Our Core Privacy Principles
These six principles guide every decision mms99 makes about how your personal data is collected, handled, and protected. The detailed policy sections below expand on each of these commitments.
mms99 is an online sports betting and casino platform accessible at mms99.io, operated for players based in Bangladesh. References to "mms99", "we", "us", and "our" throughout this Privacy Policy all refer to the mms99 platform and its operating entity.
mms99 acts as the data controller in respect of the personal data collected from players and site visitors. This means we are responsible for determining the purposes for which your personal data is collected and the manner in which it is processed. Where we engage third-party processors — for example, payment processors such as bKash and Nagad, or KYC verification providers — those parties act as data processors operating under our instruction and under contractual obligations that protect your data.
If you have any questions about how mms99 handles your data or wish to exercise any of your rights under this Privacy Policy, the primary point of contact is our support team at [email protected], available 24/7 at Bangladesh Standard Time (BST, UTC+6).
mms99 collects personal data through several channels: directly from you when you register or use the platform, automatically when you interact with the website, and from third parties in the course of KYC verification and payment processing. The categories of data we collect are set out in the table below.
| Data Category | Specific Data Points | Source |
|---|---|---|
| Identity Data | Full name, date of birth, gender, National ID number or passport number | Provided by you at registration or KYC |
| Contact Data | Email address, mobile phone number, residential address (district, city, postal code) | Provided by you at registration |
| Account Data | Username, encrypted password, account ID, account status, login history, session timestamps | Generated at registration; recorded automatically |
| Financial Data | bKash/Nagad/Rocket mobile number, Upay account reference, Visa/Mastercard last four digits, transaction history, deposit and withdrawal amounts in BDT | Provided by you; recorded automatically on transaction |
| KYC Documents | Scanned copies or photographs of government-issued ID, proof of address documents, payment method ownership evidence | Provided by you on request |
| Betting & Gaming Data | Bet history, game session logs, wagered amounts, winnings and losses, bonus usage, preferred markets and game categories | Recorded automatically on platform use |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone | Collected automatically via server logs and cookies |
| Communication Data | Support chat transcripts, email correspondence with mms99, content of any complaints submitted | Generated when you contact mms99 support |
| Responsible Gaming Data | Deposit limit settings, cooling-off period requests, self-exclusion records, session time cap configurations | Recorded when you use responsible gaming tools |
Sensitive Data. mms99 does not intentionally collect sensitive personal data (such as health, ethnicity, religious beliefs, or political opinions). However, if you voluntarily disclose information of this nature — for example, when contacting support in relation to a responsible gaming concern — that information will be treated with the highest level of confidentiality and used solely for the purpose of providing you with the appropriate support.
mms99 uses the personal data described in Section 2 for the following specific purposes:
- Account Management: Creating, maintaining, and administering your mms99 player account, including processing your login credentials and managing account settings.
- Identity & Age Verification (KYC): Confirming that you meet the minimum age requirement of 21 years and verifying your identity to prevent fraud, money laundering, and the use of the platform by minors.
- Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and processing withdrawal requests to verified payment methods in BDT.
- Service Delivery: Providing access to sports betting markets (including cricket BPL, T20, IPL, football), live casino games, slot titles, and all other platform features.
- Customer Support: Responding to your support enquiries, resolving disputes, and communicating important account-related information such as security alerts and policy updates.
- Fraud Prevention & Security: Monitoring account activity, detecting and investigating suspicious behaviour, preventing multi-accounting, and protecting the integrity of the platform.
- Responsible Gaming: Monitoring wagering patterns for signs of problem gambling, administering self-exclusion and deposit limit requests, and proactively reaching out to players showing signs of gambling harm in accordance with our Responsible Gaming Policy.
- Legal Compliance: Meeting our obligations under applicable anti-money laundering regulations, retaining records as required by law, and responding to legitimate requests from law enforcement or regulatory authorities.
- Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve game selection, and optimise the user experience for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other regions of Bangladesh.
- Marketing (opt-in only): Sending promotional emails, SMS notifications, or in-platform messages about bonuses, new game launches, and seasonal promotions — but only where you have explicitly opted in to receive such communications. See Section 11 for full details.
mms99 processes your personal data under one or more of the following legal bases depending on the specific processing activity:
- Contractual Necessity: Processing required to deliver the services you have signed up for, including account administration, payment processing, and game access. Without this processing, mms99 cannot provide the platform services.
- Legal Obligation: Processing required to comply with applicable legal requirements, including KYC identity verification, anti-money laundering record-keeping, and responses to lawful regulatory or law enforcement requests.
- Legitimate Interests: Processing carried out for mms99's legitimate business interests where those interests do not override your fundamental rights. This includes fraud detection, platform security monitoring, responsible gaming oversight, and anonymised analytics to improve the platform. mms99 has assessed these legitimate interests and determined that they are proportionate to the privacy impact on players.
- Consent: Processing based on your freely given, specific, and informed consent — specifically, the sending of direct marketing communications. You may withdraw your consent at any time without affecting the legality of processing carried out before withdrawal. See Section 11 for opt-out instructions.
5.1 What Are Cookies. Cookies are small text files placed on your device when you visit the mms99 website. They allow the platform to recognise your device, remember your preferences, maintain your logged-in session, and collect analytical data about how the platform is used.
5.2 Types of Cookies Used. mms99 uses the following categories of cookies:
- Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during a betting or gaming session. These cookies cannot be disabled without breaking core platform functionality.
- Functional Cookies: Remember your preferences such as display settings, preferred language (English), and your last visited section of the platform.
- Analytical Cookies: Collect anonymised data about how players navigate the platform — for example, which pages are visited most frequently and where technical errors occur. This data is used solely to improve the mms99 experience and is not linked to your individual account.
- Security Cookies: Used to detect and prevent fraudulent activity, including tracking unusual login patterns and flagging suspicious account behaviour.
5.3 Managing Cookies. You can control and delete cookies through your browser settings. Please be aware that disabling strictly necessary cookies will impair your ability to use the mms99 platform, including maintaining a logged-in session. Disabling functional or analytical cookies will not prevent you from accessing the platform but may affect your user experience.
5.4 No Third-Party Advertising Cookies. mms99 does not use third-party advertising or retargeting cookies. We do not allow advertising networks to place tracking cookies on the mms99 platform in order to build profiles of your activity across other websites.
mms99 does not sell your personal data. We share your data only in the following limited, controlled circumstances:
- Payment Processors: To facilitate deposits and withdrawals, mms99 shares the minimum necessary financial identifiers with payment partners including bKash, Nagad, Rocket, Upay, and card processors. These parties receive only the data required to execute the specific transaction and are not authorised to use it for any other purpose.
- KYC Verification Partners: Identity documents submitted during the KYC process may be shared with specialist third-party identity verification providers operating under strict data processing agreements. These providers confirm document authenticity and perform age and identity checks on mms99's behalf.
- Game Content Providers: To deliver live casino games and slot content, mms99 integrates with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Play'n GO, and Spribe. These providers receive a session token and your account identifier sufficient to run the game session; they do not receive your full personal profile.
- Legal & Regulatory Authorities: mms99 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law or in response to a valid legal request. mms99 will inform you of any such disclosure where legally permitted to do so.
- Fraud Prevention Services: Anonymised or pseudonymised data may be shared with fraud prevention networks to identify and block known bad actors, multi-account operators, and money laundering patterns affecting the Bangladesh online gaming market.
- Business Transfers: In the event of a merger, acquisition, or sale of substantially all of the mms99 business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the acquiring entity will be required to honour this Privacy Policy.
mms99 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal obligation to retain records for a longer period. The key retention periods that apply to mms99 player data are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Anti-money laundering record-keeping obligation |
| KYC Documents | 5 years from date of verification | Legal compliance and fraud prevention |
| Financial Transaction Records | 5 years from date of transaction | Legal and regulatory obligation |
| Betting & Gaming History | 3 years from date of activity | Dispute resolution and responsible gaming monitoring |
| Support Communications | 2 years from date of last communication | Legitimate interest in dispute resolution |
| Responsible Gaming Records | 5 years from date of record (e.g., self-exclusion date) | Legal obligation and player protection |
| Marketing Consent Records | Until withdrawal of consent + 1 year | Proof of consent for regulatory purposes |
| Technical Logs (IP, device) | 12 months from date of collection | Security and fraud detection |
After the applicable retention period expires, mms99 will either permanently delete your personal data from its systems or anonymise it in such a way that it can no longer be linked to you individually. Anonymised, aggregated data may be retained indefinitely for statistical and business improvement purposes.
As an mms99 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected]. mms99 will respond to all valid requests within 30 days of receipt.
- Right of Access: You have the right to request a copy of the personal data mms99 holds about you, along with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
- Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by mms99 be corrected without undue delay. For straightforward account detail updates (e.g., email address, phone number), these can often be made directly within your account settings.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to mms99's legal retention obligations, particularly in relation to anti-money laundering record-keeping.
- Right to Restriction: You have the right to request that mms99 restrict the processing of your personal data in certain circumstances — for example, while a dispute over the accuracy of data is being resolved.
- Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to Object: You have the right to object at any time to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes. mms99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
- Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
If you believe mms99 has not adequately addressed your data rights concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
The mms99 platform is strictly intended for adults aged 21 years and older. mms99 does not knowingly collect personal data from individuals under the age of 21. Registration on the platform by any person under 21 is prohibited, and any account found to have been created by a minor will be immediately closed, with any funds returned to the original payment method subject to verification.
mms99 uses the KYC verification process to confirm age eligibility before granting full platform access. If mms99 becomes aware that personal data has been collected from a minor without appropriate verification, that data will be deleted promptly and the account permanently closed.
If you have reason to believe that a minor may have accessed or registered on the mms99 platform, please contact us immediately at [email protected] so we can investigate and take immediate action.
mms99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
- Encryption in Transit: All data exchanged between your browser or app and the mms99 servers is encrypted using 256-bit SSL/TLS encryption. This prevents interception of sensitive data including login credentials and financial information during transmission.
- Password Hashing: Account passwords are stored using a strong, industry-standard one-way cryptographic hash function with salt. mms99 cannot retrieve your password in plain text — only you know it. If you forget your password, the account recovery process issues a new one.
- Access Controls: Internal access to personal data is restricted to authorised mms99 personnel who genuinely need it to perform their role. Access rights are reviewed periodically and revoked promptly when no longer required.
- Fraud Monitoring: mms99 operates continuous automated monitoring systems that flag unusual account behaviour, suspicious login patterns, and abnormal transaction activity in real time. Flagged activity is reviewed by the security team and acted upon promptly.
- Secure Infrastructure: The mms99 platform is hosted on secure server infrastructure maintained to current industry standards, with regular security patching, vulnerability scanning, and penetration testing conducted on a scheduled basis.
No security system is entirely impenetrable. While mms99 takes its security obligations seriously and maintains industry-standard protections, we cannot guarantee that your data will never be accessed, disclosed, altered, or destroyed as a result of a breach of our security measures. If mms99 discovers a security breach that affects your personal data, we will notify you as soon as practicable at the email address registered to your account.
You play an important role in keeping your account secure. You must keep your mms99 login credentials confidential, use a strong and unique password, and notify [email protected] immediately if you suspect that your account has been accessed without your authorisation.
11.1 Opt-In Requirement. mms99 will only send you direct marketing communications — including promotional emails, SMS messages regarding bonuses, and in-platform notifications about new game launches and seasonal offers — where you have explicitly opted in to receive such communications at the time of registration or subsequently via your account settings.
11.2 What We May Market. Where you have opted in, mms99 may send you communications about: welcome bonus offers and deposit match promotions; new sports betting markets including cricket BPL, T20 World Cup, and IPL events; new slot and live casino game releases from providers such as Pragmatic Play and Evolution Gaming; seasonal promotions timed to events such as Eid, Pohela Boishakh, and BPL season launches; and responsible gaming reminders.
11.3 Opting Out. You may withdraw your consent to receive marketing communications at any time by: clicking the unsubscribe link in any marketing email from mms99; updating your notification preferences in your mms99 account settings; or contacting [email protected] with an opt-out request. mms99 will process your opt-out request within 5 business days. Note that even after opting out of marketing, you will continue to receive transactional and account-related communications that are necessary for the operation of your account.
11.4 No Third-Party Marketing. mms99 does not share your personal data with third parties for the purpose of their own direct marketing campaigns. Your contact details will not appear on any marketing list operated by a party other than mms99.
mms99 reserves the right to amend this Privacy Policy at any time. Where a proposed amendment materially affects the way in which mms99 collects, uses, or shares personal data, we will notify registered players by email to the address held on their account prior to the change taking effect, and will post a prominent notice on the mms99 homepage.
The effective date displayed at the top of this Privacy Policy and within the last-updated badge on this page indicates when the current version came into force. It is your responsibility to review this Privacy Policy periodically. Continued use of the mms99 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
If you object to any amendment to this Privacy Policy, you may close your account by contacting [email protected] prior to the effective date of the change. mms99 will process account closure requests and arrange the return of any eligible account balance to your verified payment method.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how mms99 has handled your personal data, please contact our support team using the details below:
- Email: [email protected]
- Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
- Response Time: mms99 aims to respond to all privacy-related enquiries within 5 business days and to fully resolve data rights requests within 30 days of receipt.
When contacting us regarding a data rights request, please include your registered account username and the email address associated with your mms99 account so we can locate your records promptly and verify your identity before disclosing or modifying any personal data.
If you are not satisfied with the response you receive from mms99, or if you believe mms99 has breached its privacy obligations, you have the right to escalate your complaint to the appropriate data protection authority in your jurisdiction. mms99 will cooperate fully with any regulatory investigation into our data handling practices.