Privacy Policy
of mojaspin
At mojaspin, your privacy is a core commitment — not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and what rights you hold as a registered player on our Bangladesh casino platform.
This Privacy Policy ("Policy") applies to all users of the mojaspin website and mobile platform. By registering an account, making a deposit, or otherwise using the mojaspin platform, you acknowledge that you have read and understood this Policy in full. Please read it carefully before providing any personal information to us.
Section 1
Information We Collect
mojaspin collects personal data only to the extent necessary to provide our services safely, legally, and effectively. The categories of personal information we collect from registered players and website visitors are described below.
Registration & Identity Data
When you create a mojaspin account via the mojaspin Login page, we collect the following identity information: your full legal name, date of birth, mobile phone number, and the login credentials you choose (username and password). This information is required to open and maintain a valid player account on the platform.
Know Your Customer (KYC) Documents
Before processing any withdrawal from your mojaspin account, we conduct mandatory identity verification under our KYC policy. During this process, we collect copies of government-issued identity documents — such as your Bangladesh National Identity Card (NID) or passport — and, where required, supporting documentation confirming ownership of your payment method (for example, a screenshot confirming that a bKash or Nagad account is registered in your name).
Financial & Transaction Data
We record details of all financial transactions conducted through your mojaspin account, including deposit amounts, deposit timestamps, withdrawal requests, payment method identifiers (such as a bKash or Nagad account number), and transaction reference numbers. All transactions are conducted in Bangladeshi Taka (৳ BDT). We do not store full bank card numbers or full mobile banking PINs — payment authentication is handled by your chosen payment provider.
Gameplay & Betting Activity
mojaspin maintains a complete record of all gaming and betting activity associated with your account, including game titles played, bet amounts, win/loss outcomes, session start and end times, and any bonus or promotional offers claimed. This data is essential for account integrity, dispute resolution, and the responsible gaming tools we make available after mojaspin Login.
Technical & Device Data
When you access mojaspin, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type (mobile/tablet/desktop), referring URL, pages visited, and timestamps of site interactions. This data is collected via server logs and, where applicable, cookies and similar tracking technologies as described in Section 4 of this Policy.
Communications Data
If you contact the mojaspin support team via live chat, email (support@mojaspin), or WhatsApp (+880 1700 000000), we retain records of those communications including the content of messages, the date and time of contact, and the resolution outcome. This data is retained to improve support quality and to maintain a record of any commitments, agreements, or complaints arising from those interactions.
mojaspin does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health records except where a player voluntarily discloses such information in the context of a responsible gaming self-exclusion or hardship request — in which case such disclosures are handled with strict confidentiality and used only to provide the requested support.
Section 2
How We Use Your Data
mojaspin processes personal data only for specified, legitimate purposes. The following table summarises the primary purposes for which we use the data we collect, together with the lawful basis for each processing activity.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation & management | Registration data, login credentials | Performance of contract |
| Identity verification (KYC) | Identity documents, payment method confirmation | Legal obligation / fraud prevention |
| Payment processing | Transaction data, payment method identifiers | Performance of contract |
| Providing gaming services | Gameplay data, device data | Performance of contract |
| Responsible gaming compliance | Gameplay activity, self-exclusion requests | Legal obligation / legitimate interest |
| Fraud detection & AML monitoring | Transaction data, IP data, device fingerprints | Legal obligation / legitimate interest |
| Customer support | Communications data, account history | Performance of contract / legitimate interest |
| Marketing & promotions | Registration data, gameplay preferences | Consent (opt-in only) |
| Platform analytics & improvement | Technical data, usage patterns | Legitimate interest |
Marketing Communications
mojaspin may send you promotional communications about bonuses, seasonal offers (such as Eid specials, Pohela Boishakh promotions, BPL cricket season offers, and ICC T20 tournament promotions), and new game releases — but only if you have explicitly opted in to receive such communications at the time of registration or via your account preferences. You may withdraw your marketing consent at any time by contacting support@mojaspin or updating your account notification settings after mojaspin Login. Withdrawal of marketing consent does not affect our ability to send you essential service-related communications (such as transaction confirmations, account security alerts, and KYC verification requests).
Automated Decision-Making
mojaspin uses automated systems for fraud detection, AML monitoring, and responsible gaming pattern recognition. These systems may flag accounts for human review if unusual activity is detected. Where automated processing results in a restriction on your account, you have the right to request human review of that decision by contacting our support team.
Section 3
Data Sharing & Disclosure
mojaspin does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
Game Technology Providers
To deliver the casino games and sports betting markets available on the mojaspin platform, we share relevant technical session data with our licensed game technology partners, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the session and game-round data required to operate the game correctly; they do not receive your full identity or financial profile. Each provider is bound by contractual data processing obligations consistent with this Policy.
Payment Service Providers
To process deposits and withdrawals in Bangladeshi Taka (৳), we share the minimum necessary transaction data with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers process transactions under their own privacy frameworks and are responsible for the security of payment authentication data on their platforms.
Identity Verification Partners
For KYC verification purposes, mojaspin may engage trusted third-party identity verification service providers. These providers process identity documents and biometric data (where applicable) strictly for the purpose of verifying the identity of mojaspin account holders and are prohibited from using that data for any other purpose.
Legal & Regulatory Disclosure
mojaspin may disclose personal data to competent governmental authorities, law enforcement agencies, or financial intelligence units if required to do so by applicable law, court order, or regulatory direction. In cases involving suspected money laundering, terrorist financing, underage gambling, or fraud, mojaspin may proactively share information with relevant authorities without prior notice to the affected player.
All third-party service providers who process personal data on behalf of mojaspin are engaged under written data processing agreements that require them to maintain appropriate technical and organisational security measures, process data only for the agreed purpose, and not retain data beyond the period necessary for that purpose.
Section 4
Cookies & Tracking Technologies
mojaspin uses cookies and similar tracking technologies to operate the platform, remember your session state, detect fraud, and — where you have consented — personalise your experience and measure the effectiveness of our promotional communications.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication state (mojaspin Login), security tokens, CSRF protection | Session / up to 24 hours |
| Functional | Language preferences, game layout preferences, responsible gaming tool settings | Up to 12 months |
| Analytics | Page view counts, navigation paths, session duration, error reporting (anonymised) | Up to 24 months |
| Marketing | Tracking opt-in promotional interest, measuring campaign performance (consent-dependent) | Up to 12 months |
Managing Your Cookie Preferences
Strictly necessary cookies cannot be disabled as they are required for the basic operation of the mojaspin platform. For all other cookie categories, you may manage your preferences via your browser settings at any time. Disabling functional or analytics cookies may affect the quality and personalisation of your experience on mojaspin. To opt out of marketing cookies specifically, you may also update your communication preferences from within your account settings after mojaspin Login.
Most modern browsers allow you to view, delete, or block cookies on a per-site basis. Common browsers available to players in Bangladesh — including Chrome, Firefox, and Samsung Internet on Android devices — all provide cookie management tools in their settings menus. Clearing cookies will log you out of your mojaspin session and reset any stored preferences.
Section 5
Data Security
Protecting the personal data of our players is a primary operational priority for mojaspin. We implement a layered set of technical and organisational security measures designed to prevent unauthorised access, disclosure, alteration, or destruction of the data we hold.
Technical Safeguards
- TLS/SSL Encryption: All data transmitted between your device and the mojaspin platform is encrypted using industry-standard Transport Layer Security (TLS). This applies to the website, the mobile platform, and all API communications with payment providers and game studios.
- Password Hashing: Player passwords are never stored in plain text. We use a strong cryptographic hashing algorithm with per-user salting to store password credentials securely.
- Two-Factor Authentication (2FA): All players are encouraged to enable SMS OTP-based two-factor authentication on their mojaspin Login to provide an additional layer of account protection.
- Database Encryption: Sensitive fields in the mojaspin database — including identity document references and payment identifiers — are encrypted at rest using AES-256 encryption.
- Intrusion Detection: Our infrastructure is protected by continuous intrusion detection and prevention systems, with 24/7 security monitoring by our technical operations team.
Organisational Safeguards
- Access to personal data is restricted on a strict need-to-know basis. Only authorised mojaspin staff members whose role requires access to specific data categories are granted that access.
- All staff members with access to player data undergo mandatory data protection and information security training as part of their onboarding and on an annual refresher basis.
- Data access events are logged and reviewed periodically by our internal compliance team to detect and investigate any anomalous access patterns.
Despite our robust security measures, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that poses a risk to your rights and interests, mojaspin will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach. To report a suspected security vulnerability, please contact us at support@mojaspin.
Section 6
Data Retention
mojaspin retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, to meet our legal and regulatory obligations, or to protect our legitimate interests in the event of a dispute or investigation. The retention periods below reflect our standard data lifecycle policy.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | AML / KYC legal obligation |
| KYC documents | 5 years from account closure | Legal / regulatory obligation |
| Transaction records | 7 years from transaction date | Financial record-keeping obligation |
| Gameplay activity logs | 3 years from session date | Dispute resolution / fair play audit |
| Support communications | 3 years from date of communication | Complaint resolution / legal defence |
| Marketing consent records | Until consent is withdrawn + 2 years | Proof of consent |
| Technical / server logs | Up to 12 months | Security monitoring / fraud detection |
| Self-exclusion records | Minimum 5 years from exclusion date | Responsible gaming obligation |
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where data must be retained for a longer period due to an ongoing legal dispute, regulatory investigation, or law enforcement request, we will retain the relevant data until that matter is resolved.
Section 7
Your Privacy Rights
As a registered player on the mojaspin platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our Data Protection Officer as described in Section 8 of this Policy.
- Right of Access: You may request a copy of the personal data that mojaspin holds about you, together with a description of the purposes for which it is being processed and the categories of recipients with whom it has been shared.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account data such as your name or date of birth, corrections may require supporting identity documentation.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires its continued retention. Please note that erasure requests cannot be fulfilled in respect of data we are legally required to retain (such as KYC records and transaction histories).
- Right to Restrict Processing: You may ask mojaspin to suspend the active processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is being assessed.
- Right to Object: Where we process your data on the basis of legitimate interest (such as for marketing analytics or fraud monitoring), you have the right to object to that processing. We will honour such objections unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your prior consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.
- Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to mojaspin that we process on the basis of contract or consent, for the purposes of transferring it to another service provider.
mojaspin aims to acknowledge all privacy rights requests within 5 business days and to fulfil or respond substantively to such requests within 28 calendar days of receipt. Complex or voluminous requests may require an extension of up to a further 28 days, in which case we will notify you of the extension and the reason for it.
Section 8
Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way mojaspin processes your personal data, please contact our Data Protection Officer (DPO) using the details below. All privacy-related correspondence is handled with strict confidentiality.
- Email: support@mojaspin (subject line: "Privacy Request")
- WhatsApp: +880 1700 000000 (available 24/7)
- Live Chat: Available 24 hours a day, 7 days a week, directly on the mojaspin platform
- Support Hours: 24 hours, 7 days a week
- Time Zone: Bangladesh Standard Time (BST, UTC+6)
When submitting a privacy rights request, please include your registered account username or mobile number so that we can locate your records efficiently. For your security, we may ask you to verify your identity before fulfilling any access, rectification, or erasure request.
mojaspin reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, or applicable legal requirements. When material changes are made, a prominent notice will be displayed on the platform and the "Last updated" date at the top of this page will be revised. Your continued use of the mojaspin platform after any such update constitutes your acknowledgement of the revised Policy.
Entire Privacy Agreement This Privacy Policy, together with the mojaspin Terms & Conditions and Responsible Gaming Policy, constitutes the complete framework governing the collection and use of your personal data on the mojaspin platform. This Policy is written in English and the English-language version shall prevail in the event of any ambiguity or inconsistency.
SSL-Encrypted Platform
Every connection to mojaspin is secured by industry-standard TLS/SSL encryption, ensuring that your personal data and payment information travel safely between your device and our servers at all times.
KYC Identity Verification
Our robust Know Your Customer process protects every player on the platform. By verifying identity before processing withdrawals, we prevent fraud, protect minors, and keep mojaspin safe for all adult players across Bangladesh.
No Data Selling
mojaspin never sells, rents, or trades your personal data to third-party advertisers or data brokers. Your information is used exclusively to operate your account, process your transactions, and personalise your gaming experience.
Secure Local Payments
Deposits and withdrawals via bKash, Nagad, Rocket, and Upay are processed through each provider's own secure authentication system. mojaspin never stores your mobile banking PIN or full account credentials.
Your Data, Your Control
You hold clear rights over your personal data — including the right to access, correct, or request deletion of your information. Our support team is available 24/7 to process privacy rights requests promptly and confidentially.
Responsible Data Retention
We keep your data only as long as legally required or operationally necessary. Once the applicable retention period expires, personal data is securely deleted or anonymised — it is never kept indefinitely without purpose.
Have Questions About Your Privacy?
Our 24/7 support team is ready to handle any privacy rights request or data query. You can also explore our full Terms & Conditions, learn about responsible gaming, or browse the casino.