mce19 Privacy Policy — How We Handle Your Personal Data

mce19 is an online sports betting and casino platform operating at mce19.io and its associated mobile and web interfaces. Throughout this Privacy Policy, references to "mce19", "we", "us" or "our" refer to the operator of the mce19 platform, which acts as the data controller in respect of the personal information of all registered players and site visitors.

As data controller, mce19 determines the purposes and means by which personal data is processed. We are committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. If you have any questions about our role as data controller or about any aspect of this Privacy Policy, please contact us at [email protected].

Our platform is primarily designed for and marketed to players in Bangladesh. All services are provided in English and all transactions are denominated in Bangladeshi Taka (BDT). This Privacy Policy is written in English and reflects the data handling practices applicable to our entire player base.

2.1 Registration & Identity Data

When you create an account on mce19, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, gender, residential address (including district, city and postal code within Bangladesh), email address, and mobile phone number. This information is used to establish and manage your player account and to verify your identity.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport or driving licence. We may also request proof of residential address in the form of a recent utility bill or bank statement, and proof of payment method. These documents are processed solely for the purposes of identity verification, fraud prevention and compliance with anti-money-laundering obligations.

2.3 Financial & Transaction Data

We collect data related to all financial transactions conducted through the mce19 platform. This includes deposit amounts, withdrawal requests, payment method details (such as your bKash, Nagad, Rocket or Upay account references), transaction timestamps, and transaction IDs. We do not store full card numbers or full mobile banking PINs — only the reference information required to process and record your transactions.

2.4 Gaming & Betting Activity Data

We collect a full record of your betting and gaming activity on the platform. This includes the sports events or casino games on which you have placed bets, stake amounts, odds accepted, game round results, win/loss outcomes, and bonus usage history. This data is used to manage your account, resolve disputes, detect fraudulent patterns, and improve the platform's game offering.

2.5 Technical & Device Data

When you access the mce19 platform, we automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type (desktop, mobile or tablet), screen resolution, referring URL, pages visited, time on site, and session duration. This information is used to optimise platform performance, improve user experience, and support fraud prevention and security monitoring.

2.6 Communications Data

If you contact our customer support team — via live chat, email or WhatsApp — we retain a record of the communication, including the content of messages, timestamps, and the resolution reached. This data is used to manage your support queries, improve our service quality, and maintain a full audit trail of account-related interactions.

2.7 Marketing Preference Data

Where you have given explicit consent to receive marketing communications from mce19, we record the nature and date of that consent, your stated preferences (email, SMS, or both), and any subsequent withdrawal of consent. We use this data solely to manage our marketing communications in accordance with your stated preferences.

mce19 collects personal data through the following channels and mechanisms:

• Direct provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, entering a promotion, or contacting our support team.
• Automated collection: Technical and device data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you visit and interact with the mce19 platform. See Section 7 (Cookies & Tracking) for full details.
• Third-party verification providers: Identity and age verification data received from third-party KYC and fraud-prevention service providers when we process your identity documents.
• Payment processors: Transaction reference data received from payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa and Mastercard when you make deposits or withdrawals.
• Fraud detection systems: Risk signals and device fingerprinting data received from integrated fraud detection and responsible gaming compliance systems used to protect the platform and its players.

mce19 uses the personal data we collect for the following specific purposes:

mce19 does not use your personal data to make solely automated decisions that have a significant legal or similarly significant effect on you without providing an avenue for human review. Where automated systems flag an account for review — for example, during fraud detection — a member of our compliance team will review the matter before any final action is taken.

mce19 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to enter into and perform our contract with you as a registered player — including account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements, and responses to lawful requests from authorities.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, and improving the quality and safety of the platform for all players, provided these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific and informed consent — in particular, processing for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 Service Providers

mce19 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processing companies (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, Mastercard), identity verification and KYC service providers, fraud detection and cyber-security companies, cloud hosting and infrastructure providers, customer support software providers, and email and SMS communication platforms. All third-party service providers are contractually required to process your data only on our instructions and to maintain appropriate security standards.

6.2 Game Software Providers

The casino and live casino games available on mce19 are supplied by third-party game studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming and Spribe. These providers may process limited technical and session data in the course of delivering their games. Their data handling practices are governed by their own privacy policies, and mce19 only works with providers who maintain recognised data security certifications.

6.3 Legal & Regulatory Disclosure

mce19 may disclose personal data to law enforcement authorities, regulatory bodies, courts, or other government agencies where we are legally required to do so, or where disclosure is necessary to protect the rights, property or safety of mce19, our players, or others. We will notify affected players of any such disclosure where we are legally permitted to do so.

6.4 No Sale of Personal Data

mce19 does not sell, rent, lease or otherwise transfer your personal data to third parties for their own marketing, commercial, or analytical purposes. Any data sharing arrangement with a third party is governed by a formal data processing agreement and is limited strictly to what is necessary for the specified purpose.

7.1 What Are Cookies

Cookies are small text files placed on your device by the mce19 website when you visit. They allow the platform to recognise your device, remember your preferences, keep you logged in, and collect analytical data about how you interact with the site. mce19 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period or until manually deleted).

7.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function correctly. These include authentication cookies that keep you logged in, session management cookies, and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game categories. Disabling these cookies may affect your user experience.
• Analytical cookies: Used to collect aggregate, anonymised data about how visitors use the mce19 platform — including pages visited, time on site, and navigation paths. This data is used to improve platform design and performance.
• Fraud prevention cookies: Used to support our fraud detection and responsible gaming compliance systems by identifying unusual usage patterns associated with the same device or browser session.

7.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may limit the functionality of the mce19 platform and may affect your ability to access certain features. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

mce19 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general data retention periods are as follows:

• Active account data: Retained for the full duration of your registered account with mce19 and for a period of at least five (5) years following account closure, in line with standard financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later, to comply with anti-money-laundering obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless a longer period is required in connection with an unresolved dispute or legal proceeding.
• Technical and device data: Typically retained for up to twelve (12) months in identifiable form, after which it may be anonymised and retained indefinitely for aggregate analytical purposes.
• Marketing consent records: Retained for the duration of your marketing consent and for three (3) years following withdrawal of consent, as evidence of the consent history.

When personal data is no longer required, mce19 ensures it is securely deleted or anonymised in accordance with our data disposal procedures.

mce19 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the mce19 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Access controls: Access to systems containing personal data is strictly limited to authorised mce19 personnel who require access to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Secure password storage: Account passwords are stored using industry-standard one-way hashing algorithms. mce19 staff cannot view your password in plain text and will never ask you to reveal it.
• Regular security assessments: mce19's technical infrastructure is subject to regular security testing and vulnerability assessments to identify and address potential weaknesses before they can be exploited.
• Incident response: In the unlikely event of a data security incident that poses a risk to your personal data, mce19 maintains a formal incident response process. Affected players will be notified promptly where required and appropriate remedial action will be taken without delay.

While mce19 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

As a player on the mce19 platform, you hold a number of rights in relation to your personal data. These rights are outlined below. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request", including your registered username and the nature of your request.

• Right of access: You may request a copy of all personal data that mce19 holds about you. We will provide this in a readable format within a reasonable timeframe following verification of your identity.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: Subject to our legal retention obligations, you may request the deletion of your personal data. Requests will be reviewed within 30 days and fulfilled where no overriding legal requirement applies.
• Right to restriction of processing: You may request that mce19 restricts the processing of your personal data in certain circumstances — for example, while a correction request is being resolved.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you may request that we provide your personal data in a structured, machine-readable format for transfer to another controller.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — in particular, marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The mce19 platform is strictly intended for adults aged 21 years and above. mce19 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration requirement, and we apply identity verification checks to confirm that players meet the minimum age requirement.

If mce19 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, we will immediately suspend the relevant account, delete the associated personal data, and reverse any financial transactions associated with the account. If you believe that a minor has registered on mce19, please notify us immediately at [email protected] so that we can take appropriate action without delay.

mce19 supports responsible gaming and is committed to preventing underage gambling. Parents and guardians who are concerned about the online gambling activities of individuals in their care are encouraged to make use of parental control software and to contact our support team for guidance on protective measures available through the platform.

The mce19 platform may contain references to or integrations with third-party services — in particular, the game software provided by studio partners such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming and Spribe. While mce19 takes reasonable steps to ensure that these partners maintain appropriate data security standards, we are not responsible for the privacy practices of third-party operators.

This Privacy Policy applies solely to data collected and processed by mce19 in connection with the mce19.io platform and its direct services. If you access third-party services through the mce19 platform, you should review the privacy policies of those third parties independently. mce19 does not accept liability for how third-party services handle your personal data once you have left the mce19 environment.

mce19 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, legal obligations, or platform features. When material changes are made to the policy, we will notify registered players via email or through an on-platform notice prior to the changes taking effect. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.

We encourage all registered players to review this Privacy Policy periodically to stay informed about how mce19 handles their personal data. Your continued use of the mce19 platform following the notification of any changes constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with any amendment to this policy, you should cease using the platform and contact our support team to discuss your options, including account closure and data deletion.

Archived versions of previous Privacy Policy documents are available on request by contacting [email protected]. mce19 will retain prior versions for a minimum of three (3) years to ensure full transparency and accountability in our data governance practices.

If you have any questions, concerns or requests regarding this Privacy Policy or the way in which mce19 handles your personal data, please contact our dedicated data support team using any of the following methods:

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 directly on the mce19.io platform
• WhatsApp: +880 1700 000000 (response within 24 hours)

Our support team operates 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Victory Day (December 16), Independence Day (March 26), and Pohela Boishakh. We aim to respond to all data-related enquiries within two (2) business days and to resolve them within thirty (30) calendar days, depending on the complexity of the request.