Privacy Policy — masplay
Your privacy matters to us. This Privacy Policy explains precisely how masplay collects, processes, stores, and protects your personal data when you use our online casino and sports betting platform. We are committed to handling your information with transparency, security, and respect — in full alignment with the data protection principles applicable to our operations in Bangladesh.
Our Privacy Commitments
masplay is built on trust. The following six commitments summarise the core principles that govern every aspect of how we handle your personal information on our platform.
SSL Encryption
All data transmitted between your device and the masplay platform is protected by industry-standard TLS/SSL encryption. No personal or financial data travels in plain text at any point during your session.
No Third-Party Marketing
masplay does not sell, rent, or share your personal information with third-party advertisers or marketing companies. Your data is used solely to operate and improve our services, comply with legal obligations, and protect the platform.
Minimal Data Collection
We collect only the personal information that is strictly necessary to provide our services, verify your identity, process payments, and meet our legal obligations. We do not collect data beyond what is required for these purposes.
KYC Handled Securely
Identity documents submitted for KYC verification — such as your National ID Card or passport — are processed in a secure, access-controlled environment. Staff access to KYC documents is restricted on a strict need-to-know basis.
Your Controls
You have the right to access, correct, or request deletion of your personal data. You may also object to certain forms of processing. masplay provides clear channels for exercising these rights, outlined in the Your Rights section below.
Defined Retention Periods
We do not hold your data indefinitely. Retention periods are defined by the nature of the data and the purposes for which it was collected. Once those purposes are fulfilled and no legal obligation requires further retention, data is securely deleted.
1. Data We Collect
1.1 Registration & Identity Data
When you create an account on masplay, we collect:
- Full legal name (as it appears on your government-issued ID);
- Date of birth (to verify you meet the 18+ age requirement);
- Residential address in Bangladesh;
- Bangladesh mobile phone number (format: 01XXXXXXXXX);
- Email address exclusively under your control;
- Chosen username and encrypted password.
1.2 Identity Verification (KYC) Data
To comply with our anti-money laundering and player verification obligations, we may collect:
- National Identity Card (NID) number and scanned copy;
- Passport details and scanned copy;
- Birth certificate (for supplementary age verification);
- Selfie photograph or live identity check image (where applicable);
- Source-of-funds documentation (bank statements, bKash transaction history).
1.3 Financial & Transaction Data
When you make deposits or withdrawals, we collect:
- bKash, Nagad, Rocket, or Upay mobile account number;
- Bank account name, account number, and bank name (for bank transfer methods);
- Deposit and withdrawal amounts, dates, and transaction reference numbers;
- Payment method type selected for each transaction.
masplay does not store full card numbers or mobile banking PINs. Payment processing is handled via encrypted connections to our payment partners. We retain only the transaction metadata necessary for accounting, compliance, and dispute resolution.
1.4 Platform Usage Data
As you use the masplay platform, we automatically collect:
- IP address and approximate geographic location (city level);
- Device type, operating system, and browser version;
- Session start and end timestamps;
- Pages visited, games played, and bet amounts placed;
- Wagering history and bonus usage records;
- Customer support chat transcripts and email correspondence.
1.5 Communications Data
If you contact masplay support, we collect and retain:
- Content of emails sent to support@masplay;
- Live chat transcripts from in-platform support sessions;
- Records of any complaints or dispute submissions;
- Your communication preferences (e.g., opt-in status for promotional notifications).
Data You Must Not Share
Please never include sensitive financial PINs, one-time passwords (OTPs), or full bank card numbers in any communication with masplay support. Our staff will never ask for these. If you receive a request for such information, treat it as suspicious and report it immediately.
2. How We Use Your Data
masplay processes your personal data only for defined, lawful purposes. The table below sets out each processing purpose, the category of data used, and the legal basis on which we rely.
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration & identity data | Contractual necessity |
| Age and identity verification (KYC) | KYC documents, date of birth | Legal obligation; contractual necessity |
| Processing deposits and withdrawals | Financial & transaction data | Contractual necessity |
| Anti-money laundering (AML) screening | Identity, financial, usage data | Legal obligation |
| Fraud detection and platform security | Usage data, IP address, device info | Legitimate interest |
| Responsible gaming monitoring | Wagering history, session data | Legal obligation; legitimate interest |
| Customer support and dispute resolution | Communications data, account data | Contractual necessity |
| Promotional communications (opted-in users) | Email, phone number, preferences | Consent |
| Platform analytics and improvement | Aggregated usage data (anonymised) | Legitimate interest |
| Self-exclusion enforcement | Identity data, account status | Legal obligation; legitimate interest |
masplay does not use your personal data for automated individual decision-making or profiling that produces legal or similarly significant effects, except where such processing is strictly necessary for fraud prevention or AML compliance, in which case you retain the right to request human review of any automated decision.
3. Data Sharing & Third Parties
masplay does not sell your personal data to any third party under any circumstances. We share data only where necessary to deliver our services or comply with legal obligations. The categories of third parties with whom we may share your data are limited to the following:
3.1 Payment Service Providers
To process deposits and withdrawals, masplay shares necessary transaction data with your selected payment service provider — which may include bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, BRAC Bank, or City Bank. The data shared is limited to the minimum required to authenticate and complete the transaction. Each payment provider processes your data under their own privacy policy and applicable Bangladesh banking regulations.
3.2 Identity Verification Partners
Where masplay uses a third-party KYC verification service to authenticate submitted identity documents, your KYC documents may be transmitted to that service provider in encrypted form. All such providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than identity verification on masplay's behalf.
3.3 Game Studio Providers
Games on the masplay platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Habanero, Spribe, and Ezugi. When you play a game, your session data (player ID, bet amounts, game results) is transmitted to and processed by the relevant game studio's infrastructure. This data is used solely for game delivery, fairness auditing, and RTP calculation. Game studios do not receive your full personal identity details.
3.4 Legal and Regulatory Disclosure
masplay may disclose your personal data to competent governmental, judicial, or regulatory authorities where required to do so by applicable law, court order, or in connection with an investigation into suspected money laundering, fraud, match-fixing, or other criminal conduct. We will notify you of any such disclosure to the extent permitted by law.
3.5 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of masplay's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any material changes to the applicable privacy policy that may result.
Who We Share Data With
- Payment providers: bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank
- KYC verification partners (identity documents only)
- Game studios: session data only, no full identity
- Legal / regulatory authorities: where required by law
We Never Share With
- Third-party advertisers or data brokers
- Marketing agencies or list-building services
- Social media platforms (for tracking or retargeting)
- Any entity outside the scope of service delivery
5. Data Retention
masplay retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law. The following retention periods apply to the main categories of personal data we hold:
5.1 Active Account Data
While your masplay account remains active, we retain all registration data, KYC documents, transaction records, and gameplay history necessary to operate your account, respond to support queries, and comply with our ongoing legal obligations.
5.2 Post-Closure Retention
Following the closure of your masplay account — whether initiated by you or by masplay — we retain the following data for a period of five (5) years from the date of account closure: full identity and KYC records; all financial transaction records; account activity logs relating to material events (large wins, bonus claims, self-exclusion records). This retention period reflects our obligations under anti-money laundering and record-keeping requirements applicable to online gambling operations.
5.3 Marketing Communications Data
If you have opted in to receive promotional communications from masplay, your communication preferences and associated contact details are retained for the duration of your account and for a period of two (2) years following account closure or the date of your last opt-in confirmation, whichever is later. You may opt out of promotional communications at any time by contacting support@masplay.
5.4 Anonymised Analytics Data
Aggregated, anonymised usage data that cannot be re-linked to any individual user may be retained indefinitely for the purposes of platform analytics, product improvement, and statistical reporting. This data contains no personally identifiable information.
5.5 Secure Deletion
When a retention period expires and no overriding legal obligation requires continued storage, masplay will securely delete or irreversibly anonymise the relevant personal data. Secure deletion processes ensure that data cannot be recovered from storage media after deletion.
Retention Summary
- Active account: Duration of account + 5 years post-closure
- KYC documents: 5 years post-closure
- Transaction records: 5 years post-closure
- Marketing preferences: 2 years post-closure
- Support transcripts: 3 years from interaction
- Anonymised analytics: Indefinitely (no PII)
Deletion Requests
You may request deletion of your personal data by contacting support@masplay. Deletion requests will be processed within 30 days, subject to overriding legal retention obligations.
6. Your Rights & Choices
masplay respects your rights in relation to your personal data. The following rights are available to all registered Players. To exercise any of these rights, please contact masplay at support@masplay, clearly identifying yourself and the right you wish to exercise. We will respond within thirty (30) days of receiving your request.
Right of Access
You have the right to request a copy of the personal data masplay holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared. We will provide this information in a structured, commonly used format.
Right to Rectification
If you believe any personal data masplay holds about you is inaccurate or incomplete, you have the right to request its correction. For most account fields, you may update your details directly by contacting our support team. KYC document corrections may require re-submission of updated documentation.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent was the basis for processing), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations, such as AML record-keeping requirements.
Right to Object
You have the right to object to the processing of your personal data where masplay relies on legitimate interest as its legal basis. You may also withdraw consent for marketing communications at any time, which will result in the cessation of all promotional messaging to your registered contact details.
Right to Data Portability
Where masplay processes your personal data on the basis of your consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format so that it may be transferred to another controller.
Right to Restrict Processing
You may request that masplay restricts the processing of your personal data in circumstances where you contest its accuracy, where processing is unlawful but you prefer restriction over erasure, or where masplay no longer needs the data but you require it for legal claims. Restricted data will be stored but not actively processed.
7. Data Security Measures
masplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, masplay continuously reviews and updates its security posture in line with industry best practices.
7.1 Technical Safeguards
- All data in transit is protected by TLS 1.2 or higher (SSL encryption);
- Passwords are stored using strong one-way hashing algorithms (bcrypt); plaintext passwords are never stored;
- KYC documents are stored in an encrypted, access-restricted document vault;
- Databases containing personal data are segregated from public-facing servers;
- Two-factor authentication (2FA) is available to all Players and is mandatory for platform staff accounts;
- Automated intrusion detection and anomaly monitoring systems are active around the clock;
- Regular third-party penetration testing is conducted to identify and remediate vulnerabilities.
7.2 Organisational Safeguards
- Access to personal data is restricted to masplay staff who require it to perform their job functions;
- All staff with access to personal data undergo data protection and information security training;
- Data processing agreements are in place with all third-party service providers who handle personal data on masplay's behalf;
- A documented incident response procedure is in place; in the event of a data breach affecting your personal data, masplay will notify affected Players without undue delay.
7.3 Your Responsibilities
You play an important role in keeping your masplay account secure. We strongly recommend using a strong, unique password that is not shared with any other online service, enabling two-factor authentication where available, logging out of your account when using a shared or public device, and contacting support immediately at support@masplay if you suspect any unauthorised access to your account.
Security At a Glance
- TLS/SSL encryption on all connections
- Bcrypt password hashing (no plaintext storage)
- Encrypted KYC document storage
- Segregated database architecture
- 2FA available to all Players
- 24/7 automated intrusion detection
- Regular third-party penetration testing
- Staff access on a need-to-know basis only
Reporting a Security Issue
If you discover a potential security vulnerability on the masplay platform, please report it responsibly by emailing support@masplay with full details. We will acknowledge your report within 24 hours and keep you informed of our remediation progress.
8. Policy Updates & Contact
masplay reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered Players by email to their registered address and by displaying a prominent notice on the masplay platform for a period of no less than fourteen (14) days before the changes take effect. Your continued use of the masplay platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
We encourage all Players to review this Privacy Policy periodically to stay informed about how masplay protects their personal data. The date at the bottom of this page indicates when the policy was last updated.
If you have any questions, concerns, or complaints regarding this Privacy Policy or masplay's data processing practices, please contact our support team using the details below. masplay will endeavour to respond to all privacy-related enquiries within five (5) business days.
- Email: support@masplay (plain text — not a clickable link)
- Live Chat: available 24/7 via the masplay platform
- Support language: English
- Response time: within 4 hours during BST (UTC+6) business hours
Last updated: January 2026. masplay is a safe and reliable platform. SSL encrypted. 18+ only. Players in Bangladesh are encouraged to gamble responsibly.
Privacy Policy Quick Reference
- Data sold to third parties: Never
- Marketing cookies: None (no ad tracking)
- Retention post-closure: 5 years (legal obligation)
- Password storage: Bcrypt hashed only
- KYC document encryption: Yes
- Right of access: Available — contact support
- Right to erasure: Available — subject to legal obligations
- Breach notification: Without undue delay
- Policy effective date: January 2026
Explore masplay With Confidence
Your privacy and security are protected at every step. Browse our full game library, check the FAQ for common questions, or review our Responsible Gaming commitment — all available to adults aged 18 and above.