Privacy Policy

mosbat operates the online gaming platform accessible at https://mosbat.onl, providing casino games, sports betting, crash games, and related services to players in Bangladesh. For all privacy-related enquiries, requests, or complaints, please contact our dedicated support team:

Email: [email protected]
Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

We aim to respond to all privacy-related enquiries within five business days and to formal data subject requests within 30 calendar days of receipt.

mosbat processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to create and operate your account, process deposits and withdrawals, and provide access to games and betting markets.
• Consent: Processing carried out on the basis of your explicit consent, such as receiving promotional communications. You may withdraw consent at any time.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights.
• Legal obligation: Processing required to comply with applicable laws, court orders, or the lawful requests of competent authorities.

mosbat uses the personal data we collect for the following specific purposes:

• To register and maintain your mosbat account, including verifying your identity and age (21+).
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banking channels in BDT.
• To deliver the games, sports betting markets, and platform features you use.
• To communicate with you about your account, including security alerts, transaction confirmations, and support responses.
• To send you promotional offers and bonuses where you have opted in to receive such communications.
• To monitor gaming activity and apply responsible gaming safeguards, including deposit limits, time-out periods, and self-exclusion where requested.
• To detect and prevent fraudulent activity, multiple account registration, money laundering, and abuse of promotional offers.
• To analyse platform usage and improve the mosbat service, including fixing technical issues and enhancing user experience.
• To comply with any applicable legal obligations or to enforce mosbat's Terms & Conditions.

mosbat does not sell your personal data. We may share your information with carefully selected third parties only where it is strictly necessary and only for the purposes described in this policy:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum data required to process your financial transactions securely.
• Game content providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) may receive a session token and anonymised player identifier to deliver their game content. They do not receive your full identity or financial data.
• Identity verification services: Where identity verification is required, a third-party KYC provider may process your identity documents on mosbat's behalf under strict data processing agreements.
• Legal and regulatory authorities: mosbat may disclose personal data to law enforcement agencies or competent authorities where required by applicable law or a valid legal order.
• Fraud prevention networks: In cases of suspected fraud or money laundering, relevant data may be shared with specialist fraud prevention services to protect the platform and its players.

All third parties who process personal data on mosbat's behalf are bound by data processing agreements that require them to handle your data securely, use it only for the specified purpose, and not disclose it to any further party without authorisation.

mosbat retains your personal data for as long as your account remains active and for a further period after account closure as required by our operational, legal, and fraud prevention obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus five years after closure to satisfy anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for seven years from the date of each transaction in accordance with financial record-keeping obligations.
• Gaming activity logs: Retained for three years from the date of each gaming session to support dispute resolution and responsible gaming monitoring.
• Support communications: Retained for two years from the date of the last communication to support complaint handling and quality assurance.
• Technical and cookie data: Session data is deleted at session end; analytics data is retained in anonymised form for up to 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

mosbat uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse how players interact with the site. The categories of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function. These enable login sessions, maintain your cart and game state, and handle security. They cannot be disabled.
• Preference cookies: Store your settings such as language preference, odds format, and display options. Disabling these may affect your experience.
• Analytics cookies: Help us understand how players navigate mosbat so we can improve the platform. Data collected is aggregated and anonymised where possible.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. mosbat does not use third-party advertising cookies or cross-site tracking cookies.

As a mosbat account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account username and a description of your request:

• Right of access: You may request a copy of all personal data mosbat holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that mosbat restrict the processing of your data in certain circumstances, for example while a complaint is under investigation.
• Right to data portability: You may request a copy of the personal data you have provided to mosbat in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.

mosbat will respond to all data subject requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

mosbat implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the mosbat platform.
• Hashing of account passwords using industry-standard cryptographic algorithms — plain-text passwords are never stored.
• Access controls ensuring that only authorised mosbat personnel can access personal data, and only to the extent necessary for their role.
• Regular security assessments and monitoring of our platform infrastructure.
• Two-factor authentication options available to account holders to protect account access.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect your account has been compromised, contact mosbat support immediately at [email protected].

mosbat is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. All new accounts are subject to age verification as part of the registration process. If mosbat discovers that an account has been registered by a person under 21, the account will be immediately closed, all balances will be returned to the payment source, and any associated data will be deleted in accordance with our retention policy.

If you believe a person under 21 has registered a mosbat account, please contact us immediately at [email protected] so we can take prompt action.

mosbat reserves the right to update this Privacy Policy at any time to reflect changes in our data handling practices, applicable laws, or platform features. When a material change is made, we will post a notice on the mosbat homepage and update the "Last updated" date at the top of this page. Where the change significantly affects your rights, we may also notify you directly via email or an in-app notification.

Your continued use of the mosbat platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how we are protecting your personal data.