Your Privacy Matters at mt250 — How We Collect, Use, and Protect Your Data

mt250 is an online betting and casino platform operating as an offshore service, primarily serving players in Bangladesh. We take the privacy and security of our players' personal data seriously. This Privacy Policy sets out in full detail what personal information we collect from you, why we collect it, how it is processed and stored, when it may be shared with third parties, and what rights you hold in relation to your data.

mt250 is the data controller for personal data collected through the mt250 platform. This means that mt250 determines the purposes and means of processing your personal data. Where mt250 engages third-party processors to handle data on its behalf, those parties are contractually required to process data only in accordance with mt250's instructions and this Policy.

This Policy applies to all personal data collected through the mt250 website, mobile-optimised site, any mt250 mobile application, and any communication channel through which you interact with mt250, including email correspondence with our support team at [email protected].

mt250 collects personal data in the following categories. We collect only the data that is necessary and proportionate for the purposes described in this Policy:

• Identity and age verification data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (such as a National ID card or passport) submitted for KYC verification to confirm that you are 21 years of age or older.
• Contact data: Email address, mobile phone number, and city or region of residence within Bangladesh (for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal). This information is used to communicate account updates, security alerts, and support responses.
• Financial and payment data: Mobile financial service (MFS) account numbers for bKash, Nagad, Rocket, or Upay; bank account details where applicable (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank); deposit and withdrawal transaction records denominated in Bangladeshi Taka (BDT / ৳).
• Account credentials: Your chosen username and encrypted password. mt250 stores passwords using one-way cryptographic hashing — we do not store passwords in plain text and cannot retrieve your password on your behalf.
• Technical and device data: IP address, device type (desktop, smartphone, tablet), operating system version, browser type and version, screen resolution, and session timestamps. This data is collected automatically whenever you access the platform.
• Usage and behavioural data: Pages visited, games played, sports markets viewed, bet amounts, session duration, and in-platform navigation patterns. This data helps mt250 improve the platform and powers responsible gaming monitoring features.
• Communications data: Records of your correspondence with the mt250 support team, including email content, live chat transcripts (where applicable), and details of any complaint or dispute raised.
• Marketing preferences data: Your preferences regarding receiving promotional communications from mt250, including opt-in and opt-out records, and any bonus or promotion redemption history.

mt250 collects personal data through the following channels and methods:

• Direct provision by you: When you register an account on mt250, complete a KYC verification form, make a deposit or withdrawal request, contact the support team, or complete any other form or process on the platform, you directly provide personal data to mt250.
• Automated collection: When you visit and interact with the mt250 website, certain technical and usage data is collected automatically through server logs, cookies, web beacons, and similar tracking technologies. See Section 9 (Cookies & Tracking) for full details.
• Payment providers: When you conduct a financial transaction via bKash, Nagad, Rocket, or Upay, the relevant payment provider transmits transaction confirmation data to mt250 to enable crediting or debiting of your account balance.
• KYC and identity verification partners: Where mt250 uses a third-party identity verification service to assist with KYC processing, that service may provide mt250 with verification results, flags, and associated documentation data.
• Fraud detection and security services: mt250 uses third-party fraud detection tools that may collect and analyse technical data (such as IP address, device fingerprint, and behavioural patterns) to assess the risk associated with account activity.

mt250 uses personal data collected from players for the following specific purposes:

• Account management: Creating, maintaining, securing, and closing your mt250 player account; verifying your identity and age (21+ requirement); and communicating essential account information such as password reset requests, security alerts, and account status updates.
• Payment processing: Facilitating deposits and withdrawals in BDT (৳) via your registered payment method; verifying that withdrawal requests are made to a payment account registered in your own name; maintaining accurate transaction records.
• KYC and fraud prevention: Conducting Know Your Customer (KYC) checks to verify your identity and assess the risk of money laundering, fraud, or other prohibited activity. In cases where suspicious activity is detected, mt250 may share relevant data with appropriate authorities as required by applicable law.
• Platform operation and improvement: Analysing how players interact with the mt250 platform to identify bugs, improve game performance, optimise the user experience, and develop new features. Usage data is processed in aggregate wherever possible.
• Responsible gaming: Monitoring player account activity to identify potential signs of problem gambling, such as unusually high frequency of play, large bet sizes relative to account history, or rapid escalation in deposit volume. This monitoring enables mt250 to proactively offer responsible gaming tools such as deposit limits, session reminders, and self-exclusion.
• Marketing and promotions: Where you have opted in to receive marketing communications, mt250 may send you information about bonuses, promotions, seasonal offers (such as Eid or Pohela Boishakh specials), and new features. You may withdraw your consent to marketing communications at any time by contacting [email protected].
• Legal compliance: Complying with applicable legal obligations, responding to regulatory enquiries, and enforcing mt250's Terms & Conditions.

mt250 processes personal data on the following legal bases, depending on the purpose of the processing:

• Contractual necessity: Processing that is necessary to perform the contract between mt250 and you as a registered player — including account registration, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) obligations, KYC requirements, and obligations to cooperate with law enforcement or regulatory authorities.
• Legitimate interests: Processing carried out for mt250's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, technical data analysis, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

mt250 does not sell, rent, or transfer your personal data to unaffiliated third parties for their independent marketing purposes. Personal data may be shared in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the financial data necessary to process your deposit and withdrawal transactions. Each payment provider operates under its own privacy policy and data handling practices.
• KYC and identity verification providers: Third-party identity verification services engaged by mt250 to assist with age and identity checks will receive the identity documents and data you submit as part of the KYC process.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player session identifier and bet data to deliver their game content through the mt250 platform. These providers do not receive your full identity or payment data.
• Fraud detection and security services: Technical data including IP address, device fingerprint, and session metadata may be shared with third-party fraud prevention and cybersecurity partners.
• Legal and regulatory authorities: mt250 will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by law, court order, or other legal process. mt250 will endeavour to notify you of any such disclosure to the extent permitted by applicable law.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the mt250 business, your personal data may be transferred as part of that transaction. mt250 will notify you in advance of any such transfer and of any resulting changes to this Privacy Policy.

mt250 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data: Personal data associated with your mt250 account is retained for the duration of your account's active status and for a defined period following account closure.
• Financial transaction records: Records of all deposits, withdrawals, and bet transactions are retained for a minimum of five years following the relevant transaction date, in line with standard financial record-keeping obligations.
• KYC verification documents: Identity documents submitted for KYC verification are retained for a minimum of five years following account closure or the end of the business relationship.
• Support correspondence: Records of communications with the mt250 support team are retained for three years following the date of correspondence, unless the matter relates to an unresolved dispute or legal proceeding.
• Marketing consent records: Records of your marketing opt-in or opt-out preferences are retained for as long as your account is active and for two years following account closure, to demonstrate compliance with applicable consent requirements.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

mt250 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the mt250 platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar when accessing mt250.io.
• Password hashing: Account passwords are stored using one-way cryptographic hashing algorithms. mt250 cannot retrieve your password in its original form — if you forget your password, a reset process is required.
• Access controls: Access to personal data within mt250's systems is restricted on a strict need-to-know basis. Staff members who process personal data are subject to confidentiality obligations and data protection training.
• Intrusion detection: mt250 employs automated intrusion detection and monitoring systems to identify and respond to suspicious activity on its servers and network infrastructure.
• Regular security audits: The mt250 platform undergoes periodic security reviews and penetration testing to identify and remediate vulnerabilities before they can be exploited.

mt250 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the platform. The following cookie categories are used:

• Strictly necessary cookies: These cookies are essential for the mt250 platform to function correctly. They enable core functionality such as user authentication, session management, and security features. These cookies cannot be disabled without affecting the operation of the platform.
• Functional cookies: These cookies allow mt250 to remember your preferences (such as your chosen language, display settings, and responsible gaming tool configurations) to provide a personalised experience. Disabling these cookies may affect the quality of your experience on the platform.
• Analytical cookies: mt250 uses analytical cookies to collect aggregate information about how players use the platform — including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps us improve the platform. Analytical cookies do not identify individual users.
• Security and fraud detection cookies: These cookies help mt250 and its third-party security partners identify and prevent fraudulent activity, including multi-accounting detection, bot identification, and unusual session behaviour analysis.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the mt250 platform. For full details on managing cookies in commonly used browsers, refer to the help documentation for your browser.

mt250 respects your rights in relation to your personal data. Depending on your jurisdiction and the circumstances of the processing, you may hold the following rights:

• Right of access: You have the right to request a copy of the personal data that mt250 holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data that mt250 holds about you.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to mt250's legal obligations to retain certain data (see Section 7).
• Right to restrict processing: You have the right to request that mt250 restricts processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where that processing is based on mt250's legitimate interests. mt250 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please submit a written request to the mt250 support team at [email protected]. mt250 will respond to all verified data rights requests within a reasonable timeframe. We may need to verify your identity before processing a data rights request to ensure we do not disclose personal data to an unauthorised party.

The mt250 platform may contain links to third-party websites, services, or content — for example, game provider studios or payment service provider information pages. These third-party sites operate independently of mt250 and are governed by their own privacy policies. mt250 has no control over and accepts no responsibility for the content, privacy practices, or data handling of any third-party site you visit through a link on the mt250 platform.

mt250 encourages you to review the privacy policy of any third-party site before providing personal data to it. The presence of a link to a third-party site on the mt250 platform does not constitute an endorsement of that site's privacy practices.

The mt250 platform is strictly intended for persons aged 21 years and above. mt250 does not knowingly collect personal data from any person under the age of 21. If mt250 becomes aware that personal data has been collected from a person under 21, all such data will be promptly deleted and the associated account will be permanently closed.

If you are a parent or guardian and believe that a person under 21 in your care has provided personal data to mt250, please contact the support team at [email protected] immediately so that the data can be removed without delay.

mt250 reserves the right to update or revise this Privacy Policy at any time. Any changes will be published on this page with an updated "Last Updated" date at the top of the document. Where a change is material — meaning it significantly alters the way mt250 collects, uses, or shares personal data — mt250 will endeavour to notify registered players via email or a prominent notice on the platform in advance of the change taking effect.

Continued use of the mt250 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. It is your responsibility to review this Policy periodically to stay informed of any changes. The version of this Policy in force at the time you use the mt250 platform governs the processing of your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way mt250 handles your personal data, please contact the mt250 data team using the details below. mt250 is committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response time: mt250 aims to respond to all privacy enquiries within 5 business days. Data rights requests (Section 10) will be acknowledged within 72 hours.

When contacting mt250 regarding a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. mt250 may need to verify your identity before processing the request to protect against unauthorised data access.