mcw99 Privacy Policy

This Privacy Policy is issued by mcw99 ("mcw99", "we", "us", "our"), an internationally licensed online casino and sports betting platform operating at https://mcw99.vu. mcw99 is the data controller responsible for the personal information collected through the platform and any associated mobile or web-based interfaces.

This policy applies to all registered players, prospective players who have commenced but not completed registration, and any individuals who interact with the mcw99 platform, including through support correspondence, bonus claims, or payment transactions.

By accessing or using the mcw99 platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. This policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform as a whole.

mcw99 collects personal data in the following categories, depending on how you interact with the platform:

mcw99 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond problem-gambling indicators required for responsible gaming obligations), or biometric data.

mcw99 collects personal data through the following channels:

• Direct interactions: Data you voluntarily provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the platform, including through cookies, web beacons, server logs, and session tracking tools. See Section 7 for full details on cookies.
• Third-party sources: Identity verification and fraud screening data provided by licensed KYC/AML service providers; payment confirmation data provided by payment processors such as bKash, Nagad, Rocket, and Upay; and geo-location data provided by IP intelligence services used to enforce jurisdiction restrictions.
• Game providers: Aggregated game session data may be provided by third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to support dispute resolution and responsible gaming monitoring.

mcw99 uses your personal data for the following purposes:

• To create, manage, and maintain your player account, including processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay.
• To verify your identity and age in compliance with our licensing obligations and to meet applicable Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• To enforce responsible gaming tools including deposit limits, loss limits, session time controls, cooling-off periods, and self-exclusion orders.
• To communicate with you about your account, including transactional notifications, security alerts, and support responses.
• To send you promotional communications about mcw99 offers, bonuses, and platform updates, where you have opted in to receive such communications. You may withdraw marketing consent at any time by contacting [email protected].
• To analyse platform usage patterns for the purposes of improving the platform experience, personalising game recommendations, and optimising performance.
• To comply with applicable legal obligations, including responding to lawful requests from competent regulatory or law enforcement authorities.
• To resolve disputes, enforce our Terms & Conditions, and protect the legitimate interests of mcw99 and its players.

mcw99 processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted on registration — including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable laws and licensing conditions, including KYC/AML obligations, responsible gaming mandates, and responses to regulatory or law enforcement requests.
• Legitimate interests: Processing carried out for fraud prevention, platform security, dispute resolution, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and optional personalisation features, where you have given explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mcw99 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, and any other payment partners used to facilitate deposits and withdrawals. Data shared is limited to what is required to process the transaction.
• KYC and AML service providers: Licensed identity verification and fraud screening companies used to fulfil our regulatory obligations. These providers act as data processors under binding contractual agreements.
• Game content providers: Third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive session data necessary for game delivery and dispute resolution. These studios operate under their own data governance frameworks and are selected for their compliance standards.
• IT and infrastructure providers: Cloud hosting, server management, and cybersecurity vendors who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: mcw99 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity.
• Business successors: In the event of a merger, acquisition, or sale of substantially all assets of mcw99, player data may be transferred to the acquiring entity. Players will be notified of any such transfer in advance.

The mcw99 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain session security, and to analyse how players interact with the platform in aggregate. The following categories of cookies are in use:

• Strictly necessary cookies: Essential for the platform to operate. These include session authentication cookies, security tokens, and preference storage (e.g., responsible gaming limit settings). These cannot be disabled without impairing platform functionality.
• Analytical cookies: Used to collect aggregate, anonymised data about how users navigate the platform — including pages visited, session duration, and error occurrences. This data is used solely to improve platform performance and is not linked to individual player identities.
• Functional cookies: Used to remember your preferences such as display settings and language selections, enhancing your experience on return visits.
• Security cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats. These are strictly necessary and cannot be disabled.

mcw99 does not use third-party advertising cookies or behavioural profiling cookies that track your activity across external websites. Your cookie preferences for non-essential cookies can be managed through your browser settings. Note that disabling functional or analytical cookies may affect certain non-critical aspects of your platform experience.

mcw99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your browser or app and the mcw99 platform.
• Encryption of sensitive data fields (including passwords and payment references) at rest using industry-standard algorithms.
• Role-based access controls ensuring that personal data is accessible only to mcw99 staff and service providers with a legitimate operational need.
• Regular independent security audits and penetration testing of the platform's infrastructure.
• Intrusion detection and prevention systems monitoring for anomalous activity on an ongoing basis.
• Documented incident response procedures, including breach notification protocols that comply with applicable regulatory requirements.

While mcw99 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

mcw99 retains your personal data for different periods depending on the category of data and the purpose for which it was collected. Our general retention principles are as follows:

• Account and identity data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, to meet KYC, AML, and gaming licence compliance obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• Responsible gaming records: Self-exclusion records, limit-setting history, and related correspondence are retained for a minimum of seven (7) years from the date of the relevant action, to support re-application assessments and regulatory audits.
• Support and communication records: Retained for up to three (3) years from the date of the last interaction, unless the correspondence relates to an ongoing dispute or regulatory inquiry.
• Technical and usage data: Retained in anonymised or aggregated form for analytical purposes. Identifiable technical data (e.g., IP logs) is retained for up to twelve (12) months from collection.
• Marketing consent records: Retained for the period during which consent is active plus three (3) years following withdrawal, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, the resulting anonymised dataset can no longer be linked to you and is therefore no longer subject to this Privacy Policy.

As a data subject, you have the following rights with respect to your personal data held by mcw99. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request – [Your Username]".

• Right of access: You may request a copy of the personal data mcw99 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. For account-registered data, some corrections can be made directly via account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (see Section 9).
• Right to restriction: You may request that mcw99 restrict processing of your data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: You may request a structured, commonly used, machine-readable copy of personal data you have provided to mcw99, where processing is based on consent or contractual necessity.
• Right to object: You may object to processing based on legitimate interests, including profiling for personalisation purposes. You may also withdraw marketing consent at any time.
• Right not to be subject to automated decisions: Where mcw99 uses automated processing to make decisions with significant effect on you (e.g., fraud scoring), you have the right to request human review of such decisions.

mcw99 will acknowledge all data rights requests within 48 hours and aim to fulfil them within 30 days. Where a request is complex or involves a high volume of data, this period may be extended by up to a further 30 days, with prior notification. mcw99 may request proof of identity before processing any data rights request.

The mcw99 platform is strictly intended for adults aged 21 and above. mcw99 does not knowingly collect personal data from individuals under the age of 21 under any circumstances.

During registration, all players are required to confirm their date of birth, and identity verification processes are employed to validate age claims. Where mcw99 becomes aware — through any source — that an account has been registered by, or used by, a person under the age of 21, that account will be immediately suspended, all associated bets and bonuses will be voided, and any deposited funds will be returned to the verified payment source.

If you are a parent or guardian and believe your child has accessed or registered on the mcw99 platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary corrective action.

mcw99 operates as an internationally licensed platform, and your personal data may be processed by mcw99 or its service providers in jurisdictions outside of Bangladesh. When personal data is transferred internationally, mcw99 takes steps to ensure that an adequate level of protection is in place, including:

• Entering into binding data processing agreements with all third-party processors, incorporating appropriate contractual safeguards regarding data protection standards.
• Using service providers that maintain internationally recognised information security certifications and operate in jurisdictions with comparable data protection frameworks.
• Limiting cross-border data transfers to what is strictly necessary for the operational, legal, or compliance purposes described in this policy.

By using the mcw99 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside of Bangladesh. If you have concerns about international data transfers as they relate to your specific data, please contact [email protected].

The mcw99 platform may, in limited contexts, reference or link to third-party content such as game provider studios or payment partner information pages. mcw99 has no control over the privacy practices of external websites and is not responsible for their content or data handling practices.

This Privacy Policy applies solely to data collected by mcw99 through the mcw99 platform. If you access any third-party website or service via a link from the mcw99 platform, we encourage you to review the privacy policy of that third party before providing any personal data to them.

mcw99 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

• Where changes are material — meaning they meaningfully affect how your data is collected, used, or shared — mcw99 will notify registered players by email at least 14 days before the revised policy takes effect.
• A notice will also be displayed prominently on the mcw99 platform for the same period.
• Continued use of the platform after the effective date of any material revision constitutes acceptance of the updated Privacy Policy.
• Minor updates, such as clarifications of existing practices or corrections of typographical errors that do not alter the substance of the policy, may take effect immediately without advance notice.

We encourage you to review this Privacy Policy periodically to stay informed about how mcw99 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which mcw99 processes your personal data, please contact us using the details below. All correspondence must be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request – [Your Username]"
• Response time: Acknowledgement within 48 hours; full response within 30 days
• Operating hours: Support is available 24 hours a day, 7 days a week, 365 days a year