Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by mosbat ("mosbat", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https://mosbat.club (the "Platform"). This Policy explains how mosbat collects, uses, stores, protects, and in certain limited circumstances shares the personal data of individuals who register accounts, visit the Platform, or otherwise interact with mosbat's services.

By registering an account or using the mosbat Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside mosbat's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

mosbat is committed to handling personal data with integrity and transparency. We do not regard data privacy as a compliance exercise — it is a core operational principle. If you have questions at any point, the contact details for our data team are provided in Section 14 of this Policy.

02 Data We Collect

mosbat collects personal data across several categories, depending on the nature of your interaction with the Platform. The categories below describe the full scope of personal data that may be collected:

Category	Examples	Collected When
Identity Data	Full legal name, date of birth, nationality, gender, NID or passport number	Registration; KYC verification
Contact Data	Email address, mobile phone number, residential address (city, district, postal code)	Registration; account updates
Financial Data	bKash / Nagad / Rocket mobile wallet numbers, bank account references, transaction history, deposit and withdrawal records	Deposit; withdrawal; KYC
Gaming & Betting Data	Game history, bet amounts and outcomes, session duration, bonus usage, wagering patterns	During platform use
Technical Data	IP address, device type, operating system, browser type, screen resolution, time-zone (BST UTC+6)	Any site visit; login event
Usage Data	Pages visited, click paths, session start/end times, feature interactions, search queries within the Platform	Any site visit
Communications Data	Support chat transcripts, email correspondence, submitted feedback or complaints	When contacting support
Verification Documents	Scanned copies of NID, passport, utility bill, payment method proof of ownership	KYC verification request

mosbat does not intentionally collect special category data (such as racial or ethnic origin, religious beliefs, or health data) unless specifically required by a responsible gaming obligation (for example, a player voluntarily disclosing a gambling-related health concern when requesting self-exclusion). Such data is handled with the highest level of care and processed only for the purpose for which it was provided.

03 How We Collect Data

3.1 Directly From You

The majority of personal data mosbat holds is provided directly by you. This includes information entered during account registration, details submitted during the KYC verification process, payment information entered during deposit or withdrawal transactions, communications you send to our support team, and preferences you configure in your account settings.

3.2 Automatically During Your Use of the Platform

When you visit or use the mosbat Platform, certain technical and usage data is collected automatically via cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser configuration, and in-session behavioural data such as pages visited and time spent on specific features. See Section 7 for full details of mosbat's cookie practices.

3.3 From Third-Party Sources

In limited circumstances, mosbat may receive personal data about you from third parties. These sources include: (a) identity verification agencies used to validate documents submitted during KYC; (b) payment service providers such as bKash, Nagad, Rocket, and Upay confirming transaction status; (c) fraud detection and anti-money-laundering (AML) screening services; and (d) responsible gaming databases operated by recognised self-exclusion programmes. Data received from third parties is treated with the same standard of care as data collected directly.

04 Legal Basis for Processing

mosbat processes personal data on the following legal bases, consistent with internationally recognised data protection standards:

• Contractual Necessity: Processing required to deliver the services you have requested, including account management, game access, deposit and withdrawal processing, and bonus administration.
• Legal Obligation: Processing required to comply with anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification obligations, and any other applicable legal or regulatory duty.
• Legitimate Interests: Processing carried out for mosbat's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, internal analytics, and business continuity — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending promotional communications. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

05 How We Use Your Data

mosbat uses your personal data for the following specific purposes:

• Account Creation and Management: Setting up, maintaining, and operating your mosbat player account, including authentication and access control.
• Identity and Age Verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years before granting access to real-money gaming.
• Payment Processing: Facilitating deposits and withdrawals through supported Bangladeshi payment methods including bKash, Nagad, Rocket, Upay, and partner banks.
• Fraud and AML Compliance: Monitoring transactions and gaming patterns to detect and prevent money laundering, fraud, collusion, and other prohibited activities.
• Responsible Gaming: Tracking deposit patterns, session durations, and gaming behaviour to identify potential problem gambling indicators, apply player-requested limits, and enforce self-exclusion requests promptly.
• Customer Support: Responding to your queries, complaints, and disputes in a timely and accurate manner.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform's features, performance, game selection, and user experience for all players.
• Marketing Communications: Sending you relevant promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Legal and Regulatory Compliance: Meeting reporting, record-keeping, and cooperation obligations imposed by applicable law.

06 Sharing Your Data

mosbat does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Personal data is shared only in the following limited and necessary circumstances:

6.1 Service Providers

mosbat engages carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements. These include KYC and identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank), fraud detection vendors, cloud hosting providers, and customer support platform operators. All such providers are contractually bound to process data only as instructed by mosbat and to maintain appropriate security standards.

6.2 Game Content Providers

Where required for game functionality, limited technical data (such as session tokens and bet settlement data) may be shared with licensed game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate under their own data protection obligations and do not receive personally identifiable information beyond what is technically necessary.

6.3 Legal and Regulatory Authorities

mosbat may be required to disclose personal data to governmental, regulatory, law enforcement, or judicial authorities where required by applicable law, court order, or in connection with an investigation into suspected illegal activity. mosbat will notify affected players of such disclosures where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of mosbat's business, player personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments. Players will be notified of any such transfer in advance where reasonably practicable.

07 Cookies & Tracking Technologies

7.1 What Cookies mosbat Uses

mosbat uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform effectively. The categories of cookies in use are:

• Strictly Necessary Cookies: Required for core Platform functions such as maintaining your login session, processing transactions, and applying security controls. These cannot be disabled without breaking essential functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform, which helps mosbat identify areas for improvement. No personally identifiable information is shared with analytics providers in this context.
• Functional Cookies: Store your preferences such as language setting, preferred game category, and notification choices to deliver a more personalised experience across sessions.
• Responsible Gaming Cookies: Track session time and display reality-check notifications in accordance with your account settings — a core player protection feature.

7.2 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling strictly necessary cookies will impair the functionality of the mosbat Platform and may prevent you from accessing certain features, including your account and the cashier. Disabling performance or functional cookies will not affect your ability to play but may reduce the quality of your experience.

08 Data Retention

mosbat retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's existence plus a minimum of five (5) years following account closure, in accordance with AML and KYC record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years following the relevant transaction date, as required by internationally recognised financial compliance standards.
• KYC Verification Documents: Retained for five (5) years after account closure or the completion of the relevant verification process, whichever is later.
• Support Communications: Retained for three (3) years from the date of the last communication in the relevant thread, unless the matter relates to an unresolved legal dispute.
• Marketing Consent Records: Retained for the duration of your account plus two (2) years, as evidence of consent and to handle opt-out requests accurately.
• Technical and Usage Logs: Retained for a rolling period of thirteen (13) months, after which they are anonymised or deleted.

Where data is no longer required and no legal retention obligation applies, mosbat securely destroys or irreversibly anonymises the data so that it can no longer be linked to any individual.

09 Your Rights

Subject to applicable law, you have the following rights in relation to the personal data mosbat holds about you. To exercise any of these rights, please contact mosbat's data team using the details in Section 14. mosbat will respond within thirty (30) days of receiving a verifiable request.

• Right of Access: You may request a copy of the personal data mosbat holds about you, together with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as AML requirements).
• Right to Restriction: You may request that mosbat restricts the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, mosbat will cease processing for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10 International Data Transfers

mosbat operates on an internationally licensed offshore basis, which means your personal data may be processed by mosbat's infrastructure or by service providers located outside Bangladesh. Where personal data is transferred internationally, mosbat ensures that appropriate safeguards are in place, including contractual data processing agreements requiring recipient parties to maintain data protection standards equivalent to those described in this Policy.

Players based in Bangladesh acknowledge that there is currently no comprehensive domestic data protection legislation equivalent to international frameworks; however, mosbat voluntarily applies internationally recognised privacy standards as the baseline for all data processing activities, regardless of where that processing takes place.

11 Children's Privacy

mosbat's Platform is strictly intended for individuals aged 18 years and above. mosbat does not knowingly collect personal data from children under the age of 18. If mosbat becomes aware that personal data has been collected from a person under 18, that account will be immediately closed, all associated data will be deleted (subject to any applicable legal retention obligations), and any funds in the account will be handled in accordance with mosbat's underage gambling procedures.

If you believe that a person under the age of 18 has registered an account with mosbat, please report this immediately to [email protected]. mosbat takes underage gambling extremely seriously and will act on any report promptly. 18+

12 Security Measures

mosbat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in Transit: All data exchanged between your device and mosbat's servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Encryption at Rest: Sensitive data fields including passwords (stored as salted hashes), financial identifiers, and identity document references are encrypted at rest in mosbat's databases.
• Access Controls: Access to personal data within mosbat's organisation is restricted on a strict need-to-know basis. Staff access is logged, audited, and revoked immediately upon role change or departure.
• Penetration Testing: mosbat's systems undergo periodic penetration testing by qualified independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: mosbat maintains a documented data breach response procedure. In the event of a confirmed breach that poses a material risk to affected players, mosbat will notify impacted individuals without undue delay.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their mosbat accounts as an additional layer of access security.

Notwithstanding these measures, no internet-based system can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials and for notifying mosbat promptly if they suspect their account has been compromised.

13 Changes to This Policy

mosbat reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, mosbat will notify registered players via email and/or a prominent notice on the Platform at least seven (7) days prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised with each update.

Your continued use of the mosbat Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and close your account. For historical versions of this Policy or to understand what changed between versions, please contact support at [email protected].

14 Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or mosbat's data processing practices, please contact our data team using the following details:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year (Bangladesh Standard Time, UTC+6)
• Response Time: Within 30 calendar days for formal data rights requests; within 2 business hours for general privacy queries

For questions about responsible gaming tools, deposit limits, or self-exclusion, please visit our Responsible Gaming page. For general platform questions, our FAQ page is a helpful starting point. Full platform rules are set out in our Terms & Conditions.