m71a8 Privacy Policy

1 Who We Are

m71a8 is an online betting and casino platform accessible at https://m71a8.io, operated for players based in Bangladesh and other markets where the platform is lawfully accessible. In the context of this Privacy Policy, references to "m71a8", "we", "us", or "our" refer to the m71a8 platform and its operating entity.

We act as the data controller in respect of the personal data that you provide to us when you register an account, interact with our platform, or contact our support team. As data controller, we determine the purposes and means by which your personal data is processed and are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data-related enquiries, our designated point of contact is the m71a8 support team, reachable at [email protected] (plain text — not a clickable link).

2 Data We Collect

The categories of personal data that m71a8 may collect and process include the following:

We do not collect special category data (such as biometric data, health information, religious beliefs, or political opinions) unless you voluntarily provide such information in the context of a support interaction, in which case it is treated with the highest level of protection and is not used for any purpose beyond resolving your enquiry.

3 How We Collect Your Data

m71a8 collects personal data through the following channels:

• Directly from you: when you complete the account registration form, submit identity verification documents, make a deposit or withdrawal request, contact the support team, or configure your account settings including responsible gaming preferences.
• Automatically via the platform: when you access the m71a8 website, our servers and analytics tools automatically record technical and usage data including your IP address, browser fingerprint, device identifiers, and navigation behaviour. This occurs whether or not you are logged into an account.
• From third-party payment processors: when you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider shares transaction confirmation data with m71a8 sufficient to credit your account or process your withdrawal.
• From identity verification providers: where m71a8 uses a third-party KYC (Know Your Customer) service to verify your identity documents, that provider may return a verification result and, in certain cases, a confidence score or document metadata to m71a8.
• From fraud detection and analytics partners: m71a8 may receive aggregated risk signals or fraud indicators from specialist providers to supplement its own internal fraud detection processes.

4 Why We Use Your Data

m71a8 processes your personal data for the following specific purposes:

• Account creation and management: to register your player account, authenticate your identity at login, maintain your account settings, and manage your account through its lifecycle including closure.
• Identity and age verification: to confirm that you meet the 21+ age requirement and to verify that the identity you have provided is accurate, in compliance with our Terms & Conditions and applicable anti-money-laundering obligations.
• Payment processing: to process deposits to your m71a8 account and to fulfil withdrawal requests to your registered payment method. Financial data is handled by our payment processing partners and is not stored on m71a8 servers beyond what is necessary for transaction records.
• Platform operation and game provision: to enable you to access and play the games and betting markets on m71a8, to record bet outcomes, to calculate and credit winnings, and to maintain an accurate real-time account balance.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited activities as defined in our Terms & Conditions.
• Responsible gaming compliance: to monitor usage patterns for indicators of problem gambling, to apply and enforce player-set responsible gaming limits, and to honour self-exclusion requests promptly and permanently.
• Customer support: to respond to your enquiries, resolve complaints, and maintain a record of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: to analyse aggregate usage patterns (in anonymised or pseudonymised form where possible) in order to improve the performance, reliability, and content offering of the m71a8 platform.
• Legal and regulatory compliance: to fulfil any obligations imposed on m71a8 by applicable law, including record-keeping requirements, responses to lawful information requests from competent authorities, and audit obligations.

5 Legal Bases for Processing

m71a8 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and m71a8 (i.e., the Terms & Conditions you accept upon registration). This covers account creation, payment processing, game provision, and account management.
• Legal obligation: Processing is required to comply with applicable legal requirements, including anti-money-laundering regulations, age verification obligations, and responses to lawful authority requests.
• Legitimate interests: Processing is necessary for the legitimate interests of m71a8 or a third party, provided those interests are not overridden by your data protection rights. Legitimate interests pursued by m71a8 include fraud prevention, platform security, and the detection of responsible gaming risk indicators.
• Consent: In limited circumstances — such as the use of non-essential cookies or receipt of direct marketing communications — m71a8 processes your data on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Cookies and Tracking Technologies

m71a8 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform and to understand how users interact with it. The following categories of cookies may be set:

• Strictly necessary cookies: These are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised or pseudonymised information about how pages are used — including which pages are visited most frequently and whether error messages are encountered — to help m71a8 improve the platform experience.
• Functional cookies: These cookies remember your preferences — such as your chosen language or preferred display settings — so you do not need to reconfigure them on each visit.
• Fraud detection and security cookies: These cookies help m71a8 identify suspicious access patterns, detect bot activity, and maintain the integrity of login sessions.

Non-essential cookies (performance, analytics, and functional) are only set after you have been provided with the opportunity to consent. You may adjust your cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the performance or availability of some platform features.

7 Sharing Your Data with Third Parties

m71a8 does not sell, rent, or trade your personal data. We share personal data only with the following categories of third parties, and only to the extent strictly necessary for the relevant purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card-processing partners (Visa/Mastercard network acquirers) receive the minimum personal and financial data necessary to process your transactions securely.
• Identity verification providers: Third-party KYC providers may receive your identity documents and biographical data for the purpose of verifying your age and identity. These providers are contractually bound to process your data only for verification purposes and to delete source documents once verification is complete.
• Fraud detection and risk management partners: Specialist fraud prevention services may receive technical data (IP address, device fingerprint, session metadata) to assess risk signals associated with your account activity.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive session data necessary to render and operate their games within the m71a8 platform. These providers operate under their own data processing terms and are independently certified by recognised gaming testing laboratories.
• Legal and regulatory authorities: m71a8 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, a valid court order, or a lawful regulatory request. m71a8 will notify you of any such disclosure where it is legally permitted to do so.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by m71a8 may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All third-party data processors engaged by m71a8 are subject to contractual data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only in accordance with m71a8's documented instructions.

8 International Data Transfers

m71a8 serves players primarily in Bangladesh, and we endeavour to process and store personal data within appropriate jurisdictions. However, some of our third-party service providers — including certain game studios, fraud detection platforms, and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, m71a8 takes steps to ensure that an adequate level of protection is applied to that data. These steps may include: relying on the recipient country's adequacy status, implementing contractual safeguards between m71a8 and the recipient, or ensuring that the recipient maintains recognised security certifications relevant to the data category being transferred.

If you have questions about the specific safeguards applied to any international transfer of your personal data, you may contact [email protected] (plain text — not a clickable link) and we will provide details relevant to your query.

9 Data Retention

m71a8 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal or regulatory minimum retention period that requires us to keep it longer. The following general retention principles apply:

• Active account data: Personal data associated with an active m71a8 account is retained for the duration of your account's active status and for a defined period following account closure, to allow for dispute resolution, chargebacks, and any outstanding compliance reviews.
• Transaction and financial records: Deposit and withdrawal records, including the identity and payment account details associated with those transactions, are retained for a minimum of five (5) years from the date of the transaction in order to satisfy financial record-keeping obligations.
• Identity verification documents: Copies of identity documents submitted for KYC verification are retained for a minimum of five (5) years following the closure of the associated account, unless applicable law requires a longer period.
• Support communications: Records of support interactions — including email correspondence, chat transcripts, and complaint files — are retained for three (3) years from the date of the final interaction, to support dispute resolution and quality assurance purposes.
• Responsible gaming records: Self-exclusion records are retained indefinitely to prevent re-registration by self-excluded players. Other responsible gaming data (deposit limits, time-out history) is retained for the duration of the account plus five (5) years.
• Technical and usage data: Server logs, IP address records, and session data are retained for up to twelve (12) months, after which they are deleted or irreversibly anonymised.

When data reaches the end of its retention period, m71a8 securely deletes it from its systems or renders it permanently anonymous through irreversible pseudonymisation, so that it can no longer be associated with any identifiable individual.

10 Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in relation to your personal data held by m71a8. To exercise any of these rights, please write to [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise.

• Right of access: You may request a copy of all personal data that m71a8 holds about you, along with information about how it is being used, where it came from, and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. In certain cases — for example, where your identity data has already been verified — we may require you to submit updated supporting documentation.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw consent (where consent is the legal basis). Note that we may be unable to fulfil an erasure request where retention is required by legal or regulatory obligation.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed or a dispute is outstanding.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: Where processing is based on m71a8's legitimate interests, you have the right to object to that processing on grounds relating to your particular situation. m71a8 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

m71a8 will acknowledge all data rights requests within 24 hours of receipt and will provide a substantive response within fourteen (14) calendar days. In complex cases, this period may be extended by a further fourteen (14) days, in which case you will be notified of the extension and the reason for it. There is no charge for exercising your data rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

11 Children and Minors

The m71a8 platform is strictly intended for adults aged 21 years and above. m71a8 does not knowingly collect, store, or process personal data belonging to any person under the age of 21. If we discover — through age verification processes or any other means — that a registered account belongs to a person under 21, we will immediately suspend and permanently close that account, forfeit any balances held within it, and securely delete all associated personal data to the extent permitted by our legal obligations.

If you are a parent or guardian and believe that a minor under your care has registered an account on m71a8 without your knowledge, please contact [email protected] immediately. We will prioritise the investigation and closure of the account.

12 Security Measures

m71a8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the m71a8 platform, ensuring that your data cannot be intercepted in transit.
• Bcrypt or equivalent password hashing — your account password is never stored in recoverable plain text. Even m71a8 system administrators cannot retrieve your password.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members who have no legitimate reason to access your data are technically prevented from doing so.
• Audit logging: All access to personal data records by m71a8 staff is logged with a timestamp and staff identifier for accountability and forensic purposes.
• PCI-compliant payment handling: Payment card data is processed entirely by PCI DSS-certified third-party processors. m71a8 does not store full card numbers, CVV codes, or card expiry dates on its own servers.
• Regular security reviews: m71a8 conducts periodic reviews of its data security practices, access controls, and vulnerability posture, and addresses identified weaknesses on a priority basis.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, m71a8 will notify affected users without undue delay using the contact details registered on their accounts.

13 Changes to This Policy

m71a8 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will provide notice to registered users via a prominent notice displayed upon login, via email to the address registered on your account, or both. The effective date of the current version is shown at the top of this page.

Your continued use of the m71a8 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised policy, you must cease using the platform and contact [email protected] to request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how m71a8 protects your personal data.

14 Contact and Data Enquiries

For all privacy-related enquiries, data rights requests, concerns about how your data is being handled, or to report a potential data breach, please contact the m71a8 support team using the details below.

Our support team is available 24 hours a day, 7 days a week and will direct your enquiry to the appropriate person within our data compliance function.

When contacting us regarding a data rights request, please include your registered username, a clear description of the right you wish to exercise, and any relevant details that will help us locate your records efficiently. We will verify your identity before processing any request that involves disclosing, modifying, or deleting personal data.