m711 Privacy Policy — Your Data, Protected

1.1 Information You Provide Directly

When you register for an m711 account or interact with our platform, you provide us with personal information directly. This includes:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postcode).
• Identity verification documents: Copies of your National ID card, passport, or driving licence, and proof of address documents submitted during KYC verification.
• Financial data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details for bank transfer withdrawals, and transaction records. We do not store full card numbers — card payments are tokenised by our payment processor.
• Account credentials: Your chosen username and a hashed (non-reversible) version of your password. We never store passwords in plain text.
• Communications data: The content of messages you send to our customer support team via live chat, email, or any other support channel.

1.2 Information Collected Automatically

When you access and use the m711 platform, certain technical data is collected automatically by our systems:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, bets placed, session start and end times, clicks, scroll depth, and navigation paths within the platform.
• Geolocation data: Approximate geographic location derived from your IP address, used for fraud prevention and to verify that you are not accessing the platform from a restricted jurisdiction.
• Cookies and similar technologies: Data collected via cookies, web beacons, and local storage as described in the Cookies section below.

1.3 Information from Third Parties

m711 may receive personal data about you from third-party sources in limited circumstances:

• Payment providers: Transaction confirmation data (status, reference number, amount) from bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other payment partners.
• Identity verification services: Verification outcomes from third-party KYC providers used to authenticate your identity documents.
• Fraud prevention services: Risk scoring data from anti-fraud and anti-money laundering service providers to help us protect both you and the platform from fraudulent activity.

3.1 Service Providers and Data Processors

m711 engages carefully selected third-party service providers to assist in delivering specific elements of our platform. These providers act as data processors on our behalf and are contractually bound to process your data only according to m711's documented instructions and to maintain appropriate security standards. Categories of service providers we use include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other payment partners who process deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party services used to authenticate identity documents and perform age verification checks.
• Fraud and AML screening providers: Services that analyse transactional and behavioural data to detect and prevent financial crime.
• Game content providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi whose games are hosted on the m711 platform. These providers may receive session data necessary to deliver and certify game outcomes.
• IT infrastructure and hosting providers: Cloud and server infrastructure partners who host the m711 platform and data under strict data processing agreements.
• Customer support platforms: Live chat and ticketing system providers used to facilitate player support interactions.

3.2 Legal and Regulatory Disclosures

m711 may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where we are compelled to do so by applicable law, court order, or legal process. In such cases, m711 will disclose only the minimum amount of data required to satisfy the legal obligation and will notify affected players where legally permitted to do so.

3.3 Business Transfers

In the event that m711 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. m711 will ensure that any such transfer is subject to appropriate data protection safeguards and will notify affected players in advance where reasonably practicable.

3.4 No Cross-Border Transfers Without Safeguards

Where m711's service providers or partners are located outside Bangladesh, m711 ensures that appropriate data transfer safeguards are in place before transferring personal data internationally. These safeguards may include contractual clauses, binding corporate rules, or equivalent data protection mechanisms.

5.1 Retention Principles

m711 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Once data is no longer required for these purposes, it is securely deleted or anonymised.

5.2 Specific Retention Periods

5.3 Account Closure and Data

When you close your m711 account, your personal data is not immediately deleted. m711 retains records as set out in the table above to comply with legal obligations. Your account will be deactivated so that you can no longer log in or place bets, but the underlying data records are preserved for the legally required retention period before being securely purged.

7.1 Right of Access

You have the right to request a copy of the personal data m711 holds about you. This is sometimes called a "Subject Access Request" (SAR). We will provide a structured summary of your data categories, the purposes for which your data is processed, and the third parties with whom it has been shared, within 30 calendar days of a verified request.

7.2 Right to Rectification

If any personal data m711 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details such as your email address and phone number directly within your account settings. For corrections to identity documents or other sensitive records, please contact [email protected].

7.3 Right to Erasure

You may request that m711 delete your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected, or if you withdraw the consent on which processing was based. Please note that the right to erasure is not absolute: m711 may be required to retain certain data for the legally mandated retention periods described in Section 5, particularly KYC and transaction records required under AML law.

7.4 Right to Restrict Processing

You have the right to request that m711 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed. During a restriction period, m711 will store your data but will not process it for other purposes without your consent.

7.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection to marketing, m711 will cease sending marketing communications immediately. You may also object to processing carried out on the basis of legitimate interests, in which case m711 will assess whether its legitimate interests are overridden by your rights and interests.

7.6 Right to Data Portability

Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that it be transmitted to another controller where technically feasible.