230mb Privacy Policy

1. Data Controller & Scope

This Privacy Policy ("Policy") is issued by 230mb ("we", "us", "our", "the Platform"), the operator of the website at https://230mb.com and all associated mobile-optimised pages and services. For the purposes of applicable data protection law, 230mb is the data controller in respect of the personal information collected from players and visitors in Bangladesh and other jurisdictions where the platform is accessible.

This Policy applies to all personal data collected through: (a) the 230mb website and any related sub-domains; (b) the account registration, verification, and login processes; (c) the sportsbook, casino gaming, and live dealer services; (d) customer support interactions, including live chat, email correspondence, and any support tickets submitted to [email protected]; (e) cookies and similar tracking technologies operating on our platform; and (f) any promotional campaigns, surveys, or competitions run by 230mb.

This Policy does not apply to third-party websites or services that may be linked from the 230mb platform. We are not responsible for the privacy practices of external sites. Players who follow links to third-party content are encouraged to review the privacy policy of each destination site independently.

By registering an account with 230mb or continuing to use our services after the effective date of any revised version of this Policy, you acknowledge that you have read and understood how we process your personal information as described herein.

2. Information We Collect

230mb collects personal information from you in several ways, depending on how you interact with the platform. The categories of data we collect are set out below.

2.1 Information You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you provide us with information that may include:

• Full legal name, date of birth, and gender
• Residential address, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), and postcode
• Email address and mobile phone number
• Username and encrypted password
• Copies of identity documents (NID, passport, driving licence) submitted for KYC
• Payment method details (e.g., bKash or Nagad account number, bank account number) — note that full card numbers are never stored by 230mb directly; card data is handled by our PCI-DSS-compliant payment processors
• Support correspondence, feedback, and dispute submissions

2.2 Information Collected Automatically

When you access the 230mb platform, our servers and analytics systems automatically collect certain technical and behavioural data, which may include:

• IP address and approximate geographic location (derived from IP)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation path through the site
• Betting and gaming activity, including bet amounts, game selections, session duration, and win/loss history
• Deposit and withdrawal transaction records
• Cookie identifiers and session tokens (see Section 4 — Cookies)
• Referring URL and search terms used to arrive at the platform

2.3 Information from Third Parties

In certain circumstances, 230mb may receive information about you from third-party sources, including:

• Identity verification and fraud screening providers who cross-reference the information you submit against official records
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks) who confirm the status of transactions
• Marketing partners, where you have given those partners separate consent to share your contact details with us
• Law enforcement or regulatory bodies, where we are legally required to receive and process such information

3. How We Use Your Data

230mb processes personal data only where we have a valid legal basis for doing so. The table below sets out the primary purposes for which we use your information and the corresponding legal basis for each.

Purpose	Legal Basis
Creating and managing your 230mb account	Performance of a contract
Processing deposits, withdrawals, and transaction history	Performance of a contract
Verifying your identity and age (KYC)	Legal obligation / Legitimate interests
Detecting and preventing fraud, money laundering, and cheating	Legal obligation / Legitimate interests
Providing customer support and resolving disputes	Performance of a contract
Sending transactional notifications (deposit confirmations, withdrawal updates)	Performance of a contract
Sending promotional communications and bonus offers	Consent (you may opt out at any time)
Improving platform features, game performance, and user experience	Legitimate interests
Monitoring for responsible gaming indicators and applying self-exclusion measures	Legal obligation / Legitimate interests
Complying with applicable gaming licensing conditions and law enforcement requests	Legal obligation

Where we rely on consent as the legal basis (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To opt out of marketing messages, use the unsubscribe link in any promotional email or contact [email protected].

4. Cookies & Tracking Technologies

230mb uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate the platform effectively, remember your preferences, and analyse how users interact with our services. Below is an overview of the cookie categories we use.

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They enable core features such as session authentication, account security, and navigation between pages. Strictly necessary cookies cannot be disabled without impairing your ability to use 230mb's services. They do not collect any information used for marketing or analytics purposes.

4.2 Analytical / Performance Cookies

We use analytics cookies to understand how visitors use the 230mb platform — for example, which pages are most visited, which games generate the most engagement, and where users encounter difficulties. The information collected is aggregated and anonymised wherever possible. These cookies help us continuously improve the platform experience for players across Bangladesh.

4.3 Functional Cookies

Functional cookies allow 230mb to remember your preferences — such as your preferred language (English), deposit method, or interface layout — so you do not need to reconfigure these settings on every visit. These cookies improve convenience but are not strictly required for core platform operation.

4.4 Marketing Cookies

With your consent, 230mb may set marketing cookies that help us deliver relevant promotional content to you within the platform. We do not use third-party advertising networks to display ads on external websites based on your 230mb browsing activity. Marketing cookies are set only where you have given explicit consent, and you may withdraw that consent at any time via your account settings.

4.5 Managing Cookies

Most web browsers allow you to manage your cookie preferences through the browser's settings panel. You can choose to block all cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that blocking strictly necessary cookies will prevent you from logging in or using the core features of 230mb. Detailed instructions for managing cookies in common browsers are available via the browser manufacturer's support pages.

5. Data Sharing & Third Parties

230mb does not sell, rent, or trade your personal information. We share your data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.1 Service Providers

We engage carefully selected third-party service providers to support our operations. These include payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard), identity verification providers, IT infrastructure and hosting providers, customer support platforms, and analytics services. All service providers are bound by contractual data-processing agreements that prohibit them from using your data for any purpose other than providing the service to 230mb.

5.2 Game Providers

230mb's game library includes titles from third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game provided by one of these studios, your game session data (including bet amounts and outcomes) is processed by that provider's servers. Game providers receive only the data necessary to operate the game and are contractually prohibited from using it for independent marketing purposes.

5.3 Legal & Regulatory Disclosure

230mb may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so — for example, in response to a court order, a request from a financial intelligence unit, or as part of an anti-money laundering investigation. In such cases, we will disclose only the information specifically requested and will seek to notify you where permitted by law.

5.4 Business Transfers

In the event that 230mb undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will ensure that any such transfer is subject to the same level of data protection as described in this Policy, and we will notify registered players via their registered email address in advance of any such change where practicable.

6. Data Security & Retention

6.1 Security Measures

230mb implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption at rest for sensitive stored data, including identity documents and payment references
• Role-based access controls ensuring that only authorised personnel with a business need can access personal data
• Multi-factor authentication for internal systems and administrative access
• Regular penetration testing and third-party security audits
• Audit logging of all access to personal data within our systems
• Incident response procedures to detect, contain, and report any data breach within required timeframes

While 230mb takes every reasonable precaution to protect your data, no internet-based system can be guaranteed to be completely secure. You also play a role in keeping your account secure — particularly by maintaining a strong, unique password and not sharing your login credentials with anyone.

6.2 Data Retention

230mb retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and to comply with applicable legal, regulatory, and contractual obligations. Specifically:

• Active account data is retained for the duration of your account's activity on the platform.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five years following the transaction date to satisfy anti-money laundering record-keeping requirements.
• KYC documents are retained for a minimum of five years following account closure or the end of the business relationship.
• Support correspondence is retained for up to three years following the resolution of the relevant query or dispute.
• Marketing consent records are retained until you withdraw consent, plus one additional year for audit purposes.
• Cookie and analytics data is typically retained for no more than 13 months.

Once data is no longer required for any legitimate purpose, it is securely deleted or anonymised in a manner that prevents reconstruction of the original personal information.

7. Your Privacy Rights

230mb respects your rights over the personal data we hold about you. The following rights are available to all registered players and, where applicable, to visitors to the 230mb platform:

7.1 Right of Access

You have the right to request a copy of the personal data 230mb holds about you. This is sometimes called a Subject Access Request (SAR). We will provide you with a structured summary of your data within 30 calendar days of receiving a valid request, free of charge. In exceptional circumstances (e.g., an unusually complex or voluminous request), we may extend this timeframe by a further 30 days and will notify you accordingly.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic profile information (such as your email address or phone number) directly within your account settings. For corrections to identity documents or other sensitive records, please contact [email protected].

7.3 Right to Erasure

In certain circumstances, you have the right to request that 230mb delete the personal data we hold about you — sometimes referred to as the "right to be forgotten". This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. Note that this right is subject to overriding legal obligations: we are required by anti-money laundering law to retain transaction and KYC records for a minimum of five years regardless of any erasure request.

7.4 Right to Restrict Processing

You may request that 230mb restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved, or while you contest the legitimacy of our processing. Where processing is restricted, we will continue to store your data but will not actively use it until the restriction is lifted.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and where processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.

7.6 Right to Object

You have the right to object to 230mb's processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time. Upon receiving a valid objection to marketing, we will cease all marketing communications to you within five business days.

7.7 Exercising Your Rights

To exercise any of the rights described above, please contact our support team at [email protected] with the subject line "Privacy Rights Request". Please include sufficient detail to allow us to identify your account and understand the nature of your request. We may ask you to verify your identity before processing the request to protect against unauthorised access to another person's data.

8. Contact & Data Protection Officer

230mb takes its data protection responsibilities seriously. If you have any questions, concerns, or complaints about this Privacy Policy or the way we handle your personal data, please contact us in the first instance via:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: We aim to respond to all privacy-related enquiries within two business days

If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant supervisory authority in the jurisdiction applicable to your circumstances. 230mb will provide full cooperation with any such investigation.

This Privacy Policy was last reviewed and updated in January 2026. 230mb reserves the right to amend this Policy at any time. The current version will always be available at https://230mb.com/privacy-policy. Where changes are material, registered players will be notified by email to the address on file prior to the changes taking effect.