Mostbat Privacy Policy – How We Protect Your Personal Data

This Privacy Policy explains how Mostbat collects, uses, stores, and protects the personal data of its players and website visitors. It applies to all individuals who access the Mostbat platform at mostbat.click, register a player account, make deposits or withdrawals, or interact with Mostbat's customer support team in any way.

Mostbat is committed to handling all personal data responsibly, lawfully, and transparently. This policy has been written to be genuinely readable — not buried in legalese that requires a lawyer to decode. We want every Pakistani player on our platform to understand exactly how their data is treated, because trust is not something you build with vague assurances — it is built with clear, specific commitments.

By using the Mostbat platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please do not use the platform and contact us to discuss your concerns before proceeding.

Mostbat is the data controller for all personal data collected through the mostbat.click platform. As data controller, Mostbat determines why and how your personal data is processed. All decisions about data collection, retention, and sharing rest with Mostbat.

Mostbat operates under a valid international gaming licence. The company and its platform are subject to data protection obligations arising both from that licence and from the applicable laws of its incorporating jurisdiction. These obligations are the minimum standard — in practice, Mostbat has committed to a higher level of data protection than those minimum requirements demand.

If you have any questions about your data, the identity of the data controller, or any aspect of this policy, you can contact us directly. Full contact details are provided in Section 13 of this policy.

Mostbat collects personal data in the following categories, depending on your interaction with the platform:

Registration Data — collected when you create your Mostbat account:

• Full legal name
• Date of birth
• Pakistani mobile number (used for account verification and communication)
• Email address (optional, used for account notifications if provided)
• Username and password (password stored in encrypted form only — never in plain text)

Identity Verification Data — collected when Mostbat requires KYC (Know Your Customer) verification:

• Copies of government-issued photo identification (CNIC, passport, or driving licence)
• Proof of payment method ownership (screenshot of Easypaisa/JazzCash wallet or bank statement where required)
• Proof of residential address (where required by licence obligations)

Transaction Data — collected automatically during financial activity on Mostbat:

• Deposit amounts, dates, and payment method references
• Withdrawal amounts, dates, and destination account references
• Transaction history and balance movements within your Mostbat account

Gaming Activity Data — collected during your play sessions on Mostbat:

• Games played, bet amounts, game outcomes, session durations
• Bonus participation and wagering history related to active promotions
• VIP loyalty points accumulated and tier progression

Technical Data — collected automatically by the platform:

• IP address at time of login and during active sessions
• Device type, operating system, and browser version
• Geolocation data (country-level, used to verify eligibility — not precise GPS location)
• Cookie data (explained fully in Section 7)

Communication Data — collected when you contact Mostbat support:

• Contents of live chat conversations with the Mostbat support team
• Email correspondence
• Details of any complaints, disputes, or responsible gaming requests made

Mostbat uses your personal data only for the purposes described in this policy. We do not use data for undisclosed purposes or in ways that would surprise you if you read them here.

Where Mostbat uses your data on the basis of legitimate interest, we have assessed that our interest does not override your fundamental rights and freedoms. You may object to processing based on legitimate interest at any time — see Section 9 for details.

Mostbat processes your personal data on one of four legal bases. We never process data without a valid legal basis in place:

• Contract: Processing is necessary to fulfil our agreement with you as a Mostbat player — primarily account management, payment processing, and the delivery of the gaming services you have registered to use.
• Legal Obligation: Certain processing — particularly KYC identity verification, anti-money laundering checks, and responsible gaming monitoring — is required by the laws and licence conditions under which Mostbat operates. We cannot provide services without fulfilling these obligations.
• Legitimate Interest: Mostbat has a legitimate business interest in fraud prevention, platform security, and improving the quality of services. We process certain technical data for these purposes, subject to a balancing test that confirms your rights are not overridden.
• Consent: Where we send optional marketing communications, we do so only on the basis of your explicit opt-in consent. You may withdraw consent at any time without any effect on your Mostbat account or the services available to you.

Mostbat does not sell your personal data to any third party. We share your data only in the following limited and necessary circumstances:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks, and Visa/Mastercard processing partners receive transaction-level data required to process your deposits and withdrawals. These parties are contractually obligated to protect your data and use it only for payment processing.
• Identity Verification Providers: Where Mostbat uses third-party KYC services to verify identity documents, those providers receive the minimum data necessary to perform verification. They are bound by strict data processing agreements.
• Regulatory and Legal Authorities: Mostbat may be legally required to share data with gaming regulators, anti-money laundering authorities, tax bodies, or law enforcement agencies where such disclosure is required or permitted by applicable law.
• Technical Service Providers: Mostbat works with carefully selected technology partners who provide infrastructure services (cloud hosting, security monitoring, analytics). These partners operate under data processing agreements and may not use your data for any purpose other than providing the agreed service to Mostbat.
• Professional Advisers: Mostbat may share limited data with legal counsel, auditors, or financial advisers where strictly necessary for professional advice, and subject to confidentiality obligations.

Mostbat uses cookies — small data files stored on your device — to make the platform function correctly and to improve your experience. Here is what each category of cookie does on the Mostbat platform:

• Essential Cookies: Required for the Mostbat platform to operate. These maintain your login session, remember your account language preference, and enable secure transactions. They cannot be disabled without breaking the platform. No consent is required for these cookies as they are strictly necessary.
• Analytics Cookies: Used to understand how players interact with the Mostbat platform — which pages are visited most, how long sessions last, and where players encounter difficulties. This data is anonymised before analysis. You may opt out of analytics cookies in your browser settings.
• Preference Cookies: Store optional display and interface preferences you have set on your Mostbat account — such as table game display preferences or notification settings.
• Marketing Cookies: Used only if you have opted in to marketing communications. These allow Mostbat to measure the effectiveness of promotional content. They are not present on your device unless you have actively consented.

Most modern browsers allow you to manage, block, or delete cookies. Note that blocking essential cookies will prevent you from logging into your Mostbat account and using the platform. For all other cookie types, adjusting your browser settings will not affect your ability to use Mostbat.

Mostbat keeps your personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable laws and licence conditions. The following retention principles apply:

• Active Account Data: Retained for the full duration your Mostbat account is active. If you request account closure, active account data is deleted or anonymised within 90 days of the closure being processed, subject to the exceptions below.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction to comply with financial record-keeping requirements. This is a legal obligation and applies regardless of account closure status.
• Identity Verification Documents: Retained for a minimum of 5 years from the date of account closure or the last KYC review, whichever is later. This is required by anti-money laundering regulations applicable to Mostbat's gaming licence.
• Responsible Gaming Records: Any self-exclusion, cooling-off, or responsible gaming tool usage records are retained for 7 years to prevent circumvention through re-registration attempts.
• Communication Records: Support chat logs and email correspondence retained for 3 years from the date of the communication.
• Anonymised Analytics Data: Analytics data that has been fully anonymised is not considered personal data and may be retained indefinitely for platform improvement purposes.

When data reaches the end of its applicable retention period, Mostbat securely deletes or irreversibly anonymises it. There is no indefinite archiving of personal data at Mostbat beyond the periods stated above.

You have the following rights regarding your personal data on the Mostbat platform. All rights can be exercised by contacting Mostbat support via live chat or email at support@mostbat.click. Requests will be actioned within 30 days at no charge.

The Mostbat platform is strictly for adults aged 18 and over. Mostbat does not knowingly collect or process personal data relating to individuals under the age of 18.

Age verification checks are carried out during the registration process and may be applied at any point during a player's time on the Mostbat platform. If Mostbat discovers that it has collected data from a person who is or was under 18 at the time of registration, that account will be immediately closed, all data will be deleted as quickly as legally permissible, and any funds in the account will be returned to the payment method used to deposit them.

If you are a parent or guardian and believe your child may have accessed or registered on the Mostbat platform, please contact us immediately at support@mostbat.click. We will treat the matter with complete confidentiality and urgency.

Mostbat applies multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and Mostbat is encrypted using current industry-standard TLS protocols. The same level of encryption is used by major financial institutions and payment processors in Pakistan.
• Encrypted Data Storage: Personal data stored on Mostbat servers — including identity documents and financial records — is encrypted at rest. Encryption keys are managed separately from the data they protect.
• Access Control: Access to personal data within the Mostbat organisation is limited on a strict need-to-know basis. Staff who do not require access to specific data categories as part of their role cannot access that data.
• Password Security: Passwords are never stored in plain text. Mostbat uses secure one-way hashing with individual salts, meaning that even internal staff cannot see your password — only you know it.
• Security Monitoring: Mostbat's platform is continuously monitored for suspicious activity, attempted intrusions, and unusual access patterns. Automated alerts escalate potential security events to the technical team in real time.
• Third-Party Security Audits: Mostbat engages independent security professionals to conduct regular penetration testing and vulnerability assessments of the platform.

Mostbat reviews and updates this Privacy Policy periodically to reflect changes in the platform, applicable laws, or best practices in data protection. The "Last Updated" date at the top of this page reflects when the most recent version was published.

Where changes to this policy are material — meaning they affect your rights or how your data is used in a significant way — Mostbat will notify registered players via the mobile number on their account before the changes come into effect. Minor changes, such as clarifications of existing practices, may be made without notification.

We encourage all Mostbat players to review this page periodically. Continuing to use the Mostbat platform after changes are published constitutes acceptance of the updated policy. If you disagree with any updated provision, please contact us before continuing to use the platform.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how Mostbat has handled your personal information, please get in touch using any of the following methods:

We treat all privacy-related enquiries with the same urgency and confidentiality regardless of their nature. There is no such thing as a trivial data question at Mostbat — if something about your data is unclear or concerning, we want to hear from you.