Malbet Privacy Policy – How We Handle Your Personal Data in Pakistan

This Privacy Policy applies to all users of Malbet, including visitors to the Malbet website and all registered players. It covers all personal data collected by Malbet through its platform, games, payment services, customer support channels, and any associated communications including email and live chat.

By registering a Malbet account or continuing to use the platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use Malbet.

This policy should be read alongside Malbet's Terms and Conditions, which govern your use of the platform as a whole. Where there is a conflict between this Privacy Policy and the Terms and Conditions on a data-related matter, this Privacy Policy takes precedence.

Malbet collects personal data in several categories depending on how you interact with the platform. Here is a complete breakdown of what we collect and why:

Malbet does not collect sensitive personal data such as biometric data (beyond CNIC photo for identity verification), health data, political opinions, religious beliefs, or racial/ethnic origin information. The selfie and CNIC photographs collected for KYC are used solely for identity verification and are not used for facial recognition purposes beyond confirming identity.

Malbet collects personal data through the following channels and interactions:

• Direct submission: When you register a Malbet account, complete KYC verification, make a deposit or withdrawal, contact support, or submit any form on the platform, you directly provide us with personal data.
• Automatic collection: When you access Malbet, our servers automatically record technical data including your IP address, device information, session timestamps, and pages visited. This happens whether or not you are logged in.
• Payment processors: When you use Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard, our payment processors confirm transaction details back to Malbet including the payment method identifier and transaction amount in PKR.
• Cookies and similar technologies: Malbet uses cookies to maintain your session, remember preferences, and collect anonymised usage statistics. Details are in the Cookies section below.
• Third-party verification services: For KYC purposes, Malbet may use third-party identity verification providers to cross-reference your submitted CNIC details against official databases. These providers are contractually bound to process your data only for the verification purpose.

Malbet uses your personal data for the following specific purposes, and no others without your additional consent:

• Operating your account: Creating and managing your Malbet account, maintaining your PKR balance, processing deposits and withdrawals via your chosen Pakistani payment method, and enabling you to access games.
• Identity and age verification: Confirming that you are who you say you are and that you meet the 18+ age requirement. This is a legal and regulatory obligation for gaming platforms.
• Anti-money laundering (AML) compliance: Monitoring transaction patterns to detect and prevent money laundering, fraud, and financial crime. Pakistani law and international standards require gaming platforms to maintain AML controls.
• Customer support: Responding to your queries, resolving disputes, investigating complaints, and improving our support quality using historical interaction data.
• Responsible gaming: Monitoring gameplay patterns to identify potential signs of problem gambling. If concerning patterns are identified, Malbet's responsible gaming team may contact you with information about available tools.
• Platform security: Detecting and preventing unauthorised account access, identifying collusion or prohibited conduct in games, and protecting the integrity of Malbet's systems.
• Service improvement: Analysing aggregated, anonymised usage data to improve the Malbet platform, optimise the user interface for Pakistani mobile users, and prioritise new features.
• Legal compliance: Meeting obligations under applicable laws including data retention requirements, responding to lawful requests from regulatory authorities, and maintaining audit trails for financial transactions in PKR.

Malbet processes your personal data on the following legal bases:

• Contract performance: The majority of data processing on Malbet is necessary to perform the contract between you and Malbet — i.e., to operate your account, process PKR transactions, and provide access to games. Without this processing, Malbet cannot provide its services to you.
• Legal obligation: KYC verification, AML monitoring, transaction record retention, and certain data sharing with authorities are required by applicable law. Malbet has no discretion to opt out of these obligations.
• Legitimate interests: Platform security, fraud prevention, responsible gaming monitoring, and service improvement are conducted on the basis of Malbet's legitimate interests, balanced against your privacy rights.
• Consent: Where Malbet sends optional communications such as promotional emails or newsletters, this is done on the basis of your explicit consent, which you can withdraw at any time by contacting support@malbet.run.

Malbet shares your personal data only in the following limited and controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT), and Visa/Mastercard networks receive the minimum data needed to process your PKR transactions. These are established, regulated financial service providers.
• Identity verification providers: Third-party KYC services may receive your CNIC details and verification photographs for the purpose of confirming your identity. These providers are contractually restricted from using your data for any other purpose.
• Regulatory and law enforcement authorities: Malbet is legally required to provide transaction records and account information to financial regulators and law enforcement authorities where a lawful request is made. We will notify you of such requests where legally permitted to do so.
• Fraud prevention services: Malbet may cross-reference account data with industry fraud prevention databases to detect multi-account abuse, bonus fraud, and money laundering patterns. Data shared for this purpose is subject to data sharing agreements.
• Technology providers: Cloud hosting, platform infrastructure, and customer support software providers may process your data as data processors acting on Malbet's behalf. They are contractually bound to process your data only as directed by Malbet and not for their own purposes.

Because Malbet handles real PKR transactions through Pakistani payment systems — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard — payment data is treated with the highest level of protection on the platform.

Malbet does not store full payment account numbers or card numbers on its own servers. Payment processing is handled by PCI-DSS compliant payment processors. Malbet retains only the minimum necessary payment reference data — such as masked wallet numbers and transaction reference IDs — required to reconcile transactions and process withdrawals.

Your PKR transaction history on Malbet — every deposit and withdrawal — is retained for a minimum of five years to meet financial record-keeping obligations. This history is accessible to you at any time through your account transaction log. It is not accessible to other players.

Malbet's AML monitoring system analyses transaction patterns automatically. If your transaction behaviour triggers an AML alert, your account may be temporarily suspended pending a manual review. You will be notified of any suspension and given the opportunity to provide documentation. This process exists to protect the integrity of the platform for all Pakistani players, not to penalise genuine players.

Malbet uses cookies and similar technologies to make the platform work correctly and to understand how players use it. Here's what we use and why:

• Essential cookies: These are required for the platform to function. They maintain your login session so you don't get logged out between pages, store your PKR balance display preferences, and keep your selected game settings. You cannot opt out of essential cookies without losing platform functionality.
• Analytics cookies: Malbet uses anonymised analytics to understand which features are popular, where players encounter difficulty, and how the platform performs on Pakistani mobile networks and devices. This data is aggregated — it is not linked back to your individual account.
• Security cookies: Used to detect suspicious login attempts, bot activity, and cross-site request forgery attacks. These protect your Malbet account from unauthorised access.

Malbet does not use third-party advertising cookies. The platform does not display third-party advertisements and therefore has no need for the tracking cookies associated with ad networks.

Most browsers allow you to control or delete cookies through browser settings. Deleting essential cookies will require you to log in again and may affect certain platform preferences. Malbet's use of cookies does not involve tracking your activity on other websites.

Malbet retains personal data for different periods depending on the type of data and the reason for its collection:

• Active account data: Retained for the duration of your active Malbet account plus a reasonable period after account closure to allow for dispute resolution.
• Financial transaction records (PKR deposits/withdrawals): Retained for a minimum of 5 years from the date of each transaction, as required by financial record-keeping obligations applicable to gaming platforms.
• KYC documents (CNIC, selfie): Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later, in line with anti-money laundering retention requirements.
• Support communications: Retained for 2 years from the date of the interaction, unless the communication relates to a dispute that has not been fully resolved, in which case it is retained until resolution.
• Technical and access logs: Retained for 12 months for security and fraud investigation purposes.
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal of consent, as evidence of your preference at any given time.

After these retention periods expire, your personal data is securely deleted or anonymised. Anonymised, aggregated data — from which individual players cannot be identified — may be retained indefinitely for statistical analysis.

Malbet implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse:

• Encryption in transit: All data transmitted between your device and Malbet is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to your login credentials, personal details, and all PKR payment confirmations.
• Encryption at rest: Sensitive data stored in Malbet's databases — including CNIC details and password hashes — is encrypted at rest. Password hashes use strong, salted hashing algorithms. Malbet staff cannot read your password.
• Access controls: Access to personal data within Malbet's systems is restricted on a strict need-to-know basis. Support staff can access the data required to help you but cannot access payment credentials or full KYC documents unnecessarily.
• Two-factor authentication: Malbet offers 2FA for player accounts. Enabling 2FA provides an additional layer of protection for your Malbet account and is strongly recommended for all players.
• Security monitoring: Malbet's systems are monitored continuously for unusual access patterns, attempted intrusions, and data anomalies. Security events are investigated promptly by the technical team.
• Staff training: All Malbet employees who handle personal data receive training on data protection obligations, phishing awareness, and incident response procedures.

As a Malbet player, you have the following rights regarding your personal data. Malbet will respond to all data rights requests within 30 days of receipt.

Malbet is strictly an 18+ platform. Malbet does not knowingly collect personal data from individuals under the age of 18. Age verification — via CNIC, which confirms date of birth — is a mandatory step before any withdrawal can be processed. Registration requires confirming that you are 18 or older.

If Malbet becomes aware that a minor has registered an account, the account will be immediately closed, all balance will be forfeited, and any personal data associated with the account will be deleted as quickly as legally permissible. If you are a parent or guardian and believe a minor in your household has registered a Malbet account, please contact support@malbet.run immediately.

Malbet may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes to this policy, we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect.

The date of the most recent update is shown at the top of this page. We encourage players to review this Privacy Policy periodically to stay informed about how Malbet protects their personal data. Continued use of Malbet following any update to this policy constitutes acceptance of the revised version.

If you disagree with material changes to this Privacy Policy, you may request account closure before the effective date of the change. Contact support@malbet.run to initiate this process.

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please get in touch with Malbet directly:

• Email: support@malbet.run — use the subject line "Privacy Policy Query" or "Data Rights Request" as appropriate
• Live Chat: Available 24/7 through your Malbet account — suitable for quick questions about your data or account privacy settings
• FAQ: Visit the FAQ page for common questions about account data, privacy settings, and responsible gaming tools

Malbet aims to respond to all privacy-related email enquiries within 48 hours and to complete data rights requests within 30 days. For complex requests requiring extensive data compilation, Malbet will acknowledge receipt within 5 days and communicate an expected completion date.