 years of age, that data will be permanently deleted immediately, and the associated account will be closed without prior notice. Any funds deposited will be returned to the originating payment method.

If you believe a minor may have registered an account on mn880, please notify us immediately at [email protected] so that we may investigate and take appropriate action.

12 Third-Party Links and Services

The mn880 Platform integrates third-party game content from certified studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Spribe, and Microgaming. These studios operate under their own privacy practices for data generated within their game environments. mn880 takes steps to ensure that its game integration agreements include appropriate data protection provisions, but mn880 is not responsible for the independent privacy practices of third-party game studios.

mn880.io does not contain links to external third-party websites. If you encounter any link on mn880.io that redirects you to a website not operated by mn880, please report it to [email protected] immediately, as this may indicate a phishing or security incident.

13 Changes to This Privacy Policy

mn880 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, mn880 will notify registered players via a notice on the Platform login screen and, where appropriate, by email to the address registered on your account.

The updated Privacy Policy will take effect on the date stated at the top of the document. Your continued use of the Platform after the effective date constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must stop using mn880 and may request account closure by contacting support.

mn880 maintains a version history of this Privacy Policy. Prior versions may be requested from our Data Protection Officer at any time.

14 Contact and Data Protection Officer

For all data protection enquiries, requests to exercise your rights, concerns about how mn880 handles your personal data, or to report a suspected data security incident, you may contact mn880's Data Protection Officer through the following channel:

• Email: [email protected] (plain text — this address is not a clickable link)
• Subject line for data requests: "Data Rights Request — [your registered email address]"
• Response time: Within 30 days of receipt of a verified request
• Support availability: 24/7 including all Bangladeshi public holidays (BST, UTC+6)

mn880's support team serves players across all regions of Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All data-related enquiries are handled by designated privacy personnel and are treated with strict confidentiality.