mcw5 Privacy Policy

1. Introduction

mcw5 is Bangladesh's premier online betting and casino platform, operating at mcw5.io and offering sports betting markets, live casino games, slot games, and related services to players aged 21 and above. As part of operating a responsible and trustworthy platform, mcw5 takes the privacy and security of your personal data extremely seriously.

This Privacy Policy sets out in plain language what personal data mcw5 collects from you, the purposes for which that data is used, the legal basis on which processing takes place, the circumstances in which data may be shared with third parties, and the rights you have as the owner of your personal data. We have written this document to be as clear and accessible as possible, while maintaining the legal accuracy required of a formal privacy notice.

If you have any questions about this Privacy Policy or about how mcw5 handles your personal data, please contact our support team at [email protected]. We will respond to all privacy-related enquiries within five business days.

2. Data Controller

For the purposes of this Privacy Policy, mcw5 acts as the data controller in respect of personal data collected from players and visitors to the mcw5 platform. As data controller, mcw5 determines the purposes for which personal data is collected and the manner in which it is processed. All enquiries relating to data control, data access requests, correction requests, and erasure requests should be directed to:

• Platform Name: mcw5
• Website: mcw5.io
• Contact Email: [email protected]
• Operating Market: Bangladesh
• Support Hours: 7 days a week, Bangladesh Standard Time (BST, UTC+6)

mcw5 does not have a registered physical address that is disclosed publicly. All formal communications regarding data protection matters must be submitted in writing via email to [email protected] to ensure a proper record is maintained.

3. Data We Collect

mcw5 collects personal data from you in connection with your use of the platform. The categories of personal data we collect are as follows:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, NID or passport number, photograph	Registration and KYC verification
Contact Data	Mobile phone number, email address, residential address (Dhaka, Chittagong, Sylhet, etc.)	Registration and account management
Financial Data	bKash account number, Nagad number, Rocket number, Upay account, transaction history, deposit and withdrawal amounts in BDT	Deposits, withdrawals, and payment processing
Activity Data	Bets placed, games played, session durations, win/loss history, bonus claims, wagering records	Ongoing platform use
Technical Data	IP address, device type, operating system, browser type, screen resolution, unique device identifiers	Each platform session via automatic collection
Usage Data	Pages visited, features used, search queries, click patterns, referral source	Each platform session via cookies and analytics
Communications Data	Support emails, chat transcripts, complaint submissions, feedback forms	When you contact mcw5 support
Responsible Gaming Data	Deposit limits set, self-exclusion requests, reality check settings, time-out requests	When responsible gaming tools are used

mcw5 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data — except where a government-issued identity document used for KYC verification may incidentally contain some of this information. In such cases, the document is processed solely for identity verification purposes and is not used for any other purpose.

4. How We Collect Your Data

mcw5 collects your personal data through the following methods:

• Direct collection: Information you provide to us voluntarily when you register for an account, complete the KYC process, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion;
• Automated collection: Technical and usage data collected automatically each time you access the mcw5 platform, via cookies, log files, web beacons, and similar tracking technologies — see Section 9 (Cookies & Tracking) for full details;
• Third-party sources: Identity verification data received from KYC service providers; payment status data received from bKash, Nagad, Rocket, and Upay; fraud detection signals from our anti-fraud partners; and aggregate analytics data from our platform analytics providers.

mcw5 only collects personal data that is necessary for the specific purpose for which it is collected. We do not collect excessive or irrelevant data, and we do not retain data for longer than is necessary — see Section 7 (Data Retention) for our full retention schedule.

5. Purpose & Legal Basis for Processing

mcw5 processes your personal data for specific, legitimate purposes. Each processing activity is conducted on one or more of the following legal bases:

• Contract performance: Processing necessary to create and maintain your account, process your deposits and withdrawals, settle your bets, issue bonuses, and provide all other platform services you have requested;
• Legal obligation: Processing required to comply with applicable laws including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, fraud prevention obligations, and responses to lawful requests from competent authorities;
• Legitimate interests: Processing conducted for mcw5's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, product improvement, and internal analytics — provided that these interests do not override your fundamental privacy rights;
• Consent: Processing based on your explicit, freely given consent, including sending promotional emails, push notifications, and personalised bonus offers. You may withdraw consent for marketing communications at any time by contacting [email protected].

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact	Contract performance
KYC and age verification	Identity, financial	Legal obligation
Payment processing	Financial, identity	Contract performance
Fraud and AML detection	Identity, financial, technical	Legal obligation + legitimate interests
Platform analytics and improvement	Usage, technical	Legitimate interests
Responsible gaming monitoring	Activity, responsible gaming	Legal obligation + legitimate interests
Marketing communications	Contact, activity	Consent
Customer support	Communications, identity	Contract performance

6. Data Sharing & Disclosure

mcw5 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose:

• Payment service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay receive the minimum personal data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by their own data protection obligations;
• KYC and identity verification providers: Third-party identity verification services receive copies of your identity documents and personal details solely for the purpose of confirming your identity and age in compliance with our KYC obligations;
• Casino game providers: Providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and Vivo Gaming may receive your player ID and session data in order to facilitate game delivery, calculate results, and resolve disputes. These providers do not receive your full identity or payment data;
• Fraud and AML partners: Specialist fraud detection and anti-money laundering service providers may receive transaction data and behavioural signals to assist mcw5 in identifying and preventing financial crime;
• Legal and regulatory authorities: mcw5 will disclose your personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction — regardless of whether such disclosure has been preceded by a formal request;
• Platform analytics providers: Aggregated, anonymised or pseudonymised usage data may be shared with analytics providers to help mcw5 understand how the platform is used. This data does not directly identify you;
• Business transfers: In the event that mcw5's business or any part of it is acquired, merged, or transferred to another entity, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and of any material change to privacy practices that may result from it.

7. Data Retention

mcw5 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our data retention principles are as follows:

• Active account data: Personal data associated with an active mcw5 account is retained for the full duration of the account's active status;
• Closed account data: Following account closure, mcw5 retains core identity data, transaction records, and betting history for a minimum of five years in compliance with AML and financial record-keeping obligations;
• KYC documents: Identity and address verification documents are retained for five years from the date of account closure or from the date of the last transaction, whichever is later;
• Support communications: Records of customer support interactions are retained for three years from the date of the interaction to support dispute resolution and service improvement;
• Marketing consent records: Records of your marketing consent or opt-out are retained for as long as they remain relevant to our compliance obligations;
• Technical logs: IP address logs and device access records are retained for a rolling period of twelve months and then deleted or anonymised.

When the applicable retention period expires, personal data is either securely deleted or anonymised in a manner that makes it impossible to re-identify you from the remaining data. Anonymised data may be retained indefinitely for aggregate statistical analysis.

8. Security Measures

mcw5 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and mcw5 servers;
• Encrypted data storage for all sensitive personal information held in our databases;
• Access controls limiting access to personal data strictly to mcw5 personnel who require it to perform their job functions;
• Two-factor authentication requirements for staff accessing internal systems that contain personal data;
• Regular security audits and penetration testing conducted by specialist security partners to identify and remediate vulnerabilities;
• Intrusion detection systems that monitor platform traffic for anomalous patterns indicative of unauthorised access attempts;
• Secure backup procedures ensuring that data can be recovered promptly in the event of a system failure or incident.

9. Cookies & Tracking Technologies

mcw5 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the mcw5 website. Cookies help us recognise your device on subsequent visits, maintain your login session, remember your preferences, and understand how you use the platform.

The categories of cookies used by mcw5 are as follows:

• Strictly necessary cookies: These cookies are essential to the operation of the mcw5 platform. They maintain your login session, remember your account settings, and enable core platform functions such as the bet slip and game lobby. These cookies cannot be disabled without causing the platform to malfunction;
• Performance and analytics cookies: These cookies collect anonymised data about how visitors use the mcw5 platform — which pages are visited most frequently, how long sessions last, and which features are used most often. This data helps mcw5 identify areas for improvement. No personally identifiable information is collected by these cookies;
• Functional cookies: These cookies remember your preferences — such as your preferred language, currency display settings, and responsible gaming limits — to provide a more personalised experience on return visits;
• Security cookies: These cookies help mcw5 detect and prevent fraudulent activity, including bot traffic, account takeover attempts, and automated abuse of platform features.

mcw5 does not use third-party advertising cookies or behavioural tracking cookies that build profiles of your activity across unaffiliated websites. All cookies used by mcw5 are either set directly by mcw5 (first-party) or by our essential service providers (such as our game delivery infrastructure).

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the mcw5 platform. Disabling performance or functional cookies will not prevent you from using the platform but may affect some personalisation features.

10. Your Data Rights

As a player and user of the mcw5 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. mcw5 will respond to all valid data rights requests within thirty calendar days of receipt.

Please note that some rights are subject to limitations. For example, mcw5 cannot erase data that is required to be retained under AML or financial record-keeping obligations, and cannot provide access to data that would reveal confidential information about another person. Where a request cannot be fulfilled in full, mcw5 will explain the reason in its response.

11. Minors & Age Policy

Parents and guardians who believe that a minor under their care has registered on the mcw5 platform should contact [email protected] immediately. mcw5 will investigate the matter urgently, close the account, and delete the relevant data within five business days of a confirmed report. mcw5 uses date-of-birth verification at registration and KYC document checks to enforce the 21+ age requirement. Any person who provides false date-of-birth information to circumvent this restriction is in material breach of the mcw5 Terms & Conditions.

12. International Data Transfers

mcw5 operates primarily for players located in Bangladesh. However, some of the third-party service providers we use to operate the platform — including game studios (such as Evolution Gaming, Pragmatic Play, and Microgaming), KYC verification providers, and analytics services — may process data in countries outside Bangladesh.

Where personal data is transferred internationally, mcw5 takes steps to ensure that an adequate level of protection is applied to that data. This may include entering into data processing agreements with the relevant third parties that incorporate standard data protection clauses, or relying on the third party's participation in a recognised data protection framework.

By using the mcw5 platform and accepting this Privacy Policy, you consent to the transfer of your personal data to countries outside Bangladesh for the purposes described in this policy, subject to the safeguards described above.

13. Third-Party Services

The mcw5 platform integrates with a number of third-party services to deliver a complete betting and gaming experience. These integrations involve limited data sharing as described in Section 6. The key third-party services operating within the mcw5 platform ecosystem are:

• Game providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe, and Vivo Gaming supply the live casino, table game, and slot content available on mcw5. These providers receive your player session ID and game activity data to deliver game results and resolve any technical disputes. They operate under their own privacy and data security frameworks;
• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay process deposit and withdrawal transactions in Bangladeshi Taka. These providers are regulated financial institutions in Bangladesh and maintain their own data protection obligations under Bangladesh Bank guidelines;
• Identity verification services: Third-party KYC providers process identity document images and biographic data to verify your identity and age. These providers are contractually bound to use your data solely for verification purposes and to delete documents after the verification process is complete or after the retention period required by our AML obligations;
• Analytics providers: Platform analytics services receive anonymised usage data to help mcw5 understand player behaviour patterns, optimise the user interface, and identify technical issues. No personally identifiable data is shared with analytics providers;
• Security and fraud detection services: Specialist cybersecurity and fraud prevention providers receive transaction signals and behavioural data to assist mcw5 in detecting account takeover attempts, bonus abuse, and money laundering patterns.

mcw5 is not responsible for the privacy practices of third-party websites or services that may be linked from or referenced on the mcw5 platform. We encourage you to review the privacy policies of any third-party service you interact with directly.

14. Changes to This Privacy Policy

mcw5 reserves the right to update, revise, or replace any part of this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. When material changes are made to this Privacy Policy, mcw5 will notify registered players by email to the address held on their account, and will publish the revised policy on the mcw5 platform with an updated effective date prominently displayed at the top of the document.

Minor changes — such as clarifications, corrections of typographical errors, or formatting improvements that do not alter the substance of any provision — may be made without specific prior notice. The effective date shown at the top of this document will always reflect the date of the most recent revision.

Your continued use of the mcw5 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Privacy Policy, you should stop using the platform and submit an account closure request in accordance with the Account Termination section of the mcw5 Terms & Conditions. Previous versions of this Privacy Policy are archived and can be requested from [email protected].

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way mcw5 handles your personal data, please contact the mcw5 data protection team using the details below. All privacy-related communications must be submitted in writing via email so that a clear record is maintained for both parties.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request – [Your Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint – [Your Username]"
• Response Time: Within 5 business days for general enquiries; within 30 calendar days for formal data rights requests
• Support Hours: 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Language: English

mcw5 takes all privacy complaints seriously. If you submit a privacy complaint and are not satisfied with the resolution provided, you may escalate the matter by emailing [email protected] with the subject line "Privacy Escalation". A senior member of the mcw5 compliance team will review your escalated complaint and respond within a further fourteen business days.