Data protection

Mida 402 Privacy Policy – How your information is kept secure

Every piece of information you provide to mida 402 is handled with care. This policy clearly sets out what data is collected, why it is collected, and how it is kept secure.

Last updated: January 2026

Our commitment: mida 402 never sells your personal data to third parties. This policy is written in plain language so you can easily understand what happens with your information.

Section 01

What Data We Collect

Mida 402 collects certain information to provide its services. This data comes from three sources — what you provide directly, what is collected automatically, and what is received from third parties.

What you provide directly:

  • Name and date of birth — for identity verification and age confirmation.
  • Mobile number and email address — for account login and communication.
  • National ID number or passport details — requested only at the time of identity verification.
  • Payment details — bKash, Nagad, or Rocket number (full account numbers are never stored).
  • Address — required for certain specific verification processes.

Automatically collected information:

  • IP address and device information — for security and fraud detection purposes.
  • Browser type and operating system — to improve the app experience.
  • Session data — how long the platform was used and which pages were visited.
  • Transaction history — deposits, withdrawals, and betting records.
  • Cookies and local storage data — for remembering user preferences.
Section 02

Why Your Data Is Used

Mida 402 uses collected data only for defined purposes. No information is gathered without a legitimate reason.

  • Account management: For login, password resets, and account verification.
  • Payment Processing: To process deposit and withdrawal transactions.
  • Ensuring security: To prevent fraud, money laundering, and account hacking.
  • Improving Our Service: To analyse which features are used most and improve the overall experience.
  • Providing support: To review your account history when resolving an issue.
  • Legal obligation: To comply with the rules and regulations of the licensing authority.
  • Personalised offers: To surface relevant bonuses based on your preferred games and betting patterns.

Mida 402 never sells or rents your information to outside companies for advertising purposes.

Section 03

Who your information is shared with

Mida 402 shares information with specific third parties only in limited circumstances. There is always a clear reason for each case.

  • Payment Provider: bKash, Nagad, Rocket — only the minimum information required to process transactions.
  • Game providers: Companies such as Evolution Gaming and Pragmatic Play — session data required to run the games.
  • Security Services: Necessary information shared with fraud detection and cybersecurity agencies.
  • Legal authorities: Under a court order or a lawful request from a regulatory authority.
  • Licensing authority: Regular audit data required to maintain our gaming licence.

Beyond the above, mida 402 does not share your data with any third party. If any company claims to have obtained your information from mida 402, that claim is false.

Section 04

How your data is kept secure

Mida 402 uses multiple layers of technical and organisational measures to protect your data.

  • SSL 256-bit encryption: All data exchanged between your browser and mida 402's servers is encrypted in transit — no one can intercept it along the way.
  • Encrypted Database: All data stored on our servers is protected through encryption.
  • Payment Tokenization: Rather than storing your full mobile banking number, a secure token is used in its place.
  • Access Control: mida 402 staff can only access the information needed to perform their specific role.
  • Regular Security Audits: Independent experts regularly test the system for vulnerabilities.
  • Unusual Login Detection: Instant alerts when a login is detected from a new device or an unusual location.

That said, no system is completely infallible. Keeping your password strong and not sharing it with anyone remains important.

Section 05

Cookies & Tracking Technologies

Mida 402's website and app use cookies and similar technologies. These store small files on your device to remember your preferences and session details.

Mida 402 uses four types of cookies:

  • Essential cookies: For login sessions and security — disabling these will prevent the site from functioning.
  • Preference cookies: To remember your language settings and theme preference.
  • Analytics cookies: To understand which pages are visited most — data is aggregated and anonymised.
  • Performance Cookies: For measuring site loading speed and identifying errors.

Cookies can be managed or deleted through your browser settings, though disabling essential cookies may prevent you from logging into your account.

Section 06

Your Rights Regarding Your Data

Every member of mida 402 has fundamental rights over their personal data. To exercise any of these rights, please get in touch with our support team.

  • Right to Know: You can request to know what information mida 402 holds about you.
  • Right to Rectification: If any information is incorrect, you may request that it be corrected.
  • Right to erasure: You can request deletion of specific data after your account is closed — however, certain information must be retained due to legal obligations.
  • Right to restrict processing: You can request that your data not be used for specific purposes.
  • Right to portability: You may request a copy of your data in a readable, portable format.
  • Right to object: You can object to your data being used for marketing or analytics purposes.

To exercise these rights, email our support team or let us know via live chat. A response is typically provided within 7–14 business days.

Section 07

How long data is retained

Mida 402 does not retain your information longer than necessary. Retention periods vary depending on the type of data.

  • Account information: For as long as your account remains active, and for a minimum of 5 years after closure due to legal obligations.
  • Transaction records: 5–7 years, in accordance with anti-money laundering laws.
  • Support conversations: 2 years after the issue is resolved.
  • Analytics Data: Up to 2 years after anonymisation.
  • Cookie data: Session cookies are deleted when the browser is closed; persistent cookies last a maximum of 1 year.

After the designated period, data is automatically deleted or fully anonymised.

Section 08

Children's Privacy

Mida 402 strictly does not provide services to anyone under the age of 18. If an underage account is identified, it will be closed as soon as it comes to our attention.

If you become aware that a minor is using mida 402, please notify our support team immediately. We will treat the matter as a priority.

A note to parents — please secure your devices and accounts to prevent minors from accessing online gaming platforms.

Section 09

What happens if this policy changes

As technology and regulations evolve, mida 402's privacy policy may be updated from time to time. We determine how to notify members based on the nature of the changes.

  • Minor changes: The "Last Updated" date at the top of the page will be changed.
  • Moderate changes: Notifications will be delivered through the platform.
  • Major changes: You will be notified in advance via both email and the platform.

Continued use of the platform after changes take effect will be considered acceptance of the updated policy. So when you receive a notification, it is worth taking a moment to read it.

Section 10

Contact — for data protection enquiries

If you have any questions about this privacy policy or wish to make a request regarding your data, please contact us:

  • Email: support@mida402.best
  • Live chat: active on the platform 24/7
  • Including "Privacy Request" in the subject line helps us respond faster

Data-related requests are typically responded to within 7 business days. Complex requests may take up to 14 business days.

Why mida 402's data protection is trustworthy

Six Reasons That Set Us Apart

Never Sold

Mida 402 never sells your personal data to third parties. No information is shared with advertisers — this is a firm policy commitment.

Highest level of encryption

256-bit SSL encryption secures every transaction and login — the same level of protection used by major banks.

Minimal Data Collection

Only the information necessary to provide the service is collected. Data that is not needed is never gathered — this is a core principle of data protection.

Regular independent audits

Independent third-party cybersecurity experts regularly audit mida 402's systems. Any vulnerabilities found are resolved promptly.

Restricted Staff Access

Mida 402 staff can only access the information they need to perform their specific role. All access is logged and audited.

Instant alerts

You are notified immediately if any unusual login or transaction is detected. If anything suspicious occurs on your account, we flag it first.

Data collection & use — a brief overview

A quick overview of what data is collected and why

Data Type Why It's Collected Shared with third parties? Retention period
Name & date of birth Identity verification and age confirmation No 5 years after account closure
Mobile Number Login & OTP Verification No 5 years after account closure
Payment Information Transaction Processing Payment Providers Only 5–7 years (legal requirement)
IP Address Security & Fraud Prevention In security services 90 days
Gaming history Service improvement & personalised offers No 2 years
Device information App performance improvements No 30 days

Your Data Rights

Your rights as a mida 402 member

Right to know

You can request to know what data we hold about you. A response is provided within 7 business days.

Right to Rectification

If any of your information is incorrect, you can request a correction. Once verified, it will be updated promptly.

Right to Erasure

After account closure, you can request deletion of any data not required to be kept under legal obligations.

Restricting Processing

You can request that your data not be used for specific purposes, such as marketing.

Data portability

You may request your data in a readable format (JSON or CSV).

Right to object

You can object at any time to your data being used for marketing or profiling purposes.

How to Exercise Your Rights: Email us at support@mida402.best or reach out via live chat. Using "Data Rights Request" as your subject line will help us respond faster. You may be asked to verify your identity for security purposes.

Cookie Types in Detail

Which cookies mida 402 uses and which are mandatory

Mida 402's approach to privacy

Not Just Rules — It's Our Core Principle

When registering on an online platform, we often wonder — what will this information actually be used for? mida 402 takes that question seriously and has tried to give a clear answer in this policy.

Genuine privacy protection means more than drafting a lengthy document. It means making data security a priority in day-to-day operations. At mida 402, whenever a new feature is being developed, one of the first questions asked is — do we actually need this data for this feature? If not, the data is not collected.

Mida 402 takes payment information extremely seriously. Your full bKash or Nagad number is never stored on our servers — instead, an encrypted token is kept that can be used to process transactions, but reveals nothing about your actual number if intercepted. This method is called tokenization, and it is the standard used by the world's leading payment processors.

Staff access is another important consideration. No support agent at mida 402 can view your complete transaction history in full — they are only permitted to access the specific information needed to resolve a particular issue. Every instance of access is logged and reviewed on a regular basis.

What happens in the event of a data breach — that is, if someone gains unauthorised access to your information? mida 402 has an incident response plan in place. Should such an event occur, affected members will be notified promptly, steps will be taken to limit the damage, and the relevant regulatory authorities will be informed where required. No such incident has occurred to date, but being prepared is essential.

The sharing of data with third-party game providers deserves a little explanation. When you play at a live table powered by Evolution Gaming on mida 402, some session data is shared to facilitate that game — but this is not your name or payment details, only an anonymous session ID. The game provider has no knowledge of who is playing; it simply knows that a session is active.

The reason mida 402's privacy policy is written in plain language is simple — if you cannot understand it, your consent means nothing. Many platforms publish policies in English or dense legal language that most people never read. We wanted this document to be worth reading and easy to understand.

Feel free to ask us anything directly. There are no "stupid questions" when it comes to privacy — you always have the right to ask about your own data.

How to Submit a Data Request

Steps to exercise your data rights

1
Contact Support

Contact us via live chat or email support@mida402.best. Including "Data Rights Request" in the subject line will help us reach the right team faster.

2
Verify Identity

Your account details will be verified — this is a security measure to ensure no one else can request your information.

3
Request processing

A response is provided within 7 business days of verification. Complex requests may take up to 14 business days.

4
You will receive a response

Your data will be sent, corrected, or deleted as requested. A confirmation will be sent once the action is complete.

Key points of the Privacy Policy

Key Highlights

Data is never sold: mida 402 never sells your information to third parties or uses it for advertising purposes.

Encryption protection: 256-bit SSL encryption keeps every transaction and login secure — no one can intercept data in transit.

Minimal data collection: Only the minimum data strictly necessary to provide the service is collected. No additional information is gathered.

You have the right to: The rights to access, correct, delete, and restrict processing of your data can be exercised at any time.

Automatic deletion: Once the designated retention period ends, data is automatically deleted or anonymised.

Protection of minors: Anyone under 18 is not permitted to use mida 402 — if identified, the account will be closed immediately.

Start gaming in a safe environment

Your data is safe at mida 402 — register and play with complete peace of mind.

Free registration

Frequently Asked Questions

FAQs on account policy and rewards

mida 402's policy allows only one account per person — two different people living at the same address may each hold a separate account, and this is not prohibited. The issue arises when one person operates two accounts. If multiple accounts are accessed from the same network or device, the system will automatically flag them for review. The best way to avoid this situation is to notify Support in advance — simply let us know that another household member has their own account, and there will be no complications if a review is triggered. It is also advisable not to use two separate accounts from the same device — each person should log in from their own device. The welcome bonus is available once per account, and two people at the same address claiming their bonuses is acceptable under normal circumstances — however, any unusual pattern may be subject to verification.

At mida 402, how quickly winnings reach your account wallet depends on the type of game you played. For Sports Betting, once a match or event concludes and the result is confirmed, winnings are credited almost instantly — typically within a few minutes. For Live Casino or slots games, your wallet is updated at the end of each round. The only scenario where a delay may occur is if a match goes under review or requires special verification — this can happen with large wins and is usually resolved within 24 hours. Even after funds appear in your wallet, transferring them to bKash or Nagad takes a little extra time — once you submit a withdrawal request, it generally reaches your mobile banking within 10–15 minutes. If you experience an unusual delay, contact support with your withdrawal request number.

Have more questions?

You can find more details in the Terms & Conditions or Help Centre. For any questions, reach us via live chat.

বাংলা