Mcwaff Privacy Policy – Your Data Is Safe with Us

This Privacy Policy applies to all users of the mcwaff platform, including the website mcwaff.best and the mobile app. By creating an account, browsing, or using any of our services, you agree to the terms of this policy.

We believe privacy is a fundamental right. Whether you're using mcwaff from Dhaka, Chattogram, Sylhet, or Rajshahi, protecting your data is our responsibility. This policy has been developed in line with international data protection standards, with Bangladesh's users specifically in mind.

In this policy, "personal data" refers to any information that can be used to identify you, directly or indirectly — such as your name, phone number, email address, or transaction history.

Mcwaff collects data in two ways — information you provide directly, and data collected automatically while you use the platform.

Mcwaff does not collect sensitive personal data such as religious beliefs, political opinions, or health information. Only the data necessary to provide our services and meet legal requirements is collected.

Every piece of information collected at mcwaff is used for a specific purpose. We never use your data for anything beyond its intended scope.

Mcwaff does not sell your personal data. However, limited information may be shared with trusted partners in specific circumstances.

• Payment Processors: Payment service providers such as bKash, Nagad, and Rocket receive only the information needed to process transactions. They operate under their own privacy policies.
• Identity Verification Provider: Approved third parties may verify identity document details during the KYC process — strictly for verification purposes only.
• Technology Service Providers: Cloud hosting and analytics providers may process data — strictly under confidentiality agreements.
• Legal authorities: mcwaff may be required to share information with regulatory authorities under a court order or other legal obligation.

Mcwaff uses cookies and similar technologies on its website and app. Cookies are small text files stored on your device that help improve your browsing experience.

You can disable non-essential cookies from your browser settings, though doing so may affect certain platform features.

Mcwaff employs the highest industry-standard technical and organizational safeguards to protect your data. These are not mere formalities – they are part of our day-to-day operations.

Key components of our security framework:

• 256-Bit SSL/TLS Encryption: All data exchanged between your browser and mcwaff servers is transmitted through encrypted channels.
• Database Encryption: Stored data, particularly payment and identity information, is held in encrypted format.
• Two-Factor Authentication (2FA): An additional layer of security can be added when logging in to your account.
• Firewall & intrusion detection: Unauthorized server access attempts are automatically detected and blocked.
• Regular Security Audits: Third-party experts regularly assess the system for vulnerabilities and ensure they are promptly resolved.
• Restricted Staff Access: Only authorized personnel can access your data — and every access is logged.

Mcwaff does not retain your data longer than necessary. However, certain information must be kept for a defined period due to legal obligations.

• Active account data: Retained for as long as the account remains active.
• Transaction records: Financial data is generally retained for 5–7 years in accordance with financial regulatory requirements.
• KYC documents: Retained for up to 5 years after account closure for legal compliance purposes.
• Support Chat Records: Typically retained for up to 2 years.
• Login & Activity Logs: Retained for up to 1 year for security purposes.
• Marketing Preferences: For as long as the account is active or until consent is withdrawn.

Once the designated retention period ends, data is securely deleted or anonymized.

Mcwaff respects your data rights. The rights listed below are available to you, and you can contact our support team to exercise any of them.

Mcwaff strictly does not collect data from anyone under the age of 18 or permit them to use the platform. Age verification is carried out at the point of registration.

If a minor has accidentally created an account and a parent or guardian becomes aware of it, please notify us immediately at support@mcwaff.best. The account will be closed and all associated data will be deleted.

Mcwaff may update this Privacy Policy from time to time. For significant changes, you will be notified in advance via your registered email or an in-app notification – at least 7 days before the changes take effect.

Minor changes — such as typo corrections or clarifications — may not require a formal notice. You can always check the "Last Updated" date at the top of the page to see if anything has changed.

If you continue using mcwaff after a new policy takes effect, you will be considered to have accepted the updated terms.

For any privacy-related questions, concerns, or complaints, please reach out to the mcwaff support team. We aim to respond in Bengali and typically reply within 24–48 hours.

For privacy-related complaints, email us with "Privacy Complaint" in the subject line and include full details. Every complaint is taken seriously.

Email: support@mcwaff.best