ma71 Privacy Policy

The data controller responsible for the personal information collected through the ma71 Platform at ma71.io is the ma71 operating entity. For the purposes of this Privacy Policy, "ma71", "we", "us", and "our" all refer to the ma71 Platform and its operating entity.

As data controller, ma71 determines the purposes for which your personal data is collected and the means by which it is processed. We are committed to handling your data lawfully, fairly, and transparently in accordance with this Privacy Policy.

If you have any questions about how ma71 handles your personal data, or wish to exercise any of your rights described in this Policy, please contact our data team at support@ma71.io with the subject line "Privacy Request".

ma71 collects personal data in the following categories. We collect only what is necessary for the purposes described in this Policy:

ma71 collects personal data through the following channels:

• Directly from you — when you register for an Account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automatically — when you visit and interact with the ma71 Platform, we automatically collect technical data and usage data via server logs, cookies, and similar tracking technologies (see Section 8 on Cookies for full details).
• From third-party verification providers — when we conduct identity checks, we may receive verification outcomes or risk scores from trusted third-party KYC and fraud-prevention service providers. These providers supply only the data needed to confirm your identity or assess fraud risk; they do not supply marketing or behavioural data.
• From MFS providers — when you make a deposit or withdrawal via bKash, Nagad, or Rocket, we receive transaction confirmation data including your MFS account number, transaction reference, amount, and timestamp. We do not receive your MFS PIN or full authentication credentials.

ma71 processes your personal data only for specific, legitimate purposes. The primary purposes and their corresponding legal bases are set out below:

Where ma71 relies on your consent as the legal basis for processing (for example, sending marketing communications), you have the right to withdraw that consent at any time by contacting support@ma71.io or updating your Account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

ma71 does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• MFS payment providers (bKash, Nagad, Rocket, Upay): Necessary financial data is shared with your chosen MFS provider to process deposit and withdrawal transactions. These providers operate under their own privacy policies and regulatory frameworks.
• Identity verification and KYC providers: We use trusted third-party verification services to confirm Player identity and age. Only the minimum data necessary for verification is transmitted. These providers are bound by strict data processing agreements.
• Fraud prevention and security services: Technical and transactional data may be shared with fraud-detection service providers to protect the integrity of the ma71 Platform and all Players.
• Game content providers: Where you play games delivered by third-party providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, or Microgaming, those providers may process limited session data (such as Player ID and bet history) necessary to deliver the game. This data is processed under separate data processing agreements between ma71 and each provider.
• Legal and regulatory authorities: ma71 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or lawful request. We will notify affected Players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the ma71 business, Player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Players will be notified of any such transfer that materially affects their data rights.

ma71 retains personal data for as long as necessary to fulfil the purpose for which it was collected, and for as long as required by applicable legal or regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure, to meet anti-money laundering (AML) and fraud-prevention record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping obligations.
• Verification documents (KYC): Retained for five (5) years after Account closure or after the date of the last transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction in a support thread, unless the matter involves an ongoing dispute.
• Marketing preferences and consent records: Retained for the life of your Account plus two (2) years, to enable us to demonstrate compliance with consent obligations.
• Technical and usage data (anonymised): Anonymised analytics data may be retained indefinitely for Platform improvement purposes, as it no longer constitutes personal data once anonymised.

When data is no longer required and no legal obligation to retain it remains, ma71 securely deletes or irreversibly anonymises it. Deletion is conducted in a manner that prevents recovery of the original personal data.

ma71 takes the security of your personal data seriously and implements the following technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ma71 servers.
• Encrypted storage of sensitive data fields, including identity document references and financial identifiers, at rest on ma71 servers.
• Hashed password storage — your login password is never stored in plain text. ma71 uses industry-standard cryptographic hashing with salting to protect passwords.
• Role-based access controls that restrict internal access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments conducted by the ma71 security team and periodic third-party reviews.
• Intrusion detection and monitoring systems that flag unusual access patterns or potential data breach indicators in real time.
• Staff training on data protection obligations and secure data-handling procedures for all personnel who access Player data.

While ma71 implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials. Never share your password with anyone, and contact support@ma71.io immediately if you suspect your Account has been compromised.

ma71 uses cookies and similar technologies on the ma71.io Platform. A cookie is a small text file placed on your device by a website you visit. Cookies allow websites to recognise your device on subsequent visits and to remember preferences or session state.

ma71 uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as session management, Account authentication, and security checks. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: These remember your preferences, such as your chosen language setting, display options, and responsible gaming notification preferences, so you do not need to reset them on each visit.
• Analytics cookies: These collect anonymised data about how Players use the Platform — such as which pages are visited most frequently and how long sessions last — to help ma71 improve the Platform experience. Analytics data is aggregated and not linked to individual Player identities.
• Security and fraud-prevention cookies: These help ma71 detect and prevent fraudulent activity, bot traffic, and other security threats by identifying unusual behavioural patterns.

ma71 does not use third-party advertising or social media tracking cookies. We do not share cookie data with advertising networks or use cookies to build behavioural profiles for sale to third parties.

As a Player on the ma71 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to support@ma71.io with the subject line "Data Rights Request". ma71 will respond within thirty (30) days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data ma71 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data ma71 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly through your Account dashboard at any time.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that ma71 may be required to retain certain data for legal compliance reasons even following an erasure request.
• Right to restrict processing: You may request that ma71 restricts processing of your data in certain circumstances, for example while the accuracy of data is being contested or while a complaint is being investigated.
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another service provider where technically feasible.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interest, including profiling for fraud-prevention purposes. ma71 will consider and respond to objections on a case-by-case basis.
• Right to withdraw consent: Where ma71 processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The ma71 Platform is strictly for adults aged 21 and above. ma71 does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory part of the registration and KYC process for all Players.

If ma71 discovers or has reasonable grounds to believe that personal data belonging to a person under the age of 21 has been collected — whether as a result of misrepresentation during registration or any other circumstance — ma71 will:

• Immediately and permanently suspend the associated Account.
• Void all balances, bets, and winnings associated with that Account.
• Delete the personal data of the minor as promptly as possible, subject to any legal record-keeping obligations that require temporary retention.
• Where appropriate, report the matter to relevant authorities.

If you believe that a person under the age of 21 has registered on the ma71 Platform, please report this concern to support@ma71.io immediately.

ma71 primarily serves Players based in Bangladesh and stores the majority of Player data on servers located within or near the Bangladesh region. However, some third-party service providers used by ma71 — such as game content providers and KYC verification services — may process data in other countries.

Where personal data is transferred internationally, ma71 ensures that appropriate safeguards are in place to protect your data, including:

• Formal data processing agreements with all third-party providers that include binding data protection obligations.
• Transmission of only the minimum data necessary for the specific service being provided by the third party.
• Use of encrypted transmission channels for all international data transfers.

By using the ma71 Platform, you acknowledge that your personal data may be processed in countries outside Bangladesh. ma71 takes reasonable steps to ensure that such processing meets the same standards of protection described in this Privacy Policy.

ma71 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made to this Policy, we will notify registered Players by email or via an in-platform notification at least seven (7) days before the updated Policy takes effect.

The "Last updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how ma71 protects your personal data.

Your continued use of the ma71 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease using the Platform and request Account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or the way ma71 handles your personal data, please contact us using the details below. All privacy-related enquiries are handled in English and are typically responded to within five (5) business days.

Data enquiries email: support@ma71.io

Subject line for data requests: "Privacy Request" or "Data Rights Request"

Response time: Routine enquiries within 5 business days. Formal data rights requests within 30 days.