Data Protection
md1234 Privacy Policy
Your privacy matters to md1234. This Privacy Policy sets out in clear, plain English exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your information. We operate in compliance with applicable data-protection standards and treat every user's data with the highest level of care.
1. Information We Collect
To provide you with a safe, personalised, and fully functional gambling experience, md1234 collects several categories of personal data. We collect only the information we genuinely need to deliver our services, meet our legal obligations under applicable anti-money-laundering (AML) and know-your-customer (KYC) requirements, and maintain the security of the platform. Below is a detailed breakdown of what we collect and how it reaches us.
1.1 Information You Provide Directly
When you register an account, complete KYC verification, contact our support team, or interact with any form on the md1234 platform, you provide us with data directly. This includes:
- Identity Data: Full legal name, date of birth, gender, and National ID or passport number (required for KYC verification)
- Contact Data: Email address, mobile phone number, and residential address in Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rang pur, Mymensingh, or Cox's Bazar)
- Account Credentials: Username and encrypted password (md1234 never stores passwords in plain text)
- Payment Data: bKash wallet number, Nagad number, Rocket number, Upay number, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), or card details (Visa, Mastercard) — stored only to the extent required for payment processing and AML compliance
- KYC Documents: Scanned or photographed copies of government-issued identification, proof of address, and proof of payment method ownership submitted during verification
- Support Communications: Records of conversations with our live chat and email support team, including any documents or screenshots you share with us
1.2 Information Collected Automatically
When you access the md1234 platform — whether through a web browser on desktop or mobile — certain technical data is collected automatically by our systems. This data is used primarily for security monitoring, fraud detection, and improving platform performance.
- Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting
- Usage Data: Pages visited, games played, bets placed, session duration, click paths, and feature interactions within the platform
- Transaction Logs: Timestamps, amounts, and status of all deposit and withdrawal transactions, including payment method identifiers
- Geolocation Data: Approximate location derived from IP address, used to detect access from restricted jurisdictions and to tailor Bangladesh-market content
- Cookie & Tracker Data: Session tokens, preference cookies, analytics identifiers — see Section 4 for full cookie details
1.3 Information From Third Parties
In certain circumstances md1234 may receive personal data about you from third-party sources, including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, fraud-prevention databases, and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) in relation to game-session data. Such data is handled in accordance with this Privacy Policy and is used only for the purpose for which it was shared.
Identity & KYC Data
Name, date of birth, National ID, and address collected to meet KYC and AML obligations. Required before withdrawals are processed.
Payment Information
bKash, Nagad, Rocket, bank, and card details retained only to process transactions and comply with financial regulations. Never shared commercially.
Usage & Session Data
Automatically collected data on how you interact with md1234 — used for security, fraud detection, and improving the platform experience for Bangladesh players.
2. How We Use Your Data
md1234 uses the personal data we collect for specific, legitimate purposes. We do not use your data for any purpose beyond what is described in this Privacy Policy, and we do not sell your personal data to third parties for marketing purposes. Every use of your data is underpinned by at least one lawful basis.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account registration & management | Identity, contact, credentials | Contract performance |
| Processing deposits & withdrawals | Payment data, identity data | Contract performance |
| KYC identity verification | Identity data, KYC documents | Legal obligation (AML) |
| Fraud detection & prevention | Device data, IP, transaction logs | Legitimate interest |
| Responsible gaming monitoring | Usage data, transaction logs | Legal obligation / legitimate interest |
| Customer support | Contact data, support communications | Contract performance |
| Promotional communications (opted-in) | Email, mobile number | Consent |
| Platform analytics & improvement | Usage data, cookie data | Legitimate interest |
| Legal & regulatory compliance | All categories as required | Legal obligation |
2.1 Promotional Communications
If you have opted in to receive marketing communications from md1234, we may contact you by email or SMS about promotions, bonuses, seasonal offers (such as Eid, Pohela Boishakh, BPL cricket season specials, or T20 World Cup offers), and platform news. You can withdraw your marketing consent at any time by contacting [email protected] or by updating your account notification preferences. Withdrawing marketing consent does not affect the lawfulness of processing carried out before withdrawal, and does not affect service-related communications required to fulfil the contract (e.g., transaction confirmations, security alerts).
2.2 Responsible Gaming Data Use
md1234 uses your usage and transaction data to monitor for signs of potentially harmful gambling behaviour. This includes monitoring deposit frequency, session length, loss patterns, and interactions with our responsible gaming tools. Where our systems flag a potential concern, a member of our responsible gaming team may contact you proactively. This use of data is in your best interests and is treated with the highest level of sensitivity and confidentiality. We never use responsible gaming data for commercial profiling purposes.
3. Data Sharing & Third Parties
md1234 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose. All third parties with whom we share data are required to handle it in accordance with applicable data-protection standards.
3.1 Service Providers & Data Processors
md1234 works with carefully selected third-party service providers who process personal data on our behalf under binding data-processing agreements. These include:
- Payment Processors: bKash, Nagad, Rocket, Upay, and card-payment networks (Visa, Mastercard) process transaction data to complete your deposits and withdrawals. Each processor operates under its own privacy and security framework.
- Identity Verification Providers: Third-party KYC service providers process identity documents and perform document authenticity checks on our behalf to satisfy AML requirements.
- Game Studios: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and limited game-activity data necessary to deliver their games. They do not receive your full identity or payment data.
- Analytics Providers: Anonymised or pseudonymised usage data is processed by analytics platforms to help us understand platform performance and improve the user experience.
- Customer Support Tools: Our live-chat and email support infrastructure providers process support communications under confidentiality obligations.
- Fraud Prevention Services: We use third-party fraud-detection databases to cross-check device fingerprints, IP addresses, and payment identifiers against known fraud indicators.
3.2 Legal Disclosures
md1234 may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts when required to do so by applicable law, a court order, or a regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so. md1234 also cooperates with international gambling regulators and financial crime prevention bodies where relevant to the operation of our platform.
3.3 Business Transfers
In the event that md1234 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by md1234 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.
Important: md1234 will never sell your personal data to advertisers, data brokers, or any other commercial third party. If you receive unsolicited communications claiming to be from md1234 or its partners, please contact [email protected] immediately — this may indicate a phishing attempt.
4. Cookies & Tracking Technologies
md1234 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, detect fraud, and analyse how users interact with the site. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.
4.1 Categories of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Keep you logged in, maintain session state, process transactions securely, prevent cross-site request forgery (CSRF) | Session / up to 24 hours |
| Functional | Remember your language preference (English), display settings, responsible gaming limits, and notification preferences | Up to 12 months |
| Analytics | Understand how users navigate md1234, which games are most popular, and where players in Bangladesh interact most | Up to 24 months (anonymised) |
| Security & Fraud Detection | Device fingerprinting, IP reputation checks, bot detection, and detection of account-sharing behaviour | Up to 12 months |
| Marketing (opted-in only) | Track which promotions you interacted with, personalise bonus offers, and measure the effectiveness of seasonal campaigns | Up to 90 days |
4.2 Managing Your Cookie Preferences
Strictly Necessary and Security cookies are essential for the platform to function and cannot be disabled without preventing you from using md1234. All other cookie categories can be managed through your browser settings. Most modern browsers allow you to view, block, or delete cookies via their privacy or settings menu. Please note that blocking Functional cookies may cause some of your preferences to not be saved between sessions, and blocking Analytics cookies prevents us from understanding how to improve the platform experience for you and other Bangladesh players.
md1234 does not use third-party advertising networks or ad-targeting cookies. Marketing cookies on md1234 are used solely to personalise the promotional content you see within the md1234 platform itself — not to track you across other websites.
Strictly Necessary
Essential for login sessions, transaction security, and CSRF protection. Cannot be disabled. No personal data is shared externally via these cookies.
Functional
Remember your preferences, responsible gaming limits, and display settings so your md1234 experience stays consistent across sessions.
Analytics
Anonymised data on how players navigate md1234. Helps us improve game discovery, payment flows, and overall platform performance for Bangladesh users.
Security & Fraud
Device-level signals used to detect account takeovers, bot activity, and multi-account abuse. Protects your account and the integrity of the platform.
5. Data Security & Retention
md1234 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online system can guarantee absolute security, we take all reasonable and industry-standard precautions to safeguard your information.
5.1 Technical Security Measures
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and md1234 servers is encrypted using 256-bit SSL/TLS protocols, the same standard used by major banks and financial institutions.
- Encrypted Data Storage: Sensitive data fields — including passwords, payment identifiers, and KYC document metadata — are stored using industry-standard encryption algorithms. Passwords are hashed and salted and are never stored in recoverable plain text.
- Access Controls: Personal data is accessible only to authorised md1234 staff and contracted service providers on a strict need-to-know basis. All internal access is logged and audited.
- Intrusion Detection: md1234 operates continuous network monitoring and intrusion-detection systems to identify and respond to anomalous activity in real time.
- Secure Payment Processing: Payment data processed via bKash, Nagad, Rocket, Upay, Visa, and Mastercard flows through PCI-DSS compliant payment gateways. md1234 does not store full card numbers on its own servers.
- Two-Factor Authentication (2FA): md1234 supports OTP-based 2FA for account logins to provide an additional layer of protection against unauthorised account access.
5.2 Data Retention Periods
md1234 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Active Account Data: Retained for the full duration of the account's active life plus a minimum of 5 years after account closure, in accordance with AML record-keeping requirements.
- KYC Documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
- Transaction Records: Retained for a minimum of 5 years from the transaction date to satisfy financial record-keeping obligations.
- Support Communications: Retained for 2 years from the date of the last interaction, unless a longer period is required in connection with an unresolved dispute or legal matter.
- Analytics & Cookie Data: Anonymised analytics data is retained for up to 24 months. Marketing cookies expire after 90 days.
- Self-Exclusion Records: Retained for the full duration of the self-exclusion period plus 5 years, to prevent re-registration by excluded players.
Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where anonymisation is not technically feasible, data is securely destroyed using industry-standard data-erasure procedures.
6. Your Rights Over Your Data
As a user of md1234, you have meaningful rights in relation to the personal data we hold about you. md1234 respects these rights and will respond to any valid request within a reasonable timeframe — typically within 30 days. Some rights are subject to exemptions where legal obligations (such as AML record-keeping) require us to retain certain data regardless of your request.
Right of Access
You have the right to request a copy of the personal data md1234 holds about you, along with information on how it is being used. Submit a Subject Access Request via [email protected].
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most account details directly in your account settings or by contacting support.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected. This right is limited where legal retention obligations apply, such as AML record-keeping requirements.
Right to Restrict Processing
You can request that md1234 restrict how it processes your data — for example, while a rectification request is being assessed or where you have objected to processing based on legitimate interests.
Right to Data Portability
Where processing is based on your consent or contract performance, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format so you can transfer it to another service.
Right to Object
You have the right to object to processing based on legitimate interests, including profiling for responsible gaming monitoring. You can also withdraw marketing consent at any time with immediate effect.
To exercise any of the rights described above, contact the md1234 data team at [email protected] with the subject line "Data Rights Request". Include your registered email address and a brief description of your request. We may need to verify your identity before processing the request, to prevent unauthorised access to another person's data. We will respond to all valid requests within 30 days. Where a request is complex or multiple, this period may be extended by a further 30 days, in which case we will notify you.
7. Children & Minors
md1234 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 18. Our registration process includes age verification steps, and we conduct ongoing KYC checks to enforce this restriction. If you are a parent or guardian and believe that a person under 18 has registered an account or provided personal data to md1234, please contact us immediately at [email protected]. Upon confirmation, we will suspend the account, delete all associated personal data to the extent permitted by our legal retention obligations, and return any deposited funds to the original payment source.
18+ Only — Strictly Enforced: md1234 operates an active underage-gambling prevention programme. Any account where the registered holder is found to be under 18 will be immediately suspended, all winnings voided, and the matter may be reported to relevant authorities. We take child protection extremely seriously. If you suspect underage access, contact [email protected] immediately.
8. Policy Updates & Contact
md1234 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make a material change to this policy — one that affects how we process your personal data in a significant way — we will notify you via the email address registered on your account and display a prominent notice on the md1234 platform for at least 14 days before the change takes effect.
The date displayed at the top of this Privacy Policy always reflects the most recent revision. Your continued use of md1234 after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a material change, you may close your account at any time by contacting our support team. Any data collected under previous versions of this policy will continue to be handled in accordance with the version in effect at the time of collection.
If you have any questions, concerns, or requests relating to this Privacy Policy or to how md1234 handles your personal data, please get in touch with our dedicated support team. We are committed to resolving privacy concerns promptly and transparently.
- Email: [email protected] — for Subject Access Requests, erasure requests, and general privacy enquiries
- Live Chat: Available 24/7 directly on the md1234 platform — our team responds within 2–5 minutes
- Response Time: All formal data rights requests acknowledged within 5 business days; fully resolved within 30 days
- Operating Hours: Support is available around the clock, Bangladesh Standard Time (BST, UTC+6)
Questions About Your Privacy?
Our support team is available 24/7 to help you understand your data rights, submit an access request, or update your communication preferences. You can also explore more about md1234 below.
Gambling can be addictive. Please play responsibly. For adults aged 18 and above only. Terms and conditions apply.