mospley Privacy Policy

mospley collects personal data from you in several ways: directly when you register an account or contact us, automatically when you use the platform, and from third parties involved in payment processing and identity verification. The categories of personal data we collect are described below.

Data You Provide Directly

When you create a mospley account or interact with our services, you provide us with information including:

• Identity Data: Your full legal name, date of birth, gender, and national identification number (where required for Know Your Customer verification).
• Contact Data: Your email address, mobile phone number, and postal address including city, district, and postcode within Bangladesh.
• Account Credentials: Your chosen username and a hashed version of your password. We never store passwords in plain text.
• Verification Documents: Copies of identity documents (national ID card, passport), proof of address documents (utility bill, bank statement), and payment method verification materials provided during the KYC process.
• Payment Data: Mobile wallet identifiers (bKash number, Nagad number, Rocket number, Upay number) and card details (card type, last four digits, expiry date) used to fund your mospley account. Full card numbers are processed exclusively by our payment partners and are never stored on mospley servers.
• Support Communications: Records of any correspondence you send to the mospley support team, including email content, chat transcripts, and the nature of your enquiry.

Data Collected Automatically

When you visit and interact with the mospley platform, certain technical data is collected automatically by our systems:

• Device and Technical Data: Your IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, features accessed, games played, bets placed, time spent on each page, click paths, and session duration.
• Transaction Data: Full records of all deposits, withdrawals, bets, wins, losses, bonus credits, and account balance movements associated with your account.
• Location Data: Approximate geographic location derived from your IP address, used to apply jurisdiction-appropriate controls and to detect potentially fraudulent access attempts from unexpected locations.

Data From Third Parties

mospley may receive personal data about you from third-party sources in specific circumstances, including identity verification agencies used to confirm the authenticity of KYC documents, payment processors that confirm the status of deposit and withdrawal transactions, fraud prevention services that provide risk signals associated with your device or IP address, and — where you have given your consent — referral partners who directed you to the mospley platform.

mospley uses your personal data for specific, clearly defined purposes. We do not use your data in ways that you would not reasonably expect given the nature of an online sports betting and casino service. The table below summarises the key purposes for which we process your data and the legal basis on which we rely for each.

Marketing Communications

mospley will only send you promotional emails, SMS messages, or other marketing communications if you have expressly opted in to receiving them during registration or subsequently through your account preferences. You may withdraw your consent to marketing communications at any time by updating your account notification settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to that withdrawal, and it does not prevent us from sending service-essential communications such as account security alerts, transaction confirmations, or policy update notices.

mospley does not sell or rent your personal data to third parties. We share your data only in the limited circumstances described in this section, and only to the extent necessary for the stated purpose.

Service Providers and Data Processors

We engage trusted third-party companies to perform certain functions on our behalf. These companies act as data processors and are contractually required to handle your data only in accordance with our instructions and this Privacy Policy. Categories of service providers who may receive your data include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment gateways process transaction data to facilitate deposits and withdrawals on your mospley account.
• Identity Verification Providers: Third-party KYC and age verification services that validate the identity documents you submit during account verification.
• Fraud Prevention Services: Providers of anti-fraud and risk-scoring tools that help mospley identify and respond to suspicious account activity.
• Cloud Infrastructure Providers: Hosting and server infrastructure providers on whose platforms the mospley service runs and where account data is stored.
• Customer Support Platforms: Tools used to manage and respond to support tickets and live chat communications.
• Analytics Providers: Services used to collect and analyse anonymised or aggregated usage data to help improve platform performance and user experience.

Legal and Regulatory Disclosures

mospley may disclose your personal data to law enforcement agencies, regulatory authorities, or courts if we are required to do so by applicable law, or if we believe in good faith that such disclosure is necessary to prevent fraud, protect the safety of any person, investigate suspected illegal activity, or enforce our Terms & Conditions. Where legally permissible, we will notify you of any such disclosure request before complying.

Business Transfers

In the event that mospley undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on the mospley website prior to your data becoming subject to a different privacy policy.

mospley uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather analytics data that helps us improve the service. A cookie is a small text file that is placed on your device by a website you visit. Cookies can be session-based (deleted when you close your browser) or persistent (remaining on your device for a set period).

Categories of Cookies We Use

Managing Your Cookie Preferences

You can control cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in to your mospley account. Analytics and preference cookies can be disabled without affecting core platform functionality. For guidance on managing cookies in your specific browser, consult the help section of the browser you are using.

mospley takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your browser or app and the mospley platform is encrypted in transit using SSL/TLS technology, ensuring that your login credentials, payment details, and personal information cannot be intercepted by third parties.
• Password Hashing: Passwords are never stored in plain text. mospley uses industry-standard one-way hashing algorithms to store password data, meaning that even internal staff cannot view your password.
• Access Controls: Access to personal data within mospley's internal systems is restricted on a strict need-to-know basis. Staff members who handle personal data are required to complete data protection training and are subject to confidentiality obligations.
• Server Security: mospley's infrastructure is hosted in secure data centre environments protected by physical access controls, network firewalls, intrusion detection systems, and regular security audits.
• Payment Data Segregation: Full payment card details are never stored on mospley servers. Card processing is handled entirely by PCI-DSS compliant payment gateway partners, and only non-sensitive payment references are retained by mospley.

mospley retains your personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as we are required to retain it under applicable law or our legitimate business interests. The following retention periods apply as a general guide:

• Active Account Data: Personal data associated with an active mospley account is retained for the full duration of the account's active status plus a standard post-closure period of five years to meet anti-money laundering record-keeping obligations.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of the transaction to satisfy financial record-keeping requirements.
• KYC Verification Documents: Identity and address verification documents submitted during the KYC process are retained for five years following account closure, after which they are securely deleted.
• Support Communications: Records of customer support interactions are retained for two years from the date of the last communication in a given support thread, unless the matter relates to an unresolved dispute or legal claim, in which case records are retained until the matter is fully resolved.
• Marketing Consent Records: Records of your marketing consent status (including the date and method of any opt-in or opt-out) are retained for the duration of your account plus two years, to demonstrate compliance in the event of a complaint.
• Usage and Analytics Data: Anonymised analytics data that cannot be linked back to an identifiable individual may be retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. If you request deletion of your account before the applicable retention period has expired, we will restrict the processing of your data to the extent possible while retaining only what is required by law.

As a mospley player, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing any request and will respond within a reasonable timeframe, typically within 30 days of receipt.

Withdrawing Consent

Where mospley processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, update your account notification preferences or contact [email protected].

Minor Players

The mospley platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has provided personal data to mospley, please contact us immediately at [email protected] and we will take steps to delete that data as quickly as possible.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how mospley handles your personal data, please contact us using the details below. All privacy enquiries are handled by the mospley data protection team and will be responded to within 5 business days for general questions, or within 30 days for formal rights requests.

• Email: [email protected] (use subject line "Privacy Enquiry" or "Privacy Rights Request")
• Response Time: General queries within 5 business days; rights requests within 30 days
• Language: All privacy communications are handled in English
• Hours: Support is available 24 hours a day, 7 days a week Bangladesh Standard Time (BST, UTC+6)

Complaints

If you are not satisfied with mospley's response to a privacy concern or rights request, you have the right to raise the matter as a formal complaint. Please submit a formal complaint in writing to [email protected] with the subject line "Formal Privacy Complaint". mospley will acknowledge receipt of a formal complaint within 48 hours and will provide a substantive response within 30 days. If the matter cannot be resolved through the internal complaints process, mospley may refer the dispute to an independent third-party mediator.

Changes to This Privacy Policy

mospley reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to the policy, we will notify registered account holders by email and will post a prominent notice on the mospley website for a period of at least 30 days following the update. The date of the most recent revision is always shown at the top of this document. Continued use of the mospley platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy.