mbx96 Privacy Policy

This Privacy Policy ("Policy") describes how mbx96 ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data provided by users ("Player", "you") who access or use the mbx96 website and related services at mbx96.app. This Policy forms part of your agreement with mbx96 and should be read alongside our Terms & Conditions.

By creating an mbx96 account, making a deposit, or otherwise using any feature of the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

1 Data We Collect

mbx96 collects personal data through several channels: directly from you when you register or use the platform, automatically through your device and browser when you visit mbx96.app, and from trusted third-party partners such as payment processors and identity verification providers. The categories of data we collect are set out below.

1.1 Registration Data

When you create an mbx96 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (to verify that you meet the 18+ age requirement).
• Residential address in Bangladesh (city, district, and postal code).
• Valid email address and mobile phone number.
• Username and encrypted password.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, we may request copies of official documents to confirm your identity and address before processing withdrawals or when required by our anti-money-laundering procedures. KYC documents may include:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Valid passport (all data pages).
• Birth certificate issued by a recognised Bangladeshi authority.
• Recent utility bill, bank statement, or mobile wallet statement as proof of address (dated within 90 days).

1.3 Financial Data

To process deposits and withdrawals, mbx96 collects payment-related information including your registered bKash, Nagad, or Rocket mobile wallet number, bank account details (where applicable), transaction reference numbers, and transaction history. We do not store full card numbers on our servers — card payments processed through Visa or Mastercard are handled by PCI-DSS-compliant third-party payment gateways.

1.4 Usage and Technical Data

When you browse mbx96.app, our servers automatically record certain technical information:

2 How We Use Your Data

mbx96 processes your personal data only for lawful, specified purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process personal data are as follows:

2.1 Account Management

We use your registration and KYC data to create and maintain your mbx96 account, verify your identity, enforce our one-account-per-player policy, authenticate your logins, and communicate with you about account-related matters including security alerts, verification requests, and important policy updates.

2.2 Payment Processing

Your financial data is processed to execute deposits from and withdrawals to your registered payment methods — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank — and to maintain an accurate transaction history within your account dashboard. All payment processing is conducted over encrypted connections.

2.3 Responsible Gaming and Fraud Prevention

mbx96 uses gameplay data, session data, and account history to monitor for patterns that may indicate problem gambling behaviour, underage access, or fraudulent activity. Where such patterns are detected, our responsible gaming team may initiate a review, apply account restrictions, or contact you directly to offer support. This processing is essential to our duty of care as a platform operator.

2.4 Legal and Regulatory Compliance

We process personal data as required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and any lawful requests from competent authorities. Retention periods for compliance-related data are governed by applicable legal requirements rather than this Policy alone.

2.5 Platform Improvement and Analytics

Aggregated, anonymised usage data is analysed to understand how players interact with the mbx96 platform, identify technical issues, optimise game lobbies, and improve the overall player experience. This analysis does not involve identifying individual players and is conducted on statistical data only.

2.6 Marketing Communications

If you have opted in to receive marketing communications during registration or through your account preferences, we may send you promotional offers, bonus notifications, and event announcements relevant to your gaming interests. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your preferences in your account settings or by contacting [email protected].

3 Data Sharing & Disclosure

mbx96 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for commercial purposes. We may, however, share your data with the following categories of recipients under strictly controlled conditions:

3.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary payment and identity data with our approved payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. Each payment partner processes your data under their own privacy terms and is responsible for the security of data within their systems.

3.2 Identity Verification Partners

We engage accredited third-party identity verification providers to conduct KYC checks on our behalf. These providers receive the identity documents you submit and return a verification result to mbx96. Verification partners are bound by strict data processing agreements and are not permitted to use your documents for any purpose other than completing the verification requested by mbx96.

3.3 Game Software Providers

Casino game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session tokens and gameplay data necessary to deliver their games within the mbx96 lobby. These providers do not receive your name, address, payment details, or other directly identifying information as part of normal game delivery.

3.4 Legal and Regulatory Authorities

mbx96 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of our players, or defend our legal rights.

4 Cookies & Tracking

mbx96 uses cookies and similar tracking technologies to operate certain platform features, maintain your login session, detect fraud, and understand how players navigate the site. A cookie is a small text file placed on your device by your web browser when you visit mbx96.app. Cookies do not contain executable code and cannot access other files on your device.

4.1 Types of Cookies We Use

Strictly necessary cookies cannot be disabled as they are essential for the platform to function correctly. You may manage functional and analytical cookies through your browser settings. Please note that disabling certain cookies may affect your ability to use some features of mbx96.

4.2 Third-Party Tracking

mbx96 does not permit third-party advertising networks to place tracking cookies on mbx96.app for the purpose of building advertising profiles or retargeting you on other websites. Any third-party scripts present on the platform are limited to those strictly required for game delivery and payment processing.

5 Data Security

mbx96 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all pages and data transmissions between your browser and mbx96 servers.
• Encrypted password storage using industry-standard hashing algorithms. We never store your password in plaintext.
• Two-factor authentication (2FA) available to all registered players as an optional but strongly recommended security layer.
• Access controls that restrict employee access to personal data on a strict need-to-know basis, with all access events logged and audited.
• Regular security assessments of the platform infrastructure, including penetration testing and vulnerability scanning.
• PCI-DSS-compliant payment processing for all card-based transactions, ensuring card data never passes through mbx96 servers in unencrypted form.

While mbx96 takes all reasonable precautions to protect your personal data, no online system can guarantee absolute security. You are responsible for keeping your mbx96 login credentials confidential and for ensuring that your own devices are protected by up-to-date security software.

6 Data Retention

mbx96 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention schedule is as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an active dispute, legal proceeding, or regulatory investigation, it will be retained until that matter is fully resolved.

7 Your Privacy Rights

As an mbx96 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Privacy Request — [Right Type]". We will acknowledge your request within 5 business days and aim to fulfil it within 28 days.

7.1 Right of Access

You may request a copy of all personal data that mbx96 holds about you, together with a summary of how that data is being used. This is sometimes referred to as a Subject Access Request (SAR). We will provide your data in a structured, commonly used, machine-readable format where technically feasible.

7.2 Right to Rectification

If any personal data held by mbx96 is inaccurate or incomplete, you have the right to request that we correct it. For most registration data, you can update your details directly through your account settings. For KYC documents or other data that cannot be self-corrected, please contact our support team.

7.3 Right to Erasure

You may request that mbx96 delete your personal data. This right is not absolute — we may be required to retain certain data for legal, regulatory, or contractual reasons even after your account is closed. Where erasure is possible within those constraints, we will carry it out without undue delay.

7.4 Right to Restrict Processing

In certain circumstances — for example, while a dispute about data accuracy is pending — you may request that we restrict the processing of your personal data to storage only. During a restriction period, we will not use your data for any other purpose without your consent.

7.5 Right to Withdraw Marketing Consent

Where we process your data for marketing communications on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To unsubscribe, use the opt-out link in any marketing email or contact [email protected].

8 Policy Updates

mbx96 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this Policy, we will notify registered players via email and display a prominent notice on mbx96.app for a minimum of 14 days before the changes take effect.

The "Last updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how mbx96 protects your personal data. Your continued use of the platform after a policy update constitutes your acceptance of the revised terms.

For questions, concerns, or formal privacy complaints relating to this Policy or mbx96's data handling practices, contact us at [email protected]. We treat all privacy enquiries as confidential and will respond within 5 business days.