m365 Privacy
Policy

Who We Are

m365 is an online betting and casino platform operating at m365.bar, serving players in Bangladesh with cricket betting, live casino games, slots, and related entertainment services. Throughout this Privacy Policy, references to "m365", "we", "us", or "our" refer to the m365 platform and the entity responsible for operating it.

m365 acts as the data controller in respect of personal data collected through the m365.bar website and associated services. As data controller, we determine the purposes and means by which your personal data is processed, and we are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about this Privacy Policy or about how m365 handles your personal data, please contact our support team at [email protected]. All correspondence should be sent in English and should include your registered account username to help us respond efficiently.

Data We Collect

m365 collects personal data in the following categories. We collect only what is necessary and proportionate to the services we provide:

m365 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data unless specifically required for responsible gaming assessments and only with your explicit consent.

How We Collect Your Data

m365 collects personal data through the following means:

• Direct Provision: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or responding to a survey or promotion.
• Automated Collection: Technical and usage data collected automatically when you access the m365 platform, through server logs, cookies, and similar tracking technologies as described in Section 7.
• Third-Party Sources: Identity verification data from document verification service providers; fraud indicators from fraud prevention databases; payment confirmation data from payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank.
• Publicly Available Sources: In limited circumstances where fraud prevention or due diligence requires it, m365 may consult publicly available records to verify information provided during registration.

All data collection methods described above are subject to the legal bases for processing set out in Section 4. m365 does not purchase personal data from marketing data brokers or similar commercial data suppliers.

Legal Basis for Processing

m365 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are:

• Contractual Necessity: Processing that is necessary to perform our contract with you — that is, to provide you with a registered account, accept wagers, process payments, and deliver the services you have signed up for. Without this processing, we cannot operate your account.
• Legal Obligation: Processing that is required to comply with applicable legal obligations, including identity verification and anti-money laundering requirements.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our legitimate interests in protecting the platform and its users are not overridden by your privacy interests.
• Consent: Processing for marketing communications and certain analytics activities, where we rely on your explicit consent. You may withdraw consent at any time by contacting [email protected], without affecting the lawfulness of processing carried out before withdrawal.

How We Use Your Data

m365 uses the personal data we hold about you for the following purposes:

• Account Registration and Management: Creating and maintaining your m365 account, verifying your identity and age, managing your account settings, and communicating important account-related information.
• Payment Processing: Processing deposits and withdrawals through your chosen payment method, verifying payment method ownership, and maintaining financial records.
• Service Delivery: Enabling you to place bets, access casino games, participate in promotions, and use all features of the m365 platform.
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, applying responsible gaming tools you have requested, and fulfilling our duty of care obligations.
• Customer Support: Responding to your queries, complaints, and requests; maintaining records of communications for quality assurance and dispute resolution purposes.
• Legal Compliance: Meeting our obligations under applicable laws, including responding to lawful requests from regulatory and law enforcement authorities.
• Platform Improvement: Analysing usage patterns to improve the design, performance, and content of the m365 platform.
• Marketing Communications: Sending you information about promotions, bonuses, and new features, where you have consented to receive such communications. You may opt out at any time.

Data Sharing and Disclosure

6.1 Third-Party Service Providers. m365 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank) for deposit and withdrawal processing.
• Identity verification providers for KYC (Know Your Customer) document checks.
• Game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who receive only the minimum data necessary to deliver their games and maintain their own compliance obligations.
• Fraud detection and anti-money laundering screening services.
• Cloud infrastructure and data hosting providers operating secure, encrypted environments.
• Customer support platform providers.

All third-party service providers are contractually required to process your data only for the purposes for which it was shared, to maintain appropriate security standards, and not to disclose it to further third parties without authorisation.

6.2 Legal and Regulatory Disclosure. m365 may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, court order, or where we believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

6.3 Business Transfers. In the event of a merger, acquisition, or transfer of all or part of m365's business assets, personal data held by m365 may form part of the transferred assets. We will notify registered users of any such transfer and any resulting changes to this Privacy Policy with reasonable advance notice.

6.4 No Sale of Personal Data. m365 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is shared only as described in this section, and only to the extent necessary for the stated purpose.

Cookies and Tracking Technologies

m365 uses cookies and similar tracking technologies to deliver, optimise, and secure the platform. A cookie is a small text file stored on your device when you visit a website. The following types of cookies are used on m365.bar:

You can control cookies through your browser settings. Please note that disabling essential or security cookies will impair your ability to use the m365 platform. To opt out of analytics cookies, contact us at [email protected].

Data Security

8.1 Technical Measures. m365 implements a comprehensive set of technical security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the m365 platform.
• Encryption at rest for all stored personal and financial data.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required by their role.
• Regular penetration testing and vulnerability assessments of platform infrastructure.
• Two-factor authentication options for registered player accounts.
• Automated monitoring systems that detect and alert on unusual access patterns or potential data breaches.

8.2 Organisational Measures. m365 maintains internal data protection policies, provides staff training on data security obligations, and conducts regular reviews of data processing activities to ensure compliance with this Privacy Policy.

8.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, m365 will notify affected users without undue delay by the contact information held on file. m365 maintains an incident response plan to contain, investigate, and remediate any data security incidents promptly.

8.4 Your Responsibility. While m365 takes extensive measures to protect your data, you are also responsible for keeping your account credentials secure. Do not share your password or OTP codes with anyone. If you suspect unauthorised access to your account, contact [email protected] immediately.

Data Retention

m365 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply as a general guide:

When the applicable retention period expires, m365 will securely delete or anonymise personal data so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Your Privacy Rights

As a user of the m365 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your account username and a clear description of your request.

• Right of Access: You have the right to request a copy of the personal data m365 holds about you. We will provide this in a structured, readable format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. Note that we may be required to retain certain data for legal compliance purposes even following an erasure request.
• Right to Restriction: You may request that m365 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or where you have objected to processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

m365 will acknowledge all privacy rights requests within 48 hours and will aim to fulfil them within 30 calendar days. In complex cases, we may extend this period by a further 30 days with prior notice. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.

Children and Minors

The m365 platform is strictly for individuals aged 21 years and above. m365 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to close the associated account and delete all related data.

If you believe that a minor has registered an account on the m365 platform or that we have inadvertently collected personal data relating to a person under 21, please notify us immediately at [email protected]. We will investigate the matter and take appropriate action without delay.

Parents and guardians are encouraged to use parental control tools and monitoring software to prevent minors from accessing online gambling platforms. m365 supports the responsible gaming principle that gambling is an activity solely for adults.

Changes to This Policy

12.1 Right to Update. m365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. All changes will be published on this page at m365.bar/privacy-policy with a revised effective date.

12.2 Notification of Material Changes. Where changes to this Privacy Policy are material — meaning they significantly affect the way we use your personal data or the rights available to you — m365 will notify registered users by the contact information held on file with reasonable advance notice before the changes take effect.

12.3 Continued Use. Your continued use of the m365 platform after an updated Privacy Policy has been published constitutes your acceptance of the revised policy. If you do not agree with any change, you must cease using the platform and may request account closure in accordance with the Terms & Conditions.

12.4 Version Archive. Previous versions of this Privacy Policy are archived and available on request by contacting [email protected]. The version currently published on this page is the operative version.

Contact and Data Requests

For all privacy-related queries, data subject rights requests, or concerns about how m365 handles your personal data, please use the following contact details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Include "Privacy Request" or "Data Subject Rights" in your email subject for priority routing
• Required Information: Your registered m365 account username, the nature of your request, and any relevant account details to help us verify your identity
• Response Time: Acknowledgement within 48 hours; full resolution within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Language: All correspondence should be submitted in English