Mostly Play protects your personal information, funds, and gaming experience with industry-leading encryption, two-factor authentication, and an active fraud monitoring system.
Each layer serves a specific purpose — together, they make your account impenetrable.
Every click, transaction, and login is secured with 256-bit SSL encryption — the same standard used by the world's leading banks.
AES-256-GCMIt's not just a password — when you log in, an OTP is sent to your mobile. This second layer ensures no one but you can access your account.
TOTP / SMS OTPOur AI-powered system monitors every transaction and login pattern around the clock. Any unusual activity triggers immediate account protection.
AI-Powered DetectionYour deposited funds are held in a dedicated trust account, completely separate from the company's operational funds — ensuring your money is always available for withdrawal.
Segregated AccountsEvery account is identity-verified through the Know Your Customer process, which helps prevent fraud and illegal activity.
Identity VerifiedYour personal information is never sold or shared with third parties. Our privacy policy is built to international GDPR standards.
GDPR Compliant
Mostly Play provides technical protection, but these habits will make your security even stronger.
Our security team continuously maintains and improves the following standards.
Knowing these things can protect you from a lot of trouble on your own
Attempts to steal your login credentials through fake websites or emails that look exactly like the real thing.
Fraudsters may attempt to transfer your mobile number to their own SIM to intercept your OTPs.
Weak or common passwords can easily be cracked by automated software.
Attempts to extract your information by someone posing as a Mostly Play staff member over phone or chat.
* Image is for illustration purposes only
Two-factor authentication is your account's strongest line of defense. Even if someone knows your password, they still can't get in without the OTP.
Screenshot or write down your backup codes — if you ever lose your phone, they're your only way back into your account.
KYC (Know Your Customer) is the process of verifying your identity. It may sound like a hassle, but it is actually there to protect you.
KYC prevents anyone from opening an account in your name or attempting a fraudulent withdrawal with fake details. Once verification is complete, your withdrawal limits increase and processing becomes faster.
Upload clear photos of the front and back of your NID. Blurry or poorly lit images may need to be resubmitted.
RequiredTake a selfie holding your NID. Both your face and the details on the ID must be clearly visible.
RequiredA utility bill or bank statement showing your current address, typically issued within the last 3 months.
For Higher LimitsThe mobile number linked to your bKash or Nagad account must match the number registered on your Mostly Play account.
For PaymentsVerification is typically completed within 24–48 hours. You'll receive an email and SMS notification once approved.
Final StepThe biggest concern on any online gaming platform is: "Is my money safe?" That's a completely valid question. At Mostly Play, we believe in answering it not with words, but with action.
Our technology team's primary goal is to ensure that every transaction, every login, and every piece of data remains secure. We use the highest industry-standard security technology — and regularly have our systems audited by independent third-party auditors.
Mostly Play never stores your password in plain text. We use bcrypt hashing, which converts your password into an unreadable code. This process is one-way — it is technically impossible to reverse a hash back to the original password. So if anyone claiming to work for us ever asks for your password, it is a scam.
Our servers are hosted in world-class data centers equipped with physical security, backup power, fire suppression systems, and 24/7 surveillance cameras. Regular data backups are performed to ensure no information is lost in the event of a technical issue.
Most platforms act only after something goes wrong. Mostly Play doesn't work that way. Our AI-powered system identifies potential threats before they escalate — for example, if your account is accessed from an unfamiliar city without warning, or a large withdrawal is attempted at an unusual hour, the system automatically triggers additional verification.
This proactive approach is exactly why Mostly Play has had zero major security breaches since day one. That's something we're proud of — and we work every day to keep that record intact.
No matter how advanced Mostly Play's technology is, a significant part of your security ultimately comes down to you. Weak passwords, clicking unknown links, or sharing OTPs — these mistakes can compromise even the most sophisticated system.
That's why we don't just invest in technology — we also work to keep our users informed. This page is part of that effort. If you've read this far, you're already a security-savvy Mostly Play user.
To learn how your information is used and kept secure, please review our Privacy Policy Read.
Straight answers to the most frequently asked questions
World-class encryption, two-layer security, and 24/7 Bangla support — your data and funds are always safe at Mostly Play.