mrz99 Privacy Policy

When you register for a mrz99 account or interact with our platform, we may collect and process the following categories of personal data:

mrz99 does not knowingly collect sensitive personal data such as health information, religious beliefs, or political opinions. If you believe we have inadvertently collected such data, please contact us at [email protected] immediately so we can take corrective action.

We do not collect personal data from individuals who are under 18 years of age. If we discover that a user is under 18, we will suspend the account, delete all associated personal data, and refund any real-money balance in accordance with our Terms and Conditions.

mrz99 processes your personal data only where we have a lawful basis to do so. The lawful bases we rely upon are: (a) performance of a contract — processing necessary to deliver our services to you; (b) legal obligation — processing required to comply with applicable laws and regulations; (c) legitimate interests — processing that serves mrz99's reasonable operational interests where those interests are not overridden by your rights; and (d) consent — where you have explicitly opted in to a specific form of processing, such as marketing communications.

The specific purposes for which mrz99 uses your personal data are as follows:

• Account Creation and Management: To create, maintain, and secure your mrz99 account, verify your identity, and manage your account preferences and settings.
• Service Delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks; to credit winnings; to apply bonuses and promotional offers; and to provide access to games, betting markets, and live casino products.
• Identity Verification and Fraud Prevention: To conduct Know Your Customer (KYC) checks, verify your age and identity, detect and prevent fraudulent transactions, money laundering, and other prohibited conduct as required by our Terms and Conditions.
• Customer Support: To respond to your queries, resolve account issues, process complaints, and maintain records of communications for quality assurance and dispute resolution.
• Legal and Regulatory Compliance: To meet our obligations under applicable laws, respond to lawful requests from government authorities or law enforcement, and maintain financial records as required by accounting and anti-money laundering regulations.
• Platform Improvement and Analytics: To analyse aggregated usage patterns, improve game performance, personalise your in-platform experience, and test new features. Where analytics use personal data, it is processed under mrz99's legitimate interests.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about mrz99 products and services, where you have not opted out. You may withdraw your consent to marketing at any time by contacting support or adjusting your account notification settings.
• Responsible Gaming: To monitor your gambling activity for indicators of problem gambling behaviour, apply any self-imposed deposit limits or self-exclusion orders, and provide access to responsible gaming resources.

mrz99 does not use automated decision-making processes, including profiling, that produce legal or similarly significant effects on you without human oversight. Where automated tools are used for fraud detection or responsible gaming monitoring, a qualified team member reviews any resulting action before it is applied to your account.

mrz99 may share your personal data with the following categories of third parties in the circumstances described:

• Payment Service Providers: mrz99 shares financial data (such as your bKash or Nagad account number and transaction amounts) with our payment processing partners solely for the purpose of executing your deposit or withdrawal requests. These providers are contractually required to handle your data securely and may not use it for any other purpose.
• Identity Verification Providers: To fulfil our KYC obligations, mrz99 may pass your identity documents and biometric data to specialist identity verification service providers. These providers operate under strict data processing agreements and are permitted to use your data only for verification purposes.
• Game Software Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data (such as your account identifier and bet amounts) for the purpose of facilitating game play, maintaining game integrity, and resolving disputes. These providers do not receive your contact or financial data.
• Fraud Detection and Security Partners: mrz99 uses third-party fraud detection services that may process your IP address, device fingerprint, and account activity data to identify patterns consistent with fraudulent or abusive behaviour.
• Legal and Regulatory Authorities: mrz99 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, or where we believe disclosure is necessary to protect the rights, property, or safety of mrz99, its users, or the public.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of mrz99's business, your personal data may be transferred to the acquiring entity. You will be notified via the email address associated with your account before your data is transferred and becomes subject to a different privacy policy.

All third parties with whom mrz99 shares personal data are required to implement appropriate technical and organisational security measures and to process your data only in accordance with mrz99's documented instructions and applicable data protection law. mrz99 does not permit its third-party service providers to use your data for their own purposes beyond those strictly outlined above.

mrz99 uses cookies and similar tracking technologies — including local storage, session storage, and pixel tags — to operate the platform, remember your preferences, maintain your login session, and gather analytics data that helps us improve your experience. Below is a full description of every cookie category we use:

Most modern web browsers allow you to control cookie settings through their built-in privacy or security options. You may block or delete cookies at any time through your browser settings. Please note that disabling strictly necessary or security cookies will impair or prevent your ability to access and use the mrz99 platform.

mrz99 does not use third-party advertising cookies or retargeting pixels that track your activity across other websites. Any analytics processing we perform is conducted using first-party data collected only within the mrz99 platform environment.

mrz99 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Personal data associated with an active mrz99 account is retained for the full duration of the account relationship. If your account is closed — whether voluntarily or by mrz99 — your data is subject to the post-closure retention periods described below.
• Financial Transaction Records: Records of deposits, withdrawals, and betting activity are retained for a minimum of seven (7) years following the date of the transaction to comply with financial record-keeping and anti-money laundering obligations.
• KYC and Identity Verification Documents: Identity documents submitted during the KYC process are retained for a minimum of five (5) years following account closure, or longer where required by applicable law.
• Customer Support Communications: Records of support interactions, including live chat transcripts and email correspondence, are retained for three (3) years to facilitate dispute resolution and quality assurance.
• Technical and Log Data: Server logs, IP address records, and session data are retained for a maximum of twelve (12) months unless a specific security investigation requires their retention for a longer period.
• Marketing Consent Records: Where you have given consent to receive marketing communications, a record of that consent is retained for as long as you remain an active mrz99 user and for two (2) years thereafter, to demonstrate compliance with consent obligations.

When personal data reaches the end of its applicable retention period, mrz99 will securely delete or irreversibly anonymise it so that it can no longer be associated with any individual. If you request deletion of your data before the end of an applicable retention period and no legal obligation prevents us from doing so, we will action your request within 30 days.

The security measures mrz99 employs to protect your personal data include, but are not limited to:

• Encryption in Transit: All data exchanged between your browser or device and mrz99 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This protects your login credentials, payment details, and personal information from interception during transmission.
• Encryption at Rest: Sensitive personal data stored on mrz99 servers — including identity documents, payment account numbers, and hashed passwords — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within mrz99's internal systems is restricted to personnel who require it to perform their specific job functions. Role-based access controls, multi-factor authentication, and audit logging are applied to all systems that process personal data.
• Password Security: User account passwords are stored as salted cryptographic hashes. mrz99 employees cannot view your password in plain text. You are strongly advised to use a strong, unique password for your mrz99 account.
• Penetration Testing and Security Audits: mrz99 engages independent security professionals to conduct regular penetration testing and vulnerability assessments of our platform infrastructure.
• Incident Response: mrz99 maintains a documented data breach incident response plan. In the event of a data breach that poses a risk to your rights or freedoms, we will notify affected users without undue delay and take immediate remedial action.

While mrz99 takes all reasonable and practicable steps to protect your personal data, no system is entirely immune to security risks. You play an important role in keeping your account secure by using a strong password, not sharing your credentials, and reporting any suspected unauthorised access to [email protected] immediately.

As a user of the mrz99 platform, you hold the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of all personal data that mrz99 holds about you. We will provide this in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Rectification: If any personal data mrz99 holds about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic account information such as your email address or mobile number directly through your account settings.
• Right to Erasure: You may request that mrz99 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. Erasure requests are subject to our legal retention obligations — mrz99 cannot delete data that we are required by law to retain.
• Right to Restriction of Processing: You may request that mrz99 temporarily suspend processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where mrz99 processes your data on the basis of your consent or the performance of a contract, you have the right to receive a portable copy of that data in a structured format so that you may transfer it to another service provider.
• Right to Object: You have the right to object to mrz99 processing your personal data where that processing is based on legitimate interests, including profiling. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where mrz99 processes your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

mrz99 will not charge a fee for handling privacy rights requests in the ordinary course. However, where requests are manifestly unfounded or excessive — in particular, where they are repetitive — mrz99 reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

If you are dissatisfied with mrz99's response to a privacy rights request, you have the right to raise a complaint directly with mrz99 management by escalating your request through [email protected].

mrz99 reviews this Privacy Policy on a regular basis to ensure it accurately reflects our data processing practices and remains compliant with applicable law. We reserve the right to update or amend this policy at any time.

When material changes are made to this Privacy Policy — for example, where a new category of data is collected, a new third-party processor is engaged, or a significant change in data retention periods is introduced — mrz99 will notify registered users by email to the address associated with their account at least fourteen (14) days before the change takes effect. For minor updates that do not materially affect your rights (such as editorial corrections or clarifications), notification may be provided solely through an updated version of this page.

The "Effective Date" and "Last Reviewed" fields at the top of this page reflect the most recent version of this policy. We encourage you to check this page periodically to stay informed about how mrz99 handles your personal data. Your continued use of the mrz99 platform after any amendment to this policy constitutes your acknowledgement of the revised terms.

If you have questions or concerns about this Privacy Policy or the way mrz99 handles your personal data, please contact our support team at [email protected]. We are available seven days a week and will respond to all privacy-related enquiries as promptly as possible.