230mb Privacy Policy — How We Handle Your Personal Data

1. Introduction

230mb ("we", "us", "our") operates the online sports betting and casino platform accessible at 230mb.org ("the Platform"). We are committed to handling the personal data of all users ("you", "the User") who access or register on the Platform in a responsible, transparent, and secure manner. This Privacy Policy sets out the basis on which we collect, process, store, share, and protect personal data in connection with the Platform.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are accessible via the site footer. By registering an account on or continuing to use the 230mb Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

230mb collects the following categories of personal data in connection with the operation of the Platform and the provision of services to registered players in Bangladesh:

230mb does not collect sensitive personal data such as biometric data, health data, or racial or ethnic origin data as part of normal Platform operations. Where additional verification documents are requested (e.g. national ID copy for KYC), these are used solely for identity and age verification and are stored securely with restricted access.

3. How We Collect Your Data

230mb collects personal data through the following channels and mechanisms:

• Directly from you when you register an account, complete the KYC process, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically through cookies, web beacons, and similar tracking technologies when you access and interact with the Platform. See the Cookies section of this Policy for more detail.
• From payment processors and mobile banking providers (bKash, Nagad, Rocket, Upay, and connected bank partners) in connection with the processing of your deposits and withdrawals, including transaction confirmation data and mobile number verification.
• From identity verification and KYC service providers where 230mb engages such third parties to assist in verifying your identity and age in compliance with applicable anti-money laundering obligations.
• From your device and browser automatically, including IP address, device identifiers, and session logs, to support the secure operation of the Platform and detect fraudulent or suspicious activity.

4. How We Use Your Personal Data

230mb uses the personal data we hold about you for the following specific purposes:

• To create, verify, and manage your 230mb player account, including processing your registration, verifying your age and identity, and maintaining your account profile.
• To process your deposits and withdrawals securely via bKash, Nagad, Rocket, Upay, and connected banking partners, and to maintain accurate financial records in connection with your account.
• To provide customer support, including responding to account queries, assisting with deposit and withdrawal issues, and handling complaints through the 230mb support team at [email protected].
• To comply with applicable anti-money laundering (AML) obligations, including monitoring transactions for suspicious patterns, retaining financial records for required periods, and reporting to relevant authorities where legally required.
• To operate and improve the 230mb Platform, including diagnosing technical issues, analysing usage patterns to improve the player experience, and developing new features relevant to Bangladeshi players.
• To operate 230mb's responsible gaming tools, including monitoring betting patterns that may indicate problematic gambling behaviour, triggering automated responsible gaming alerts, and processing self-exclusion or deposit limit requests.
• To send you promotional communications and bonus offers via your registered mobile number or email address, where you have consented to receive such communications. You may withdraw this consent at any time by contacting 230mb support.

5. Legal Basis for Processing

230mb processes your personal data on the following legal bases:

• Contract performance — processing necessary to provide the Platform services to you as a registered account holder, including account management, payment processing, and customer support.
• Legal obligation — processing required to meet applicable AML obligations, age verification requirements, fraud prevention duties, and any reporting obligations under applicable law.
• Legitimate interests — processing for Platform security, fraud detection, responsible gaming monitoring, and internal analytics to improve the player experience, where those interests are not overridden by your data protection rights.
• Consent — processing for direct marketing communications and promotional offers, where we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

230mb does not sell personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers — bKash, Nagad, Rocket, Upay, and connected bank and card partners receive the minimum personal and financial data required to process your deposit or withdrawal transaction.
• KYC and identity verification providers — where 230mb uses a third-party service to assist with verifying your identity or age, that provider receives the identity documents or data points required to perform the verification.
• Game software providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated providers may receive session-level technical data (e.g. player session token, game session ID) necessary to operate the game. These providers operate under their own data protection obligations.
• Regulatory and law enforcement authorities — 230mb will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction, including in connection with AML reporting obligations.
• Technology infrastructure providers — cloud hosting, database, and security providers who process data on 230mb's behalf under strict data processing agreements that prohibit independent use of the data.

7. Payment Data and Financial Information

When you make a deposit or withdrawal on the 230mb Platform using bKash, Nagad, Rocket, Upay, or a connected bank account, 230mb receives transaction confirmation data from the relevant payment provider. 230mb does not store full mobile banking PINs, full card numbers, or online banking passwords. Payment credentials are entered directly into the payment provider's own secure interface and are not transmitted to or stored by 230mb's servers.

Transaction records — including deposit amounts, withdrawal amounts, payment method type, and transaction timestamps — are retained by 230mb as part of your account financial history. These records are used to resolve payment disputes, respond to regulatory enquiries, and fulfil AML record-keeping requirements. Financial transaction records are retained for a minimum period of five years from the date of the transaction.

8. Cookies and Tracking Technologies

The 230mb Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain your session, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without breaking the Platform's core functionality.
• Functional cookies — used to remember your preferences (such as language selection) and to personalise your experience on the Platform across sessions.
• Analytics cookies — used to collect aggregated, anonymised data about how players use the Platform, which pages are most visited, and where users encounter technical errors. This data is used to improve the Platform and is not linked to individual player identities.
• Security and fraud-detection cookies — used to identify unusual access patterns, detect bot traffic, and prevent unauthorised access to player accounts. These cookies are a core component of 230mb's account security architecture.

You can manage or disable non-essential cookies through your mobile browser settings. Please note that disabling functional or analytics cookies may affect your experience on the Platform but will not prevent you from accessing core services such as account login, deposits, withdrawals, or game play.

9. Data Retention

230mb retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention guidelines apply:

• Account data — retained for the duration of your active account and for a minimum of five years following account closure, to meet AML record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
• KYC and identity verification documents — retained for the duration of the account relationship and for a minimum of five years following account closure, in accordance with applicable AML requirements.
• Marketing consent records — retained for the duration of your active account to record the basis of any marketing communications sent. Where consent is withdrawn, marketing communications will cease promptly, but the consent record itself is retained for evidence purposes.

When personal data is no longer required for any retention purpose, 230mb will securely delete or anonymise it so that it can no longer be linked to any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

10. Your Data Protection Rights

As a user of the 230mb Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact 230mb at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise:

• Right of access — you may request a copy of the personal data 230mb holds about you, together with information about how it is being used.
• Right to rectification — if any personal data 230mb holds about you is inaccurate or incomplete, you may request that it be corrected. For account profile data, you may be able to update certain fields directly from your account settings.
• Right to erasure — you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 230mb's right to retain data required by applicable law (e.g. AML record-keeping obligations).
• Right to restrict processing — you may request that 230mb restrict the processing of your personal data in certain circumstances, for example where you have contested the accuracy of the data pending verification.
• Right to data portability — where 230mb processes your personal data on the basis of your consent or a contract with you, you may request that we provide that data in a commonly used, machine-readable format.
• Right to withdraw consent — where processing is based on your consent (e.g. for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

11. Data Security

230mb implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit between your device and our servers, encrypted storage of sensitive account data at rest, role-based access controls that limit internal staff access to personal data on a need-to-know basis, automated fraud detection and anomaly-detection systems that monitor for unusual account access patterns, and regular security assessments of the Platform's infrastructure.

While 230mb takes robust steps to secure your personal data, no online platform or data transmission method can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 230mb will notify you without undue delay in accordance with applicable breach notification requirements.

12. Children and Minors

The 230mb Platform is strictly for adults aged 21 and above. 230mb does not knowingly collect, process, or retain any personal data from persons under the age of 21. If 230mb discovers or is notified that personal data has been collected from a person under 21 years of age, 230mb will promptly delete that data and close the associated account.

Parents and guardians in Bangladesh are encouraged to use device-level parental controls to prevent persons under 21 from accessing the 230mb Platform. If you have reason to believe that a person under 21 has accessed or registered on the 230mb Platform, please contact us immediately at [email protected].

13. Third-Party Services and External Links

The 230mb Platform integrates third-party game software from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their software under their own privacy policies and data protection frameworks, which are separate from this Privacy Policy. 230mb is not responsible for the data practices of third-party game providers operating within the Platform environment. Similarly, any links to external websites that may appear in Platform communications or support materials are governed by the privacy policies of those external sites, not by this Privacy Policy. We encourage you to review the privacy policy of any third-party service before submitting personal data to it.

14. Changes to This Privacy Policy

230mb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Where changes are material, 230mb will notify registered players via their registered mobile number or a prominent notice on the Platform prior to the changes taking effect.

The current version of this Privacy Policy is always accessible via the Privacy Policy link in the 230mb site footer. The effective date displayed at the top of this document indicates when the current version was last reviewed and updated. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to raise a concern about how 230mb handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 30 days.

Privacy enquiries email: [email protected]