MCWWin Privacy Policy – How Safe Is Your Data With Us

MCWWin takes your privacy seriously. This policy explains what data MCWWin collects, why it is collected, and how it is kept secure. It has been written in plain language with Bangladesh members in mind.

MCWWin adheres to international data protection standards. Our goal is to collect only the information necessary to deliver our services – nothing more. Requesting or retaining data beyond what is needed is against MCWWin's policy.

MCWWin collects two types of information – details you provide directly, and data collected automatically.

Information You Provide:

• Full name and date of birth (for age verification).
• Email address and mobile number (for communication purposes).
• Residential address (for KYC verification).
• Scanned copy of your national ID or passport (for identity verification).
• Payment method number (for transaction purposes – full details are not stored).

Automatically Collected Data:

• IP address and device type (for security purposes).
• Browser and operating system information.
• How long, when, and how the platform has been used.
• Login time and location data (to prevent fraud).
• Cookie & session data (to improve your experience).

MCWWin uses the data it collects solely for specific purposes. Full details are provided in the table below.

MCWWin never sends marketing messages without your consent. You can opt out of marketing communications at registration or at any point thereafter.

MCWWin does not share your data with advertisers, marketing companies, or data brokers. However, limited information may be shared with specific parties in certain situations necessary for operating the service.

• Payment partner: Limited data is shared with bKash, Nagad, and Rocket solely to process transactions. Your full account details are never disclosed.
• KYC verification provider: Document details may be shared with an approved KYC service provider for identity verification.
• Legal authorities: MCWWin may be legally required to disclose information in response to a court order or a valid request from an investigating authority.
• Technology service provider: Technical data may be shared with contracted partners who provide platform hosting and security services.

MCWWin members in Bangladesh primarily make payments via bKash, Nagad, and Rocket. Information related to these payment methods is protected to the highest standard.

• MCWWin never knows – and never asks for – your mobile banking PIN or password.
• Payment transactions are processed directly through the relevant mobile banking server.
• MCWWin only stores transaction reference numbers and amounts.
• If a transaction fails for any reason, no partial payment data is retained on the server.
• Payment information is never used for any other purpose.

MCWWin uses cookies on its website and app. Cookies are small files stored on your device that help the platform recognize you.

Cookies can be managed through your browser settings. However, disabling essential cookies may prevent login and certain features from working properly.

MCWWin applies both technical and administrative safeguards to protect your data. If one layer of protection fails, the others remain active.

• SSL 256-bit Encryption: All communication across the website and app is encrypted.
• Firewall & DDoS protection: Protects the platform against server attacks.
• Two-factor authentication (2FA): An additional layer of security when accessing your account.
• Restricted Access: Only authorized personnel have access to specific data.
• Regular Security Audits: Third-party experts conduct regular system audits.
• Encrypted Database: Stored data is kept in encrypted form at all times.

MCWWin believes your data belongs to you. To uphold that right, MCWWin provides the following options.

To exercise any of these rights, send a request to the MCWWin support team via email or live chat. You will receive a response within 72 hours, and action will be taken within 30 days.

MCWWin retains data only for as long as necessary – no longer. Retention periods vary depending on the type of information.

• Active Account Data: Retained for the full duration your account remains active.
• Closed account data: Certain data may be retained for up to 5 years after account closure due to legal retention requirements.
• Transaction History: Retained for up to 7 years for financial regulatory compliance.
• KYC Documents: Deleted once the legal retention period following account closure has elapsed.
• Cookies & Session Data: Expires within 30 days to a maximum of 2 years.

MCWWin may update this Privacy Policy when necessary. For minor changes, the "Last Updated" date at the top of the page will be revised. For significant changes, members will be notified via email or in-app notification.

Continued use of MCWWin after any changes takes effect will be considered acceptance of the updated policy. If you do not agree with the changes, you may request to close your account.