milbat Privacy Policy

2. Data We Collect

milbat collects personal data through several channels: directly from you when you register or use the platform, automatically through your interaction with our website, and from third-party verification and payment partners where necessary. The categories of data we collect are outlined below.

2.1 Registration Data

When you create a milbat account, we collect the following information: your full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other), email address, and mobile phone number. This data is mandatory for account creation and identity verification.

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and prevent fraud, underage gambling, and money laundering, milbat may request the following documents: a government-issued photo identification such as a National Identity Card (NID) or passport, proof of residential address (such as a utility bill or bank statement dated within three months), and proof of ownership of the payment method used (for example, a screenshot confirming your bKash, Nagad, or Rocket account is registered under your name).

2.3 Financial Data

milbat processes transaction data relating to your deposits and withdrawals, including payment method identifiers (such as your bKash mobile number or Dutch-Bangla Bank account reference), transaction amounts in Bangladeshi Taka (৳), transaction timestamps, and transaction status records. milbat does not store full card numbers or full bank account numbers on its servers.

2.4 Platform Usage Data

milbat automatically records data about how you interact with the platform, including the games you play, bet amounts, session durations, login timestamps, and navigation patterns. This data is used for responsible gaming monitoring, platform optimisation, and fraud prevention.

2.5 Technical Data

We collect technical information from your device and browser, including IP address, device type, operating system, browser version, screen resolution, and referring URL. This data helps us maintain platform security, detect unauthorised access, and improve compatibility across devices commonly used in Bangladesh.

2.6 Communications Data

When you contact milbat support at [email protected], we retain a record of the communication including your name, contact details, the content of your messages, and any attachments you provide. This record is used to resolve your query and to improve our support quality.

3. How We Use Your Data

milbat processes your personal data only for purposes that are necessary, proportionate, and in accordance with this Policy. The legal bases for our data processing activities are: contractual necessity (processing required to fulfil our agreement with you), legal obligation (processing required to comply with applicable law), legitimate interests (processing that serves milbat's reasonable operational interests without overriding your rights), and consent (where you have explicitly agreed to a specific use).

The primary purposes for which milbat uses your personal data are as follows:

• Account Management: Creating, maintaining, and securing your milbat player account, including processing login requests, password resets, and account setting changes.
• Age & Identity Verification: Confirming that you are at least 18 years of age and that your identity matches the registration details provided, in compliance with responsible gaming obligations.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, and maintaining transaction records for financial reconciliation.
• Responsible Gaming: Monitoring your gaming activity to identify patterns that may indicate problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and providing responsible gaming interventions where appropriate.
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct as defined in the milbat Terms and Conditions.
• Customer Support: Responding to your queries, complaints, and technical support requests in a timely and effective manner.
• Legal Compliance: Fulfilling our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and data protection requirements.
• Platform Improvement: Analysing aggregated usage data to improve the milbat platform's performance, game selection, and user experience for players across Bangladesh.
• Marketing Communications: Sending you promotional offers, bonus notifications, and seasonal campaign communications (such as BPL season offers and Eid promotions) by email or SMS, where you have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].

4. Data Sharing & Disclosure

milbat does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose.

4.1 Payment Processors

To facilitate deposits and withdrawals, milbat shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each payment partner processes your data in accordance with their own privacy policy and applicable financial regulations. milbat only shares the data strictly required to execute the payment transaction.

4.2 Identity Verification Partners

milbat may engage specialist third-party KYC and identity verification service providers to assist with document verification and fraud screening. These providers act as data processors on milbat's behalf and are bound by contractual obligations to handle your data securely and in accordance with this Policy.

4.3 Game Providers

When you access casino games or sports betting markets provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — a unique player session token and anonymised account reference may be passed to the relevant game provider to facilitate game loading and result recording. milbat does not share your full name, email, or financial details with game providers.

4.4 Legal & Regulatory Disclosure

milbat may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where we are legally required or compelled to do so, or where such disclosure is necessary to prevent or detect serious crime, protect the safety of individuals, or comply with a valid legal process. milbat will not notify you of such a disclosure where doing so would be unlawful or would compromise an ongoing investigation.

4.5 Business Transfers

In the event that milbat undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and any changes to data handling practices that may result from it.

5. Cookies & Tracking

milbat uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, and gather analytics data that helps us understand how players use the site. A cookie is a small text file placed on your device by your browser when you visit the milbat website. Cookies do not contain executable code and cannot access other files on your device.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the milbat platform to function. They manage your login session, maintain your account authentication state, and enable core security features. You cannot opt out of strictly necessary cookies while using the platform.
• Functional Cookies: These cookies remember your preferences — such as your chosen language settings and display preferences — to provide a more personalised experience across sessions.
• Analytics Cookies: milbat uses analytics tools to collect aggregated, anonymised data about how players navigate the platform. This data is used solely for internal platform improvement and is not shared with external advertising networks.
• Security Cookies: These cookies assist our fraud detection systems by recording behavioural patterns during your session. They help identify unusual login patterns or transactions that may indicate account compromise.

5.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will prevent you from logging into your milbat account and using the platform's core features. Disabling analytics or functional cookies will not affect your ability to play games or make transactions, but may reduce the quality of your experience.

For detailed guidance on managing cookies in your specific browser, please consult your browser's help documentation. Common browsers available to players in Bangladesh — including Google Chrome, Mozilla Firefox, and Samsung Internet — all include accessible cookie management settings.

5.3 Third-Party Tracking

milbat does not permit third-party advertising networks to place tracking cookies on the milbat platform. Game providers integrated into the platform may use their own session tokens; these are strictly functional and do not enable cross-site behavioural advertising.

6. Data Retention

milbat retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, or for as long as is required by applicable legal, regulatory, or contractual obligations.

6.1 Active Account Data

While your milbat account is active, we retain all registration data, KYC documents, transaction records, and platform usage data associated with your account. This data is necessary for the ongoing operation of your account, including processing withdrawals, enforcing responsible gaming measures, and resolving disputes.

6.2 Closed Account Data

Following the closure of your milbat account — whether voluntary or as a result of enforcement action — milbat retains your account data for a minimum period of five (5) years from the date of closure. This retention period is required to comply with anti-money laundering regulations, to enable the resolution of any disputes or legal claims that may arise after closure, and to enforce self-exclusion decisions.

6.3 Transaction Records

Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven (7) years in accordance with standard financial record-keeping obligations. These records are stored securely and accessed only by authorised milbat personnel on a need-to-know basis.

6.4 Support Communications

Records of customer support interactions are retained for three (3) years from the date of the last communication. This retention enables milbat to provide consistent, informed support if you contact us again regarding a previously resolved issue.

6.5 Deletion Requests

Where you request deletion of your personal data, milbat will honour that request to the maximum extent permitted by law. Please note that certain categories of data — particularly KYC documents and financial transaction records — are subject to mandatory retention periods under applicable law and cannot be deleted before those periods expire, even upon request. Any such limitations will be clearly communicated to you at the time of your deletion request.

7. Your Rights

As a milbat player, you have the following rights with respect to your personal data. milbat is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact the milbat support team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of the personal data milbat holds about you. milbat will respond to access requests within thirty (30) days of receipt.
• Right to Rectification: If any personal data milbat holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You may update basic account details such as your email address or phone number directly within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. Erasure requests are subject to the retention obligations described in Section 6.
• Right to Restriction: You have the right to request that milbat restricts its processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of milbat's legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object at any time to milbat's processing of your personal data for direct marketing purposes. You may also object to processing based on milbat's legitimate interests, in which case milbat will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where milbat processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Data Security

milbat takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction. The key security measures employed by milbat include the following.

8.1 SSL Encryption

All data transmitted between your device and the milbat platform is protected using Transport Layer Security (TLS/SSL) encryption. This ensures that your login credentials, personal details, and payment information cannot be intercepted by unauthorised parties during transmission. You can verify that your connection to milbat is secured by checking for the padlock icon in your browser's address bar.

8.2 Access Controls

Access to personal data within milbat's internal systems is strictly controlled on a need-to-know basis. Only authorised personnel whose role requires access to specific categories of data are permitted to view or process that data. All internal access is logged and subject to regular audit.

8.3 Data Storage

milbat stores personal data on secure servers. KYC documents and financial records are stored in encrypted form with access restricted to the compliance and payments teams. milbat does not store full payment card numbers or full bank account details on its systems.

8.4 Fraud Detection

milbat operates automated real-time monitoring systems that analyse account activity for patterns consistent with fraud, account takeover, or prohibited conduct. Suspicious activity triggers automated alerts for review by the milbat risk and compliance team.

8.5 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, milbat will notify affected players without undue delay once the breach has been assessed and contained. Notifications will be sent to your registered email address and will describe the nature of the breach, the categories of data affected, and the steps milbat is taking to address it.

8.6 Your Responsibility

While milbat takes every reasonable precaution to secure its platform, you are responsible for maintaining the confidentiality of your own milbat account credentials. You should use a strong, unique password for your milbat account and should never share your login details with any third party. If you suspect that your account has been compromised, contact the milbat support team immediately at [email protected].

9. Contact & DPO

milbat is the data controller responsible for the personal data processed under this Policy. If you have any questions, concerns, or complaints regarding this Privacy Policy or milbat's data handling practices, please contact us using the details below.

9.1 General Privacy Enquiries

For general questions about this Policy or about how milbat uses your personal data, please contact the milbat support team at: [email protected]. Please include "Privacy Enquiry" in the subject line of your email. The support team is available 24/7, Bangladesh Standard Time (UTC+6), and will acknowledge your message within two (2) business days.

9.2 Data Rights Requests

To submit a formal request to access, correct, delete, or port your personal data, please email: [email protected] with the subject line "Data Rights Request". Please include your full name, the email address registered on your milbat account, and a clear description of the right you wish to exercise. milbat will respond within thirty (30) days of receipt of a valid request.

9.3 Policy Updates

milbat reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material updates will be communicated to registered players via email to the address on file. The effective date at the top of this document will be updated with each revision. Continued use of the milbat platform following notification of a policy update constitutes your acceptance of the revised Policy.