mv77 Privacy Policy — How We Safeguard Your Data

1. Introduction & Scope

This Privacy Policy ("Policy") sets out the basis on which mv77 ("we", "us", "our", "the Platform") collects, processes, stores, and shares personal data relating to individuals ("you", "your", "the Player") who visit the mv77 website at https://mv77.im, register an account, use any of the platform's gaming or betting services, or interact with mv77 customer support.

mv77 is committed to protecting the privacy and personal data of all players, particularly those based in Bangladesh. We process personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. These principles are embedded into every data processing activity we carry out.

This Policy should be read alongside the mv77 Terms & Conditions, which set out the contractual relationship between you and the platform. By registering an account with mv77 or continuing to use the platform after this Policy takes effect, you acknowledge that you have read and understood how your personal data will be handled as described herein.

This Policy covers all personal data processing activities undertaken directly by mv77 in connection with the platform. It does not extend to the privacy practices of third-party websites, payment service providers, or game studios, each of which maintains its own privacy policies that you are encouraged to review independently.

2. Data Controller Information

For the purposes of this Policy, mv77 acts as the data controller in respect of the personal data you provide when using the platform. As data controller, mv77 determines the purposes and means by which your personal data is processed. If you have any questions or concerns about this Policy or wish to exercise any of your data rights, you may contact us using the details provided in Section 14 of this Policy.

Our primary contact for data protection queries is our support team, reachable at: [email protected] (plain text — not a clickable link). We aim to respond to all data-related enquiries within five (5) business days.

3. Personal Data We Collect

3.1 Registration Data

When you create an mv77 account, we collect the following information:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Mobile phone number or email address used as your account identifier;
• Preferred username;
• Password (stored in encrypted, hashed form — never in plain text);
• City or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).

3.2 Identity Verification Data

To comply with our Know Your Customer (KYC) obligations and to confirm that all players meet the 21+ age requirement, we may request one or more of the following documents at account opening or before processing a withdrawal:

• National Identity Card (NID), passport, or driving licence (front and back);
• Proof of address — a utility bill, bank statement, or mobile wallet statement dated within the last three months;
• Proof of payment method ownership — a screenshot or statement confirming the bKash, Nagad, Rocket, Upay, or bank account is registered in your name.

Identity documents submitted for verification are handled with the highest level of confidentiality. They are reviewed by our compliance team and, where applicable, by our third-party identity verification partner, and are not used for any purpose beyond verification.

3.3 Financial Transaction Data

When you make a deposit or request a withdrawal, we record the transaction amount, timestamp, payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard), and transaction reference number. We do not store full card numbers or mobile banking PINs — payment credentials are processed directly by our payment service partners under their own security standards.

3.4 Gameplay & Betting Data

We maintain records of your gaming and betting activity on the mv77 platform, including game sessions, bet amounts, results, wagering history, and bonus usage. This data is used to manage your account balance accurately, apply responsible gaming tools such as deposit and loss limits, detect unusual or fraudulent activity, and resolve any disputes that may arise.

3.5 Technical & Device Data

When you access mv77, our servers automatically record certain technical information, including:

• IP address and approximate geolocation (country and city-level);
• Browser type and version;
• Device type, operating system, and screen resolution;
• Pages visited, time spent on each page, and navigation path;
• Referring URL (the page or link that directed you to mv77);
• Session start and end timestamps.

This technical data is used to maintain platform security, optimise performance, detect fraud and unauthorised access, and analyse how players navigate the platform so we can improve the user experience.

3.6 Communications Data

When you contact mv77 customer support by email, live chat, or any other channel, we retain a record of the communication — including the content of messages, the time and date of contact, and the resolution outcome. This enables us to provide consistent support, train our teams, and resolve any follow-up queries relating to the same issue.

4. How We Use Your Data

The table below summarises the primary purposes for which mv77 processes your personal data:

We do not use your personal data for any purpose not listed above without first notifying you and, where required by applicable law, obtaining your explicit consent.

5. Legal Basis for Processing

mv77 processes your personal data only where a valid legal basis exists. The principal legal bases we rely on are as follows:

• Contract performance: Processing that is necessary to deliver the services you have signed up for — including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including age verification, anti-money-laundering checks, and record-keeping obligations;
• Legitimate interest: Processing that serves mv77's reasonable business interests in a manner that does not override your fundamental privacy rights — such as fraud prevention, platform security, and general analytics;
• Consent: Where we rely on your consent — for example, to send you promotional communications — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

6. Data Sharing & Third Parties

mv77 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. We share your data only in the following limited circumstances and always subject to appropriate contractual data protection safeguards:

6.1 Payment Service Providers

To process deposits and withdrawals, we share necessary transaction data with our payment partners — including mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) as well as international card networks (Visa, Mastercard). These partners process payment data under their own privacy policies and security standards.

6.2 Identity Verification Partners

For KYC compliance, we may share identity document data with a third-party verification service. This partner is contractually prohibited from using your data for any purpose beyond identity verification on behalf of mv77.

6.3 Game Studio Providers

When you play a game on the mv77 platform provided by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — a session token is transmitted to that studio's servers to initialise the game. This token does not contain your full personal details; it identifies the session rather than the individual player by name.

6.4 Legal and Regulatory Disclosure

mv77 may disclose personal data to law enforcement authorities, regulatory bodies, or courts if required to do so by applicable law, valid legal process, or in response to a credible threat of harm. We will, where permitted by law, notify you of any such disclosure request.

6.5 Business Transfers

In the event that mv77 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by the platform may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy policy applicable to your data following the event.

7. International Data Transfers

Some of mv77's service providers and game studio partners operate infrastructure located outside of Bangladesh. Where personal data is transferred to servers or processors in other countries, mv77 takes steps to ensure that appropriate safeguards are in place — such as standard contractual clauses or equivalent protections — so that your data receives a level of protection consistent with the principles described in this Policy.

By using the mv77 platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh as part of delivering the services described in the Terms & Conditions.

8. Data Retention

mv77 retains personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by applicable law. The following retention periods generally apply:

• Account and registration data: Retained for the duration of the account relationship, plus five (5) years following account closure to meet financial record-keeping obligations;
• Identity verification documents: Retained for five (5) years from the date of submission or account closure, whichever is later;
• Transaction records: Retained for seven (7) years from the date of each transaction in line with standard financial record-keeping requirements;
• Gameplay and betting logs: Retained for three (3) years for dispute resolution and responsible gaming monitoring purposes;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Technical and device logs: Retained for ninety (90) days for security and fraud monitoring purposes, after which they are automatically deleted;
• Marketing preference data: Retained until you withdraw consent or request erasure, whichever is earlier.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9. Security Measures

mv77 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mv77 platform;
• Password hashing using industry-standard cryptographic algorithms — plaintext passwords are never stored;
• Session tokenisation — access tokens are short-lived and invalidated immediately upon logout;
• Role-based access controls limiting internal access to personal data to staff with a genuine operational need;
• Regular security audits and vulnerability assessments of the platform infrastructure;
• Automatic account lockout after repeated failed login attempts to protect against brute-force attacks;
• Encrypted storage of identity verification documents with restricted access permissions.

10. Cookies & Tracking Technologies

The mv77 platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience. A cookie is a small text file placed on your device by your browser when you visit the platform. Cookies are used for the following purposes:

• Strictly necessary cookies: Required for the platform to function — for example, maintaining your login session, storing your language preference, and keeping items in your account visible across pages. These cannot be disabled without breaking core functionality;
• Performance cookies: Used to collect anonymous analytics data about how players navigate the platform, which pages are visited most frequently, and where errors occur. This data is used to improve platform performance and usability;
• Functional cookies: Used to remember your preferences — such as your preferred lobby view or responsible gaming settings — across sessions;
• Security cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and cross-site request forgery (CSRF) attacks.

mv77 does not use third-party advertising cookies or behavioural tracking technologies that share your browsing data with external advertising networks. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect the functionality of your account.

11. Your Privacy Rights

As a player on the mv77 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) days of receiving a valid request.

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is used and with whom it is shared;
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay;
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal retention obligation applies;
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute over its accuracy is being resolved;
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format;
• Right to object: You may object at any time to processing based on our legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will not charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive. In such cases, we reserve the right to charge a reasonable administrative fee or refuse to act on the request, in which case we will explain our reasons.

12. Children & Minors

The mv77 platform is strictly for adults aged 21 years and above. mv77 does not knowingly collect or process personal data relating to individuals under the age of 21. Registration on the platform constitutes a declaration by the registrant that they are at least 21 years of age. If mv77 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately, the account will be closed, and any funds held in the account will be handled in accordance with the Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered an account with mv77, please contact us immediately at [email protected] so that we can take prompt action.

13. Changes to This Policy

mv77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services offered on the platform. Where material changes are made, we will provide notice to registered players via the email address associated with their account or via a prominent notice displayed on the platform, with a minimum of seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this document will always reflect when the most recent revision was made. Continued use of the mv77 platform following the effective date of any revision constitutes your acceptance of the updated Policy. The current version of this Policy is always available at https://mv77.im/privacy-policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how mv77 has handled your personal data, please contact our support team. We treat all data-related enquiries seriously and commit to responding within five (5) business days.

Contact us at: [email protected] (plain text — not a clickable link). Please include "Privacy" or "Data Rights" in the subject line of your message to ensure prompt routing to the appropriate team.

If you are not satisfied with our response to a complaint or believe that our processing of your personal data violates applicable data protection principles, you have the right to escalate your complaint to the relevant supervisory authority or seek legal recourse through the courts. mv77 will cooperate fully with any such process.