Purpose and Scope of This Privacy Document

This policy explains how personal data is collected, processed, protected, disclosed, and destroyed across our online services. It sets out what information is needed to provide user accounts and transactions. The document also describes security controls and retention periods. Processing of information is based on user consent and other lawful grounds permitted by applicable laws.

What Information We Collect and How We Protect It

Personal data collected

  • Account and identity details: name, date of birth, nationality, address, and where provided national ID or passport data.
  • Contact information: email address, mobile number, preferred language.
  • Account credentials: username and hashed password.
  • Payment and transaction records: payment method, masked card or account numbers, wallet IDs, deposits and withdrawals, billing information, and refunds.
  • Verification and security data: identity documents, selfies, liveness checks, IP address, device identifiers, approximate location, and log files.
  • Usage information: pages viewed, clicks, session duration, game and bet history, interaction timestamps.
  • Technical data: browser type, operating system, cookie identifiers, SDK identifiers.

Why we collect and use this data

  • To open and manage accounts, verify identity, and provide services requested by users.
  • To process payments, detect fraud, prevent money laundering, and meet compliance obligations.
  • To run the website, personalise settings, and improve performance.
  • To provide customer support and respond to user requests.

Security measures

  • Encryption in transit using TLS and encryption at rest for selected fields.
  • Network segregation, firewalls, monitoring, and incident response procedures.
  • Access controls based on least privilege and multi-factor authentication for staff where appropriate.
  • Vendor due diligence, written data processing terms, and ongoing oversight of processors.
  • Data minimisation, role-based retention schedules, and secure deletion routines.

User rights

  • Access a copy of personal data held.
  • Request correction of inaccurate or incomplete information.
  • Request deletion where the data is no longer required or consent is withdrawn, subject to legal limits.
  • Request portability, restriction, or objection to certain processing where applicable.
  • Withdraw consent at any time for processing that relies on consent.

Regulatory compliance

  • Processing follows applicable laws of Bangladesh, including the Information and Communication Technology Act 2006 and the Cyber Security Act 2023, along with anti-money laundering requirements.
  • International standards such as the principles of the EU General Data Protection Regulation are used as a benchmark for privacy, security, and user rights.

How We Use Personal Data Across Our Services

Main purposes of processing

  • Account provision and maintenance, identity verification, and age checks where documents are provided.
  • Transaction processing for deposits, bets, wins, and withdrawals, including chargeback handling.
  • Service quality, troubleshooting, analytics, and product improvement for online platforms.
  • Personalisation such as language, preferred odds format, and content settings.
  • Security measures, fraud prevention, AML and CFT screening, and risk management.
  • Regulatory reporting and responding to lawful requests from authorities.
  • Direct marketing where allowed by law and user preferences, including opt-out controls.

Lawful bases

  • Consent given by the user for specified purposes.
  • Performance of a contract to provide the requested services.
  • Legal obligations, such as financial reporting and AML checks.
  • Legitimate interests, including network security and service improvement, balanced against user rights.

We aim to keep the processing of information lawful, transparent, and limited to the stated purposes.

User Access, Updates, and Deletion Requests

How to access and manage data

  • Users can review and edit basic profile details in account settings where available.
  • For copies of records, corrections, or deletion requests, submit a request through the support channels shown on the website. Identity verification will be required.

Correction and deletion procedures

  • Upon receiving a verified request, inaccurate data will be corrected and data no longer needed will be deleted or anonymised, subject to legal retention requirements.
  • Requests are handled within a reasonable period and within any statutory timelines that apply.

Security checks and payments

  • By using Melbet, users consent to identity, fraud, and affordability checks conducted for account safety and legal compliance.
  • Payment information is processed by authorised payment service providers for transaction processing and dispute resolution, following their own privacy rules and security standards.

Protection of Minors and Age Restrictions

  • The services are intended for persons aged 18 years and above only.
  • The operator cannot confirm age in all cases without receiving verification documents from the user.
  • If a parent or legal guardian believes a minor’s information was submitted, a request can be made to delete such data. Proof of guardianship and identity will be required before closing the account and erasing the personal data, subject to legal retention duties.

Cross‑Border Storage and Processing of Information

  • Personal data may be processed in countries outside Bangladesh where service partners, data centres, or support teams operate.
  • By using Melbet, users consent to such international transfers for the purposes described in this policy.
  • Confidentiality and security are ensured through contractual safeguards, including data processing agreements, standard contractual clauses where applicable, and technical controls aligned to industry standards.
  • Partners are required to handle information only on documented instructions and to protect it against unauthorised access.

Cookies and Local Storage Used on Our Websites

What cookies are

  • Cookies are small text files saved in the browser to store settings and recognise a returning user. Similar technologies include SDKs, pixels, and local storage.

How cookies are used

  • Essential: keep users logged in, enable core site functions, and secure user sessions.
  • Functional: remember language, odds format, and preferences.
  • Analytics: measure visits, page performance, and error rates to improve the service.
  • Advertising: measure campaign reach and control the frequency of messages.

Retention and control

  • Unless removed earlier, non-essential cookies are retained for up to 1 year.
  • Users may manage cookies via browser settings and the on-site consent tools. Blocking some cookies may affect site functionality.

Your Acceptance and The Version That Applies

  • Using Melbet means full acceptance of this Privacy Policy and the processing described here.
  • The current version published on the website prevails over any previous versions. The effective date shown on this page indicates the latest update.

Sharing Personal Information With Third Parties

When sharing may occur

  • Service providers: hosting, security operations, content delivery networks, customer support, analytics, payments, and identity verification.
  • Legal and compliance: regulators, law enforcement, courts, and dispute bodies when required by law or to establish, exercise, or defend legal claims.
  • Corporate: group companies and professional advisers subject to confidentiality obligations.

Transparency and consent

  • Where a list of third-party processors is maintained on the website, that list explains categories and purposes. If a specific party is not listed, users will be informed of the purpose and scope at the time of collection where required by law.
  • Providing information for these purposes constitutes consent where consent is the lawful basis. Sharing also occurs where needed for contract performance or legal obligations.

Updated: