mk222 Privacy Policy

1 Introduction and Identity of the Data Controller

This Privacy Policy ("Policy") describes how mk222 ("the Company", "we", "us", "our") collects, uses, stores, and protects personal data provided by or generated by users ("you", "your", "the Player") of the mk222 online gaming platform at https://mk222.io and any associated mobile or desktop applications (collectively, "the Platform").

mk222 acts as the data controller in respect of the personal data it processes in connection with the Platform. This means that mk222 determines the purposes for which, and the manner in which, your personal data is processed. Where mk222 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by data processing agreements that restrict their use of your data to the specific purposes authorised by mk222.

This Policy should be read together with the mk222 Terms & Conditions, which are available at /terms-conditions, and the Responsible Gaming Policy, available at /responsible-gaming. All three documents together form the complete agreement governing your use of the Platform.

2 Information We Collect

mk222 collects the following categories of personal data from players. We collect only what is necessary and proportionate for the purposes described in this Policy.

2.1 Identity and Contact Data

• Full legal name (as it appears on your government-issued identification document)
• Date of birth
• Residential address (street address, city, district, postal code)
• Email address
• Mobile phone number
• Gender (where voluntarily provided)
• Nationality

2.2 Verification and Compliance Data

• Copies of government-issued identity documents (National ID Card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence)
• Selfie or liveness-check images where required for biometric KYC verification
• Source of funds declarations where required by our internal compliance procedures

2.3 Financial and Transaction Data

• Payment method identifiers (bKash account number, Nagad number, Rocket number, Upay number, partial bank account details, or card details limited to the last four digits and expiry date)
• Deposit amounts, withdrawal requests, transaction timestamps, and transaction reference numbers
• Account balance history and currency denomination (Bangladeshi Taka, ৳)

2.4 Gaming Activity Data

• Game session logs (game titles played, session start and end times, wager amounts, outcomes, and winnings)
• Sports betting history (markets selected, odds accepted, stake amounts, and settlement outcomes)
• Bonus and promotion participation records
• Responsible gaming tool activation records (deposit limits set, cooling-off periods applied, self-exclusion requests)

2.5 Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type and version
• Session duration and page navigation patterns within the Platform
• Referring URL (the address of the page or search result that directed you to the Platform)
• Cookie identifiers and similar tracking data (see Section 6)

2.6 Communication Data

• Records of live chat conversations with mk222 customer support agents
• Email correspondence sent to or received from [email protected]
• Records of any formal complaints submitted via the Platform or by email

3 How We Collect Your Information

mk222 collects your personal data through the following means:

3.1 Direct Collection

The majority of data we hold about you is information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our customer support team, or participate in a promotion. You are responsible for the accuracy of the information you provide, and you must notify mk222 promptly if any of your details change.

3.2 Automated Collection

When you use the Platform, our servers automatically record technical and usage data such as your IP address, device identifiers, session timestamps, and navigation events. This data is collected by our server infrastructure and, where applicable, by cookies and similar tracking technologies described in Section 6.

3.3 Third-Party Sources

In some circumstances, mk222 may receive data about you from third parties, including:

• KYC and identity verification providers who confirm the authenticity of identity documents submitted during account verification.
• Payment processors (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card network processors) who confirm transaction status and may flag transactions for fraud screening purposes.
• Anti-fraud and risk management services that provide signals to assist mk222 in identifying suspicious account activity.

4 Legal Basis for Processing

mk222 processes your personal data on one or more of the following legal bases:

Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your rights and interests, taking into account the nature of the data processed and the reasonable expectations of players using an online gaming platform.

5 How We Use Your Information

mk222 uses the personal data we collect for the following purposes:

5.1 Account and Service Delivery

Your identity and contact data is used to create and manage your mk222 account, verify your eligibility to play, process your login and authentication, and communicate essential service information such as deposit confirmations, withdrawal updates, and security alerts.

5.2 Identity Verification and Compliance

Verification and compliance data is used to confirm that you are who you say you are, that you are at least 21 years of age, and that your use of the Platform complies with applicable responsible gaming and anti-money laundering requirements. This processing is mandatory — without it, mk222 cannot permit withdrawals or continued account operation.

5.3 Payment Processing

Financial and transaction data is used to process your deposits and withdrawal requests via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), to maintain accurate account balance records denominated in Bangladeshi Taka (৳), and to investigate and resolve any payment disputes.

5.4 Gaming Experience and Personalisation

Gaming activity data may be used to personalise your Platform experience, including surfacing game recommendations based on your play history, tailoring promotional offers to games you enjoy, and providing you with your own gaming history and statistics within your account dashboard.

5.5 Responsible Gaming

mk222 uses gaming activity data and account usage patterns to monitor for indicators of problem gambling behaviour. Where such indicators are identified, our responsible gaming team may reach out proactively via email or live chat to offer support tools such as deposit limits, cooling-off periods, or self-exclusion. This monitoring is carried out in furtherance of our duty of care to players and is not used for any commercial purpose.

5.6 Fraud Prevention and Security

Technical, usage, and transaction data is used to detect and prevent fraud, multi-accounting, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions. IP addresses and device fingerprints are cross-referenced against known risk signals to protect the integrity of the Platform and the interests of all players.

5.7 Marketing Communications

Where you have given consent, mk222 may use your email address and mobile number to send promotional communications including bonus offers, tournament invitations, and seasonal promotions tied to events such as the BPL cricket season, Eid ul-Fitr, Eid ul-Adha, and Pohela Boishakh. You may withdraw consent at any time by contacting [email protected] or by using the unsubscribe mechanism included in every marketing communication.

5.8 Analytics and Platform Development

Aggregated and anonymised usage data is used to understand how players navigate the Platform, which features are most and least used, and where technical improvements are needed. This analysis does not identify individual players and is used solely to improve the quality and reliability of the mk222 Platform.

6 Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, to remember your preferences, and to provide analytical information to the website operator. The mk222 Platform uses cookies and similar technologies including local storage objects and session tokens.

6.2 Categories of Cookies Used by mk222

6.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies from specific sites. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Instructions for managing cookies in common browsers are available on the relevant browser's help pages.

7 Sharing and Disclosure of Your Data

mk222 does not sell your personal data. We share personal data with third parties only where it is necessary for the operation of the Platform or required by law, and only in accordance with this Policy. The categories of third parties with whom we share data are as follows:

7.1 Payment Service Providers

We share your payment identifiers and transaction data with the payment processors and mobile financial service providers required to execute your deposit and withdrawal instructions, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard. These providers process your data solely to execute the relevant payment instruction and are prohibited from using your data for any other purpose.

7.2 Identity Verification Providers

We share identity documents and biometric data with our KYC verification partners for the purpose of confirming your identity and age. These partners are bound by data processing agreements and are certified to handle sensitive identity data securely.

7.3 Game Software Providers

Third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier when you launch their games on the Platform. These providers do not receive your full personal profile; they receive only the minimum data necessary to deliver the game session and record its outcome.

7.4 IT Infrastructure and Hosting Providers

Your data is hosted on secure servers provided by our infrastructure partners. These providers store and process data on our behalf under strict data processor agreements and have no independent right to access or use your personal data.

7.5 Legal and Regulatory Disclosure

mk222 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so, where disclosure is necessary to prevent or detect crime, or where disclosure is required to protect the vital interests of a player or another person.

8 International Data Transfers

The mk222 Platform is operated for players based in Bangladesh. Some of the third-party service providers with whom we share data — including game software licensors and KYC verification providers — may process data in countries outside Bangladesh. Where such international transfers occur, mk222 takes steps to ensure that your data receives a level of protection equivalent to that provided under this Policy.

Protective measures we implement for international transfers include:

• Entering into data processing agreements with all third-party processors that contain binding data protection obligations.
• Conducting due diligence on the security practices and certifications of international service providers before engaging them.
• Limiting the categories and volume of personal data transferred internationally to the minimum required for the specific processing purpose.

If you have questions about the specific safeguards applied to any international transfer of your personal data, please contact us at [email protected].

9 Data Retention

mk222 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable laws, regulations, or internal compliance policies. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be attributed to any individual player. Anonymised and aggregated data derived from your account may be retained indefinitely for statistical and analytical purposes.

10 Security Measures

mk222 implements a multi-layered security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• SSL/TLS Encryption in Transit: All communications between your device and the mk222 Platform are encrypted using current TLS protocols, ensuring that data cannot be read by unauthorised parties during transmission.
• Encryption at Rest: Sensitive data fields including identity document images, payment method details, and authentication credentials are encrypted when stored in our databases.
• Access Controls: Access to personal data held in mk222 systems is restricted to authorised personnel on a strict need-to-know basis. All access is logged and audited.
• Secure Password Storage: Account passwords are never stored in plain text. They are hashed using industry-standard one-way cryptographic algorithms.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous access patterns and known attack signatures.
• Regular Security Assessments: mk222 conducts periodic security assessments of its Platform and infrastructure to identify and remediate potential vulnerabilities.
• Staff Training: All mk222 staff who handle personal data receive regular training on data protection obligations and security best practices.

11 Your Data Rights

As a player on the mk222 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". mk222 will acknowledge your request within 48 hours and aim to provide a substantive response within 30 calendar days.

11.1 Right of Access

You have the right to request a copy of the personal data that mk222 holds about you. We will provide this in a structured, commonly used format. Identity verification will be required before the data is released to ensure it is not disclosed to an unauthorised third party.

11.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile details such as your email address and phone number directly through your account settings. For updates to identity data, please contact [email protected] with the corrected information and supporting documentation.

11.3 Right to Erasure

You may request that mk222 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you believe processing is unlawful. This right is not absolute — mk222 may retain data where retention is required by law or is necessary for the establishment, exercise, or defence of legal claims.

11.4 Right to Restriction of Processing

You may request that mk222 restrict processing of your personal data in certain circumstances, such as while a rectification request is pending or while you object to processing based on legitimate interests. During a restriction, mk222 will continue to store the data but will not actively process it.

11.5 Right to Data Portability

Where processing is carried out on the basis of consent or contract and is automated, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller. In practice, this right applies primarily to your account profile data and transaction history.

11.6 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, mk222 will cease marketing communications immediately. To object, email [email protected] or use the unsubscribe link in any marketing email.

11.7 Right to Withdraw Consent

Where mk222 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

12 Children and Minors

The mk222 Platform is strictly for adults aged 21 and over. mk222 does not knowingly collect personal data from individuals under the age of 21, and we do not permit persons under the age of 21 to register accounts, deposit funds, or participate in any gaming or betting activity on the Platform.

During the account registration process, mk222 requires all applicants to confirm their date of birth and submit identity documentation that verifies they are at least 21 years of age. Accounts where the age verification process cannot be completed satisfactorily will be suspended pending resolution, and withdrawals will not be processed until age verification is confirmed.

If mk222 becomes aware that it has inadvertently collected personal data from a player who is under 21 years of age, it will take immediate steps to close the relevant account, return any deposited funds to the original payment method, and securely delete all personal data associated with that account. If you have reason to believe that a minor has registered an account on the Platform, please notify us immediately at [email protected].

13 Third-Party Links and Services

The mk222 Platform may contain references to or integrations with third-party game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game delivered by a third-party provider, a portion of your gaming session is technically delivered by that provider's servers and is subject to that provider's own privacy and data handling practices in addition to this Policy.

mk222 is not responsible for the privacy practices of third-party game providers or any other external services that you may access from the Platform. We encourage you to review the privacy policies of any third-party providers whose services you use. The fact that mk222 partners with a provider does not constitute an endorsement of that provider's privacy practices.

14 Changes to This Privacy Policy

mk222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, applicable laws, or regulatory requirements. When we make material changes to this Policy, we will:

• Post the updated Policy on this page at /privacy-policy with a revised effective date shown at the top of the document.
• Send a notification to your registered email address summarising the key changes, at least 7 calendar days before the changes take effect.
• Display a prominent notice on the Platform homepage for a period of at least 14 calendar days following the update.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and may request account closure by contacting [email protected] before the effective date.

Non-material changes such as typographical corrections, formatting adjustments, or clarifications that do not alter the substance of our data processing practices may be made without prior notice, although the effective date shown at the top of the Policy will always reflect the date of the most recent revision.

15 Contact and Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mk222 processes your personal data, please contact our support team using the details below. All data-related enquiries are handled by staff with specific training in data protection obligations.

When submitting a data rights request, please include your full name, your registered email address, and a clear description of the right you wish to exercise or the concern you wish to raise. mk222 may request additional information from you to verify your identity before processing the request, in order to ensure that personal data is not disclosed to or acted upon at the request of an unauthorised party.

mk222 is committed to resolving all data-related enquiries promptly and transparently. We will never charge a fee for handling a legitimate data rights request unless the request is manifestly unfounded, repetitive, or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.