Mostbat's Privacy Policy

Mostbat is a trusted online Sports Betting platform for bettors in Bangladesh. We believe real credibility is built on transparency. This Privacy Policy explains what information Mostbat collects, how it is used, and what steps we take to keep your data safe.

This Privacy Policy applies whenever you use our services through the Mostbat website (mostbat.ws), mobile app, or any other digital channel. By accessing the platform or creating an account, you are considered to have agreed to this policy.

This policy has been prepared in accordance with international data protection standards and applicable gaming licensing regulations. Registered users will be notified in advance of any changes.

Mostbat only collects the information necessary to operate the platform, maintain security, and improve the user experience. We do not collect excessive or unnecessary data.

Mostbat never collects your full bank account number, PIN, or password. Payment information is always processed in a PCI DSS-compliant manner.

Mostbat uses collected data only for specified purposes. Information is never used for any other purpose without the user's consent.

• Account management: Your data is used for registration, login, profile updates, and account security.
• Payment Processing: To process deposits and withdrawals and maintain transaction history.
• Security & fraud prevention: To detect suspicious activity and prevent multiple account creation.
• Customer support: For troubleshooting, complaint resolution, and support ticket management.
• Responsible Betting: To identify excessive betting patterns and apply necessary limits.
• Legal Compliance: To comply with AML regulations and generate reports for regulatory authorities.
• Platform improvement: User behavior is analyzed to improve service quality and overall experience.
• Marketing Communications: To send promotional offers and newsletters only to users who have given their consent.

Mostbat never sells your personal data or shares it with third parties without authorization. However, data may be shared in the limited circumstances outlined below.

• Payment Service Providers: Approved payment gateways including bKash, Nagad, and Rocket — used solely to process transactions.
• Legal Obligation: Where required by court order, regulatory demand, or legal investigation.
• AML/KYC Partners: Approved verification partners for identity checks and anti-money laundering processes.
• Technology Partners: Hosting, cybersecurity, and analytics service providers — bound by strict confidentiality agreements.
• Business Transfers: In the event of a merger or acquisition, users will be notified in advance.

Before sharing data with any third party, Mostbat ensures they meet equivalent data protection standards. All data sharing arrangements are formalized in writing.

Cookies and similar technologies are used on the Mostbat website and app. Cookies are small text files stored on your device that help the platform remember your preferences.

• Essential Cookies: Remembers login sessions, security tokens, and language preferences. The platform cannot function without these.
• Functional Cookies: Saves your betting preferences, favorite teams, and interface settings.
• Analytics Cookies: Helps improve the platform by analyzing page visits, clicks, and usage patterns.
• Security Cookie: Used to detect fraud and bots and to protect accounts.

Cookies can be disabled from your browser settings, though some platform features may not work as a result. Mostbat does not use third-party advertising cookies.

Mostbat retains your data only for as long as necessary or legally required. Data is never kept beyond its purpose.

• Active Account: All data is retained for as long as your account remains active.
• After Account Closure: Financial transaction records are retained for a minimum of 5 years in accordance with AML regulations.
• KYC documents: Up to 7 years after account closure, after which data is securely deleted.
• Usage logs: Retained for up to 2 years for security and dispute resolution.
• Marketing data: Deleted immediately upon withdrawal of consent.

Upon a data deletion request, all remaining data beyond legal obligations will be permanently deleted. This process is typically completed within 30 days.

Mostbat believes every user has full rights over their own data. You may exercise the following rights at any time.

• Right to Access: You have the right to know what personal information Mostbat holds about you.
• Right to correction: You may request corrections to any inaccurate or incomplete information.
• Right to Erasure: You may request deletion of any data that goes beyond legal obligations.
• Right to Restrict Processing: You may request that we stop using your data for specific purposes.
• Data Portability: You can download your personal data in a standard, human-readable format.
• Withdrawal of Consent: You may withdraw consent for marketing or optional data use at any time.
• Right to Lodge a Complaint: If you suspect a data protection breach, you have the right to file a complaint with the relevant authority.

To exercise these rights, email us at support@mostbat.ws. Requests are typically responded to within 7 business days.

Mostbat maintains industry-standard technical and organizational measures to protect your data. Our security team operates around the clock, 24 hours a day.

• AES-256 Encryption: All sensitive data stored in the database is encrypted.
• SSL/TLS 1.3: All website and app traffic is protected with the highest standard of encryption.
• Two-Factor Authentication (2FA): An additional layer of security can be activated when logging into your account.
• Real-Time Monitoring: Suspicious activity is detected and blocked in real time.
• Penetration Testing: Regular security audits conducted by third-party security specialists.
• Access control: Staff are granted access only to the data necessary for their role.
• Data Backup: Encrypted backups are stored regularly on separate, secure servers.

In the event of a security breach, affected users will be notified within 72 hours and immediate steps will be taken to minimize harm.

Mostbat strictly prohibits use of the platform by anyone under the age of 18. Protecting minors is a core part of our privacy policy.

• Age verification is mandatory at registration. Any account found to have been created with false information will be closed immediately.
• No data from minors is knowingly collected.
• If a minor is found to have created an account, it will be closed and all associated data deleted.
• If parents have concerns, they can contact us at support@mostbat.ws.

Mostbat may update this Privacy Policy from time to time. Changes may be driven by new service launches, legal obligations, or security improvements.

• Notice: In the event of significant changes, registered users will be notified by email and via an in-platform notice.
• Effective date: The effective date of each update will be noted at the top of the policy.
• Consent: Continued use of the platform after any changes constitutes acceptance of the updated policy.
• Previous policy: Previous versions will be made available upon request.

Minor changes (such as spelling corrections or clarifications) may be made without separate notice. The date of the latest policy update is always shown at the top of the page.

For any questions, concerns, or requests regarding the Privacy Policy, please reach out to our dedicated Data Privacy Team.

• Email: support@mostbat.ws — typically responded to within 24–48 hours.
• Data Deletion Request: Email us with "Data Deletion Request" in the subject line.
• Data access request: Email us with "Data Access Request" in the subject line.
• Security Issue Reporting: Email us with "Security Report" in the subject line and include the details.

We take every complaint seriously and work to resolve it within the stipulated timeframe. Your trust is our most valuable asset.