mx001 Privacy Policy — How We Handle Your Data

1. Introduction

mx001 ("we", "us", "our") operates the online casino and sports betting platform accessible at mx001.bio. We are committed to protecting the privacy and personal data of every player who registers an account, makes a deposit, or otherwise interacts with our platform. This Privacy Policy explains what personal data we collect from users in Bangladesh and elsewhere, how that data is used, who it may be shared with, how long it is retained, and what rights you have in relation to your own data.

By registering an account on mx001, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This policy applies to all users of the mx001 platform, including registered players, visitors who browse the site without an account, and any individual who contacts our support team.

2. Personal Data We Collect

We collect personal data from you directly when you register, make a deposit, submit a support request, or otherwise interact with our platform, and indirectly through your use of the site. The categories of personal data we may collect include:

• Identity data: full name, date of birth, gender, and government-issued identification documents (such as National ID, passport, or driving licence) provided during KYC verification.
• Contact data: mobile phone number, email address, and city or district of residence in Bangladesh.
• Financial data: bKash, Nagad, Rocket, or Upay mobile wallet identifiers; bank account numbers where applicable; deposit and withdrawal transaction records.
• Technical data: IP address, device type, operating system, browser type and version, time zone, and pages visited on mx001.
• Gameplay data: game session history, bet amounts, game outcomes, bonus usage, and responsible gaming tool settings (deposit limits, time-out periods, self-exclusion status).

3. How We Use Your Data

mx001 uses your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected:

• Account management: to create, maintain, and manage your player account, process deposits and withdrawals, and verify your identity in accordance with our KYC procedures.
• Platform operation: to deliver the games, betting markets, live casino streams, and other features you access on mx001, and to personalise your experience (for example, showing your recent games or preferred payment method).
• Compliance and fraud prevention: to verify your age and identity, detect and prevent fraudulent activity, money laundering, and unauthorised account access, and to maintain records required by our internal compliance framework.
• Communications: to send you transactional messages (deposit confirmations, withdrawal updates, account security alerts) and, where you have opted in, promotional communications about bonuses and offers. You may opt out of marketing communications at any time by contacting our support team.

4. Legal Basis for Processing

mx001 processes your personal data only where a valid legal basis exists. The legal bases we rely on are:

• Contractual necessity: processing that is required to fulfil our contract with you — that is, to operate your player account, process transactions, and deliver the platform services you have signed up for.
• Legitimate interests: processing necessary for our legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving the overall user experience — provided those interests are not overridden by your rights and freedoms.
• Legal obligation: processing required to comply with applicable laws, including the retention of financial transaction records and the fulfilment of lawful requests from competent authorities.
• Consent: where we send you promotional communications or set non-essential cookies, we rely on your prior consent. You may withdraw this consent at any time without affecting the lawfulness of processing that took place before withdrawal.

mx001 does not make automated decisions with legal or similarly significant effects based solely on automated processing of your personal data without human review.

5. Data Sharing and Third Parties

mx001 does not sell your personal data. We may share limited personal data with the following categories of third party, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment processors and mobile wallet providers (bKash, Nagad, Rocket, Upay, and supported banks): solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable financial regulations.
• Game content and live casino providers (Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Microgaming, and others): game session data is transmitted to these providers to operate their games. These providers maintain their own data security standards and are contractually bound to use session data only for game operation.
• Fraud prevention and compliance services: we may share identity and transaction data with specialist fraud detection services or comply with lawful requests from competent authorities (courts, regulators, law enforcement) where we are legally required to do so.

6. Cookies and Tracking Technologies

mx001 uses cookies and similar technologies to operate the platform, remember your preferences, and understand how players use the site. We use two categories of cookies:

• Essential cookies: these are required for the platform to function. They maintain your session state, remember your login status, and ensure that your deposit and game selections are preserved as you navigate the site. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: we use privacy-respecting analytics tools to understand aggregate usage patterns on mx001 — for example, which game categories are most popular, what device types are most common, and where players encounter difficulties. Analytics data is aggregated and does not identify individual users.
• No third-party advertising cookies: mx001 does not permit advertising networks, social media platforms, or any other third-party entity to set cookies on our platform for the purpose of tracking users across other websites or serving targeted advertisements.

7. Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team:

• Right of access: you may request a copy of the personal data we hold about you, together with information about how and why it is being processed.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: in certain circumstances you may request that we delete your personal data. Note that we may be required to retain certain data for legal compliance purposes even after an account is closed.
• Right to withdraw consent: where our processing of your data is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing already carried out.

8. Data Retention

mx001 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. In practice, this means: active player account data is retained for the lifetime of your account plus a period of up to 5 years following account closure, to satisfy financial record-keeping obligations. KYC identity documents are retained for a minimum of 5 years from the date of verification. Game session logs and transaction records are retained for 5 years from the date of each transaction. Marketing preference data is retained until you withdraw consent or close your account.

When the retention period for any category of data expires, mx001 will securely delete or anonymise that data so that it can no longer be linked to you as an individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

9. Security Measures

mx001 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure:

• All data transmitted between your device and mx001 servers is protected by 256-bit SSL/TLS encryption. Our servers are hosted in secure, access-controlled data centres. Access to personal data within mx001 is restricted on a strict need-to-know basis — only staff members who require access to perform their job functions may view player data, and all access is logged and audited.
• Passwords are stored using industry-standard one-way hashing. mx001 staff will never ask you for your password or one-time passcode by any channel. If you receive such a request, treat it as fraudulent and report it immediately to our support team.
• Despite these measures, no online platform can guarantee absolute security. If you believe your mx001 account has been compromised, please contact our support team immediately so we can suspend the account and investigate.

10. Changes to This Privacy Policy

mx001 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. When we make material changes we will update the effective date at the top of this page. We encourage you to review this policy periodically. Your continued use of the mx001 platform after any update constitutes your acceptance of the revised policy.

11. Contact and Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how mx001 has handled your personal data, please contact our support team. We will respond to all privacy-related enquiries within 10 business days. Our support team is available 24 hours a day, 7 days a week via the contact details below.

Contact email: [email protected] (plain text — not a clickable link). Please include your registered mobile number and a brief description of your privacy request in all correspondence so we can locate your account and respond accurately.