Privacy & Security

Mcwaff Privacy Policy — How your data is kept secure

Mcwaff treats your personal data with the utmost importance. Read this policy to understand how your data is collected, stored, and managed.

Last updated: January 1, 2026
1

Introduction

Mcwaff (https://mc waff.pro) is a trusted online gaming platform in Bangladesh. We believe that protecting your personal information is one of our most important responsibilities. This Privacy Policy explains how mcwaff collects your data, why we collect it, and how we keep it secure.

This policy applies to the mcwaff website, mobile app, and all related services. By using mcwaff, you automatically consent to this Privacy Policy. Please read it carefully before using the platform.

This Privacy Policy has been prepared in accordance with international data protection standards (GDPR) and applicable local law.

2

Information We Collect

Mcwaff collects only the information that is necessary. No excessive or irrelevant data is gathered. The types of data collected and the reasons for collection are detailed below:

Data Type Example Reason for collection
Identity Information Name, date of birth, national ID Age Verification & KYC Completion
Contact Information Email address, phone number Account Communication & Security
Payment Information BKash / Nagad / Rocket number Deposit & Withdrawal Process
Device & Technical Information IP address, browser, device ID Security & Fraud Prevention
Gaming Activity Betting history, login timestamps Service Improvement & Responsible Gaming
Cookies & Tracking Session data, preference settings User Experience Improvement

mcwaff never stores your password in plain text — only an encrypted hash is retained.

3

Use of Data

Mcwaff uses collected data exclusively for specific, legitimate purposes. The main reasons your data is used are:

  • For account registration, verification, and management.
  • To securely process deposit and withdrawal transactions.
  • To provide customer service and support.
  • To identify and prevent fraud, money laundering, and suspicious activity.
  • To improve platform services and enhance the user experience.
  • To send bonuses, promotions, and personalized offers (only with your consent).
  • To meet legal and regulatory obligations.
  • To implement responsible gaming policies.

Mcwaff never sells your data to advertisers or shares it with third parties for marketing purposes.

4

Data Retention & Storage Period

Mcwaff stores your information on secure servers. Retention periods depend on the type of data and applicable legal requirements:

  • While the account is active: All data is actively retained.
  • After account closure: Generally retained for up to 5 years in accordance with legal obligations.
  • Transaction records: Retained for up to 7 years in accordance with international AML regulations.
  • Cookie data: Session cookies are deleted when the browser is closed; persistent cookies are kept for a maximum of 1 year.

Once the retention period ends, data is securely deleted or irreversibly anonymized.

5

Data Sharing Policy

Mcwaff does not sell your personal data. However, limited information may be shared with trusted third parties in specific circumstances:

  • Payment Processors: To process transactions via payment gateways such as bKash, Nagad, and Rocket.
  • Identity Verification Services: With regulator-approved institutions during the KYC verification process.
  • Legal Authorities: Mandatory disclosure under a court order or government investigation.
  • Technology Partners: Contracted service providers for platform operations.

All third parties are bound by confidentiality agreements with mcwaff and are not permitted to use your data for their own purposes.

mcwaff never sells or rents your data to advertising companies, data brokers, or unrelated third parties.

6

Cookie Policy

Mcwaff uses cookies and similar technologies to improve your browsing experience. Types of cookies:

  • Essential cookies: Login sessions and security tokens are essential — the platform cannot function without them.
  • Functional cookies: Remembers your language preference and settings.
  • Analytics Cookies: To analyze platform usage and improve our services.
  • Security Cookies: To detect fraud and bot activity.

You can block or delete cookies through your browser settings. Note that disabling essential cookies may cause some features to not function properly.

7

Security Measures

Mcwaff follows the highest industry standards to protect your data. Our security infrastructure includes:

  • 256-bit SSL/TLS encryption — applied to all data transfers.
  • AES-256 encryption — for sensitive data stored in the database.
  • Two-Factor Authentication (2FA) — an extra layer of security for account login.
  • Real-time fraud detection system.
  • Regular third-party security audits and penetration testing.
  • Dedicated firewall and DDoS protection.

Your responsibilities: Never share your password or login credentials with anyone. Use a strong password and keep 2FA enabled.

8

Your Rights

Under the mcwaff Privacy Policy, you retain the following rights:

Right to Access

You may request to see what information mcwaff holds about you.

Right to Rectification

You may request corrections to any inaccurate or incomplete information.

Right to Erasure

Where no legal obligation applies, you may request that your data be deleted.

Right to Object to Processing

You may object to the use of your data for marketing or other specific purposes.

Right to Data Portability

You may request to download your data or transfer it to another service.

Right to Restrict Processing

You may request that data processing be temporarily suspended while an investigation is ongoing.

To exercise any of your rights, email us at [email protected]. We will respond within 30 days.

9

Protection of Minors' Data

Mcwaff is strictly intended for users aged 18 and above. We do not knowingly collect data from minors under any circumstances.

  • Age verification is mandatory at the time of registration.
  • If a user is identified as under 18, their account will be immediately closed.
  • All collected data is permanently deleted.
  • Parents or guardians may submit a request to have their child's data deleted.

If you believe a minor is using mcwaff, please notify our support team immediately.

10

Privacy Policy Updates

Mcwaff may update this Privacy Policy when necessary. If changes are made:

  • The "Last Updated" date at the top of this page will be revised.
  • For significant changes, a notification will be sent to your registered email address.
  • Continued use of the platform after any changes will be considered acceptance of the updated policy.

We recommend reviewing this page regularly, especially before carrying out any significant activity on the platform.

11

Contact Us

For any questions, complaints, or rights requests regarding our Privacy Policy, please contact us:

Data Protection Team: [email protected]

We typically respond within 7 business days. For urgent matters, 24/7 live chat support is also available.

Our commitment to protecting your data Our Commitment


The mcwaff Privacy Policy is not just on paper — it is enforced at every level in practice.

SSL Encryption

Every data transfer on mcwaff is encrypted with 256-bit SSL. From login to payment — everything is secure.

Two-Factor Authentication

Enabling 2FA means no one else can access your mcwaff account — even if they know your password.

No Data Selling

Mcwaff never sells your personal data to third parties. Your data belongs to you alone.

Regular Security Audits

Independent security experts regularly audit mcwaff's systems to ensure there are no vulnerabilities.

Full Policy in Bengali

The mcwaff Privacy Policy is written in plain language — no complex legal jargon, easy to understand.

24/7 Data Support

For any data-related queries, our Bengali-speaking support team is always ready to help.

About Privacy FAQ


mcwaff stores your bKash, Nagad, or Rocket number solely for processing transactions. Full bank account or card numbers are never stored. All payment information is kept in encrypted form.

Yes, data portability is your right. You can request a copy of your data by emailing [email protected]. We will deliver it in a convenient format within 30 days.

Transaction records must be retained for up to 7 years under legal obligations. Beyond that, personal profile data is deleted or anonymized. Contact support for more details.

Promotional emails are only sent with your consent. You can opt out at any time through your account settings or the Unsubscribe link in any email. Security-related emails are always sent, as they are essential.

Yes. In the event of a data breach that puts your information at risk, we will notify you at your registered email address within 72 hours. You will be clearly informed of what happened, what data was affected, and what steps are being taken.

Play Safe, Win with Confidence

Your data is fully protected at mcwaff. Register for free with instant payments via bKash, Nagad, and Rocket.

বাংলা