mstbet Privacy Policy

This Privacy Policy applies to the mstbet platform, accessible at https://mstbet.bid ("the Platform", "we", "us", "our"). mstbet is an online casino and sports betting service operated for players in Bangladesh, providing cricket betting, live casino games, slot games, and related entertainment services payable in Bangladeshi Taka (BDT).

For the purposes of this Privacy Policy, mstbet acts as the data controller — meaning we determine the purposes for which and the manner in which your personal data is processed. When we engage third-party service providers to process data on our behalf (for example, payment processors, KYC verification partners, or analytics providers), those parties act as data processors and are contractually obligated to process your data only on our instructions and in accordance with this policy.

If you have any questions about how mstbet handles your personal data, or if you wish to exercise any of your data rights described in this policy, please contact our Data Support team at [email protected]. Contact details are provided in full in Section 13 of this policy.

mstbet collects personal data from you through several channels: directly from information you provide during registration and account management, automatically when you use the platform, and from third parties involved in delivering our services. The categories of personal data we collect are set out in the table below.

mstbet does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data. If you voluntarily disclose such information in communications with our support team, we will handle it with heightened confidentiality and will not use it for any purpose beyond resolving your specific query.

mstbet uses the personal data it collects only for the specific, legitimate purposes set out below. We do not use your data in ways that are incompatible with the purpose for which it was originally collected.

• Account Creation and Management: To register your player account, verify your identity, and maintain your account throughout its lifetime on the mstbet platform.
• Service Delivery: To process your bets, settle winnings, facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to deliver the full range of mstbet gaming services.
• Age and Identity Verification (KYC): To comply with our obligations to prevent underage gambling and to verify that you are who you claim to be before processing significant financial transactions.
• Anti-Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, collusion, multiple account registrations, and other prohibited conduct on the mstbet platform.
• Responsible Gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling, in order to trigger responsible gaming interventions such as deposit limit alerts or cooling-off recommendations.
• Customer Support: To respond to your enquiries, process complaints, and communicate with you regarding your account or our services via email, live chat, or WhatsApp.
• Marketing and Promotions: To send you information about bonuses, seasonal promotions (including offers around Eid, Pohela Boishakh, BPL season, and IPL), and platform updates — but only where you have given your consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the design, performance, and content of the mstbet platform for all players.
• Legal Compliance: To meet any legal obligations applicable to mstbet's operation, including responding to lawful requests from competent authorities in Bangladesh or other relevant jurisdictions.

mstbet processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing your identity, contact, financial, and account data is necessary to perform the contract between you and mstbet — namely, to provide you with a fully functioning player account and the associated betting and gaming services.
• Legal Obligation: Processing your identity and verification documents for KYC purposes, and retaining transaction records, may be required to comply with applicable legal obligations relating to financial crime prevention and player protection.
• Legitimate Interests: Processing your technical data for fraud prevention, security monitoring, and platform analytics is based on mstbet's legitimate interest in operating a secure and fair gaming environment. We have assessed that this interest is not overridden by your rights and freedoms.
• Consent: Where we send you direct marketing communications about promotions and bonuses, we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting our support team.

mstbet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: Financial data such as your mobile wallet number or bank account details are shared with payment service providers — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and Visa/Mastercard networks — solely to process your deposit and withdrawal transactions.
• Identity Verification Partners: Identity documents and personal details may be shared with third-party KYC service providers to perform age and identity verification checks. These providers are contractually prohibited from using your data for any purpose other than performing verification for mstbet.
• Game Software Providers: Your account identifier and game session data may be passed to game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable game loading, session continuity, and fair-play auditing. No directly identifiable personal data beyond what is technically necessary for game operation is shared.
• Analytics and Platform Providers: Aggregated and pseudonymised technical data may be shared with analytics platform providers to help mstbet understand how the site is used and to improve the player experience. Such data does not identify you personally.
• Legal Authorities: mstbet may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities in Bangladesh or internationally where required to do so by law, court order, or where we have reasonable grounds to believe that disclosure is necessary to prevent criminal activity or protect the safety of players or the public.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of mstbet's business, player data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that may result from it.

mstbet uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. Cookies allow the platform to recognise your device, remember your preferences, and maintain your login session securely.

The categories of cookies used by mstbet are as follows:

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in and using the mstbet platform. Disabling functional or analytics cookies will not prevent access but may degrade your experience.

mstbet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods applied by mstbet are as follows:

• Active Account Data: Retained for the lifetime of your mstbet account and for a period of 5 years following account closure, to satisfy financial record-keeping requirements and to handle any late-arising disputes or regulatory enquiries.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of the transaction, in line with anti-money laundering obligations and standard accounting requirements.
• KYC and Identity Documents: Retained for 5 years following account closure. Where an account was closed due to suspected fraud or criminal activity, documents may be retained for longer pending the resolution of any investigation or legal proceedings.
• Customer Support Communications: Retained for 2 years from the date of the final communication, to provide context for any follow-up queries and to support the resolution of complaints.
• Marketing Consent Records: Retained for as long as you remain opted in, plus 2 years after you withdraw consent, to demonstrate compliance with consent requirements.
• Technical and Analytics Data: Typically retained in aggregated or pseudonymised form for up to 24 months, then deleted or anonymised permanently.

When personal data is no longer required, mstbet securely disposes of it using industry-standard data destruction methods, including cryptographic erasure for digitally stored data and secure shredding for any physical documents. Anonymised, aggregated data that cannot be linked back to any individual may be retained indefinitely for statistical and analytical purposes.

As a player on the mstbet platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with your registered username and a clear description of your request. mstbet will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data that mstbet holds about you, along with information about how that data is processed and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For minor corrections such as a misspelled name or outdated phone number, you may be able to update this directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to mstbet's legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being investigated or while you contest the legal basis for our processing.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, in which case mstbet will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

The mstbet platform is strictly intended for adults aged 18 and above. We do not knowingly collect, process, or store personal data from any individual under the age of 18. If mstbet discovers — through age verification checks, KYC procedures, or any other means — that a registered player is under 18, we will immediately suspend the account, void any pending bets, and securely delete all personal data associated with that account, subject to any legal retention obligations that may apply.

If you are a parent or guardian and have reason to believe that a minor in your care has registered on the mstbet platform or has accessed it in any way, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports without delay.

mstbet implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile device and the mstbet servers is encrypted using industry-standard TLS protocols, preventing interception by third parties.
• Password Hashing: Passwords are never stored in plain text. mstbet uses strong cryptographic hashing algorithms with salting to ensure that even in the event of a data breach, passwords cannot be recovered.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. Where available, 2FA adds an additional layer of protection by requiring a one-time code sent to your registered mobile number in addition to your password.
• Intrusion Detection and Prevention: mstbet's servers are monitored around the clock by automated intrusion detection systems that flag and block unusual access patterns, brute-force login attempts, and known attack signatures.
• Access Controls: Internal access to player data is restricted on a need-to-know basis. Staff members with access to personal data undergo background checks and are bound by strict confidentiality obligations.
• Regular Security Audits: mstbet conducts periodic internal and third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no data transmission over the internet or electronic storage system is 100% secure. mstbet cannot guarantee absolute security but commits to responding promptly and transparently to any confirmed data breach that affects player personal data, including notifying affected players without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

The mstbet platform may display the names, logos, or references of third-party entities such as game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Visa, Mastercard), and sports organisations (ICC, BCB, BPL, IPL). These references are for informational and branding purposes only and do not constitute links to third-party websites.

mstbet does not include clickable links to external websites in its platform content. If you independently navigate to any external website — including those operated by our game providers or payment partners — please be aware that those sites operate under their own privacy policies, and mstbet has no responsibility for or control over how those third parties handle your personal data. We encourage you to review the privacy policy of any third-party site you visit.

mstbet may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the features and services we offer. All changes will be published on this page with an updated effective date. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — mstbet will notify registered players by email to the address associated with their account, or via a prominent notice displayed within the platform, at least 7 days before the changes take effect.

Your continued use of the mstbet platform after the effective date of any updated Privacy Policy constitutes your acknowledgement and acceptance of those changes. If you do not agree with the revised policy, you should discontinue use of the platform and may contact our support team to request the closure of your account and the deletion of your personal data, subject to our legal retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or to mstbet's handling of your personal data, please contact our Data Support team using any of the methods listed below. All data-related requests must be submitted in writing and must include your registered username and a clear description of your request so that we can locate your records and respond appropriately.

• Email (Data Requests & Privacy): [email protected] — mark your subject line with "Privacy Request" or "Data Deletion Request" for fastest routing.
• Live Chat: Available 24/7 via the in-platform chat widget after logging in to your mstbet account. For data deletion or access requests, our chat agents will direct you to the appropriate written channel.
• WhatsApp: +880 1700 000000 (plain text — not a clickable link). Available for general support queries; formal data requests must be confirmed in writing via email.
• Response Time: mstbet will acknowledge all privacy-related requests within 3 business days and will provide a full substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
• Office Location: Dhaka, Bangladesh. (Physical correspondence address available upon written request via email.)