mn666 Privacy Policy

1 Definitions

Throughout this Privacy Policy, the following terms carry the meanings assigned below:

• "mn666", "we", "us", or "our" refers to the mn666 platform and the entity operating mn666.io under applicable international regulations.
• "Player", "you", or "your" refers to any individual who accesses or uses the mn666 platform, whether as a registered account holder or an unregistered visitor.
• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, email address, phone number, date of birth, payment details, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Platform" means the mn666 website at mn666.io, its mobile-optimised interface, and any associated applications or services.
• "Third Party" means any entity other than you and mn666, including payment processors, identity verification providers, and analytics service providers.
• "Cookie" means a small text file placed on your device by the Platform for the purposes described in Section 7 of this policy.

2 Data We Collect

mn666 collects the following categories of Personal Data from players and visitors to the Platform:

2.1 Identity Data

Full legal name, date of birth, gender, nationality, and a copy of a government-issued photo identification document (such as a National ID card or passport) where required for Know Your Customer (KYC) verification purposes.

2.2 Contact Data

Email address, mobile phone number, and residential address (including city, district, and postcode). For Bangladeshi players, this typically includes a Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar area address.

2.3 Account Data

Username, hashed password, account registration date and time, account status, and records of all account-level actions including deposits, withdrawals, bonus claims, and self-exclusion requests.

2.4 Financial Data

Mobile wallet identifiers (bKash account number, Nagad account number, Rocket account number, Upay account number), bank account details (where applicable for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank transfers), transaction amounts, transaction timestamps, and transaction reference numbers. mn666 does not store full card numbers or CVV codes.

2.5 Technical Data

IP address, browser type and version, operating system, device type and model, screen resolution, time zone setting, and session duration. This data is collected automatically when you access the Platform.

2.6 Usage Data

Pages visited, games played, bets placed, time spent on each section of the Platform, click-through paths, and search queries entered within the Platform. This data is collected in aggregate and individually.

2.7 Communications Data

Records of all communications between you and the mn666 support team, including live chat transcripts, support ticket content, and email correspondence.

2.8 Data Summary Table

3 How We Collect Your Data

mn666 collects Personal Data through the following channels:

• Direct interaction: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated technologies: As you navigate the Platform, we automatically collect Technical Data and Usage Data via cookies, server logs, and similar tracking technologies. See Section 7 for full details.
• Third-party sources: We may receive identity verification data from our KYC/AML service partners where you have consented to those providers sharing data with us. We may also receive fraud-alert signals from payment processors regarding flagged transaction patterns.
• Publicly available sources: In limited circumstances relevant to fraud prevention, we may cross-reference data against publicly available records such as sanctions lists or court judgment databases.

4 Legal Basis for Processing

mn666 processes your Personal Data on the following legal grounds, depending on the specific purpose of each processing activity:

• Contractual necessity: Processing required to operate your Account, execute deposits and withdrawals, and deliver the gaming and betting services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, tax reporting obligations, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where we have obtained your explicit, informed consent prior to processing. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5 How We Use Your Personal Data

mn666 uses the Personal Data we collect for the following specific purposes:

5.1 Account Management

To create, verify, maintain, and close your mn666 account; to authenticate your identity when you log in; and to communicate important account-related notifications such as password reset requests, transaction confirmations, and account status changes.

5.2 Transaction Processing

To process deposits from and withdrawals to your registered payment methods, including bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks. Transaction data is retained for audit and dispute resolution purposes.

5.3 Identity Verification (KYC/AML)

To verify your age (21+ requirement), identity, and source of funds in compliance with our international AML obligations. KYC data is processed by authorised mn666 personnel and, where necessary, by our approved third-party verification partners.

5.4 Fraud and Security

To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, match-fixing, and other forms of platform abuse. Technical Data including IP addresses and device fingerprints are central to this process.

5.5 Responsible Gaming

To monitor player behaviour patterns that may indicate problem gambling, to enforce self-exclusion and deposit limit settings applied by you, and to fulfil our duty of care obligations. mn666 takes its responsible gaming commitments seriously and uses data analysis to identify players who may need support.

5.6 Customer Support

To respond to your support queries, investigate complaints, and maintain records of support interactions for quality assurance and training purposes.

5.7 Platform Improvement

To analyse aggregate usage patterns, identify technical issues, test new features, and improve the overall quality, speed, and reliability of the mn666 Platform. Analytics data is handled in aggregate form wherever possible.

5.8 Legal Compliance

To respond to lawful requests from regulatory bodies, law enforcement agencies, or courts with jurisdiction over mn666's operations. mn666 will not disclose Personal Data in response to informal or unlawful requests.

6 Data Sharing & Disclosure

mn666 does not sell your Personal Data. We may share your data only in the following limited and controlled circumstances:

6.1 Payment Processors

We share the minimum necessary financial data with payment processing partners (such as bKash, Nagad, Rocket, and supported banks) to execute your deposit and withdrawal instructions. These partners are bound by their own data protection obligations and are prohibited from using your data for any purpose beyond processing your transaction.

6.2 Identity Verification Providers

Where KYC verification is required, we may share your identity documents and personal details with our approved third-party verification partners. These partners operate under strict data processing agreements and may not use your data independently.

6.3 Legal and Regulatory Authorities

mn666 may disclose Personal Data to governmental bodies, law enforcement agencies, regulators, or courts where required to do so by law, court order, or regulatory instruction. Where permitted by law, mn666 will attempt to notify you of such disclosure in advance.

6.4 Fraud Prevention Networks

In cases of confirmed or strongly suspected fraud, money laundering, or match-fixing, mn666 may share relevant data with industry fraud prevention networks, financial intelligence units, or sports integrity organisations. This is carried out under our legitimate interest in protecting the platform and the broader gaming community.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of mn666's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to the terms under which your data is processed.

7 Cookies & Tracking Technologies

mn666 uses cookies and similar technologies to ensure the Platform functions correctly and to understand how players use it. The following categories of cookies are in use:

mn666 does not use advertising cookies or third-party tracking cookies that report your activity to external ad networks. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to use the Platform.

8 Data Retention

mn666 retains Personal Data for only as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

• Account Data: Retained for the duration of your account and for a minimum of 5 years following account closure, to satisfy AML and audit obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for 3 years from the date of the last interaction, unless the matter relates to a dispute or legal claim, in which case records are retained for the duration of that matter plus 2 years.
• Technical and Usage Data: Retained in identifiable form for up to 24 months, after which it is anonymised and may be retained indefinitely in aggregate form for statistical purposes.
• Marketing Consent Records: Retained for 3 years from the date of consent or withdrawal of consent, as evidence of your preferences.

When the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised. mn666 reviews its data holdings periodically to ensure compliance with this schedule.

9 Data Security

mn666 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:

• Encryption in transit: All data exchanged between your browser or device and mn666's servers is encrypted using TLS 1.2 or higher (256-bit SSL). Unencrypted HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Sensitive Personal Data stored in mn666's databases — including KYC documents, payment identifiers, and hashed credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to systems containing Personal Data is restricted to authorised personnel only, on a need-to-know basis. All internal access is authenticated via multi-factor authentication and is logged for audit purposes.
• Penetration testing: mn666 engages independent security professionals to conduct periodic penetration tests and vulnerability assessments of the Platform infrastructure.
• Incident response: mn666 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, you will be notified without undue delay in accordance with applicable law.
• Third-party security: All third-party service providers with access to Personal Data are assessed for security compliance before engagement and are contractually required to maintain appropriate security standards.

10 Your Data Rights

Subject to applicable law and the specific circumstances of your request, you hold the following rights in respect of your Personal Data held by mn666:

10.1 Right of Access

You have the right to request a copy of all Personal Data that mn666 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your request.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update many details directly within your account settings; for changes to identity documents or KYC records, contact support.

10.3 Right to Erasure

You may request that mn666 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to legal retention obligations — mn666 may be required to retain certain financial and KYC records regardless of an erasure request.

10.4 Right to Restriction

You have the right to request that mn666 restrict the processing of your Personal Data in certain circumstances, such as while a dispute about its accuracy is being resolved, or while an objection to processing is being assessed.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive your Personal Data in a portable format and to have it transmitted directly to another data controller where technically feasible.

10.6 Right to Object

You have the right to object to processing carried out on the basis of mn666's legitimate interests. If you object, mn666 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.

10.7 Rights Related to Automated Decision-Making

Where mn666 uses automated processes that produce decisions with significant effects on you — such as automated fraud flags or responsible gaming interventions — you have the right to request human review of that decision and to contest its outcome.

11 Children's Privacy

mn666 is strictly an adult platform. No person under the age of 21 is permitted to register an account, make a deposit, or use any of the gaming or betting services offered by mn666. We do not knowingly collect Personal Data from individuals under the age of 21.

If we become aware that an account has been registered by or on behalf of a person under 21, we will immediately close the account, void any associated balances, and securely delete all Personal Data collected in connection with that account, subject only to any legally mandated retention obligations.

If you believe that a minor may have accessed mn666 using false information, please notify us immediately at [email protected]. We take underage gambling extremely seriously and will act on all credible reports without delay.

12 International Data Transfers

mn666 operates as an offshore platform. This means that your Personal Data may be stored on or transferred to servers located outside Bangladesh. Where such transfers occur, mn666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards for international transfers may include contractual data transfer agreements with receiving entities, application of recognised international security certifications, or transfers to jurisdictions that maintain data protection standards consistent with those applicable to mn666's operations.

By registering an Account and using the mn666 Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Bangladesh as described in this section.

13 Third-Party Links

The mn666 Platform does not contain links to third-party websites. All navigation within the Platform remains on mn666.io or its associated subdomains. This Privacy Policy applies solely to the mn666 Platform and does not extend to any third-party services you access independently outside of mn666.

Where mn666 integrates third-party game content provided by licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, those studios operate as data processors under mn666's instructions and are bound by data processing agreements that require them to handle any technical data consistent with this policy.

14 Amendments to This Policy

mn666 reserves the right to update or amend this Privacy Policy at any time. The most current version will always be published at mn666.io/privacy-policy, with the effective date clearly stated at the top of the document. Where changes are material — such as new categories of data being collected, new sharing arrangements, or changes to your rights — mn666 will notify registered players via email at least 14 days before the changes take effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the Platform and contact [email protected] to request account closure.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how mn666 has handled your Personal Data, please contact us using the details below:

We take all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 5 business days, investigate the matter thoroughly, and provide a substantive written response within 30 calendar days. Where we are unable to resolve a complaint to your satisfaction, we will explain the reasons for our decision and outline any further options available to you.

mn666 is committed to resolving all data protection concerns fairly, transparently, and in good faith. We encourage you to contact us directly in the first instance before pursuing any external remedy.