mcwaff Privacy Policy

01 Introduction

mcwaff ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every player who registers, deposits, bets, or otherwise interacts with the mcwaff platform, including its website, mobile interface, sportsbook, live casino, and slots products.

This Privacy Policy sets out in clear, plain English what personal data mcwaff collects from you, why we collect it, how we use and store it, with whom we share it, how long we retain it, and what rights you have over it. This Policy applies to all users of the mcwaff platform regardless of the device or browser used to access it.

This Privacy Policy should be read alongside the mcwaff Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with the mcwaff platform. Capitalised terms used but not defined here carry the meanings given to them in the Terms & Conditions.

---

02 Personal Data We Collect

mcwaff collects only the personal data that is reasonably necessary to deliver, secure, and improve our services. The categories of personal data we collect are set out below.

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for age verification — 18+ requirement)
• Mobile phone number (used as your primary account identifier and for payment linkage)
• Email address (used for account communications and notifications)
• Residential address or city of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
• Username and password (password stored only as a one-way cryptographic hash — never in plaintext)

2.2 Identity Verification (KYC) Documents

• Copy of government-issued photo ID (National Identity Card, passport, or driving licence)
• Proof of ownership of your registered payment method (e.g., bKash or Nagad account screenshot showing your name and number)
• Proof of address document where required (utility bill, bank statement, or equivalent)

2.3 Financial & Transaction Data

• Mobile money account details (bKash, Nagad, Rocket, Upay — account number only; your PIN is never transmitted to or stored by mcwaff)
• Bank account details where bank transfer is used (City Bank, BRAC Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank)
• Deposit and withdrawal history including amounts in BDT, timestamps in BST (UTC+6), and transaction reference numbers
• Bonus and promotion usage records

2.4 Betting & Gaming Activity Data

• Sports bet history including match selection, odds accepted, stake, settlement outcome, and winnings
• Casino game session data including game title, studio provider, session duration, bet amounts, and outcomes
• Slot spin history and RNG game session records
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods elected)

2.5 Technical & Device Data

• IP address at the time of registration and each subsequent login
• Device type, operating system, and browser version
• Session timestamps and duration
• Referring URL (the page or link that directed you to mcwaff)
• Cookie identifiers and similar tracking technologies (see Section 7)

2.6 Communications Data

• Records of support tickets, live chat transcripts, and emails exchanged between you and the mcwaff support team
• Feedback and survey responses voluntarily submitted by you

---

03 How We Collect Your Data

mcwaff collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or respond to a promotion.
• Automatically — when you browse or use the mcwaff platform, our servers and analytics tools automatically record technical and device data including IP address, session timing, and page interaction.
• From payment partners — bKash, Nagad, Rocket, and Upay transmit transaction confirmation data (transaction ID, amount, timestamp, and your registered mobile number) to mcwaff to facilitate deposit crediting and withdrawal processing.
• From game studio partners — Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other content providers share game session data with mcwaff for the purposes of account crediting, dispute resolution, and responsible gaming monitoring.
• From identity verification services — where mcwaff uses a third-party KYC or document verification service, that service may provide us with a verification result and document metadata.

---

04 How We Use Your Personal Data

mcwaff uses the personal data we collect for the following specific purposes:

mcwaff does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. We do not use your data to build profiles for sale to third-party advertisers.

---

05 Legal Basis for Processing

mcwaff processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, payment processing, and delivering betting and gaming services — is carried out on the basis that it is necessary for the contract between you and mcwaff.
• Legal obligation: Processing carried out to comply with applicable anti-money laundering, age verification, and fraud prevention obligations is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and anonymised analytics is carried out on the basis of mcwaff's legitimate business interests, where those interests are not overridden by your privacy rights.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time by contacting [email protected].

---

06 Data Sharing & Third Parties

mcwaff does not sell, rent, or trade your personal data. We share your personal data only with the following categories of third parties, and only to the extent strictly necessary for the stated purpose:

6.1 Payment Processors

bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum necessary data (transaction reference, amount, and your registered account identifier) to process deposits and withdrawals on your behalf. These partners operate under their own privacy policies and are independently responsible for their data handling practices.

6.2 Game Content Providers

Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners receive a session token, bet data, and outcome data to deliver live casino and slot game functionality. Game providers do not receive your full name, payment details, or KYC documents.

6.3 Identity Verification Partners

Where third-party KYC services are used, your submitted identity documents and basic registration data are shared solely for the purpose of verifying your identity and age. Verification partners are contractually bound to process this data for no other purpose.

6.4 Legal & Regulatory Authorities

mcwaff may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by a valid legal obligation, court order, or official government request. Where permissible, mcwaff will notify you of such a disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of mcwaff's assets, your personal data may be transferred to the successor entity. You will be notified of such a transfer and any material change to this Privacy Policy that results from it.

---

07 Cookies & Tracking Technologies

mcwaff uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the mcwaff website. We use the following categories of cookies:

• Essential cookies: Required for the platform to function — including session management, login state, and security tokens. These cannot be disabled without rendering the platform non-functional.
• Functional cookies: Store your preferences such as language selection, last-visited game category, and responsible gaming settings to improve your experience across sessions.
• Analytics cookies: Collect anonymised data on how players navigate and use the platform to help mcwaff identify usability issues and improve product features. Data collected is aggregated and does not identify you individually.
• Security cookies: Used to detect unusual login behaviour, bot activity, and potential fraud by analysing session patterns.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair or entirely prevent access to the mcwaff platform. mcwaff does not use third-party advertising cookies or cross-site tracking pixels.

---

08 Data Retention

mcwaff retains your personal data for as long as your account is active and for a defined period thereafter, based on the category of data and the purpose for which it was collected:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Retention periods may be extended where required by a legal hold, active dispute, or regulatory investigation.

---

09 Data Security

mcwaff implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the mcwaff platform
• One-way cryptographic hashing (bcrypt) for all stored passwords — mcwaff staff cannot read your password in any form
• Encryption at rest for sensitive data categories including KYC documents and payment account identifiers
• Role-based access controls ensuring that mcwaff staff can access only the data necessary for their specific function
• Regular security audits and penetration testing to identify and remediate vulnerabilities
• Anomaly detection systems that flag unusual login patterns and trigger additional verification steps

Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, mcwaff will notify affected players promptly and take all reasonable steps to contain and mitigate the breach.

---

10 Your Data Rights

Depending on applicable law, you may have the following rights in relation to the personal data mcwaff holds about you:

• Right of access: You may request a copy of the personal data mcwaff holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. You may update basic account details directly from your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (see Section 8).
• Right to restriction: You may request that we restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to our use of it.
• Right to data portability: You may request your personal data in a structured, machine-readable format where processing is carried out on the basis of your consent or contractual necessity.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, subject to mcwaff's overriding legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact mcwaff's data team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and respond within 30 days.

---

11 Children's Privacy

The mcwaff platform is strictly intended for adults aged 18 years and above. mcwaff does not knowingly collect, process, or store personal data relating to individuals under the age of 18. If we become aware that personal data belonging to a minor has been collected, we will delete it promptly and close the associated account.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling websites, including the mcwaff platform. If you believe a minor has registered on or is using the mcwaff platform, please contact us immediately at [email protected].

---

12 Third-Party Links

The mcwaff platform may contain informational references to third-party services such as mobile money apps (bKash, Nagad, Rocket) and game studios (Evolution Gaming, Pragmatic Play). These references do not constitute clickable external links that redirect you away from the mcwaff platform. However, if you independently navigate to any third-party website or application, please be aware that those services operate under their own privacy policies, and mcwaff accepts no responsibility for their data handling practices.

---

13 Changes to This Privacy Policy

mcwaff reserves the right to update this Privacy Policy at any time. Where changes are material — for example, a new category of data being collected, a new third-party sharing arrangement, or a change to retention periods — mcwaff will provide advance notice by posting a prominent announcement on the platform and, where contact details are available, notifying you via your registered mobile number or email address.

The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Your continued use of the mcwaff platform after the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not accept the updated Policy, you must cease using the platform and request account closure.

---

14 Contact Us

For questions, concerns, or requests relating to this Privacy Policy or the personal data mcwaff holds about you, please contact us using the details below. All communications must be in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request — [Your Username]"
• Live Chat: Available 24/7 via the chat widget on the mcwaff platform
• Response time: We aim to acknowledge all privacy-related correspondence within 48 hours and provide a substantive response within 30 days.