malbet Privacy Policy

1. Introduction & Scope

malbet ("we," "us," "our") operates the online gaming and sports betting platform accessible at malbet.lat. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, prospective players who browse the site without registering, and individuals who contact us through our support channels.

This Privacy Policy applies to all personal data collected and processed by malbet in connection with the operation of the malbet platform. It covers data collected through the malbet website, account registration, deposit and withdrawal transactions, gameplay activity, customer support interactions, and any other service channel through which malbet communicates with players.

This policy has been drafted in alignment with internationally recognised data protection principles, including those set out in the General Data Protection Regulation (GDPR) framework, which malbet adopts as a baseline standard of data governance regardless of the specific jurisdiction applicable to a given player.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the operating entity behind the malbet platform at malbet.lat. All data protection queries, subject access requests, and privacy complaints should be directed to the malbet Data Protection contact as set out in Section 16 of this Policy.

3. Data We Collect

malbet collects the following categories of personal data in the course of operating the platform:

3.1 Identity Data

• Full legal name (as it appears on CNIC or passport);
• Date of birth and age verification documentation;
• Pakistani CNIC number or passport number (for KYC verification);
• Photograph or scan of government-issued identification document.

3.2 Contact Data

• Pakistani mobile telephone number;
• Email address;
• Residential address (for certain verification tiers).

3.3 Financial Data

• JazzCash or EasyPaisa mobile wallet number or account identifier;
• Bank account details where bank transfer is used (HBL, UBL, Meezan Bank, Allied Bank, etc.);
• Cryptocurrency wallet address where crypto deposits/withdrawals are made;
• Deposit history, withdrawal history, and transaction timestamps;
• PKR balance records.

3.4 Gaming & Betting Activity Data

• Game session history, including games played, stakes placed, and outcomes;
• Sports betting history, including markets backed, odds accepted, and settlement results;
• Bonus and promotional activity records;
• Responsible gaming tool usage records (deposit limits set, cool-off periods activated, etc.).

3.5 Technical & Device Data

• IP address at time of registration and each subsequent login;
• Device type, operating system, and browser type;
• Session start and end timestamps;
• Geolocation data (at city level) where your browser permits;
• Cookie and tracking data as described in Section 8.

3.6 Communications Data

• Content of support chat transcripts and email exchanges with malbet support agents;
• Dispute and complaint records;
• Survey responses and feedback submissions (where provided voluntarily).

4. How We Collect Your Data

malbet collects personal data through the following channels:

malbet does not collect data from social media platforms or third-party data brokers for the purpose of targeting or profiling players.

5. Legal Basis for Processing

malbet processes personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the services you have requested — including managing your account, processing transactions, and settling bets;
• Legal Obligation: Processing required to comply with our gaming licence conditions, anti-money laundering (AML) regulations, KYC requirements, and applicable data protection law;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and improving the player experience, where these interests are not overridden by your data protection rights;
• Consent: Processing for optional purposes such as marketing communications (where you have opted in) and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Data

malbet uses the personal data it collects for the following purposes:

• To create, manage, and maintain your malbet account;
• To verify your identity and age (21+ requirement) in compliance with our licensing obligations;
• To process deposits and withdrawals in PKR through JazzCash, EasyPaisa, bank transfers, and other supported methods;
• To detect and prevent fraud, account compromise, money laundering, and other prohibited activity;
• To calculate, credit, and administer bonuses and promotional rewards;
• To enforce responsible gaming tools including deposit limits, session timers, cool-off periods, and self-exclusion;
• To provide customer support in Urdu and English via live chat and email;
• To analyse platform usage for the purpose of improving games, features, and user experience;
• To comply with reporting obligations imposed by our gaming regulator and any applicable anti-money laundering authority;
• To send you service notifications, security alerts, and — where you have consented — promotional communications relating to malbet offers and PSL season events.

7. Data Sharing & Disclosure

malbet does not sell your personal data. We share your data only in the following limited circumstances:

7.1 Service Providers

malbet shares data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These include payment processors (JazzCash, EasyPaisa, banking partners), KYC and identity verification providers, fraud detection services, customer support platform operators, and cloud infrastructure providers. All such providers are contractually bound to process data only as instructed by malbet and to maintain appropriate security measures.

7.2 Regulatory & Legal Disclosure

malbet will disclose player data to regulatory authorities, law enforcement agencies, courts, and other competent bodies where required to do so by applicable law, our gaming licence conditions, anti-money laundering regulations, or a valid court order. malbet will not notify players of such disclosures where doing so would be prohibited by law or would compromise an investigation.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of malbet's business or assets, player data may be transferred to the successor entity. Players will be notified of any material change to the data controller arising from such a transaction prior to the transfer taking effect where practicable.

8. Cookies & Tracking Technologies

The malbet platform uses cookies and similar tracking technologies to operate the site, remember your preferences, maintain session security, and analyse platform performance. The following categories of cookies are used:

You can manage optional cookies through your browser settings. Disabling essential or security cookies will prevent the malbet platform from functioning correctly and you will be unable to log in or complete transactions.

9. Data Security

malbet maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and malbet's servers;
• AES-256 encryption for sensitive data at rest, including stored payment information and KYC documents;
• Multi-factor authentication (MFA) required for all malbet staff accessing player data systems;
• Role-based access controls ensuring that only personnel with a legitimate operational need can access specific categories of player data;
• Regular third-party penetration testing and vulnerability assessments of the platform infrastructure;
• Automated anomaly detection systems that flag unusual account activity, including login from new devices and high-value withdrawal requests, for manual review;
• An internal incident response procedure governing the detection, containment, and notification of data security incidents.

10. Data Retention

malbet retains different categories of personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, as required by our AML and licensing obligations;
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping requirements;
• KYC Documentation: Retained for the minimum period required by our regulatory obligations, typically 5 years from account closure or last transaction;
• Customer Support Records: Retained for 3 years from the date of the interaction, or longer if the interaction relates to an unresolved dispute or legal claim;
• Game and Bet Logs: Retained for a minimum of 2 years from the date of each session or wager;
• Marketing Consent Records: Retained until consent is withdrawn plus 1 year for audit purposes.

At the end of the applicable retention period, malbet will securely delete or irreversibly anonymise the relevant data. Where data anonymisation is used, anonymised data may be retained indefinitely for statistical and analytical purposes.

11. International Data Transfers

malbet's operational infrastructure may involve the transfer of your personal data to servers or service providers located outside of Pakistan. Where such international transfers occur, malbet ensures that appropriate safeguards are in place to protect your data to the same standard as applied within the platform, including:

• Use of Standard Contractual Clauses or equivalent contractual mechanisms with data processors in other jurisdictions;
• Transfer only to jurisdictions that have adopted adequacy standards recognised under the applicable data protection framework;
• Contractual requirements on all international processors to maintain data security standards equivalent to those described in this Policy.

12. Your Data Rights

As a malbet player, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of all personal data malbet holds about you. malbet will respond within 30 days of receiving a verified request;
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. Minor corrections (such as email address updates) can be made directly from your account dashboard;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligation to retain certain data categories under AML and gaming regulations;
• Right to Restriction: You may request that malbet restricts processing of your data in certain circumstances, for example while the accuracy of data is disputed;
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another controller, where technically feasible;
• Right to Object: You may object to processing based on malbet's legitimate interests. malbet will honour such objections unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on consent (e.g. marketing emails), you may withdraw consent at any time by contacting malbet support or using the unsubscribe mechanism in any marketing email.

To exercise any of the above rights, contact malbet's support team as described in Section 16. malbet may require identity verification before processing data subject requests to ensure the security of player data.

13. Children's Privacy

14. Third-Party Services

The malbet platform integrates with third-party services to deliver certain features, including payment processing, KYC verification, live game streaming, and customer support tools. These integrations are necessary for the operation of the platform and are governed by data processing agreements with all service providers.

Third-party services integrated with malbet process only the minimum data necessary for their designated function. malbet does not permit third-party service providers to use player data for their own marketing purposes or to share player data with further subprocessors without malbet's prior approval.

The malbet website does not contain links to external third-party websites. Players should be aware that any service or website accessed independently of the malbet platform is not governed by this Privacy Policy, and malbet accepts no responsibility for the privacy practices of any third party.

15. Amendments to This Privacy Policy

malbet reserves the right to update or amend this Privacy Policy at any time. The revised policy will be published at malbet.lat/privacy-policy with an updated effective date. Where amendments are material — for example, a significant change in how we use your data or with whom we share it — malbet will notify registered players via the email address held on their account with reasonable advance notice before the amendment takes effect.

Continued use of the malbet platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting malbet support.

16. Contact, Complaints & Data Requests

For all privacy-related queries, subject access requests, data correction requests, and complaints, please contact the malbet support team through the following channels:

• Live Chat: Available 24/7 through your logged-in malbet Account dashboard — the fastest channel for urgent privacy queries
• Email: [email protected] — for formal data subject requests, please include "Privacy Request" in the subject line
• Language: Privacy requests can be submitted in Urdu or English

malbet will acknowledge all privacy-related communications within 72 hours and resolve data subject requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, malbet may extend the response period by a further 30 days with prior notification to you.

If you are not satisfied with malbet's handling of your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your situation.