MCWLogin Privacy Policy — How Your Data Is Kept Safe

Mcwlogin collects certain information to deliver its services effectively. No unnecessary data is collected — only what is strictly required.

Information Collected at Registration:

• Mobile Number (for registration and OTP verification)
• Date of Birth (for age verification — to confirm 18+)
• Preferred Username
• Password (stored in hashed form — never readable in plain text)

What may be collected during KYC verification:

• Photo of National ID or Passport
• Selfie (for identity verification)
• Proof of address (required for large withdrawals)

Information collected automatically:

• IP address & device type (for security purposes)
• Browser Type & Operating System
• Login Time & Location
• Time Spent on Each Page (Analytics)

Every piece of data we collect has a specific purpose. mcwlogin never uses your information for unnecessary reasons.

Mcwlogin never shares your data with third parties for marketing or advertising purposes.

All mcwlogin data is stored in ISO 27001 certified data centers, secured by physical and digital protection around the clock, 24/7.

• Primary Server: Located in the Asia-Pacific region — for low latency and fast loading.
• Backup server: Redundant backups across separate regions — so no technical failure can result in data loss.
• Encryption: All data stored on our servers is AES-256 encrypted. TLS 1.3 protection is active during transmission.
• Access Control: Only authorized personnel may access data for specific purposes. A log is maintained of every access.

Mcwlogin does not sell your data. However, limited information may be shared with certain trusted service providers in order to operate the platform:

• Payment Providers: Only the minimum necessary information is shared with bKash, Nagad, or your bank solely for the purpose of verifying transactions.
• KYC Verification Service: Relevant identity verification data is shared securely.
• Game Content Providers: Session data may be shared with the game provider during gameplay — however, no personally identifiable information is included.
• Legal authority: Data may be shared with the relevant authorities under a court order or legal obligation.

In all such cases, confidentiality agreements are in place with the relevant parties, and they may only use the data received for the specific purpose intended.

Cookies are used on the mcwlogin website and app. Cookies are small files stored on your device that help improve the performance and functionality of the site.

Types of cookies we use:

• Essential cookies: To maintain login sessions and ensure security — these cannot be disabled as they are essential for the site to function.
• Functional Cookies: To remember your preferences (such as language settings and theme) — without these, you would need to reconfigure your settings every time.
• Analytics cookies: To understand which parts of the site are used most — aggregate data only, with no personal identification.

Cookies can be managed through your browser settings. However, disabling essential cookies may cause certain features of the site to stop working.

Mcwlogin uses multiple layers of security to protect your data. Rather than relying on a single technology, a robust defense is built through a combination of different methods.

• AES-256 Encryption: All stored data is encrypted. Breaking it with current computing power would take billions of years.
• TLS 1.3: All communication between your device and our servers is encrypted — you can verify this by the "https" in your browser.
• Two-Factor Authentication (2FA): OTP verification is required for login and withdrawals.
• Firewall & DDoS Protection: To defend servers against external attacks.
• Penetration testing: Third-party security experts audit the system at least twice a year.
• Staff Training: All mcwlogin staff receive regular training on data protection practices.

Mcwlogin members have the following rights regarding their personal data, guaranteed in accordance with GDPR and international data protection standards:

• Right to Access: You may request to know what information mcwlogin holds about you.
• Right to Rectification: You may request that any incorrect information be corrected.
• Right to Erasure: Under certain circumstances, you may request that your data be deleted.
• Right to Restrict Processing: You can request that your data be restricted to specific uses.
• Right to Portability: You may request a copy of your data in a readable, portable format.
• Right to Object: You can object to the processing of your data for specific purposes.

To exercise any of these rights, email us at support@mcwlogin.my. We will respond within 30 days. In some cases, legal obligations may prevent us from fulfilling certain requests — if so, we will explain why.

Mcwlogin is strictly operated for users aged 18 and above. We do not knowingly collect any information from individuals under the age of 18.

• Your date of birth is verified at the time of registration. If you are found to be under 18, the registration process will be cancelled.
• If a minor is identified, their account is immediately closed and all associated data is deleted.
• A note for parents: please secure your devices and payment methods to prevent minors from accessing this site.

If you suspect that a minor holds an account, please report it immediately to support@mcwlogin.my.

Mcwlogin does not retain data longer than necessary. Retention periods depend on the type of data and applicable legal requirements.

After an account is closed, certain information may be retained for the period stated above for security and legal compliance purposes. After that, all data is securely deleted.

Mcwlogin may update this privacy policy as needed. Members will be notified At Least 7 Days in Advance A notification will be sent.

Continued use of the site after any changes will be considered acceptance of the updated policy. If you do not agree to the new policy, you always have the option to close your account.

Mcwlogin has a dedicated Data Protection Officer (DPO) who oversees all data privacy matters. You can reach them at the same email address.