malbet Privacy Policy

1. Introduction

malbet ("malbet", "we", "us", "our") operates the online betting and casino platform available at malbet.asia and is the data controller in respect of the personal data of users ("you", "User") collected through the Platform. malbet is committed to handling your personal data responsibly, transparently, and in a manner consistent with applicable data protection principles.

This Policy applies to all users of the Platform, including registered account holders and visitors who have not completed registration. By registering an account, making a deposit, placing a bet, or otherwise using any malbet service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside the malbet Terms & Conditions, which govern your use of the Platform more broadly. Where terms used in this Policy are defined in the Terms & Conditions, those definitions apply here unless the context requires otherwise.

2. Personal Data We Collect

2.1 Registration Data

When you register a malbet account, we collect the information you provide in the registration form, which includes: your full name, date of birth, gender (where provided), Pakistani mobile number, and any username you choose. This information is mandatory for account creation.

2.2 Identity Verification (KYC) Data

In accordance with our Know Your Customer obligations, we may collect and process copies of government-issued identification documents (such as your CNIC, passport, or driver's licence), proof of address documents, and selfie photographs for identity verification purposes. KYC verification is mandatory before any withdrawal is processed.

2.3 Financial Data

We collect information about your deposits and withdrawals, including transaction amounts, dates, payment method types (e.g., JazzCash, Easypaisa, bank name), and partial or tokenised payment identifiers. We do not store complete card numbers or bank account credentials on our servers — full payment credentials are handled by our certified payment processing partners.

2.4 Betting & Gaming Activity Data

We collect records of all bets placed, games played, win/loss outcomes, bonus claims, and account balance history. This data is integral to the operation of the Platform, the settlement of bets, and the calculation of any bonuses or promotions applicable to your account.

2.5 Technical & Device Data

We automatically collect technical data when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and session timestamps. This data is used for security monitoring, fraud detection, and Platform optimisation.

2.6 Communications Data

We retain records of communications between you and malbet support, including messages sent via email, live chat, or any other support channel. These records are used for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Collect Your Data

malbet collects your personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or participate in any promotion.
• Automatically — through cookies, server logs, and similar tracking technologies when you access the Platform. See Section 8 for full details on our use of cookies.
• From third-party payment providers — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, UnionPay, and USDT TRC20 processors provide transaction confirmation data to malbet in connection with your deposits and withdrawals.
• From identity verification services — where malbet uses third-party KYC providers to assist in verifying the identity documents you submit.
• From fraud prevention and security partners — who provide risk signals and verification data to protect the integrity of the Platform and your account.

4. How We Use Your Personal Data

malbet uses the personal data it collects for the following purposes:

• To create and administer your malbet account and provide access to all Platform services
• To verify your identity and age (18+) in accordance with our KYC obligations
• To process deposits and withdrawals in PKR via JazzCash, Easypaisa, bank transfer, and other accepted methods
• To settle bets, calculate winnings, and maintain accurate account balance records
• To detect and prevent fraud, money laundering, collusion, and other prohibited conduct
• To provide customer support and resolve disputes
• To send transactional communications, including deposit confirmations, withdrawal notifications, and security alerts
• To send promotional communications, including bonus offers and new game announcements, where you have not opted out of marketing communications
• To comply with applicable legal and regulatory obligations, including anti-money laundering requirements
• To operate, improve, and maintain Platform performance and security
• To enforce our Terms & Conditions and other policies

5. Legal Basis for Processing

malbet processes your personal data on the following legal bases:

• Performance of contract — processing necessary to provide the services you have requested, including account management, bet settlement, and payment processing.
• Legal obligation — processing required to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering obligations, and age verification.
• Legitimate interests — processing for fraud prevention, security monitoring, Platform improvement, and dispute resolution, where these interests are not overridden by your data protection rights.
• Consent — processing for direct marketing communications, where you have provided consent. You may withdraw consent at any time by contacting [email protected].

6. Data Sharing & Disclosure

malbet does not sell your personal data to third parties. We share your personal data only in the following circumstances:

• Payment processors — JazzCash, Easypaisa, and other payment providers receive the data necessary to process your deposits and withdrawals.
• KYC and identity verification providers — third-party services that assist in verifying your identity documents receive the data required to perform that verification.
• Fraud prevention and security partners — who assist malbet in detecting and preventing fraudulent transactions and account abuse.
• IT and hosting service providers — cloud infrastructure and technology partners who host and maintain Platform infrastructure, subject to strict data processing agreements.
• Regulatory and law enforcement authorities — where malbet is required to disclose data by applicable law, court order, or regulatory demand.
• Successors in business — in the event of a merger, acquisition, or sale of malbet's assets, your data may be transferred to the successor entity, subject to equivalent data protection obligations.

All third parties with whom malbet shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they provide to malbet.

7. Payment Data & Financial Information

malbet takes the security of financial data extremely seriously. When you deposit via JazzCash or Easypaisa, the authentication and authorisation of your wallet credentials takes place directly within the respective wallet provider's secure environment. malbet does not receive or store your JazzCash or Easypaisa PIN or password at any point in the transaction process.

For card-based payments, card data is processed through PCI-DSS compliant payment gateways. Full card numbers are never transmitted to or stored on malbet servers. malbet retains only tokenised payment references sufficient to link transactions to your account for record-keeping and dispute resolution purposes.

8. Cookies & Tracking Technologies

malbet uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies — used to remember your preferences, such as language settings and game filters, to improve your experience.
• Analytics cookies — used to understand how users interact with the Platform, including page views, session duration, and navigation paths, to enable continuous Platform improvement.
• Security cookies — used for fraud detection and prevention, including device fingerprinting and suspicious session identification.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. malbet does not use cookies to serve third-party advertising.

9. Data Retention

malbet retains your personal data for as long as your account remains active and for a reasonable period thereafter to comply with legal and regulatory obligations. Specifically:

• Account and identity data is retained for the duration of the account relationship and for a minimum of five (5) years after account closure, as required by anti-money laundering regulations.
• Transaction and betting history records are retained for a minimum of five (5) years after the relevant transaction or bet.
• Communications records are retained for three (3) years from the date of the communication.
• Technical and device logs are retained for a period of up to twelve (12) months.

Where data is no longer required for its original purpose or any legally mandated retention period, malbet will securely delete or anonymise it.

10. Data Security

malbet implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• End-to-end TLS/SSL encryption for all data transmitted between your device and the Platform
• Encryption at rest for sensitive personal data stored on malbet servers
• Access controls limiting personal data access to authorised personnel only, on a need-to-know basis
• Regular security audits and penetration testing of the Platform infrastructure
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Monitoring and alerting systems for detection of anomalous access patterns or potential data breaches

Notwithstanding these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, malbet will notify affected users and take all necessary remedial steps in a timely manner.

11. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by malbet:

• Right of access — to request a copy of the personal data malbet holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data, subject to malbet's legal retention obligations.
• Right to restriction — to request that malbet restrict processing of your personal data in certain circumstances.
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to object — to object to processing of your personal data for direct marketing purposes at any time, without providing a reason.
• Right to withdraw consent — where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact malbet at [email protected] with your registered mobile number and a description of your request. malbet will respond within 30 days. Identity verification may be required before processing data access or deletion requests.

12. Children's Privacy

The malbet Platform is strictly for users aged 18 and above. malbet does not knowingly collect personal data from individuals under the age of 18. If malbet becomes aware that personal data of a person under 18 has been collected, that account will be immediately closed, any balance voided, and the associated data deleted as soon as practicable.

If you believe that a minor has registered a malbet account, please notify us at [email protected] immediately so that appropriate action can be taken. We encourage parents and guardians to use parental control and filtering software to prevent minors from accessing online gambling platforms.

13. International Data Transfers

malbet operates an internationally distributed infrastructure. Your personal data may be transferred to and stored on servers located outside Pakistan. Where such transfers occur, malbet takes steps to ensure that your data is protected to a standard equivalent to that required under applicable data protection principles, including through the use of contractual safeguards with receiving parties.

By using the Platform, you consent to the transfer of your personal data outside Pakistan where necessary for the provision of malbet services, subject to the protections described in this Policy.

14. Changes to This Privacy Policy

malbet reserves the right to update this Privacy Policy at any time. Where changes are material, malbet will notify registered users via their registered mobile number or Platform notification at least 7 days prior to the changes taking effect. The "Last updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

We recommend that you review this Policy periodically to stay informed of how malbet handles your personal data. The current version of the Privacy Policy is always available at malbet.asia/privacy-policy.

15. Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the handling of your personal data by malbet, please contact our support team at:

Email: [email protected]

Please include your registered mobile number, a clear description of your query or request, and — for data rights requests — confirmation of the specific right you wish to exercise. Our team aims to acknowledge all data-related enquiries within 5 business days and to respond substantively within 30 days.