Mostbat Privacy Policy – How We Handle Your Personal Data in Pakistan

1. Introduction

This Privacy Policy explains how Mostbat ("we," "us," "our," "the Platform") collects, stores, processes and protects the personal information of players and visitors who use the Mostbat website at mostbat.im and all related services, games and features offered through the platform.

Mostbat was built specifically for players in Pakistan and we take our data protection responsibilities seriously. Pakistani players trust Mostbat with their CNIC information, mobile wallet credentials, phone numbers and transaction histories. This Privacy Policy is our public commitment to handling that information with full transparency and the highest level of security.

By creating a Mostbat account, depositing funds, using any game or feature on the platform or simply browsing the website, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside Mostbat's Terms and Conditions and Responsible Gaming Policy.

If you have any questions about how Mostbat handles your personal data, please contact our support team via live chat at any time. Support is available 24/7 in both English and Urdu.

2. Personal Data We Collect

Mostbat collects personal data through three primary channels: information you provide directly during registration and account use, information generated automatically through your interaction with the platform, and information received from third parties such as payment processors and identity verification services.

2.1 Information You Provide Directly

• Full legal name as per CNIC or other government-issued identity document
• Date of birth (used for age verification – Mostbat is 18+ only)
• Pakistani mobile phone number (used for account verification and 2FA)
• Email address (used for account communication and notifications)
• Identity documents submitted for KYC verification (CNIC, passport or equivalent)
• Payment method details submitted during deposit and withdrawal processes
• Communications you initiate with Mostbat support via live chat, email or phone
• Responsible gaming preferences and limits you set in your account dashboard

2.2 Automatically Collected Information

• IP address and approximate geographic location at the time of each session
• Device type, operating system, browser type and version
• Session duration, pages visited, games played and features accessed
• Bet and transaction history associated with your account
• Login timestamps and access patterns
• Cookie and session data (see Section 7 for full cookie details)

2.3 Information from Third Parties

• Identity verification confirmations from KYC service providers
• Transaction confirmation and fraud signals from payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, bank networks)
• AML screening results from compliance screening services

3. How Mostbat Uses Your Personal Data

Every use of your personal data at Mostbat is tied to a specific, defined purpose. We do not process personal information for reasons that fall outside of the following categories:

Mostbat does not use personal data for automated decision-making that has legal or significant effects on players without human review. If your account is flagged by an automated system for any reason, a member of the Mostbat compliance team will review the case before any action is taken.

4. Legal Basis for Processing Personal Data

Mostbat processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contract Performance: Processing necessary to create your account, operate it, process your transactions and deliver the gaming services you have signed up for.
• Legal Obligation: Processing required by applicable law, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification obligations and fraud reporting duties.
• Legitimate Interests: Processing that serves Mostbat's legitimate operational interests, such as platform security, fraud detection, abuse prevention and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit opt-in, specifically for marketing communications and non-essential cookies. Consent can be withdrawn at any time without affecting the lawfulness of processing that occurred before withdrawal.

5. How We Share Your Data

Mostbat does not sell, rent or trade your personal data to third-party marketers, advertisers or data brokers under any circumstances. Personal data is shared with external parties only in the limited circumstances described below:

5.1 Payment Processors

When you make a deposit or withdrawal at Mostbat, your payment details are transmitted securely to the relevant payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, bank networks or card scheme processors). These parties receive only the minimum information required to complete the transaction and are bound by their own data protection obligations and applicable financial regulations.

5.2 Identity Verification Providers

To fulfil KYC obligations, Mostbat works with accredited identity verification service providers. When you submit identity documents, relevant data is shared with these providers solely for verification purposes. Verification providers do not retain your data beyond what is required by their own regulatory obligations.

5.3 Game Software Providers

Game providers (such as Pragmatic Play, Evolution Gaming and Ezugi) receive anonymised player identifiers necessary to operate game sessions, settle bets and maintain game integrity. Your full name, contact details or payment information are not shared with game providers.

5.4 Regulatory and Law Enforcement Authorities

Mostbat may be required to disclose personal data to regulatory bodies, law enforcement agencies or courts where required by applicable law, including in cases of suspected fraud, money laundering or other serious offences. Such disclosures are made strictly to the extent required by legal obligation.

5.5 Professional Advisers

Legal, accounting and cybersecurity advisers engaged by Mostbat may access limited personal data to the extent required to perform their professional services. All advisers are bound by professional confidentiality obligations.

6. Payment Data Security at Mostbat

Payment data deserves special attention because it is among the most sensitive information that Pakistani players share with online platforms. Mostbat applies the following security measures specifically to payment-related data:

• All payment credential data (mobile wallet credentials, card details) is tokenised at the point of collection. Plain-text financial credentials are never stored in Mostbat's databases.
• Payment transactions are transmitted exclusively over TLS 1.2 or higher encrypted connections.
• Mostbat's payment infrastructure is hosted on servers with restricted access controls. Only authorised payment operations personnel can access transaction records, and all access is logged and audited.
• Withdrawals are processed back to the same payment method as the original deposit as a standard fraud prevention measure, ensuring funds are returned to their verified source.
• Large withdrawals (above Rs 100,000) are subject to additional identity verification before processing, regardless of account history.

7. Cookies and Tracking Technologies

Mostbat uses cookies and similar tracking technologies on the platform to ensure the site functions correctly, to remember your preferences and to help us understand how players interact with the platform so we can improve it over time.

7.1 Types of Cookies We Use

You can manage your cookie preferences through your account settings or via the cookie consent banner displayed on your first visit to the Mostbat platform. Essential cookies cannot be disabled as they are required for basic platform functionality including your logged-in session and security token management.

Third-party analytics tools used by Mostbat process data in anonymised, aggregated form only. Individual player behaviour is not identifiable from the analytics data we review.

8. Data Retention Periods

Mostbat retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to meet our legal and regulatory obligations, and to resolve any outstanding disputes or claims.

• Active account data: Retained for the duration your account remains active on the Mostbat platform.
• Transaction and betting records: Retained for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements applicable to financial services providers.
• Identity verification documents (KYC): Retained for five years from the date of verification or from account closure, whichever is later.
• Customer support communications: Retained for two years from the date of the interaction.
• Marketing preference data: Retained until you withdraw consent or for 12 months of platform inactivity, whichever comes first.
• Anonymised analytics data: May be retained indefinitely as it cannot be used to identify individual players.

When data is no longer required, Mostbat deletes or irreversibly anonymises it in accordance with our internal data deletion schedule. You may request early deletion of your personal data subject to the overriding requirements of our legal retention obligations.

9. Your Data Rights as a Mostbat Player

As a Mostbat player, you hold a meaningful set of rights over your personal data. These rights can be exercised at any time by contacting Mostbat support via live chat or email at support@mostbat.im. Mostbat will respond to all data rights requests within 30 days of receipt.

10. Children's Privacy – Strict 18+ Policy

The Mostbat platform is intended exclusively for adults aged 18 and above. Mostbat does not knowingly collect, store or process personal data from individuals under the age of 18. Age verification is a mandatory step in the Mostbat registration process, and accounts may be subject to additional verification at any point during their operation.

If Mostbat becomes aware that personal data has been collected from a person under the age of 18, the account will be suspended immediately, all associated transactions will be voided and any deposited funds (minus any winnings generated) will be returned. The personal data in question will be deleted without retention once the refund process is complete.

Parents and guardians who believe that a minor may be accessing the Mostbat platform using their account details are strongly encouraged to contact support immediately. Mostbat will act on all such reports as a priority.

11. Marketing Communications

Mostbat sends promotional emails, SMS messages and in-platform notifications about bonuses, new games, tournaments and special offers. All marketing communications from Mostbat are sent exclusively to players who have explicitly opted in through their account settings or during registration.

If you have opted in to marketing communications from Mostbat, you can withdraw your consent and unsubscribe at any time by:

• Updating your communication preferences in your Mostbat account settings
• Clicking the unsubscribe link included in every marketing email
• Contacting Mostbat support via live chat and requesting removal from marketing lists

Unsubscribing from marketing communications will not affect your ability to receive transactional messages such as deposit confirmations, withdrawal receipts, account security alerts or identity verification requests. These communications are necessary for account operation and are sent regardless of marketing preferences.

12. Technical Security Measures

Mostbat implements a layered security infrastructure designed to protect player data against unauthorised access, disclosure, alteration and destruction. The following technical and organisational measures are in place at all times:

• Transport Layer Security: All data exchanged between your device and the Mostbat platform is encrypted using TLS 1.2 or higher.
• Data at Rest Encryption: Personal data stored in Mostbat's databases is encrypted at the database level using industry-standard encryption algorithms.
• Access Controls: Internal access to player data is restricted by role-based access controls. Staff members can only access the data required to perform their specific job functions.
• Audit Logging: All access to player records by Mostbat staff is logged with timestamps, user identifiers and the reason for access. Logs are reviewed regularly as part of internal compliance procedures.
• Two-Factor Authentication: 2FA is available for all Mostbat player accounts and is strongly recommended. Internal staff accounts use mandatory 2FA.
• Penetration Testing: The Mostbat platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: Mostbat maintains a documented data breach response plan. In the event of a confirmed breach affecting player data, Mostbat will notify affected players within 72 hours of becoming aware of the incident, in line with applicable data protection obligations.

13. Changes to This Privacy Policy

Mostbat may update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes in applicable law, or improvements to our data protection practices. When material changes are made, we will notify registered players via their registered email address and display a prominent update notice on the Mostbat platform for a minimum of 14 days prior to the new version taking effect.

The version date displayed at the top of this page indicates when this Privacy Policy was last updated. We encourage you to review this page periodically to stay informed about how Mostbat protects your personal data. Archived versions of this Privacy Policy are available on request from Mostbat support.

Your continued use of the Mostbat platform following the effective date of any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with changes to this Privacy Policy, you may close your account at any time by contacting support.

14. How to Contact Mostbat About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 9, want to report a suspected data breach or need to raise a privacy concern, please contact Mostbat through any of the following channels: