Privacy Policy — mal69

mal69 ("we", "us", "our") is committed to protecting the privacy of everyone who uses the mal69 Platform — whether you are browsing our casino game catalogue, placing a cricket bet, depositing via bKash or Nagad, or simply reading our promotional pages. This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we use that data, the circumstances under which we share it, and the rights available to you as a data subject.

This Policy applies to all users of the mal69 website at https://mal69.bet and any associated mobile-optimised pages. By creating an account or continuing to use the Platform after this Policy has been posted, you acknowledge that you have read and understood its contents.

🛡️ Our Privacy Commitments

1. Introduction & Scope

This Policy covers all personal data processed by mal69 in connection with the operation of its online casino and sports betting platform. "Personal data" means any information that identifies or could reasonably be used to identify a living individual — including names, contact details, financial information, device identifiers, and records of gaming activity associated with a named account.

This Policy does not apply to third-party websites or services that may be referenced on the Platform. Where the Platform integrates games or services provided by third-party software providers (such as Pragmatic Play or Evolution Gaming), those providers operate under their own privacy policies for data generated within their game environments. mal69 does not control and is not responsible for those third-party privacy practices.

2. Data We Collect

The data we collect falls into three broad categories: data you provide directly, data generated automatically through your use of the Platform, and data received from third-party service providers who help us operate the Platform.

Data You Provide Directly

• Registration data: full name, date of birth, mobile number, email address, and a username of your choosing. This data is collected when you create your mal69 account.
• KYC verification documents: government-issued photo identification (e.g. National ID, passport), proof of residential address, and, where required, documentation confirming ownership of a payment method.
• Payment information: transaction references, deposit and withdrawal amounts in BDT, and the mobile wallet or card type used. We do not store full card numbers or mobile banking PINs.
• Support correspondence: messages, emails, and chat transcripts submitted to the mal69 support team.
• Responsible gaming self-declarations: any voluntary disclosures you make when setting deposit limits, requesting time-outs, or applying for self-exclusion.

Data Generated Automatically

• Device and connection data: IP address, browser type and version, operating system, device model, and screen resolution. This data is logged each time you connect to the Platform.
• Session and gameplay data: login timestamps, session duration, games played, bet amounts, game outcomes, and bonus activity. This data forms part of your account history and is used to ensure fair play and resolve disputes.
• Cookie and analytics data: page-view events, navigation paths, and feature interaction data collected via first-party analytics tools. See Section 7 for full cookie details.
• Fraud and security signals: unusual login patterns, multiple account indicators, and transaction anomaly flags generated by our risk management systems.

Data from Third-Party Service Providers

• Payment verification data: confirmation signals from bKash, Nagad, Rocket, Upay, Visa, and Mastercard confirming that a transaction has been initiated or completed.
• Identity verification results: pass/fail signals and document authenticity scores returned by our KYC verification partner when you submit identification documents.
• Fraud screening results: risk scores and flags returned by third-party fraud detection services. These results inform decisions about account access, withdrawal approval, and promotional eligibility.

3. How We Use Your Data

mal69 uses the personal data described above for the following specific purposes:

• Account creation and management: to set up your mal69 account, maintain your account records, verify your identity, and restore access if you forget your credentials.
• Transaction processing: to receive your deposits, process your withdrawal requests, reconcile account balances, and maintain accurate financial records in BDT.
• Platform security and fraud prevention: to detect and prevent unauthorised account access, duplicate accounts, bonus abuse, money laundering, and other prohibited conduct described in our Terms and Conditions.
• Regulatory compliance: to fulfil our obligations under applicable anti-money laundering (AML), counter-financing of terrorism (CFT), and Know Your Customer (KYC) requirements.
• Responsible gaming compliance: to enforce self-exclusion requests, apply deposit limits set by the player, send session time reminders, and identify patterns of play that may indicate problem gambling.
• Customer support: to respond to your enquiries, investigate complaints, and resolve disputes about game outcomes, transactions, or account status.
• Service improvement and analytics: to understand how players use the Platform, identify technical issues, test new features, and improve the overall user experience. Analytics data is used in aggregated, anonymised form wherever possible.

We do not use your personal data for automated decision-making that produces legal effects or similarly significant outcomes without a human review step. Where a system flag triggers a potential account restriction, a member of the mal69 compliance team reviews the case before any restriction is applied.

4. Legal Basis for Processing

mal69 processes personal data only where a valid legal basis exists. The primary bases we rely on are:

• Contractual necessity: processing that is necessary to perform our contract with you — for example, creating your account, processing deposits and withdrawals, and operating casino games you have chosen to play.
• Legal obligation: processing required to comply with applicable AML, CFT, KYC, and other regulatory requirements — including retaining transaction records for the legally required period.
• Legitimate interests: processing for fraud prevention, Platform security, responsible gaming enforcement, and service improvement, where those interests do not override your privacy rights.
• Consent: where we send you optional promotional communications (e.g. bonus offer emails or SMS notifications), we do so only with your prior consent, which you may withdraw at any time by contacting [email protected].

5. Sharing Your Data

mal69 does not sell, rent, or trade personal data. We share data with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Master card payment processors receive only the transaction reference data necessary to execute or verify your deposit or withdrawal. They do not receive your gameplay history or account balance.
• KYC and fraud screening partners: identity verification and fraud detection service providers receive the minimum data required to perform their verification or screening function. These providers are contractually bound to process data only for the purpose for which it was shared and to maintain equivalent security standards to those we apply ourselves.
• Law enforcement and regulators: where we are legally required to disclose data — for example, in response to a court order, a request from a financial intelligence unit, or an AML/CFT investigation — we will comply with the minimum disclosure necessary to satisfy that legal requirement.
• Game software providers: providers such as Pragmatic Play, Evolution Gaming, Spribe, and others may receive session tokens and bet identifiers to operate their games within the Platform. They do not receive your name, contact details, or financial information.

6. Payment Data & Financial Information

Financial transactions on the mal69 Platform are processed by licensed payment intermediaries. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is initiated through that provider's own secure interface. mal69 receives a confirmation token and the transaction amount — we do not at any point have visibility of your mobile banking PIN, OTP, or full card credentials.

Transaction records are retained for the period required under applicable financial regulations. These records are used solely for account reconciliation, dispute resolution, and compliance purposes. They are not shared with third parties except as described in Section 5.

7. Cookies & Tracking Technologies

mal69 uses cookies and similar browser storage technologies to keep the Platform functioning correctly and to understand how it is used. We do not use third-party advertising cookies or cross-site tracking pixels.

Types of Cookies We Use

• Strictly necessary cookies: required for the Platform to function. These include session authentication tokens that keep you logged in during a visit, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking the Platform.
• Functional cookies: remember your language preference and certain display settings so you do not need to re-configure them on each visit.
• Analytics cookies: collect anonymised, aggregated data about page views, session lengths, and feature interactions. This data helps us identify which parts of the Platform work well and which need improvement. No personal identifier is included in analytics reports.

Most mobile browsers allow you to view, manage, and delete cookies through the browser's privacy or settings menu. Deleting strictly necessary cookies will require you to log in again on your next visit. Disabling analytics cookies will not affect your ability to use the Platform.

8. Data Retention

mal69 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Our specific retention periods are:

• Active account data: retained for the duration of your account plus a minimum of five years following account closure, to satisfy financial record-keeping obligations.
• KYC documents: retained for five years from the date of verification, in line with standard AML record-keeping requirements.
• Support correspondence: retained for two years from the date of the last message in the conversation thread, unless the subject matter relates to an unresolved dispute or regulatory investigation, in which case it is retained until the matter is formally closed.

9. Your Privacy Rights

As a player on the mal69 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, email [email protected] with the subject line "Data Rights Request" and your registered mobile number for verification purposes.

• Right of access: you may request a copy of all personal data we hold about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct or complete it.
• Right to erasure: subject to legal retention requirements, you may ask us to delete your personal data. We will confirm erasure within 30 days unless a legal or contractual obligation prevents us from doing so, in which case we will explain the reason.
• Right to restrict processing: you may ask us to pause processing of your data while a rectification or erasure request is under review.
• Right to data portability: you may request your account data in a structured, machine-readable format (CSV or JSON) so that you can transfer it to another service if you choose.
• Right to withdraw consent: where we process data on the basis of your consent (e.g. promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

We will respond to all verified data rights requests within 30 calendar days. In complex cases, we may extend this to 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

10. Security Measures

mal69 implements a layered approach to data security. All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Our servers are hosted in access-controlled data centres with physical security controls, network-level firewalls, intrusion detection systems, and regular independent security audits. Account passwords are stored using industry-standard one-way hashing — we cannot retrieve your plaintext password, and our support staff will never ask you for it.

Despite these measures, no internet-based service can guarantee absolute security. If you suspect that your account has been accessed without your authorisation, please notify us immediately at [email protected] and change your password without delay. In the event of a data breach that is likely to result in a risk to your rights, mal69 will notify affected users promptly.

11. Children's Privacy

The mal69 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that an account has been registered by or data has been submitted by a person under 21, we will immediately close the account, delete the associated data, and return any balance to its source payment method. If you believe a minor has registered on the Platform, please contact [email protected] immediately.

12. Links to Third-Party Services

The Platform integrates games and payment interfaces provided by third-party vendors. These integrations may involve your browser communicating directly with third-party servers. Such communication is governed by the third party's own privacy policy, over which mal69 has no control. We encourage you to review the privacy policies of any third-party service you interact with through the Platform. mal69 is not responsible for the privacy practices of third-party game providers or payment processors.

13. Changes to This Privacy Policy

mal69 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. The date of the most recent update is shown at the top of this page. Where a change materially affects your privacy rights, we will endeavour to notify you via email or a Platform notification at least 14 days before the change takes effect. Continued use of the Platform after an updated Policy has been posted constitutes acceptance of the revised Policy.

14. Contact & Data Rights Requests

For all privacy-related enquiries, data rights requests, or to report a suspected data breach, please contact the mal69 data team by emailing [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. Include your registered mobile number in the message body so we can verify your identity before processing the request. We aim to acknowledge all privacy enquiries within one business day and to resolve them within 30 calendar days.