Your Privacy Matters at mcws

mcws is an online casino and sports betting platform accessible at https://mcws.app, serving players across Bangladesh. References in this Privacy Policy to "mcws", "we", "us", or "our" refer to the entity that owns and operates the mcws platform. Our primary point of contact for all privacy-related matters is our support team, reachable at [email protected].

mcws operates as a data controller in respect of the personal data of registered players and website visitors. This means we determine the purposes for which and the means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under our instruction and are subject to binding contractual obligations of confidentiality and security.

This Privacy Policy applies to all personal data collected by mcws through the following channels:

• The mcws website at https://mcws.app and all sub-pages thereof.
• The mcws progressive web application (PWA) and any associated mobile interface.
• Account registration, login, and KYC verification processes.
• Financial transactions, including deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank, and withdrawal requests.
• Communications you initiate with mcws via email, live chat, or any other supported channel.
• Participation in promotions, tournaments, bonuses, or any other mcws marketing activity.

This policy does not apply to third-party websites or services that may be referenced or linked from the mcws platform. mcws is not responsible for the privacy practices of any third-party operator.

mcws collects the following categories of personal data. The table below sets out each category, the specific data points within it, and the primary reason for collection:

mcws does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, or biometric data for the purpose of uniquely identifying a person, except where a government-issued identity document submitted for KYC purposes happens to include such information as part of the document itself.

mcws collects personal data through the following means:

• Directly from you — when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a mcws survey or promotion.
• Automatically through your use of the platform — via server logs, cookies, and similar tracking technologies that record your IP address, device fingerprint, session activity, and interaction patterns as you navigate the mcws website or application.
• From payment service providers — when you initiate a deposit or withdrawal, our payment partners (bKash, Nagad, Rocket, Upay, and the relevant banks) may transmit confirmation references, account identifiers, and transaction metadata to mcws to enable reconciliation and fraud detection.
• From game software providers — providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may transmit anonymised session identifiers and game-round results to mcws for the purpose of account crediting and dispute resolution. These providers do not share personally identifiable information with mcws beyond what is necessary for this purpose.
• From fraud prevention and identity verification partners — mcws may receive risk scores, flagged device identifiers, or verification outcomes from third-party fraud detection services that we engage as part of our KYC and anti-money laundering (AML) compliance programme.

mcws processes your personal data only where a valid legal basis exists. The following legal bases apply to our data processing activities:

• Contractual necessity — processing is necessary to perform the contract between you and mcws, including account creation, deposit and withdrawal processing, game service delivery, and KYC verification required to permit withdrawals.
• Legal obligation — processing is required for mcws to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, record-keeping obligations, and age verification mandates.
• Legitimate interests — processing is necessary for mcws's legitimate business interests, including platform security, fraud prevention, responsible gaming monitoring, product improvement, and aggregate statistical analysis, provided those interests are not overridden by your rights and interests.
• Consent — where mcws relies on your consent as the legal basis for processing (principally for direct marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mcws uses the personal data we collect for the following specific purposes:

• Account management — creating and maintaining your mcws account, verifying your identity and age (21+ requirement), managing your login credentials, and processing your account closure requests.
• Payment processing — facilitating deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, reconciling transactions, and maintaining accurate financial records.
• Game service delivery — connecting you to casino games from Pragmatic Play, Evolution, NetEnt, Microgaming, and other providers; crediting winnings; applying bonus offers; and resolving game-round disputes.
• Responsible gaming — monitoring gameplay patterns for signs of problem gambling, enforcing deposit limits and self-exclusion requests you have activated, and proactively contacting players who exhibit high-risk behavioural indicators.
• Fraud prevention and AML — screening transactions and account activity against fraud risk indicators and anti-money laundering policies; investigating suspicious activity; and complying with applicable financial crime prevention obligations.
• Customer support — responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance purposes.
• Marketing and promotions — where you have opted in, sending you personalised promotional offers, bonus notifications, seasonal campaign messages (e.g., BPL cricket season, Eid, Victory Day), and platform news via email or SMS.
• Platform analytics and improvement — analysing aggregated, anonymised usage data to understand player preferences, identify technical issues, and improve the performance, design, and content of the mcws platform.
• Legal compliance and record-keeping — retaining transaction and account records for the periods required by applicable law, and providing records to regulatory or law enforcement authorities where lawfully required.

mcws does not sell, rent, or commercially trade your personal data with any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the minimum data required to process your deposit or withdrawal transaction.
• Game software providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed providers receive anonymised session tokens to facilitate game delivery and round result verification.
• KYC and fraud detection partners — third-party identity verification and fraud screening services receive the data necessary to perform verification checks and risk assessments on behalf of mcws.
• IT infrastructure and hosting providers — cloud hosting, database, and security service providers who process data as data processors under binding agreements with mcws that prohibit independent use of your data.
• Legal and regulatory authorities — mcws will disclose personal data to courts, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. mcws will, where legally permissible, notify you of any such disclosure.
• Business successors — in the event of a merger, acquisition, or sale of substantially all assets of mcws, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

All third-party processors engaged by mcws are contractually bound to process your personal data only for the specified purpose, to maintain appropriate security measures, and to delete or return the data upon termination of the engagement.

mcws uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) on the mcws platform. These technologies serve the following functions:

• Strictly necessary cookies — required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. You cannot opt out of these cookies while using the platform.
• Functional cookies — remember your preferences such as language selection, preferred currency display, and responsible gaming notification settings between sessions.
• Analytics cookies — collect anonymised data about page views, session duration, bounce rate, and navigation paths to help mcws understand how players interact with the platform and identify areas for improvement. mcws uses privacy-respecting analytics tools that do not share data with advertising networks.
• Security cookies — detect and prevent fraudulent login attempts, bot traffic, and coordinated abuse patterns. These cookies analyse device fingerprint data and behavioural signals to assess session risk.

You can control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the mcws platform. Disabling functional cookies may cause your saved preferences to be lost between sessions.

mcws retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, mcws will either securely delete the data or irreversibly anonymise it so that it can no longer be associated with any individual. In the event of an ongoing legal dispute or regulatory investigation, mcws may extend retention of the relevant data until the matter is fully resolved.

mcws takes the security of your personal data seriously and has implemented the following technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• Transport security — all data transmitted between your device and the mcws platform is encrypted using 256-bit SSL/TLS. mcws enforces HTTPS on all pages and applies HTTP Strict Transport Security (HSTS) to prevent protocol downgrade attacks.
• Password security — player passwords are never stored in plain text. They are hashed using a modern adaptive hashing algorithm (bcrypt with appropriate cost factor) before storage. mcws staff cannot view your password.
• Access controls — access to personal data held in mcws systems is restricted on a strict need-to-know basis. All staff access is subject to role-based permissions, multi-factor authentication, and activity logging.
• KYC document vaulting — identity documents submitted for KYC verification are stored in an isolated, encrypted vault with separate access credentials from the main platform database. Access logs are reviewed regularly.
• Real-time fraud monitoring — mcws operates continuous, automated monitoring of account activity and transaction patterns to detect and respond to suspicious behaviour in real time.
• Vulnerability management — mcws conducts regular security assessments and promptly remediates identified vulnerabilities. Third-party penetration testing is performed periodically.

In the event of a personal data breach that poses a risk to your rights and interests, mcws will notify affected players without undue delay and take immediate steps to contain and remediate the breach. mcws will also notify relevant authorities as required by applicable law.

Subject to applicable law, you have the following rights in respect of your personal data held by mcws. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". mcws will acknowledge your request within 24 hours and provide a substantive response within 30 days.

• Right of access — you may request a copy of all personal data mcws holds about you, together with information about how it is being used.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it without undue delay.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to mcws's legal retention obligations.
• Right to restriction — you may request that mcws restrict the processing of your personal data in certain circumstances, such as while you contest its accuracy or pending resolution of an objection.
• Right to data portability — where processing is based on your consent or on contractual necessity and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object to marketing — you may withdraw your marketing consent and opt out of all promotional communications at any time by updating your account settings or contacting [email protected].
• Right to object to legitimate-interests processing — you may object to processing based on legitimate interests on grounds relating to your particular situation. mcws will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

The mcws platform is strictly restricted to individuals who are 21 years of age or older. mcws does not knowingly collect, process, or retain any personal data from persons under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If mcws becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately suspended, all associated data will be deleted (subject to any legal retention obligations for AML or fraud investigation purposes), and any deposited funds will be returned to the originating payment method. All winnings accrued on an underage account will be forfeited in full.

Parents and guardians are encouraged to install parental control software on shared devices to prevent minors from accessing online gambling platforms including mcws. If you believe a minor has created an account on the mcws platform, please contact us immediately at [email protected].

The mcws platform does not include outbound links to third-party websites for commercial or advertising purposes. Any references to third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) or payment service providers (bKash, Nagad, Rocket, Upay) within the mcws platform are made for informational and functional purposes only and do not constitute endorsement of, or responsibility for, the privacy practices of those third parties.

If you navigate away from mcws to any third-party website or application, including via your mobile browser or a payment app, mcws's Privacy Policy does not apply to data collected by that third party. mcws strongly encourages you to read the privacy policy of any third-party service you use in connection with your mcws account.

mcws's primary operations and data storage infrastructure are designed to serve the Bangladesh market. In certain circumstances, personal data may be processed by service providers (such as cloud hosting providers or game software providers) whose servers are located outside Bangladesh. Where such transfers occur, mcws ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection principles.

Safeguards for international transfers may include contractual clauses that impose data protection obligations on the recipient, or reliance on the recipient's certification under a recognised privacy framework. If you would like further information about the specific safeguards in place for any particular transfer, please contact us at [email protected].

mcws reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features of the mcws platform. When material changes are made, we will publish the updated policy at https://mcws.app/privacy-policy with a revised effective date prominently displayed at the top of the document.

Where changes are material — for example, where we introduce a new purpose for processing your data or a new category of third-party recipient — mcws will notify registered players via the email address on file at least 14 days before the changes take effect, where reasonably practicable.

Your continued use of the mcws platform after the revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with any material change, you may close your account in accordance with Section 15 of the Terms & Conditions, and we will delete your data in accordance with the retention schedules set out in Section 9 of this policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how mcws has handled your personal data, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, including during Eid, Pohela Boishakh, and all Bangladesh public holidays.

Email: [email protected]

Please include your registered username and a clear description of your query or complaint. We will acknowledge your message within 24 hours and aim to resolve all privacy-related matters within 30 days. Where a complaint is complex or requires third-party input, we will keep you informed of progress at regular intervals.

If you are not satisfied with our response to your complaint, you may escalate the matter through the appropriate dispute resolution channels available under applicable Bangladeshi law.