melbat Privacy Policy

1.0 Who We Are

melbat ("we", "us", "our") operates the online betting and casino platform accessible at melbat.bet. We are the data controller responsible for the personal information you provide when you use our Platform, create an account, place bets, make deposits or withdrawals, or contact our support team.

This Privacy Policy applies to all users of the melbat Platform, including visitors who browse without a registered account and registered players located in Bangladesh and other permitted jurisdictions. For questions about this policy or about how we handle your data, contact us at: [email protected]

2.0 Personal Data We Collect

We collect personal data through several channels — directly from you when you register or interact with our Platform, automatically as you browse, and from third-party service providers that assist with payment processing and identity verification. The categories of data we collect include:

Identity & Contact Data

Financial & Transaction Data

Technical & Usage Data

We do not knowingly collect sensitive data relating to racial or ethnic origin, political opinions, religious beliefs, or health status, and we ask that you do not submit such information through our Platform.

3.0 How We Use Your Personal Data

melbat processes your personal data only where we have a valid lawful basis for doing so. The primary purposes for which we use your data are:

• Account registration and management: To create and maintain your melbat account, verify your identity (KYC), and authenticate your login sessions.
• Service delivery: To process your bets, execute deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and provide access to all games and betting markets on the Platform.
• Legal compliance: To meet our obligations under applicable anti-money laundering (AML) regulations, verify age eligibility (21+), and respond to lawful requests from competent authorities.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, and other activities that breach our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, and process complaints submitted via email or live chat.
• Responsible gaming: To monitor play patterns, enforce deposit limits and cooling-off periods you have set, and identify behaviour that may indicate problem gambling.
• Platform improvement: To analyse aggregate usage data, test new features, and improve the overall experience for players across Dhaka, Chittagong, Sylhet, Khulna, and all regions of Bangladesh.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal promotions (e.g., Eid or BPL season offers) where you have given explicit consent to receive such communications. You may withdraw consent at any time.

We will not use your personal data for any purpose incompatible with the purposes listed above without first providing notice and, where required, obtaining your consent.

4.0 Legal Basis for Processing

For each category of processing activity, melbat relies on one or more of the following lawful bases:

• Contract performance: Processing necessary to fulfil the Terms & Conditions you agreed to when registering your account — including processing deposits, settling bets, and executing withdrawals.
• Legal obligation: Processing required to comply with applicable law, including AML checks, age verification, and responding to regulatory or law-enforcement requests.
• Legitimate interests: Processing carried out to protect the security of our Platform, prevent fraud, improve our services, and manage our business operations, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5.0 Sharing Your Personal Data

melbat does not sell your personal data. We share it only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: We share your mobile wallet number and transaction details with bKash, Nagad, Rocket, Upay, and banking partners such as Dutch-Bangla Bank and BRAC Bank solely to process deposits and withdrawals.
• Identity verification providers: We may share identity documents and demographic data with third-party KYC and AML screening services to verify your identity and screen against sanctions lists.
• Game and platform technology providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe, and others may receive session and wagering data as part of delivering their games within the melbat Platform. These providers are bound by strict data processing agreements.
• Fraud prevention agencies: We share data with fraud-detection and cybersecurity service providers where we have reasonable grounds to investigate suspicious activity on your account or on the Platform.
• Legal and regulatory authorities: We will disclose your personal data to law enforcement agencies, courts, or regulators where we are required to do so by applicable law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of melbat's assets, your personal data may be transferred to the successor entity. We will notify you in advance of any such transfer and of any changes to this Privacy Policy that may result.

6.0 Cookies & Tracking Technologies

melbat uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The categories of cookies we deploy are:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. They cannot be disabled.
• Functional cookies: Used to remember your language preferences, display settings, and other personalisation choices within your melbat session.
• Analytics cookies: Allow us to measure traffic, understand how users navigate the Platform, and identify areas for improvement. Data collected is aggregated and anonymised where possible.
• Security cookies: Help us detect and prevent fraudulent logins, identify bots, and enforce rate limits on sensitive operations such as withdrawals.

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to log in and use core Platform features. By continuing to use melbat after being informed of our cookie practices, you consent to their use as described above.

7.0 Data Retention

We retain your personal data for the period necessary to fulfil the purposes described in this policy and to comply with our legal obligations. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your account with melbat, plus a minimum of five (5) years after account closure to meet AML and financial record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction in line with standard financial compliance requirements.
• KYC identity documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication in a given support thread.
• Marketing preferences and consent records: Retained for three (3) years from the date consent was given or last renewed.
• Technical and log data: Retained for up to twelve (12) months unless a security investigation requires longer retention.

When personal data is no longer required, we delete it securely or anonymise it so that it can no longer be associated with any individual.

8.0 International Data Transfers

melbat's primary server infrastructure is located in secure data centres serving the Asia-Pacific region. Certain third-party service providers — including game studios, fraud-prevention vendors, and cloud infrastructure partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, melbat takes appropriate steps to ensure that your data receives a comparable level of protection, including contractual safeguards in the form of data processing agreements and standard contractual clauses.

By using the melbat Platform, you acknowledge that your data may be transferred to and processed in these jurisdictions in accordance with this policy.

9.0 Your Data Rights

As a melbat user, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving a valid request.

• 👁️
  Right of Access

  Request a copy of the personal data melbat holds about you, together with information about how it is used and with whom it is shared.
• ✏️
  Right to Rectification

  Ask us to correct any inaccurate or incomplete personal data we hold about you. Some corrections may require identity re-verification.
• 🗑️
  Right to Erasure

  Request deletion of your personal data where it is no longer necessary for the purposes we collected it, subject to our legal retention obligations.
• ⏸️
  Right to Restrict Processing

  Ask us to pause processing of your data in specific circumstances, such as while you contest its accuracy or the lawfulness of our processing.
• 📦
  Right to Data Portability

  Receive a structured, machine-readable copy of the personal data you provided to us, for transfer to another service provider where technically feasible.
• 🙋
  Right to Object

  Object to processing based on our legitimate interests, including profiling for fraud prevention or responsible gaming monitoring, unless we can demonstrate compelling legitimate grounds.
• 📧
  Right to Withdraw Marketing Consent

  Opt out of marketing communications at any time by contacting support. Withdrawal of consent does not affect our right to send service-related messages about your account.

10.0 Data Security

melbat implements a layered security framework to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised melbat personnel can access personal data, and only to the extent required for their role.
• Intrusion detection systems and continuous security monitoring of our server infrastructure.
• Regular security audits and penetration testing conducted by independent third-party specialists.
• Multi-factor authentication requirements for all administrative access to systems holding personal data.

Despite these measures, no internet transmission or electronic storage system is completely secure. If you become aware of any security vulnerability or suspect that your melbat account has been compromised, contact us immediately at [email protected].

11.0 Protection of Minors

The melbat Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process. If we become aware that a person under 21 has provided us with personal data, we will immediately close that account, delete the associated data, and return any deposited funds to the payment source where technically possible.

If you believe that a minor has registered an account on melbat, please notify us immediately at [email protected].

12.0 Third-Party Links & Services

The melbat Platform may reference or integrate with third-party payment services such as bKash, Nagad, and Rocket. When you interact directly with those services — for example, by authenticating a payment through the bKash app — you are subject to that provider's own privacy policy and terms of service. melbat is not responsible for the privacy practices of third-party services and encourages you to review their policies independently.

13.0 Updates to This Privacy Policy

melbat may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered users via the mobile number or email address associated with their account, and we will update the "Last updated" date at the top of this document.

We encourage you to review this page periodically to stay informed about how melbat protects your personal data. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

14.0 Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data melbat holds about you, please contact our data support team. All communications should be submitted in English and include your registered mobile number or username so we can locate your account securely.

Email: [email protected]

Platform: melbat.bet

Our team is available around the clock, every day of the year, and aims to respond to all data-related enquiries within 30 days of receipt. Urgent security concerns are prioritised and typically addressed within 24 hours.