malbat Privacy Policy

Full Privacy Policy

1. Who We Are

malbat ("we", "us", "our") operates the online cricket betting and casino platform accessible at https://malbat.im (the "Platform"). malbat serves users primarily located in Bangladesh and provides live sports betting, casino games, slots, crash games, live dealer tables, and Teen Patti, accessible via mobile and desktop browsers.

For all privacy-related queries, you can contact our data team at: [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register an account, make a deposit or withdrawal, contact support, or participate in a promotion, you may provide us with the following categories of personal data:

• Identity data: full name, date of birth, gender, national ID or passport number (where required for verification).
• Contact data: email address, mobile phone number, city of residence (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna).
• Financial data: bKash account number, Nagad account number, Rocket account number, Upay number, bank account details, transaction history on the Platform.
• Account credentials: username and hashed password (we never store passwords in plain text).
• Communications: messages you send to our support team, feedback responses, and complaint records.

2.2 Data Collected Automatically

When you access the malbat Platform, certain technical data is collected automatically by our systems:

• Device & browser data: device type, operating system, browser type and version, screen resolution, and language settings.
• Network data: IP address, approximate geographic location derived from IP, mobile carrier (where applicable).
• Usage data: pages visited, time spent on each page, games played, bets placed, betting patterns, session duration, and clickstream data.
• Cookie & tracking data: session cookies, persistent cookies, and similar technologies used to maintain your login state and improve platform performance.

2.3 Data From Third Parties

In certain circumstances, malbat may receive personal data about you from third-party sources, including:

• Identity verification and fraud-prevention service providers used to confirm your age and identity.
• Payment processors (e.g., bKash, Nagad, Rocket) who confirm the status and ownership of your payment method.
• Responsible gaming databases or self-exclusion registries, where you have registered your details.

3. How We Use Your Personal Data

malbat uses the personal data we collect for the following purposes:

1. Account creation and management: to register your account, verify your identity and age, and manage your ongoing relationship with the Platform.
2. Service delivery: to process bets and wagers, settle winnings, handle deposits and withdrawals via bKash, Nagad, Rocket, and other supported methods, and to deliver the core gaming and betting experience.
3. Customer support: to respond to your queries, resolve complaints, and provide technical assistance.
4. Compliance & legal obligations: to fulfil our obligations under applicable anti-money laundering (AML) requirements, age verification laws, and other regulatory mandates.
5. Fraud prevention & security: to detect, investigate, and prevent fraudulent activity, unauthorised access, and other conduct that could harm you or the integrity of the Platform.
6. Responsible gaming: to monitor for signs of problem gambling behaviour and to enforce self-exclusion, deposit limits, and time-out requests made by you.
7. Platform improvement: to analyse usage patterns, test new features, fix bugs, and optimise the Platform experience for Bangladeshi users.
8. Marketing communications: to send you relevant promotions, bonus offers, and news about malbat — only where you have given your consent to receive such communications. You may withdraw consent at any time.

4. Legal Basis for Processing

malbat processes your personal data on the following legal bases depending on the purpose:

• Contract performance: processing necessary to provide the services you have requested when creating an account and placing bets.
• Legal obligation: processing required to comply with applicable laws, including AML checks and age verification requirements.
• Legitimate interests: processing for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your privacy rights.
• Consent: processing for marketing communications and the use of non-essential cookies, where your prior consent has been obtained and can be withdrawn at any time.

5. Cookies & Similar Technologies

malbat uses cookies and similar tracking technologies to operate the Platform effectively. Cookies are small text files stored on your device that allow us to recognise you between visits, maintain your login session, and understand how you navigate the site.

5.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable core features such as account login, session management, and security. Essential cookies cannot be disabled without breaking the Platform's functionality.

5.2 Analytics Cookies

With your consent, we use analytics cookies to measure traffic patterns, popular game categories, and page performance. This data is aggregated and does not identify you personally. It helps us understand what content Bangladeshi players find most useful and improve the Platform accordingly.

5.3 Preference Cookies

These cookies remember your Platform preferences, such as your language setting and game display options, so you do not need to reset them on every visit.

You may manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform.

6. How We Share Your Data

malbat does not sell your personal data. We may share your data with carefully selected third parties only in the following circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi banking partners process transactions on our behalf. They receive only the data necessary to complete the transaction.
• Identity verification providers: third-party KYC (Know Your Customer) and AML service providers who verify the identity and age of account holders as required.
• Technology and hosting partners: cloud hosting and infrastructure providers who store and process Platform data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: where we are required by law, court order, or regulatory directive to disclose your information to competent authorities.
• Fraud prevention networks: to investigate and prevent fraudulent activity, we may share limited data with industry fraud-prevention partners.

All third-party processors engaged by malbat are contractually required to maintain the confidentiality and security of your data and to use it only for the specific purposes authorised by malbat.

7. Data Retention

malbat retains your personal data for as long as your account is active and for a reasonable period thereafter to fulfil the purposes described in this policy, including our legal and regulatory obligations. The following general retention periods apply:

• Account data and transaction records: retained for a minimum of 5 years following account closure to comply with AML and financial record-keeping requirements.
• Communication records: customer support messages and complaint records retained for 3 years.
• Usage and analytics data: aggregated analytics data may be retained indefinitely in anonymised form; individually identifiable usage logs are deleted after 12 months.
• Marketing consent records: retained for the duration of your consent plus 2 years.

When personal data is no longer required for any valid purpose, we securely delete or anonymise it in accordance with our data retention procedures.

8. Data Security

malbat employs a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encrypted storage of sensitive data at rest, including financial records and identity documents.
• Access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of our Platform infrastructure.
• Two-factor authentication options available to all registered users.
• Automated monitoring for unusual account activity or potential security breaches.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data, malbat will notify affected users and relevant authorities in accordance with applicable legal requirements.

9. Your Privacy Rights

As a malbat user, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected] (plain text only — not a clickable link).

10. Minors & Age Restriction

malbat is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a user under 21 has provided us with personal data or created an account, we will immediately suspend the account, delete the associated data, and return any funds deposited.

If you are a parent or guardian and believe that a minor in your care has registered on the malbat Platform, please contact us at [email protected] (plain text) so that we can take immediate action.

11. International Data Transfers

malbat primarily stores and processes user data within secure data centres. In some cases, data may be transferred to or accessed from outside Bangladesh — for example, where we use cloud hosting infrastructure or third-party technology partners with servers in other regions. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to the same standard as described in this policy.

12. Third-Party Services

The malbat Platform does not contain links to third-party websites for browsing purposes. However, certain game content may be delivered by third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate under their own privacy policies and security frameworks. malbat is not responsible for the privacy practices of these game providers, though we vet all partners before integrating their content on the Platform.

13. Changes to This Privacy Policy

malbat reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email or a prominent notice on the Platform. The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically to stay informed about how we protect your data.

Your continued use of the malbat Platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must discontinue your use of the Platform and may request account closure by contacting support.

14. Contact & Data Requests

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact the malbat data team. We aim to acknowledge all privacy requests within 48 hours and to resolve them within 14 business days.

Contact: [email protected] — displayed as plain text only, not a clickable link. Please include "Privacy Request" in your subject line along with your registered username to help us locate your account details promptly.