mfb77 Privacy Policy

This Privacy Policy ("Policy") describes how mfb77 ("we", "us", "our") collects, uses, stores and discloses personal information obtained from users ("you", "your") of the mfb77 platform available at mfb77.org (the "Platform"). This Policy forms part of the mfb77 Terms and Conditions and should be read alongside them.

By registering an account or using any part of the mfb77 Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal information as described herein. If you do not agree to this Policy, you must not use the Platform.

mfb77 is committed to safeguarding the privacy of our users across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi and beyond. We handle personal data with the same rigour we apply to platform security, treating your information as an asset that belongs to you, not to us.

mfb77 processes personal data only for specific, documented purposes. We do not process your data for any purpose that is incompatible with those stated below unless we have obtained your explicit consent or are required to do so by law.

mfb77 does not sell personal data to third parties. We share information only in the limited circumstances set out below, and only to the extent necessary for the stated purpose.

mfb77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements. The specific retention periods applied to each data category are determined by the purpose for which the data is held and by applicable law.

As a general guideline: Account and identity data is retained for the duration of the Account relationship and for a minimum of five years after closure to satisfy anti-money laundering obligations. Transaction records are retained for a minimum of five years. Marketing preference data is retained until you withdraw consent or request erasure. Anonymised analytics data may be retained indefinitely as it cannot be used to identify you.

mfb77 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, encryption at rest for sensitive stored data, access controls limiting data access to authorised personnel on a need-to-know basis, regular security audits and vulnerability assessments, and multi-factor authentication for administrative access to data systems.

While we take all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. In the unlikely event of a data breach that affects your rights and freedoms, mfb77 will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.

mfb77 operates primarily for users in Bangladesh and processes most data within the relevant operational infrastructure. Where it is necessary to transfer personal data to service providers or technology partners located outside Bangladesh (for example, cloud infrastructure providers or KYC technology vendors), mfb77 ensures that such transfers are made only to recipients that provide an adequate level of data protection through contractual obligations, including standard data protection clauses. We do not transfer your data to jurisdictions that lack adequate legal frameworks for personal data protection without first implementing appropriate safeguards.

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how mfb77 has handled your personal information, please contact our support team. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days.