mospay Privacy Policy

01 Who We Are

mospay is an online casino and sports betting platform operating at mospay.biz and serving players in the Bangladesh market. When this Privacy Policy refers to "mospay", "we", "us", or "our", it refers to the operator of the mospay platform in its capacity as the data controller responsible for your personal information.

As data controller, mospay determines the purposes for which your personal data is collected and the manner in which it is processed. If you have any questions about how your data is handled, you may contact us directly at [email protected]. Our support team operates 24 hours a day, seven days a week, and will acknowledge data-related enquiries within 48 hours of receipt.

02 Data We Collect

mospay collects personal data in several categories depending on the nature of your interaction with the platform. The table below summarises the principal categories of data we may hold about you:

Data Category	Examples	Purpose
Identity Data	Full legal name, date of birth, NID number, photograph	KYC verification, age confirmation, fraud prevention
Contact Data	Mobile number, email address, city/district of residence	Account communications, support, security alerts
Financial Data	bKash / Nagad / Rocket account numbers, bank account details, transaction history	Processing deposits and withdrawals, AML compliance
Account Data	Username, encrypted password hash, account balance, betting history, bonus usage	Platform operation, customer support, responsible gaming monitoring
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Security monitoring, fraud detection, platform optimisation
Usage Data	Pages visited, games played, features accessed, time on site, click-path data	Product improvement, personalisation, responsible gaming monitoring
Communications Data	Support chat transcripts, emails sent to mospay, survey responses	Quality assurance, dispute resolution, legal compliance

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is required for standard NID-based identity verification. If any sensitive data is incidentally disclosed in your communications with us, it will be handled with the same level of care as all other personal information.

03 How We Collect Data

mospay collects your personal data through the following channels:

• Direct Registration: Information you provide when creating your mospay account, including your name, mobile number, email address, and date of birth.
• KYC Submission: Identity documents and photographs you upload in response to a KYC verification request, including copies of your NID, utility bills, or bank statements.
• Payment Transactions: Financial account details captured when you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer.
• Platform Interaction: Behavioural and technical data collected automatically as you navigate the mospay platform, including pages visited, games launched, bets placed, and session duration.
• Customer Support: Information you provide when contacting our support team via live chat, email, or any other communication channel available on the platform.
• Cookies and Similar Technologies: Data collected via cookies, web beacons, and local storage as described in Section 7 of this Policy.

04 Lawful Basis for Processing

mospay processes your personal data on the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and mospay — namely, operating your account, processing transactions, settling bets, and delivering the gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) checks, age verification requirements, and financial record-keeping duties.
• Legitimate Interests: Processing carried out in pursuit of mospay's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, product improvement, and the prevention of multi-accounting. We apply a balancing test to ensure our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, to send you promotional communications — you may withdraw that consent at any time by updating your preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

05 How We Use Your Data

mospay uses your personal data for the following specific purposes:

• Creating and managing your registered account on the platform.
• Verifying your identity and age in compliance with our KYC obligations before activating your account and processing withdrawal requests.
• Processing deposits and withdrawals via your nominated payment methods, including bKash, Nagad, and bank transfer channels.
• Detecting and preventing fraud, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the mospay Terms & Conditions.
• Monitoring your gaming activity to identify potential signs of problem gambling and, where appropriate, proactively reaching out with responsible gaming guidance.
• Responding to customer support enquiries, resolving disputes, and improving the quality of our support services.
• Sending you transactional communications such as deposit confirmations, withdrawal status updates, and security alerts relating to your account.
• Sending you promotional communications about mospay offers, bonuses, and new game releases — subject to your having not opted out of marketing communications.
• Analysing aggregate, anonymised usage data to understand how players interact with the platform and to prioritise product development and feature improvements.
• Complying with any legal or regulatory obligation to which mospay is subject, including responding to lawful requests from competent authorities.

06 Data Sharing & Disclosure

6.1 Third-Party Service Providers. mospay shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processors (such as bKash, Nagad, and Rocket gateway operators), game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe), identity verification service providers, IT infrastructure and hosting providers, and customer support tooling providers. All third-party providers are bound by contractual data processing agreements that restrict their use of your data to the specific purposes for which it was shared.

6.2 We Do Not Sell Your Data. mospay does not sell, rent, lease, or otherwise trade your personal information to third-party marketers, data brokers, or any other commercial entity for their independent use. Any sharing of data is strictly limited to what is necessary for the operation of the platform and the provision of services to you.

6.3 Legal Disclosure. mospay may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where we reasonably believe that disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

6.4 Business Transfers. In the event that mospay undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, the successor entity will be required to honour the commitments set out in this Privacy Policy.

07 Cookies & Tracking Technologies

mospay uses cookies and similar local storage technologies to operate the platform effectively and improve your experience. The following types of cookies may be set when you visit mospay.biz:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your mospay Login session, remember your language preference, and enable the cashier to function correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, where players exit, and how long sessions last. This data is used exclusively to improve the platform and is not linked to your individual identity.
• Functional Cookies: These cookies remember your preferences — such as your preferred game lobby view or responsible gaming settings — so that you do not have to re-enter them each time you visit.

mospay does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the platform.

08 Data Retention

mospay retains your personal data for as long as your account remains active and for a defined period following account closure, as outlined below:

• Active Account Data: Retained for the full duration of your account's active status plus five years following account closure, to satisfy AML record-keeping obligations and to defend against any legal claims arising from your account activity.
• KYC Documents: Retained for a minimum of five years following account closure or the last transaction date, whichever is later, in compliance with financial record-keeping requirements.
• Transaction Records: Retained for a minimum of five years following each transaction date.
• Support Communications: Retained for three years following the closure of the relevant support case, to facilitate quality review and dispute resolution.
• Technical & Usage Data: Aggregated and anonymised after 12 months of collection; individual-level technical logs are retained for up to 24 months for security and fraud investigation purposes.
• Marketing Consent Records: Retained for the duration of your account plus three years following account closure, to demonstrate compliance with our consent obligations.

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised. Where deletion is not immediately practicable due to technical constraints, the data will be isolated from active systems and permanently deleted at the earliest feasible opportunity.

09 Data Security

mospay implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the mospay platform is encrypted using industry-standard TLS protocols. Every page of the platform is served over HTTPS.
• Password Hashing: Passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm before storage, meaning that even mospay personnel cannot retrieve your original password.
• Access Controls: Access to systems containing personal data is restricted to authorised mospay personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative access.
• Encrypted Storage: Personal data and KYC documents stored on mospay servers are protected by encryption at rest, limiting the impact of any unauthorised physical or logical access to storage media.
• Penetration Testing & Security Reviews: mospay conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses proactively.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, mospay will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the steps taken to mitigate the impact.

10 Your Rights

As a mospay player whose personal data we process, you have the following rights with respect to your information:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will provide this within a reasonable timeframe, and in any event no later than 30 days from the date of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update certain information directly from your account settings; for other changes, please contact [email protected].
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other lawful basis applies), or where we have processed your data unlawfully. Please note that erasure requests are subject to overriding legal retention obligations — for example, we are required to retain financial transaction records for a minimum period regardless of an erasure request.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Object: You have the right to object to processing carried out on the basis of mospay's legitimate interests. We will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". We may need to verify your identity before processing your request. We will not charge a fee for reasonable data rights requests.

11 Children's Privacy

The mospay platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any individual under the age of 18. If we become aware — through KYC verification, self-disclosure, or any other means — that personal data has been collected from a minor, we will take immediate steps to close the relevant account, delete the associated personal data, and return any funds in accordance with applicable legal requirements.

If you believe that a minor may have registered an account on the mospay platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12 Third-Party Links

The mospay platform does not contain links to third-party websites as a matter of policy. However, game content delivered by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe is served via those providers' own infrastructure and is subject to their respective privacy practices. mospay is not responsible for the privacy practices of third-party game providers and encourages players to review those providers' policies independently.

Payment processing services provided by bKash, Nagad, Rocket, and Upay are operated by those companies independently of mospay. When you initiate a payment transaction, data is processed by the relevant payment provider in accordance with their own privacy policy. mospay has no control over and accepts no responsibility for the privacy practices of these independent payment operators.

13 Policy Updates

mospay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform operations, or applicable legal requirements. When material changes are made, we will notify registered players via a platform notification or by email to the address registered on your account, and we will update the "Last Reviewed" date at the top of this document.

Your continued use of the mospay platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you should cease using the platform and request account closure. We encourage you to review this page periodically to remain informed of how mospay handles your personal data.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which mospay handles your personal data, please contact our support team using the details below. All communications must be submitted in English to ensure accurate and timely processing.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response Target: Initial acknowledgement within 48 hours; full response to data rights requests within 30 days

For formal data complaints, please email [email protected] with the subject line "Privacy Complaint — [Your Account Username]". mospay is committed to resolving all privacy-related concerns fairly, transparently, and within a reasonable timeframe.