mms49 Privacy Policy — How We Protect Your Personal Data
At mms49 we handle personal data with the same rigour we apply to platform security. This Privacy Policy explains exactly what information we collect from Bangladesh players, why we collect it, how we use it, who we share it with, and how we keep it safe. Your privacy is not an afterthought — it is built into every layer of the mms49 platform.
Our Commitments
Six Privacy Principles at mms49
These cards summarise the core data-protection commitments that underpin the mms49 Privacy Policy. The complete binding policy text follows below and governs in all cases.
Minimal Data Collection
mms49 collects only the personal data that is strictly necessary to operate the platform, verify your identity, process payments, and meet compliance obligations. We do not collect data for its own sake. Every data point we hold on a player account has a clearly defined, legitimate purpose.
Enterprise-Grade Security
All personal data transmitted between your device and the mms49 platform is encrypted using 256-bit SSL/TLS protocols. Data stored on our servers is protected by advanced encryption at rest. Our infrastructure is subject to continuous security monitoring and regular third-party penetration testing.
We Never Sell Your Data
mms49 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Data is shared with third parties only where strictly necessary to deliver the platform's services — such as payment processors, KYC verification providers, and fraud prevention partners.
Your Rights Are Respected
You have the right to access, correct, and request deletion of your personal data held by mms49. You may also request a copy of your data in a portable format. All data subject rights requests are handled promptly by our support team and will be acknowledged within 48 hours of receipt.
Clear Retention Limits
mms49 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data for active accounts is retained for the lifetime of the account plus a post-closure retention period as required for compliance purposes. Data no longer required is securely deleted.
Transparent Communication
If a data breach occurs that is likely to affect your rights or interests, mms49 will notify affected players promptly and clearly — explaining what data was involved, what steps have been taken, and what you should do. We do not conceal incidents or minimise their significance. Clear, honest communication is our standard.
Contents
- 1. Introduction
- 2. Data We Collect
- 3. How We Collect Data
- 4. How We Use Your Data
- 5. Legal Basis for Processing
- 6. Data Sharing & Third Parties
- 7. Cookies & Tracking
- 8. Data Security
- 9. Data Retention
- 10. Your Rights
- 11. Marketing Communications
- 12. Children & Minors
- 13. International Transfers
- 14. Policy Changes
- 15. Contact Us
This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. By registering an account with mms49 or continuing to use the platform after this date, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should stop using the platform and contact [email protected] to request account closure.
1. Introduction
mms49 ("we", "us", "our") operates the online sports betting and casino platform accessible at mms49.io (the "Platform"). We are committed to protecting the privacy and personal data of all players, visitors, and users who interact with the mms49 Platform ("you", "your").
This Privacy Policy sets out in clear, plain English how mms49 collects personal data, why we collect it, how we use it, how long we retain it, who we share it with, and what rights you have regarding your personal data. This policy applies to all personal data collected through the mms49 Platform, including data collected during account registration, identity verification, payment processing, gameplay, and customer support interactions.
This Privacy Policy should be read alongside the mms49 Terms & Conditions, which govern the overall relationship between you and mms49. In the event of any conflict between this Privacy Policy and the Terms & Conditions on data-related matters, this Privacy Policy shall prevail.
2. Personal Data We Collect
mms49 collects the following categories of personal data, depending on how you interact with the Platform:
2.1 Identity & Registration Data
- Full legal name as it appears on your government-issued identity document
- Date of birth (used to verify the 21+ age requirement)
- Gender (where voluntarily provided during registration)
- Residential address, city, and postcode
- Email address
- Mobile phone number
- Username and encrypted password
2.2 Identity Verification (KYC) Data
- Scanned or photographed copies of government-issued identity documents (National Identity Card, passport, or driving licence)
- Proof of address documents (utility bills, bank statements, or equivalent documents dated within three months)
- Selfie or facial verification image where enhanced KYC is required
2.3 Financial & Transaction Data
- Deposit and withdrawal amounts, dates, and associated payment method references
- bKash, Nagad, Rocket, Upay, or bank account reference numbers associated with transactions (we do not store full card or mobile banking PINs)
- Transaction history including deposits, withdrawals, bonus credits, and bet settlement records
- Account balance history
2.4 Usage & Behavioural Data
- Betting and gaming activity, including markets wagered on, games played, stakes placed, and outcomes
- Session duration, login timestamps, and in-session navigation patterns
- Responsible gaming tool usage (deposit limit settings, cooling-off activations, self-exclusion requests)
- Customer support interactions including live chat transcripts and email correspondence
2.5 Technical & Device Data
- IP address at the time of registration and each login
- Device type, operating system, and browser type and version
- Unique device identifiers where applicable
- Geolocation data derived from IP address (country and city level only — not precise GPS coordinates)
- Cookie and tracking technology data as described in Section 7
3. How We Collect Your Data
mms49 collects personal data through the following channels:
| Collection Method | Examples |
|---|---|
| Direct submission | Information you provide during registration, KYC document upload, payment processing, and support contact forms |
| Automated collection | IP address, device data, session data, and cookie data collected automatically when you access the Platform |
| Platform activity | Betting history, game play records, transaction logs, and responsible gaming tool usage generated during normal use of the Platform |
| Third-party providers | Identity verification results from KYC partners; fraud risk signals from fraud prevention services; payment confirmation data from bKash, Nagad, Rocket, and other payment processors |
| Publicly available sources | Sanctions screening databases, public registers, and other sources consulted during enhanced due diligence reviews |
4. How We Use Your Personal Data
mms49 uses personal data for the following specific purposes:
4.1 Account Management & Service Delivery
To create and maintain your player account; to process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment channels; to provide access to betting markets, casino games, and other Platform products; and to deliver customer support.
4.2 Identity Verification & Fraud Prevention
To verify your identity and age (21+ requirement) through our KYC process; to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, bonus abuse, and other prohibited conduct; and to conduct sanctions screening where required.
4.3 Responsible Gaming
To monitor account activity for indicators of problem gambling behaviour; to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion; and to contact players who display patterns consistent with gambling harm, as part of our player protection obligations.
4.4 Legal & Regulatory Compliance
To meet our obligations under applicable law, including record-keeping requirements, responding to lawful requests from government authorities, and cooperating with regulatory investigations where required.
4.5 Platform Improvement & Analytics
To analyse aggregate usage patterns for the purpose of improving Platform performance, user experience, product offerings, and technical infrastructure. Analytics data used for this purpose is aggregated and does not identify individual players.
4.6 Marketing Communications
To send you promotional offers, bonus notifications, and platform news where you have provided your consent to receive such communications. You may withdraw your marketing consent at any time as described in Section 11.
5. Legal Basis for Processing
mms49 processes your personal data on the following legal bases:
- Contractual necessity — processing required to perform our contract with you, including account management, payment processing, and game play records.
- Legal obligation — processing required to comply with applicable law, including KYC identity verification, sanctions screening, and record retention obligations.
- Legitimate interests — processing carried out in pursuit of mms49's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics for service improvement, provided those interests are not overridden by your rights and interests.
- Consent — processing based on your explicit consent, primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Data Sharing & Third Parties
mms49 does not sell your personal data to third parties. We share personal data only where strictly necessary, with the following categories of recipients:
6.1 Payment Processors
Transaction reference data and payment confirmation information is shared with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other Bangladeshi banking partners solely to process your deposits and withdrawals. These providers are contractually bound to use your data only for the purpose of processing the specific transaction.
6.2 KYC & Identity Verification Partners
Identity document images and personal details are shared with third-party identity verification providers for the purpose of completing KYC checks. These providers operate under strict data processing agreements with mms49 and may not use your data for any other purpose.
6.3 Fraud Prevention & Security Services
Technical data including IP address, device identifiers, and behavioural signals may be shared with fraud detection and platform security partners to identify and prevent fraudulent activity, account takeovers, and other security threats.
6.4 Legal Authorities
mms49 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or where mms49 believes disclosure is necessary to protect the safety of any person or to prevent illegal activity.
6.5 Business Transfers
In the event that mms49 undergoes a merger, acquisition, or sale of assets, personal data held by mms49 may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of any such transfer and the privacy protections applicable to their data under the new entity.
All third parties with whom mms49 shares personal data are required to enter into data processing agreements obligating them to handle your data securely, use it only for the specified purpose, and comply with applicable data protection standards. mms49 conducts due diligence on all data processors before engagement.
7. Cookies & Tracking Technologies
mms49 uses cookies and similar tracking technologies to operate the Platform, enhance your user experience, and gather analytics data. The following types of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Required for core Platform functionality including session management, login persistence, and security tokens. Without these cookies the Platform cannot function correctly. | No — required for operation |
| Performance & Analytics | Collect aggregate, anonymised data on how players use the Platform — pages visited, time on page, error events — to help us improve the Platform. | Yes — via browser settings |
| Functional | Remember your preferences such as language settings, odds format, and responsible gaming reminder intervals to personalise your experience. | Yes — via browser settings |
| Security | Help detect and prevent fraudulent activity by tracking unusual session patterns and flagging anomalous login behaviour. | No — required for security |
You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling performance or functional cookies may affect certain features of the Platform. mms49 does not use third-party advertising or retargeting cookies.
8. Data Security
mms49 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the mms49 Platform
- Encryption at rest for sensitive personal data stored on mms49 infrastructure
- Access controls limiting access to personal data to authorised personnel on a strict need-to-know basis
- Multi-factor authentication for all internal staff access to systems holding personal data
- Continuous security monitoring and automated alerting for suspicious activity patterns
- Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists
- Incident response plan enabling rapid containment and notification in the event of a data security incident
Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, mms49 will notify affected players without undue delay and provide clear guidance on protective steps you should take.
You are responsible for keeping your mms49 account credentials confidential. Do not share your password with anyone. If you suspect your account has been accessed without your authorisation, contact [email protected] immediately or reach us via 24/7 live chat.
9. Data Retention
mms49 retains personal data for the periods set out below. After each applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with an individual player.
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years after account closure |
| KYC identity verification documents | Duration of account plus 5 years after account closure |
| Financial transaction records | 7 years from the date of each transaction |
| Betting and gaming activity logs | Duration of account plus 3 years after account closure |
| Customer support correspondence | 3 years from the date of the interaction |
| Technical and device data (logs) | 12 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 3 years thereafter as evidence of consent |
Where applicable law requires a longer retention period for a specific category of data, mms49 will retain that data for the legally required period. Where a legal dispute is ongoing at the time a standard retention period expires, data relevant to the dispute will be retained until the dispute is finally resolved.
10. Your Data Rights
Subject to applicable law, you have the following rights in relation to the personal data mms49 holds about you:
- Right of access — You may request a copy of all personal data mms49 holds about you. We will provide this in a clear, structured format within 30 days of a verified request.
- Right to rectification — You may request correction of any inaccurate or incomplete personal data. You can update certain information directly in your account settings; for other corrections please contact support.
- Right to erasure — You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to mms49's legal retention obligations described in Section 9. Note that data required by law to be retained cannot be deleted on request.
- Right to data portability — You may request a copy of personal data you have provided to mms49 in a commonly used, machine-readable format (such as CSV or JSON).
- Right to restriction of processing — You may request that mms49 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing on legitimate interests grounds.
- Right to object — You may object to processing of your personal data carried out on the basis of mms49's legitimate interests. mms49 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, please contact our support team at [email protected] or via 24/7 live chat. We will acknowledge your request within 48 hours and aim to resolve it within 30 calendar days. In complex cases where the 30-day period cannot be met, we will notify you and provide a revised timeframe.
11. Marketing Communications
mms49 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new products, and seasonal promotions where you have given your explicit consent to receive such communications during registration or at any subsequent point.
You may withdraw your marketing consent and unsubscribe from all marketing communications at any time by:
- Clicking the "Unsubscribe" link included in any mms49 marketing email
- Updating your communication preferences in your account settings under the Notifications section
- Contacting our support team at [email protected] and requesting removal from all marketing lists
Withdrawal of marketing consent does not affect transactional communications. mms49 will continue to send you essential account notifications including deposit confirmations, withdrawal status updates, KYC status notifications, and responsible gaming alerts regardless of your marketing preferences, as these are required for the operation of your account.
mms49 does not share your contact details with third parties for their own marketing purposes. All mms49 promotional communications originate from mms49 directly or from contracted communications providers acting under strict data processing agreements.
12. Children & Minors
The mms49 Platform is strictly intended for adults aged 21 years and above. mms49 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process.
If mms49 becomes aware that personal data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor may have registered on the Platform using false information, please contact us immediately at [email protected].
If you share a device with minors, we strongly recommend using device-level parental control software to prevent access to online gambling platforms. mms49 takes underage gambling seriously and supports all industry-standard measures to prevent it.
13. International Data Transfers
mms49 primarily processes and stores personal data of Bangladesh-based players on infrastructure serving the Bangladesh and South Asia region. In certain circumstances, personal data may be transferred to or accessed from locations outside Bangladesh — for example, where a third-party service provider (such as a KYC verification partner or fraud prevention service) operates infrastructure in another country.
Where such transfers occur, mms49 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. Safeguards may include contractual clauses requiring the recipient to apply equivalent data protection standards, or transfer to jurisdictions that have been assessed as providing adequate protection.
By using the mms49 Platform, you acknowledge that your personal data may be transferred and processed in jurisdictions outside Bangladesh for the purposes described in this Privacy Policy, subject to the safeguards described above.
14. Changes to This Privacy Policy
mms49 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where a material change is made, mms49 will notify registered players by email to the address associated with their account, and by posting a prominent notice on the Platform, at least 7 days before the amended policy takes effect.
The effective date at the top of this policy will be updated to reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any revised policy constitutes your acceptance of the revised terms.
The current version of this Privacy Policy is always available at mms49.io/privacy-policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way mms49 handles your personal data, please contact our Data Protection team through any of the following channels:
- Email: [email protected] — please include "Privacy Request" in the subject line for faster routing
- Live Chat: Available 24/7 on the mms49 Platform — average response time 2–5 minutes
- Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
For data subject rights requests (access, rectification, erasure, portability, restriction, objection), please provide your full registered name, account username, and a description of your request to help us process it efficiently. We will acknowledge all privacy-related requests within 48 hours and aim to provide a full response within 30 calendar days.
mms49 is committed to handling your personal data with integrity, transparency, and care. We believe that strong data protection and a great betting experience are fully compatible — and we work every day to prove it. If you ever have a concern about how we have handled your data, we want to hear from you directly at [email protected].
You Are Protected
Your Data Is Safe — Now Enjoy the Game
mms49 keeps your personal data secure so you can focus on what matters — live cricket betting, slots, and casino games in BDT, 24/7. Login and play with confidence.
Login to mms49 Responsible Gaming