Your personal data belongs to you. This page explains exactly what information malbat collects when you use the platform, why we collect it, how we protect it, and what rights you have over it. We've written this in plain language so there's no confusion.
Our Commitments
These six commitments summarise how malbat handles your data. The full policy below contains all the detail — please read it carefully.
All data transmitted between your device and malbat's servers is encrypted using TLS. Your account credentials, payment details and personal information are never sent in plain text across any connection.
Malbat does not sell, rent or trade your personal information to any third party for marketing purposes. Your data is used only to operate the malbat platform and fulfil our legal obligations — nothing else.
You can request access to the personal data malbat holds about you, ask for corrections, or request deletion of your account and associated data at any time by contacting malbat support.
Malbat only collects the data that is genuinely necessary to operate the platform, verify your identity, process payments and comply with regulations. We don't collect data just because we can.
Malbat retains your personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law. When data is no longer needed, it is securely deleted or anonymised.
In the unlikely event of a data breach that affects your personal information, malbat will notify affected players promptly and take immediate steps to contain the breach and prevent further exposure.
Malbat operates the online gaming platform available at malbat.club and through the malbat mobile app. In this Privacy Policy, "malbat", "we", "us" and "our" refer to the operator of the malbat platform. "You" and "your" refer to any person who accesses the malbat website, uses the malbat app, or holds a registered malbat account.
Malbat is the data controller for the personal information collected through the platform. This means malbat determines the purposes and means of processing your personal data. If you have any questions about how malbat handles your data, contact us at [email protected].
This Privacy Policy applies to all malbat services including the website, mobile app, live chat support and any other channels through which you interact with malbat.
Malbat collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information received from third parties such as payment processors.
When you register a malbat account or use the platform, you may provide the following:
When you use the malbat platform, the following data is collected automatically:
Malbat may receive information about you from payment processors (bKash, Nagad, Rocket) to confirm transaction status, and from identity verification services used during the KYC process. This information is used solely to operate your malbat account and is not combined with data from unrelated sources.
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Name, date of birth, ID document | You / Verification service |
| Contact Data | Mobile number, email address | You |
| Financial Data | Mobile banking number, transaction records | You / Payment processor |
| Technical Data | IP address, device info, browser type | Automatically collected |
| Usage Data | Game history, bet records, session logs | Automatically collected |
| Communications Data | Support chat logs, emails | You |
Malbat uses your personal data for the following purposes:
Malbat does not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without human review.
Malbat processes your personal data on one or more of the following legal bases depending on the specific purpose:
Processing your registration details, verifying your identity, handling deposits and withdrawals, and managing your malbat account are all necessary to perform the contract between you and malbat. Without this processing, malbat cannot provide its services to you.
Malbat is required by applicable regulations to verify player identity, maintain transaction records, monitor for suspicious activity and report certain information to authorities. This processing is mandatory and cannot be opted out of.
Malbat processes certain data — such as technical logs and usage analytics — on the basis of legitimate interests, specifically to maintain platform security, prevent fraud and improve the malbat service. We only rely on this basis where our interests are not overridden by your privacy rights.
Where malbat sends you marketing communications or uses non-essential cookies, we do so on the basis of your consent. You can withdraw consent at any time by contacting malbat support or using the unsubscribe link in any marketing email.
Malbat does not sell your personal data. We share your data only in the following limited circumstances:
To process your deposits and withdrawals, malbat shares necessary transaction data with bKash, Nagad and Rocket. These providers process your data only as required to complete the transaction and are bound by their own privacy obligations.
During the KYC process, malbat may share your identity documents with a third-party verification service. This service processes your data solely to confirm your identity and does not retain it for any other purpose.
Malbat will disclose personal data to law enforcement, regulatory bodies or other authorities where required to do so by law, court order or regulatory requirement. Malbat will notify you of such disclosure where legally permitted to do so.
Malbat may share data with service providers who assist in operating the platform — such as hosting providers, analytics services and customer support tools. These providers act as data processors under contract with malbat and are not permitted to use your data for their own purposes.
No Third-Party Marketing: Malbat never shares your contact details with third-party advertisers or marketing companies. You will only receive marketing from malbat itself, and only if you have opted in.
Cookies are small text files stored on your device when you visit a website. Malbat uses cookies and similar tracking technologies to keep you logged in, remember your preferences, analyse how the platform is used and detect fraudulent activity.
You can control non-essential cookies through your browser settings. Disabling essential cookies will prevent the malbat platform from functioning correctly. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.
Malbat retains your personal data for as long as your account is active and for a period after closure as required by applicable regulations. Specifically:
When data is no longer required, malbat securely deletes it or anonymises it so it can no longer be linked to you. Anonymised data may be retained indefinitely for statistical analysis.
As a malbat player, you have the following rights in relation to your personal data. To exercise any of these rights, contact malbat support at [email protected]. Malbat will respond to all valid requests within 30 days.
Request a copy of all personal data malbat holds about you.
Ask malbat to correct any inaccurate or incomplete data.
Request deletion of your data where there is no legal obligation to retain it.
Ask malbat to limit processing of your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Some rights may be limited where malbat has a legal obligation to retain or process your data — for example, transaction records required for anti-money laundering compliance. Malbat will explain any such limitations when responding to your request.
Malbat takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it. These include:
While malbat takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password for your malbat account and never share your login credentials with anyone.
Security Reminder: Malbat will never ask for your password via email, SMS or live chat. If you receive any such request, do not respond and contact malbat support immediately.
The malbat platform is strictly for adults aged 18 and over. Malbat does not knowingly collect personal data from anyone under the age of 18. If malbat discovers that a player is under 18, the account will be closed immediately and any data collected will be deleted in accordance with our data retention policy.
If you believe a minor has registered a malbat account, please contact malbat support at [email protected] immediately so we can investigate and take appropriate action.
Malbat may send you promotional messages about bonuses, new games and special offers via SMS or in-app notification. We will only do this if you have opted in to receive marketing communications during registration or through your account settings.
You can opt out of marketing communications at any time by:
Opting out of marketing will not affect service communications — malbat will still send you essential notifications such as deposit confirmations, withdrawal updates and security alerts.
Players who have self-excluded or requested a cooling-off period through the malbat responsible gaming tools will be automatically removed from all marketing communications for the duration of their exclusion.
Malbat may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will notify registered players via in-app notification or email at least 7 days before the changes take effect.
The current version of the malbat Privacy Policy is always available at malbat.club/privacy-policy. The "Last Updated" date at the top of this page shows when the policy was most recently revised. Continued use of the malbat platform after the effective date of any changes constitutes your acceptance of the updated policy.
If you have any questions, concerns or requests relating to this Privacy Policy or the way malbat handles your personal data, please get in touch with the malbat support team:
Malbat aims to respond to all privacy-related queries within 48 hours. For data subject rights requests — such as access, rectification or erasure — malbat will respond within 30 days as required.
For responsible gaming support and self-exclusion requests, visit the Responsible Gaming page for dedicated resources and contact options.
Your Data Is Safe With Us
Now you know exactly how malbat protects your privacy. Join thousands of Bangladesh players who trust malbat for fast, secure gaming with bKash and Nagad.
18+ only | Play responsibly | Your data, your rights