mnl168 Privacy Policy

1 Introduction

mnl168 ("we", "us", "our") is committed to protecting the privacy of every individual who accesses, registers on, or interacts with the mnl168 platform at mnl168.vu (the "Platform"). This Privacy Policy sets out in clear, formal terms how we collect, use, store, share, and protect personal data relating to our players, particularly those based in Bangladesh.

This Privacy Policy applies to all personal data processed in connection with your use of the mnl168 platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, and customer support interactions.

By registering an account or continuing to use the mnl168 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you should not register or continue to use the platform.

2 Data Controller

For the purposes of applicable data protection law, mnl168 acts as the data controller in respect of the personal data it collects directly from players through the mnl168 platform. As data controller, mnl168 determines the purposes and means by which personal data is processed.

Where mnl168 engages third-party service providers — such as payment processors, identity verification services, or game studios — those parties may act as data processors on mnl168's behalf, processing personal data solely on mnl168's documented instructions and subject to appropriate data processing agreements.

For all data-related enquiries, requests, or complaints, players may contact mnl168 directly via the contact details provided in Section 16 of this Privacy Policy.

3 Personal Data We Collect

mnl168 collects only the personal data that is necessary for the lawful and effective operation of the platform. The categories of personal data we collect are set out below.

3.1 Registration Data

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (for age verification — players must be 18 years or older);
• Residential address, including city, district, and postcode;
• Email address (used as your primary account identifier and for communications);
• Mobile telephone number (for account security and support purposes).

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (National Identity Card, passport, or driving licence);
• Proof of address documentation (utility bill, bank statement, or official government correspondence);
• Selfie or photographic likeness where required to confirm document authenticity.

3.3 Financial and Transaction Data

• Payment method details (bKash account number, Nagad account number, Rocket account number, Upay details, or bank account details);
• Deposit and withdrawal transaction history, including amounts in BDT, timestamps, and transaction reference numbers;
• Bonus and promotional credit history.

3.4 Gameplay and Activity Data

• Bet history, game session records, and wagering activity across all games on the platform;
• Login history, session duration, and device usage patterns;
• Responsible gaming tool usage, including self-exclusion records, deposit limit settings, and session time limit configurations.

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Cookie identifiers and session tokens (see Section 10 for full details).

3.6 Communications Data

• Records of all communications between you and mnl168 support, including emails, live chat transcripts, and support ticket submissions;
• Survey responses and feedback submissions where voluntarily provided.

4 How We Collect Your Data

mnl168 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion;
• Automatically — through cookies, server logs, and tracking technologies when you browse or interact with the mnl168 platform (see Section 10);
• From third-party service providers — identity verification partners may provide results of document checks; payment processors may confirm the status of transactions; fraud prevention services may provide risk assessments associated with your device or network.

5 How We Use Your Personal Data

mnl168 uses the personal data it collects for the following purposes:

mnl168 does not use personal data for automated decision-making that produces significant legal effects on players, except where such processing is required for fraud prevention or regulatory compliance purposes, in which case you have the right to request human review of any automated decision.

6 Legal Bases for Processing

mnl168 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, payment processing, and customer support;
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and fraud prevention regulations;
• Legitimate interests: Processing carried out in pursuit of mnl168's legitimate business interests, such as platform security, fraud detection, responsible gaming monitoring, and platform improvement — provided such interests are not overridden by your privacy rights;
• Consent: Where you have provided explicit consent for a specific processing activity, such as receiving promotional communications from mnl168. Consent may be withdrawn at any time by contacting [email protected], without affecting the lawfulness of processing carried out prior to withdrawal.

7 Sharing Your Personal Data

mnl168 does not sell, rent, or trade your personal data. We may share personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate confidentiality and data protection obligations:

7.1 Payment Processors

Transaction data is shared with payment processing partners — including mobile financial service operators such as bKash and Nagad — solely for the purpose of completing deposits and withdrawals in BDT. These partners process data under their own privacy policies and are contractually bound not to use your data for any other purpose.

7.2 Identity Verification Partners

KYC document data is shared with certified identity verification service providers to confirm that identity documents submitted by players are authentic and that players meet the age eligibility requirement of 18 years or older.

7.3 Game Studio Providers

When you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited session and gameplay data may be shared with those studios to enable the delivery of the game. Game providers are bound by strict data processing agreements and are not permitted to use this data for marketing or profiling purposes.

7.4 Legal and Regulatory Authorities

mnl168 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, court order, or legal process. In such cases, mnl168 will disclose only the minimum data necessary to satisfy the legal requirement.

7.5 Fraud Prevention Services

Technical and device data may be shared with fraud prevention and cybersecurity partners for the purpose of identifying and preventing fraudulent activity, money laundering, or account takeover attempts. This sharing is conducted under mnl168's legitimate interests in maintaining platform security.

8 International Data Transfers

mnl168 operates internationally and some of the third-party service providers described in Section 7 may be located in countries outside Bangladesh. Where personal data is transferred to a jurisdiction that may not offer the same level of data protection as Bangladesh, mnl168 ensures that appropriate safeguards are in place before any such transfer takes place.

Appropriate safeguards may include standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms. Players who wish to obtain further information about the international transfer safeguards applicable to their data may contact mnl168 at [email protected].

9 Data Retention

mnl168 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active accounts: Personal data is retained for the full duration of the account's active status and for a minimum period of five (5) years after account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC documents: Identity documents submitted for verification are retained for a minimum of five (5) years following the closure of the associated account, or for such longer period as may be required by applicable law.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five (5) years for financial audit and compliance purposes.
• Support communications: Records of support interactions are retained for three (3) years from the date of the most recent communication, except where a complaint remains unresolved or litigation is pending.
• Self-exclusion records: Records of self-exclusion requests are retained indefinitely to ensure that permanent self-exclusion decisions are respected in the event that a player attempts to re-register.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in such a manner that it can no longer be associated with an identified or identifiable individual.

10 Cookies & Tracking Technologies

mnl168 uses cookies and similar technologies (including session tokens and local storage) to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function correctly, including maintaining your login session, remembering your language preference, and securing your account. These cookies cannot be disabled without significantly impairing your use of the platform.
• Performance and analytics cookies: Used to collect aggregated and anonymised data about how players navigate and use the platform, enabling mnl168 to identify and fix usability issues and improve the overall player experience.
• Functional cookies: Used to remember your preferences and settings — such as your preferred game categories — so that the platform can deliver a more personalised experience on subsequent visits.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic, credential stuffing attempts, and session hijacking.

mnl168 does not use third-party advertising or behavioural targeting cookies. By continuing to use the mnl168 platform, you consent to the placement of strictly necessary and security cookies. Analytics and functional cookies are placed on the basis of your continued use of the platform, which constitutes implied consent consistent with standard industry practice.

11 Your Data Rights

As a player on the mnl168 platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact mnl168 at [email protected] with a clear description of your request. mnl168 will respond within 30 days of receiving a verifiable request.

• Right of access: You may request a copy of the personal data mnl168 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For most account details, you may update information directly through your account settings.
• Right to erasure: You may request that mnl168 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to mnl168's legal obligations to retain certain data as described in Section 9.
• Right to restriction of processing: You may request that mnl168 restrict processing of your personal data in specific circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that mnl168 provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing of your personal data where mnl168 relies on legitimate interests as the legal basis, including profiling based on legitimate interests. mnl168 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

12 Children's Privacy

18+ The mnl168 platform is strictly intended for adults aged 18 years and above. mnl168 does not knowingly collect personal data from individuals under the age of 18. If mnl168 becomes aware that personal data has been submitted by a person under the age of 18, it will immediately suspend the associated account and delete the personal data without delay.

Parents or guardians who believe that a minor has submitted personal data to mnl168 are encouraged to contact [email protected] immediately. mnl168 will treat all such reports with urgency and full confidentiality.

For further information about our commitment to protecting minors from gambling-related harm, please visit our Responsible Gaming page.

13 Security Measures

mnl168 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mnl168 platform;
• Encryption of sensitive personal data and financial information stored on mnl168 servers;
• Role-based access controls ensuring that only authorised staff may access personal data, and only to the extent required by their specific role;
• Regular internal security audits and vulnerability assessments;
• Multi-factor authentication requirements for internal platform administration access;
• Secure data backup procedures to ensure that personal data can be recovered in the event of a technical incident.

While mnl168 takes the security of your data seriously and applies industry-standard protections, no method of electronic transmission or storage is completely infallible. Players are encouraged to use strong, unique passwords for their mnl168 account and to contact [email protected] immediately if they suspect any unauthorised access to their account.

14 Third-Party Services and Links

The mnl168 platform integrates third-party services — including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver games and platform features. These third parties operate under their own privacy policies and data processing practices. mnl168 is not responsible for the privacy practices of third-party service providers beyond the data processing agreements and contractual obligations described in Section 7.

The mnl168 platform does not contain links to external third-party websites for browsing or marketing purposes. Any references to payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) are made solely in the context of transaction processing and do not constitute endorsement of those partners' privacy practices beyond the scope of the services they provide to mnl168.

15 Changes to This Privacy Policy

mnl168 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where changes are material, mnl168 will notify registered players via the email address associated with their account, or by displaying a prominent notice on the platform, at least 7 days before the changes take effect.

The version of this Privacy Policy currently in force is the version displayed on this page. The "Last updated" date at the top of this page reflects the date of the most recent revision. Players are encouraged to review this Privacy Policy periodically to stay informed about how mnl168 protects their personal data.

Continued use of the mnl168 platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any material change to this Privacy Policy, you should request account closure before the updated version takes effect.

16 Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or to the way in which mnl168 processes your personal data, please contact our support team using the details below:

All formal privacy complaints must be submitted in writing via email. mnl168 will acknowledge receipt within 24 hours and will endeavour to provide a full written response within 30 calendar days of receiving a verifiable and complete request. Where a request is particularly complex, mnl168 may extend this period by a further 30 days, in which case you will be notified in writing of the extension and the reasons for it.

For information about your rights under applicable data protection law, or if you are not satisfied with mnl168's response to your privacy complaint, you may wish to seek independent legal advice or contact the relevant data protection authority in your jurisdiction.