mxbet Privacy Policy
Your personal information is handled with the highest level of care on mxbet. This Privacy Policy explains exactly what data we collect, why we collect it, how it is stored and protected, and what rights you hold as a player based in Bangladesh.
Your Privacy at a Glance
These six principles summarise how mxbet approaches privacy and data protection for every player in Bangladesh.
Data Minimisation
mxbet collects only the personal data that is strictly necessary to operate your account, process your transactions, and comply with anti-fraud and age-verification obligations. We do not collect data beyond what is needed.
256-bit SSL Encryption
Every piece of data transmitted between your device and the mxbet platform is protected using industry-standard 256-bit SSL encryption. Your financial details, login credentials, and personal records are secured at all times.
No Unauthorised Selling
mxbet does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. Your information is used solely to operate and improve the mxbet service and fulfil legal obligations.
Transparent Processing
This policy clearly identifies every category of data mxbet collects and the specific lawful purpose for each. You will never be surprised by how your information is used — every processing activity is documented here.
Your Rights Respected
Players on mxbet hold meaningful rights over their personal data — including the right to access, correct, delete, and restrict processing. These rights can be exercised at any time by contacting our support team.
Cookie Control
mxbet uses cookies and similar tracking technologies to improve platform performance and personalise your experience. This policy gives you a full breakdown of the cookies in use and explains how to manage your preferences.
1. Data We Collect
mxbet collects personal data across several categories depending on how you interact with the platform. Below is a complete breakdown of every type of data we may hold about you.
2. How We Use Your Data
Every processing activity on mxbet is carried out for a clearly defined, lawful purpose. The table below maps each purpose to its legal basis and the categories of data involved.
3. Data Sharing & Third Parties
mxbet does not sell or trade your personal data to unaffiliated third parties for their own commercial use. However, in order to operate the platform effectively, we share data with a limited set of trusted service providers and partners, each of whom is contractually required to handle your data in accordance with applicable data protection standards.
3.1 Payment Processors
When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, your financial transaction data is shared with the relevant payment gateway or mobile financial service provider to process the transaction. These providers operate under their own privacy policies and security standards. mxbet does not retain full card numbers or mobile wallet PINs.
3.2 Game Technology Providers
mxbet partners with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver casino games and sports data feeds. These providers may receive pseudonymised session data (such as a session token and stake amounts) to facilitate game play. No directly identifiable personal data such as your name or NID number is shared with game studios.
3.3 Identity Verification Services
To comply with KYC and age-verification requirements, mxbet may engage third-party identity verification providers who process copies of your identity documents (NID, passport) on our behalf. These processors are bound by strict data processing agreements and are not permitted to use your data for any purpose other than identity verification for mxbet.
3.4 Analytics Providers
mxbet uses anonymised and aggregated analytics data to understand platform performance, player behaviour trends, and technical issues. Analytics providers process aggregated, non-identifiable data only and cannot be used to identify any individual player.
3.5 Legal and Regulatory Disclosure
mxbet may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by law or where there is a reasonable basis to believe disclosure is necessary to: investigate fraud, money laundering, or criminal activity; protect the rights or safety of mxbet, its players, or third parties; or comply with a valid legal process such as a court order or regulatory investigation.
Third-Party Sharing Summary
- Payment gateways (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — transaction processing only
- Game studios (Pragmatic Play, Evolution, NetEnt, etc.) — pseudonymised session data only
- KYC / identity verification providers — document verification under DPA
- Anonymised analytics providers — aggregate data only, no personal identifiers
- Law enforcement / regulators — only when legally required or obligated
- Cloud infrastructure providers — encrypted data storage under contractual safeguards
5. Data Retention
mxbet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with applicable legal, regulatory, financial, and audit obligations. The following general retention periods apply:
- Account Data (Identity & Contact): Retained for the lifetime of your active account, plus a minimum of 5 years following account closure — in line with anti-money laundering record-keeping requirements.
- Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial audit and AML compliance obligations.
- KYC Verification Documents: Retained for the duration of the account relationship and for 5 years after account closure. Document copies are stored in encrypted form.
- Gaming Activity Logs: Retained for 3 years from the date of each session. Aggregated, anonymised statistical data may be retained indefinitely for analytical purposes.
- Support & Communications Records: Retained for 2 years from the date of last interaction, unless the communication forms part of a formal dispute or legal proceeding, in which case records are retained until resolution plus 1 year.
- Marketing Consent Records: Retained for the duration of the consent plus 2 years after you withdraw consent, as evidence of the consent history.
- Cookie & Technical Data: Session cookies are deleted when you close your browser. Persistent analytics cookies are retained for a maximum of 12 months from the date of placement.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion of certain data would prevent mxbet from fulfilling a legal obligation (e.g., an ongoing AML investigation), the data will be retained until that obligation is resolved.
Retention at a Glance
6. Security Measures
mxbet employs a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your personal information against unauthorised access, loss, alteration, or disclosure.
6.1 Technical Safeguards
All data in transit between your device and the mxbet platform is protected using 256-bit SSL/TLS encryption — the same standard used by major international banks. Data at rest is encrypted using AES-256 encryption on all storage systems. Database access is restricted to authorised systems only and is not directly accessible from the public internet.
The mxbet platform operates behind a multi-layer firewall architecture with real-time intrusion detection and automated threat response systems. Distributed Denial of Service (DDoS) mitigation is active at the network edge to prevent service disruptions that could expose player data.
User passwords are never stored in plain text. Password hashing using a modern, salted algorithm ensures that even in the unlikely event of a data breach, your login credentials cannot be recovered in their original form. Multi-factor authentication (MFA) options are available to all registered players and are strongly recommended.
6.2 Organisational Safeguards
Access to player personal data within the mxbet organisation is governed by a strict least-privilege policy. Only personnel with a documented operational need are granted access to specific categories of data, and all access is logged and audited. Staff who handle personal data receive regular training on data protection responsibilities and information security best practices.
Third-party service providers who process data on mxbet's behalf are subject to rigorous vendor due diligence and are required to sign Data Processing Agreements (DPAs) that mandate equivalent security standards and restrict the use of data to the contracted purpose only.
Security Infrastructure Overview
256-bit SSL/TLS Encryption
All data in transit encrypted to banking-grade standards
AES-256 Data-at-Rest Encryption
All stored personal and financial data encrypted on disk
Real-Time Intrusion Detection
Automated threat monitoring with 24/7 security operations
Least-Privilege Access Controls
Staff data access restricted and audited on a need-to-know basis
Multi-Factor Authentication (MFA)
Available to all players for additional account login security
DDoS Mitigation
Network-edge protection to ensure platform availability and integrity
7. Your Privacy Rights
As a player on mxbet, you hold a meaningful set of rights over the personal data we hold about you. These rights can be exercised at any time by contacting our support team.
-
Right of Access
You have the right to request a copy of all personal data mxbet holds about you. We will provide this in a structured, readable format within 30 days of receiving your verified request. This includes your account data, transaction history, and gaming activity records. -
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details (such as your email address or phone number) directly in your account settings, or contact support for assistance with other data corrections. -
Right to Erasure
You may request that mxbet delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to overriding legal retention obligations — for example, financial transaction records must be retained for regulatory compliance purposes. -
Right to Restriction of Processing
You may request that mxbet restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or while an objection to processing is being considered. -
Right to Data Portability
For data that you have provided to mxbet and that is processed on the basis of consent or contractual necessity, you have the right to receive that data in a structured, machine-readable format and to request that it be transmitted to another service provider where technically feasible. -
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time with immediate effect. You may also object to processing carried out on the basis of legitimate interest, though mxbet may be able to demonstrate compelling grounds for continued processing in certain circumstances. -
Right to Withdraw Consent
Where mxbet processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
How to Exercise Your Rights
To exercise any of the privacy rights listed, please contact the mxbet data team using one of the following methods:
- Live Chat: Available 24/7 on the mxbet platform — the fastest way to submit a rights request
- Email: Send your request to with the subject line "Privacy Rights Request"
To protect your data, we will need to verify your identity before processing any rights request. Typically this means confirming your registered email address and one additional identifier (such as your registered mobile number).
mxbet will respond to all verified rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Rights requests are processed free of charge. Where requests are manifestly unfounded or repetitive, mxbet reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.
8. Changes to This Policy
mxbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, improvements to platform features, or changes in the regulatory environment affecting players in Bangladesh.
When material changes are made to this Privacy Policy — for example, changes that affect what data is collected, how it is used, or with whom it is shared — mxbet will provide advance notice to all registered players via their registered email address and/or by displaying a prominent notice on the platform. Such notice will be given at least 7 days before the amended policy takes effect, allowing you time to review the changes and, if you do not agree, to contact us to discuss your options including account closure.
For minor or administrative changes that do not materially affect your rights or how your data is processed — such as corrections of typographical errors, clarifications of existing descriptions, or formatting updates — mxbet may update the policy without advance notice, updating the "Last Updated" date shown at the top of this page.
Your continued use of the mxbet platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. It is your responsibility to periodically review this page to stay informed of how mxbet is protecting your information. The most current version of this Privacy Policy will always be accessible at mxbet.ws/privacy-policy.
If you have questions about how a specific change affects you, or if you would like to request a summary of what has changed since the previous version, please contact our support team via live chat or at .
Policy Version Information
Explore mxbet with Confidence
Now that you understand how mxbet protects your data, you can enjoy everything the platform has to offer — from cricket betting and live casino games to the latest slots and new game releases.
18+ Gambling involves risk. Please play responsibly. For adults aged 18 and above only.