MCW Privacy Policy 2026
This privacy policy explains how MCW collects, processes, stores, and protects personal data from users in Bangladesh. We are committed to maintaining the privacy and security of your information in accordance with applicable data protection principles and international standards.
By accessing or using our services, you acknowledge that you have read and understood this policy. We encourage you to review this document periodically, as it may be updated to reflect changes in our practices or legal requirements. For general information about our platform, please visit our homepage.
1. Scope and Definitions
This policy applies to all personal data collected through our website, mobile applications, and related services operated by MCW for users in Bangladesh.
- Personal Data: Any information relating to an identified or identifiable natural person, including but not limited to name, email address, telephone number, identification documents, and financial information.
- Processing: Any operation performed on personal data, whether automated or manual, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.
- Data Controller: MCW, the entity that determines the purposes and means of processing personal data.
- Data Processor: Any third party that processes personal data on behalf of MCW.
- User: Any individual who accesses or uses MCW services.
- Consent: Any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of their personal data.
2. Data We Collect
MCW collects various categories of personal data necessary for providing our services and complying with legal obligations.
Information You Provide Directly
- Full legal name and date of birth
- Residential address and country of residence
- Email address and telephone number
- Government-issued identification documents
- Payment information, including bank account details and payment card information
- Account credentials, including username and password
- Communication records when you contact our support team
Information Collected Automatically
- IP address and device identifiers
- Browser type and version
- Operating system information
- Access times and dates
- Pages visited and navigation patterns
- Referral URLs
- Geolocation data
Information from Third Parties
- Identity verification data from authorised verification providers
- Credit reference information where applicable
- Information from payment service providers
3. Purposes and Legal Basis
We process your personal data for specific purposes and rely on appropriate legal bases for each processing activity.
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Identity verification and fraud prevention | Legal obligation and legitimate interest |
| Processing transactions and payments | Performance of contract |
| Customer support and communication | Performance of contract and legitimate interest |
| Compliance with legal and regulatory requirements | Legal obligation |
| Service improvement and analytics | Legitimate interest |
| Security and platform integrity | Legitimate interest and legal obligation |
| Marketing communications (where opted in) | Consent |
4. Cookies and Similar Technologies
MCW uses cookies and similar tracking technologies to enhance user experience, analyse platform usage, and ensure security.
Types of Cookies We Use
- Essential Cookies: Required for basic platform functionality, including authentication and security. These cannot be disabled.
- Functional Cookies: Enable personalised features such as language preferences and display settings.
- Analytics Cookies: Help us understand how users interact with our platform to improve services.
- Performance Cookies: Monitor platform performance and identify technical issues.
Managing Cookie Preferences
You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect platform functionality. Most browsers allow you to refuse cookies, delete existing cookies, or alert you before a cookie is stored.
5. Data Sharing and Third Parties
MCW may share your personal data with third parties only in the following circumstances:
- Service Providers: Third-party vendors who assist in operating our platform, including payment processors, identity verification services, cloud hosting providers, and customer support tools.
- Regulatory Authorities: Government agencies, law enforcement, or regulatory bodies when required by law or legal process.
- Professional Advisers: Legal, accounting, and auditing professionals bound by confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
- Fraud Prevention: Organisations involved in fraud prevention and detection networks.
We require all third parties to respect the security of your personal data and process it in accordance with applicable laws. We do not sell your personal data to third parties for marketing purposes.
6. International Transfers
Your personal data may be transferred to and processed in countries outside Bangladesh where our service providers operate. When transferring data internationally, we implement appropriate safeguards to ensure your data receives adequate protection.
These safeguards may include:
- Standard contractual clauses approved by relevant data protection authorities
- Data processing agreements with appropriate security provisions
- Verification that recipients maintain adequate data protection standards
- Technical and organisational measures to secure data during transfer
7. Data Retention
MCW retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law.
| Data Category | Retention Period |
|---|---|
| Account information | Duration of account plus 5 years after closure |
| Transaction records | 7 years from transaction date |
| Identity verification documents | 5 years after account closure |
| Customer support communications | 3 years from last interaction |
| Marketing preferences | Until consent is withdrawn |
| Technical logs | 12 months |
After the applicable retention period, personal data is securely deleted or anonymised. Extended retention may occur where required for legal proceedings, regulatory investigations, or dispute resolution.
8. User Rights
You have specific rights regarding your personal data. MCW is committed to facilitating the exercise of these rights in accordance with applicable data protection principles.
Right of Access
You may request a copy of the personal data we hold about you, along with information about how it is processed.
Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes collected, where consent is withdrawn, or where processing is unlawful. This right is subject to legal retention obligations.
Right to Restriction
You may request limitation of processing in certain circumstances, such as when you contest data accuracy or object to processing.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Data Portability
You may request to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another controller.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
To exercise any of these rights, please contact us using the details provided in the Contact Details section below. We will respond to valid requests within 30 days.
9. Security Measures
MCW implements comprehensive technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest
- Multi-factor authentication for account access
- Regular security assessments and penetration testing
- Access controls limiting data access to authorised personnel
- Employee training on data protection and security practices
- Incident response procedures for potential data breaches
- Physical security measures for data centre facilities
- Regular backup procedures with secure storage
While we strive to protect your personal data, no method of transmission or storage is completely secure. We encourage users to maintain strong passwords and protect their account credentials.
10. Minors Policy
MCW services are intended solely for individuals who are 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18.
If we become aware that we have collected personal data from a minor, we will take immediate steps to delete such information from our systems. If you believe that a minor has provided personal data to us, please contact us immediately using the details below.
Parents and guardians are encouraged to monitor their children's online activities and instruct them never to provide personal information to online services without permission.
11. Contact Details
If you have questions, concerns, or requests regarding this privacy policy or our data processing practices, please contact us through the following channels:
- Email: [email protected]
- Data Protection Enquiries: [email protected]
- Customer Support: Available through the platform's help centre
We aim to respond to all legitimate enquiries within 30 days. For complex requests, we may require additional time and will notify you accordingly.
12. Policy Updates
MCW reserves the right to modify this privacy policy at any time. When we make material changes, we will notify users through appropriate channels, which may include email notification, platform announcements, or prominent notices on our website.
The date of the most recent revision will be indicated at the top of this policy. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
Continued use of our services after changes to this policy constitutes acceptance of the revised terms. If you do not agree with any modifications, you should discontinue use of our services and contact us regarding account closure and data deletion.
Last Updated: January 2026
Effective Date: January 2026