m711 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how m711 ("m711", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the m711 online casino and sports betting platform available at m711.io (the "Platform").

m711 is committed to handling personal data with transparency, integrity, and security. This Policy has been written in plain, formal English so that every player — regardless of their familiarity with data protection law — can clearly understand what happens to their personal information when they use the m711 Platform.

By registering an account on m711 or continuing to use the Platform, you acknowledge that you have read and understood this Policy in full and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

For the purposes of this Privacy Policy, m711 acts as the data controller with respect to the personal data of Players using the Platform. As data controller, m711 determines the purposes and means by which your personal data is processed.

All enquiries relating to data privacy, data subject rights requests, and any concerns about how m711 handles your personal information should be addressed directly to the m711 Data Protection contact as set out in Section 15 of this Policy. m711 aims to respond to all privacy-related communications within 30 calendar days of receipt.

m711 collects the following categories of personal data from Players, in accordance with the principle of data minimisation:

m711 collects personal data through the following mechanisms:

• Direct collection: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, session logs, and gameplay events. This data is collected via server logs and first-party analytics tools.
• Payment provider data: When you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider may share transaction confirmation data with m711 for reconciliation and fraud prevention purposes.
• Identity verification data: When you upload a verification document, the document image and extracted identity data are processed by m711's internal KYC team. m711 does not use automated facial recognition for identity verification.
• Responsible gaming self-declarations: If you voluntarily inform m711 of a gambling problem or request a self-exclusion, the details of that interaction are recorded to ensure your restrictions are enforced consistently and persistently.

m711 processes personal data on the following legal grounds, depending on the purpose of the processing activity:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to enter into and perform the Player account agreement with you — including account creation, deposit processing, game play facilitation, and withdrawal execution.
• Legal obligation: m711 is required to collect and retain certain data — particularly identity verification documents and financial transaction records — to comply with applicable anti-money laundering (AML), counter-financing of terrorism (CFT), and know-your-customer (KYC) obligations.
• Legitimate interests: m711 processes technical data (IP addresses, device fingerprints, session logs) on the basis of its legitimate interest in preventing fraud, securing the Platform, detecting multi-account abuse, and maintaining the integrity of betting markets.
• Consent: m711 processes your data for direct marketing purposes — including promotional emails and SMS bonus notifications — only where you have given your explicit prior consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

The personal data m711 collects is used for the following specific, documented purposes:

• Creating and managing your m711 Player account, including authenticating your identity at login.
• Verifying that you meet the minimum age requirement of 21 years before allowing access to real-money games and betting markets.
• Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, including reconciling transaction records and resolving payment disputes.
• Detecting, investigating, and preventing fraudulent activity, money laundering, multi-account abuse, and any other prohibited conduct as defined in the m711 Terms and Conditions.
• Monitoring gaming activity to identify signs of problem gambling behaviour and proactively offering responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion options.
• Providing customer support, handling complaints, and maintaining records of communications for quality assurance and compliance purposes.
• Sending you transactional notifications (account confirmations, withdrawal approvals, security alerts) and — with your consent — promotional communications about bonuses, tournaments, and new games on m711.
• Improving the performance, security, and user experience of the m711 Platform through analysis of aggregated, anonymised usage data.
• Complying with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.

m711 does not sell, rent, or trade personal data. We share personal data with third parties only in the following strictly defined circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum payment-related data necessary to execute and confirm transactions on your behalf.
• Game studio providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data to facilitate game delivery. These providers do not receive your identity or financial data.
• Identity verification partners: m711 may use accredited third-party KYC service providers to assist in verifying the authenticity of identity documents submitted during account verification. Such partners process document data strictly under data processing agreements with m711.
• IT infrastructure and security providers: Cloud hosting, server security, and DDoS protection services that form part of m711's technical infrastructure may have limited, controlled access to encrypted platform data as part of their service delivery.
• Legal and regulatory authorities: m711 will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required by a lawful order, warrant, or legal obligation. m711 will notify affected Players where disclosure is not prohibited by law.
• Business transfers: In the event of a merger, acquisition, or transfer of m711's business assets, Player data may be transferred to the acquiring entity, subject to equivalent privacy protections. Players will be notified of any such transfer in advance.

All third parties with whom m711 shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the agreed purpose. m711 does not permit third-party processors to use Player data for their own commercial purposes.

m711 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, taking into account our legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted from m711 systems or anonymised such that it can no longer be linked to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and platform improvement purposes.

m711 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your browser or app and m711 servers is encrypted using 256-bit TLS (Transport Layer Security). Connection security is enforced via HTTPS across all pages and API endpoints of the Platform.
• Encryption at rest: Personal data stored in m711 databases — including identity documents, financial records, and account credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Access to personal data held by m711 is strictly role-based. Only authorised personnel with a legitimate operational need may access Player data, and all access is logged and auditable.
• Two-factor authentication (2FA): m711 offers SMS-based 2FA for Player accounts to provide an additional layer of protection against unauthorised login. Players are strongly encouraged to enable 2FA in their account security settings.
• Intrusion detection and DDoS protection: m711 employs real-time intrusion detection systems, automated threat monitoring, and DDoS mitigation services to protect Platform infrastructure from external attacks.
• Security audits: m711 conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in its systems and processes.
• Staff training: All m711 personnel who handle personal data receive regular training on data protection obligations, security best practices, and the procedures for reporting a suspected data breach.

As a data subject, you hold the following rights with respect to your personal data held by m711. To exercise any of these rights, please contact m711 at [email protected] with the subject line "Data Rights Request" and a description of your request. m711 will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data m711 holds about you, along with information about how that data is being processed.
• Right to Rectification: If any personal data m711 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly. You may update certain data directly through your account settings without contacting support.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Note that m711 is unable to delete data that we are legally required to retain under AML/KYC obligations during the applicable retention period.
• Right to Restriction of Processing: You may request that m711 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: You have the right to receive the personal data you provided to m711 in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where processing is based on m711's legitimate interests. m711 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

m711 uses first-party cookies and similar tracking technologies on the Platform for the following purposes:

• Essential / functional cookies: These cookies are strictly necessary for the Platform to function correctly. They maintain your login session, preserve your language and display preferences, and ensure that security tokens operate as intended. These cookies cannot be disabled without impairing core Platform functionality.
• Performance / analytics cookies: m711 uses first-party analytics to measure page load times, identify technical errors, and understand how Players navigate the Platform. This data is collected in aggregated, anonymised form and is used solely to improve Platform performance.
• Security cookies: Short-lived cookies are used to support fraud detection and bot prevention measures, including CSRF (cross-site request forgery) protection tokens that safeguard form submissions.

m711 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies. You may configure your browser to refuse or delete cookies; however, doing so may affect the functionality of certain features of the m711 Platform, including secure login.

The m711 Platform is delivered in part through third-party service providers, including game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) and payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard). When you interact with games or payment interfaces provided by these third parties, data processing may occur within their own systems.

m711 carefully selects its third-party partners and requires them to operate under contractual data protection obligations consistent with the standards set out in this Policy. However, m711 is not responsible for the privacy practices of third-party providers once data leaves m711's own systems. Players are encouraged to review the privacy policies of these providers for full transparency.

The m711 Platform does not contain links to external websites. All navigation links on m711 point exclusively to internal pages of the m711 Platform.

The m711 Platform is strictly intended for individuals who are 21 years of age or older. m711 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this restriction.

If m711 becomes aware that personal data has been collected from an individual under the age of 21 — through misrepresentation at the time of registration or any other means — the affected account will be immediately closed, all submitted personal data will be securely deleted, any deposits made will be returned to the originating payment method, and any accumulated winnings will be voided.

If you believe that a minor has registered on m711 using false information, please contact [email protected] immediately so that the matter can be investigated and resolved without delay. m711 takes the protection of minors from online gambling extremely seriously.

m711 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Where changes are material — meaning they affect the rights or expectations of Players in a significant way — m711 will notify registered Players by email and/or by publishing a prominent notice on the Platform in advance of the changes taking effect.

The current version of the Privacy Policy is always accessible via the footer link at the bottom of every page on m711.io. The "Last Updated" date at the top of this document will be revised each time the Policy is amended. Your continued use of the Platform after the publication of a revised Policy constitutes your acceptance of the updated terms.

If you disagree with any amendment to this Policy, you have the right to request account closure and the withdrawal of any remaining real-money Balance. Please contact [email protected] to initiate this process.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about how m711 handles your personal data, please reach out to the m711 support team using the contact details below. All privacy enquiries are handled in English and receive a substantive response within 30 calendar days.

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request"
• Response Time: m711 aims to respond to all privacy-related communications within 30 calendar days of receipt.
• Operating Hours: Our support team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March).
• Language: All privacy communications are handled in English.