mm333 Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal information mm333 collects when you use our platform, how we use it, who we share it with, and how we keep it secure. We are committed to handling your data with transparency and care.
SSL Encryption
All data transmitted between your device and the mm333 platform is protected by industry-standard SSL/TLS encryption. Your personal and financial details are never sent in plain text across our network.
Minimal Data Collection
mm333 collects only the personal information that is strictly necessary to operate the platform, verify your identity, process payments, and comply with applicable legal obligations. We do not collect data speculatively.
No Sale of Personal Data
mm333 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to deliver and improve our platform services.
Your Control
You have the right to access, correct, and request deletion of your personal data at any time. Our support team processes data-related requests promptly and confidentially via [email protected].
Transparent Cookie Use
mm333 uses cookies strictly for session management, platform analytics, and fraud prevention. We do not deploy third-party advertising cookies or behavioural tracking pixels on our platform.
Restricted Internal Access
Access to your personal data within mm333 is restricted on a strict need-to-know basis. Only authorised personnel involved in account management, compliance, and payment processing may view identifiable player data.
Section 1
Information We Collect
When you register for, access, or use the mm333 platform, we collect personal information that falls into the following categories. We gather this information directly from you during registration and account activity, automatically through your use of our platform, and in some cases from third-party service providers who assist in identity verification and payment processing.
Information You Provide Directly
- Registration data — full name, date of birth, email address, mobile phone number, and preferred username when you create your mm333 account.
- Identity verification documents — government-issued photo ID (National Identity Card, passport, or driving licence), proof of address, and source-of-funds documentation provided as part of our KYC (Know Your Customer) process.
- Payment information — mobile financial service account details (bKash, Nagad, Rocket, Upay), bank account numbers for participating Bangladesh banks, and card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are not stored on mm333 servers; they are handled directly by our PCI-DSS compliant payment processors.
- Communications — content of messages you send to our support team via email or live chat, including any attachments you provide to support a query or dispute.
- Responsible gaming self-declarations — if you voluntarily disclose information regarding your gaming habits, financial situation, or a self-exclusion request, we record this information to fulfil our duty of care obligations.
Information We Collect Automatically
- Device and browser data — IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage and session data — pages visited, games played, bet amounts, session duration, click patterns, and navigation paths within the mm333 platform.
- Transaction logs — a complete record of all deposits, withdrawals, bonus claims, wagers placed, and game outcomes associated with your account.
- Geolocation data — approximate geographic location derived from your IP address. We do not collect precise GPS-level location data unless you explicitly grant permission on a mobile device.
- Cookie and tracking data — session identifiers, authentication tokens, and analytics identifiers set via cookies and similar technologies. See the Cookies section below for full details.
Section 2
How We Use Your Information
mm333 uses the personal information we collect for a defined set of purposes, each of which is tied to a legitimate operational or legal need. We do not use your data for purposes that are incompatible with those described below without first obtaining your explicit consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and authentication | Name, email, phone, username, password hash | Contractual necessity |
| Identity verification (KYC) | ID documents, date of birth, address proof | Legal obligation / contractual necessity |
| Processing deposits and withdrawals | Payment method details, transaction history | Contractual necessity |
| Fraud detection and prevention | IP address, device data, transaction patterns | Legitimate interest |
| Responsible gaming monitoring | Session data, bet history, self-declarations | Legal obligation / legitimate interest |
| Customer support communications | Email, support messages, account data | Contractual necessity |
| Platform analytics and improvement | Usage data, session logs, device data | Legitimate interest |
| Promotional communications (opt-in only) | Email address, gaming preferences | Consent |
| Anti-money laundering (AML) compliance | Transaction data, identity documents | Legal obligation |
mm333 will never use your personal data to make automated decisions that produce significant legal effects on you — such as permanent account closure — without a human review stage. Automated systems may flag accounts for review, but final decisions involving material consequences are always reviewed by a qualified member of our compliance team.
Section 3
Legal Basis for Processing
Every instance of personal data processing at mm333 rests on one or more of the following lawful bases. We maintain an internal data processing register that maps each processing activity to its corresponding legal basis, which is available to players upon request.
- Contractual necessity: Processing is required to fulfil our obligations under the account agreement — including providing access to games, processing transactions, and maintaining your account balance. Without this processing, we cannot deliver the mm333 service to you.
- Legal obligation: mm333 is required by applicable law to collect and retain certain categories of personal data, including identity verification records for AML compliance, transaction logs for financial reporting, and responsible gaming records for player protection purposes.
- Legitimate interest: mm333 has a legitimate interest in processing certain data to detect and prevent fraud, protect the security of our platform, conduct internal analytics to improve user experience, and manage operational risk. We balance our legitimate interests against your right to privacy and will not override your fundamental rights through this basis.
- Consent: For activities that are not strictly necessary — primarily direct marketing communications and the placement of non-essential analytics cookies — mm333 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Section 4
Data Sharing and Disclosure
mm333 does not sell, rent, or trade your personal information to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose identified.
Service Providers and Data Processors
mm333 works with carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These providers are permitted to use your data only as directed by mm333 and may not use it for their own purposes. Categories of data processor include:
- Payment processors — bKash, Nagad, Rocket, Upay, and card payment gateways process transaction data necessary to execute your deposits and withdrawals. Each processor operates under its own privacy framework and applicable Bangladesh financial regulations.
- Identity verification providers — third-party KYC services that assist in verifying government-issued ID documents and cross-referencing them against sanctions and politically exposed persons (PEP) databases.
- Game content providers — studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and anonymised player identifiers necessary to deliver their games within the mm333 platform. These providers do not receive your full identity data.
- Platform analytics providers — tools that process anonymised or pseudonymised usage data to help mm333 understand player behaviour and improve the platform experience.
- Cloud infrastructure providers — hosting and database services that store mm333 platform data in secure, access-controlled environments.
Legal and Regulatory Disclosure
mm333 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally required to do so — for example, in response to a court order, a regulatory investigation, or a statutory AML reporting obligation. We will notify affected players of such disclosures where we are legally permitted to do so.
Business Transfers
In the event that mm333 undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice to affected players prior to any such transfer, and the receiving entity will be bound by obligations no less protective than those set out in this Privacy Policy.
Section 6
Data Security Measures
mm333 applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security programme encompasses the technical, organisational, and procedural controls described below.
Technical Controls
- Transport Layer Security (TLS 1.3) — all data in transit between your device and mm333 servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
- Data encryption at rest — sensitive personal data fields (including identity document references and payment method identifiers) are stored in encrypted form within our databases.
- Access controls — role-based access control (RBAC) limits internal access to personal data to authorised personnel only. All internal access is logged and subject to periodic audit.
- Intrusion detection systems — mm333 operates 24/7 network monitoring and automated intrusion detection to identify and respond to potential security threats in real time.
- Regular penetration testing — our platform undergoes scheduled security assessments by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
Organisational Controls
- All mm333 staff who handle personal data complete mandatory data protection training as part of their onboarding and on an annual basis thereafter.
- Third-party service providers are assessed for security compliance before being granted access to mm333 systems or data.
- mm333 maintains a documented incident response plan that outlines procedures for detecting, containing, and notifying affected parties in the event of a data breach.
While mm333 takes all reasonable and commercially practicable measures to secure your personal data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your mm333 account and to enable any additional account security features available in your dashboard.
Section 7
Data Retention
mm333 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general framework:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation (AML regulations) |
| KYC identity documents | 5 years from account closure or last transaction | Legal obligation |
| Transaction and bet records | 5 years from date of transaction | Legal obligation / dispute resolution |
| Support communications | 3 years from date of communication | Legitimate interest (dispute resolution) |
| Session and usage logs | 13 months from date of session | Legitimate interest (fraud prevention, analytics) |
| Marketing consent records | Until consent is withdrawn + 3 years | Legal obligation (proof of consent) |
| Self-exclusion records | Indefinitely (player safety requirement) | Legal obligation / player protection |
When personal data reaches the end of its applicable retention period, mm333 securely deletes or irreversibly anonymises it. Anonymised aggregate data — from which no individual can be identified — may be retained beyond these periods for statistical and platform improvement purposes.
If you close your mm333 account, your personal data will be retained for the periods listed above in accordance with our legal obligations. You will not receive any further marketing communications after account closure unless you subsequently re-register and provide fresh consent.
Section 8
Your Privacy Rights
As a player on the mm333 platform, you hold specific rights in relation to the personal data we hold about you. mm333 is committed to honouring these rights promptly, transparently, and free of charge, except in cases where a request is manifestly unfounded or excessive.
- Right of access: You may request a copy of the personal data mm333 holds about you, together with information about how it is used and with whom it is shared. We will provide this in a structured, commonly used format within 30 days of a valid request.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly in your mm333 account dashboard.
- Right to erasure: You may request that mm333 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that we may be required to retain certain data to comply with legal obligations — in such cases we will explain what data must be retained and why.
- Right to restrict processing: You may ask mm333 to limit the way we process your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or pending the outcome of an objection to processing.
- Right to data portability: Where processing is based on your consent or on contractual necessity and carried out by automated means, you may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider.
- Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to processing of your data for direct marketing purposes at any time.
- Right to withdraw consent: Where mm333 processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
Section 9
Third-Party Services
The mm333 platform integrates with third-party services to deliver its full feature set. When you interact with these integrated services — including game content from our studio partners and payment gateways — those providers may process personal data according to their own privacy policies, which are separate from and independent of this Privacy Policy.
Game Content Providers
Games on mm333 are supplied by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a session token is passed to the relevant provider to authenticate your session and record game results. Game providers receive only the minimum data necessary to operate the game — they do not receive your full name, payment details, or identity documents from mm333.
Payment Service Providers
Transactions processed via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladesh banks are subject to those providers' own privacy policies and terms of service. mm333 does not store full card numbers or mobile financial account PINs. Payment tokenisation is used wherever supported by the payment provider to minimise the sensitivity of data stored on mm333 systems.
Links to External Content
The mm333 platform does not contain links to external third-party websites. All navigation within the mm333 ecosystem leads to pages within the mm333.bet domain. mm333 accepts no responsibility for the privacy practices of any external websites that you may visit independently.
Section 10
Policy Updates and Contact
Updates to This Privacy Policy
mm333 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes — meaning changes that significantly affect how we collect or use your personal data — we will notify you via email to your registered address and by displaying a prominent notice on the mm333 platform before the changes take effect.
The effective date at the top of this page will always reflect the date on which the most recent version came into force. We encourage you to revisit this page periodically to stay informed of any updates. Continued use of the mm333 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.
Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way mm333 handles your personal data, please contact our data protection team directly. We take all privacy-related enquiries seriously and aim to respond within 5 business days (Bangladesh Standard Time, UTC+6).
You may contact the mm333 privacy team at: [email protected] — please use the subject line "Privacy Enquiry" to ensure your message is routed to the correct team. Our support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays.
Explore mm333 With Confidence
Now that you understand how mm333 protects your personal data, discover our full range of games — from BPL cricket betting to live casino tables and 500+ slots. Safe, fair, and available 24/7 in English for players across Bangladesh. 18+ only.