Reference

Reset Your Password in Seconds

We built password recovery around the mobile wallets you already use—bKash, Nagad, Rocket. Your phone number is your recovery key, and the reset link reaches you in under a minute so you're back in the lobby fast.

Phone VerificationSMS Reset LinkInstant AccessSecure Process
MVB88 Reset Your Password in Seconds
RECOVERY SUPPORT

Help When You're Locked Out

Team online

Changed Your Number

If you switched mobile carriers or your registered bKash, Nagad or Rocket number is no longer active, reach our account team with your username and a photo of your national ID so we can verify and update your contact details securely.

Reset Link Not Arriving

Check your SMS inbox and spam folder first. If the message still hasn't appeared after two minutes, request a new link from the login screen—one link per session, and each one expires after fifteen minutes to keep your account safe.

Account Locked After Failed Attempts

We lock your account temporarily after five incorrect password tries in one hour. Wait thirty minutes or contact support with your registered phone number and we'll unlock it once we've confirmed your identity through the same wallet-verification process you used at signup.

SECURITY DETAIL

How We Protect Your Account Credentials

Encrypted Password Storage We hash every password with bcrypt before storing it, so even our own database administrators never see your plain-text credential. When you log in, we compare the hash—not the password itself—so there's nothing to leak if our systems are ever queried.
SMS One-Time Links Reset links are single-use tokens that expire in fifteen minutes and are tied to your device session. If someone intercepts the SMS, they still need access to your phone to complete the reset—the link won't work from a different browser or IP without secondary verification.
Wallet-Number Binding Your account is anchored to the bKash, Nagad or Rocket number you registered with. We won't issue a reset unless the phone number in our records matches the one you're using, so someone guessing your username alone can't trigger a password change.
Activity Logs Visible in Settings Open your account panel and you'll see every login attempt, every password change and every reset request timestamped with the IP address and device used. If you spot an entry you don't recognise, lock your account from that same screen and reach support immediately.
MVB88 Phone-First Reset Flow Built for Bangladesh

Phone-First Reset Flow Built for Bangladesh

We tie your account to the mobile number you used when you opened it—the same number linked to your bKash, Nagad or Rocket wallet. Tap the reset option on the login screen, enter your registered number, and we'll send a one-time link to that device. The link expires in fifteen minutes for security, so open it right away. Once you're in, set

a new password using at least eight characters with one number and one uppercase letter. Players in Dhaka and across Bangladesh use this flow dozens of times a day during BPL season when they're switching between cricket lines and live casino tables. No email required, no long wait—just your phone and the number we have on file.

Account Security Glossary

01
What is a one-time password reset link?

A single-use URL sent to your registered mobile number via SMS that lets you set a new password without answering security questions. It expires fifteen minutes after we send it and can't be reused once you've clicked through.

02
What does bcrypt hashing mean?

A cryptographic function that turns your password into a random-looking string before we store it. Even if someone reads our database, they see only the hash—not your actual password—so they can't log in as you or reuse it elsewhere.

03
Why do I need eight characters in my password?

Shorter passwords are easier to guess with automated tools. Eight characters with a mix of uppercase, lowercase and numbers create millions of possible combinations, making brute-force attacks impractical within the fifteen-minute reset window we enforce.

04
What is wallet-number binding?

We tie your MVB88 account to the same phone number linked to your bKash, Nagad or Rocket wallet. Password resets only work when requested from that registered number, so an attacker with just your username can't change your credential from a different device.

05
What happens during a temporary account lock?

After five wrong password attempts in one hour, we freeze login access for thirty minutes. This stops automated scripts from cycling through thousands of password guesses. You can wait for the lock to expire or contact support with ID proof to unlock early.

06
What are activity logs in my account settings?

A timestamped record of every login, password change and reset request tied to your username. Each entry shows the IP address and device type used, so you can spot unauthorised access attempts and lock your account before any funds move.

Password Help Questions We Hear Most

Tap the reset option on the login screen, enter your registered mobile number, and we'll send a one-time link to that device within sixty seconds. Open the SMS, follow the link, and set a new password using at least eight characters with one number and one uppercase letter.

Yes, but you'll need to verify your identity first. Contact our support team with your username and a photo of your national ID. Once we've confirmed it matches the name on your account, we'll update your registered number and send the reset link to your new mobile wallet contact.

Check your SMS inbox and spam folder first. If the message still hasn't shown up after two minutes, request a fresh link from the login screen—each link is valid for fifteen minutes, and you can only have one active reset per session to prevent link flooding.

We lock accounts temporarily after five failed login attempts in one hour to stop automated guessing. The lock lifts automatically after thirty minutes, or you can reach support with your registered phone number and ID to unlock immediately once we've verified your wallet-number binding matches our records.

We don't recommend it—if you're resetting because you suspect someone else accessed your account, reusing the old credential leaves you vulnerable. Pick a fresh password with at least eight characters, mixing uppercase, lowercase and numbers, so it's harder to guess even if your previous one leaked elsewhere.

Open your account settings panel and scroll to the activity log. Every reset request is timestamped with the device IP and the outcome—approved, expired or blocked. If you see an entry you don't recognise, lock your account from that same screen and contact support before anyone can complete the reset.
Reference

Password Help Bangladesh

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.