At malbat, your privacy matters as much as your gaming experience. This Privacy Policy explains exactly what personal data malbat collects from Pakistani players, how that data is used, who it may be shared with, and what rights you have over your own information.
Before getting into the full legal text, here is a plain-English summary of the six core commitments that shape how malbat handles your personal information as a Pakistani player on our platform.
All personal data transmitted between your device and the malbat platform is protected by SSL/TLS encryption. Data stored on malbat servers — including your CNIC details, payment information, and account credentials — is encrypted at rest using industry-standard protocols. malbat does not store card details directly on its own servers.
malbat does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your data may be shared with carefully selected service providers who help us operate the platform — KYC verification partners, payment processors, and fraud detection services — but never for third-party marketing purposes without your explicit consent.
malbat gives Pakistani players meaningful control over their personal data. You can request access to the data malbat holds on you, request corrections, request deletion of non-mandatory data, and opt out of marketing communications at any time. Data subject requests are handled within 30 days of receipt.
malbat collects only the personal data that is genuinely necessary to operate the platform, comply with regulatory obligations, and provide a secure gaming experience. We do not collect data speculatively. Every data point collected by malbat has a specific, documented purpose tied directly to the services we provide to you.
malbat does not keep your personal data indefinitely. Account data is retained for the duration of your active account plus a post-closure period required by our gaming license for audit and compliance purposes. Transaction records are retained for the period required under applicable financial regulations. Data is securely deleted when its retention period expires.
When malbat makes material changes to this Privacy Policy, we will notify registered players via email and via an in-platform notification before the changes take effect. Minor clarifications that do not alter the substance of how your data is processed may be updated without prior notice. The current version is always available at malbat.lat/privacy-policy.
malbat ("we", "us", "our", "the Platform") is an internationally licensed online gaming platform operating at malbat.lat. malbat offers Pakistani players access to sports betting markets including cricket and PSL, live casino games, slot titles, and other gaming products. malbat acts as the data controller in respect of the personal data of all registered players and website visitors.
This Privacy Policy applies to all personal data collected by malbat through the malbat.lat website, through any malbat mobile application, and through any customer support interactions conducted via live chat, email, or other channels. This Policy should be read alongside the malbat Terms & Conditions and the malbat Responsible Gaming Policy.
If you have any questions about how malbat processes your personal data, or if you wish to exercise any of your data rights, please contact our Data Protection team at [email protected].
When you create a malbat account, we collect the following personal data as part of the registration process:
To comply with our obligations under the international gaming license under which malbat operates, we are required to verify the identity of all players before processing withdrawals. KYC verification requires collection of:
malbat collects and records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment methods used, transaction timestamps, and payment reference numbers. malbat does not store full payment card numbers on its own servers — card payments are processed by our PCI-DSS compliant payment partners.
We record your gaming activity on the malbat platform, including games played, bet amounts, game outcomes, session durations, login and logout timestamps, and any use of responsible gaming tools such as deposit limits or self-exclusion requests. This data is used for platform integrity, responsible gaming compliance, and regulatory audit purposes.
When you access malbat, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited on the malbat platform. This data is used for security monitoring, fraud detection, and platform optimisation.
We retain records of any communications between you and the malbat support team, including live chat transcripts, emails, and any documentation you submit in connection with a query, complaint, or KYC request. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.
malbat collects only the personal data that is necessary and proportionate for the specific purpose for which it is collected. We do not collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance.
The table below sets out the primary purposes for which malbat uses the personal data it collects, together with the categories of data used for each purpose.
| Purpose | Data Categories Used |
|---|---|
| Creating and managing your malbat account | Registration data, KYC data, communications data |
| Processing deposits and withdrawals | Registration data, KYC data, financial data |
| Identity and age verification (21+ compliance) | KYC data, registration data |
| Fraud detection and prevention | Technical data, financial data, gaming activity data |
| Anti-money laundering compliance | KYC data, financial data, gaming activity data |
| Responsible gaming monitoring and enforcement | Gaming activity data, registration data, communications data |
| Customer support and dispute resolution | Registration data, communications data, transaction data |
| Platform security and technical operations | Technical data, device data |
| Marketing communications (where consented) | Registration data, gaming activity data |
| Regulatory reporting and audit | All categories as required by the applicable regulator |
malbat processes your personal data on the following legal bases:
malbat shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include KYC and identity verification providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors), fraud detection and security service providers, customer support platform providers, and cloud infrastructure providers. All service providers are bound by data processing agreements that restrict their use of your data to the specific service they provide to malbat.
malbat may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, and courts where required to do so by law, by the terms of our gaming license, or by a valid legal process. malbat will notify affected players of such disclosures where it is legally permitted to do so.
In the event that malbat undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from the transaction.
malbat does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Any data sharing not described in this Policy will only occur with your explicit prior consent.
malbat uses cookies and similar tracking technologies on the malbat.lat website to ensure the platform functions correctly, to maintain your login session, to detect and prevent fraudulent activity, and to collect analytics data that helps us understand how Pakistani players use the platform.
You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the malbat platform. For more information about managing cookies, please refer to your browser's help documentation.
malbat retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and the terms of our international gaming license. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account + 5 years post-closure |
| KYC verification documents | Duration of active account + 5 years post-closure |
| Financial transaction records | 7 years from transaction date (financial regulation) |
| Gaming activity records | Duration of active account + 3 years post-closure |
| Customer support communications | 3 years from date of last interaction |
| Technical and device data (logs) | 12 months from collection date |
| Marketing consent records | Until consent is withdrawn + 1 year |
When the applicable retention period expires, malbat securely deletes or anonymises your personal data in accordance with our data deletion procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked back to any individual player.
As a malbat player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected]. malbat will respond to all data subject requests within 30 days of receipt.
You have the right to request a copy of all personal data malbat holds about you, along with information about how it is used and with whom it is shared.
If any personal data malbat holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any legal obligations that require us to retain it.
You have the right to request that malbat restrict processing of your personal data in certain circumstances, such as while a rectification request is being resolved.
Where processing is based on your consent or a contract, you may request that malbat provide your personal data in a structured, machine-readable format.
You have the right to object to processing based on malbat's legitimate interests at any time. You may also opt out of marketing communications at any time without affecting your account.
malbat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:
While malbat takes every reasonable step to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your malbat account credentials. If you believe your account has been compromised, please contact our support team immediately via live chat or at [email protected].
The malbat platform is strictly intended for adults aged 21 years and above. malbat does not knowingly collect personal data from individuals under the age of 21. If malbat discovers that it has inadvertently collected personal data from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.
If you are a parent or guardian and you believe that a minor has created a malbat account or provided personal data to malbat, please contact us immediately at [email protected] so that we can take appropriate action without delay.
21+ ONLY. malbat enforces strict age verification at registration and at the KYC stage. Any account found to belong to an individual under the age of 21 will be closed immediately and all funds held pending review.
malbat operates as an internationally licensed gaming platform. Some of the service providers we work with — including KYC verification partners, cloud infrastructure providers, and fraud detection services — may process your personal data in countries outside Pakistan. Where such transfers occur, malbat ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require receiving parties to apply equivalent data protection standards.
By creating a malbat account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to countries outside Pakistan where necessary for the purposes described in this Policy.
The malbat platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies only to the malbat.lat website and its associated services. malbat is not responsible for the privacy practices or data handling of any third-party website. We encourage you to review the privacy policy of any third-party website you visit.
malbat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes in the services we offer to Pakistani players. Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to that data — malbat will provide at least 14 days' prior notice via email to your registered address and via an in-platform notification.
The most current version of this Privacy Policy is always available at malbat.lat/privacy-policy. The date at the top of this Policy indicates when it was last reviewed and updated. Your continued use of the malbat platform after the effective date of any update constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or to how malbat handles your personal data, please get in touch with our Data Protection team through one of the following channels:
malbat's support team is experienced in handling data queries from Pakistani players, including questions about CNIC data handling, JazzCash and EasyPaisa payment data, and KYC document retention. We are committed to resolving all privacy concerns promptly and transparently.
This Privacy Policy was last reviewed and updated on 1 January 2026. The version published at malbat.lat/privacy-policy is the operative version and supersedes all previously published versions.
Now that you know exactly how malbat protects your privacy, enjoy cricket betting, live casino, and slots — all in PKR with JazzCash and EasyPaisa. 21+ only.
Join malbat Today Explore malbat Casino