Privacy Policy – How Mostbit Handles Your Personal Data

This Privacy Policy applies to Mostbit, the online gaming platform available at mostbit.app. When this document refers to "Mostbit", "we", "us", or "our", it means the operator of the platform and its associated services. When it refers to "you" or "your", it means any individual who has registered a Mostbit account, visited the website, or otherwise interacted with the platform.

Mostbit operates as the data controller in relation to the personal data of its registered players. This means Mostbit determines the purposes for which your data is collected and the means by which it is processed. We take that responsibility seriously — decisions about your data are made deliberately and with a clear purpose, not casually.

For all data-related queries, requests, or concerns, contact us at support@mostbit.app. Our team responds in both Urdu and English and treats data protection requests as a priority rather than routing them through a general support queue.

Mostbit collects the personal data necessary to operate your account securely, process your transactions, comply with identity verification obligations, and provide an effective gaming experience. We do not collect personal data beyond what is required for these purposes.

Mostbit does not collect sensitive personal data such as biometric data, health information, or religious beliefs except where explicitly required by identity verification obligations and only to the minimum extent necessary.

Most of the personal data Mostbit holds is information you provide directly. This happens at the point of registration when you enter your name, email address, mobile number, and date of birth. It also happens when you contact our support team, submit a KYC document, or update your account details.

A second category of data is collected automatically when you use the Mostbit platform. Your IP address, device type, browser type, and session behaviour are recorded through standard server logging and session analytics. This happens whenever you visit the website, whether or not you are logged into an account.

Mostbit uses cookies and similar tracking technologies to manage sessions, remember preferences, and gather aggregate usage statistics. The types of cookies used and how to manage them are described in Section 9 of this policy. Mostbit does not use cookies to build advertising profiles or to track your behaviour outside the Mostbit website.

In some cases, Mostbit may receive data about you from third parties — for example, when a payment provider confirms or flags a transaction, or when an identity verification service returns a result on a document you have submitted. In all such cases, the data received is limited to what is needed for the specific verification or transaction purpose.

Every piece of personal data that Mostbit processes has a specific purpose. We do not collect data speculatively or hold it because it might be useful later. The purposes for which we process your personal data are:

• Running your account: Creating and maintaining your account, authenticating your identity when you log in, and managing your account settings and preferences.
• Processing transactions: Handling PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and Visa/Mastercard. Verifying that payment sources are in the account holder's name.
• Identity verification (KYC): Confirming your identity and age in line with our commitment to preventing underage gaming and maintaining the integrity of the platform.
• Responsible gaming: Monitoring account activity for patterns associated with problem gambling, communicating responsible gaming information, and administering self-exclusion and deposit limit tools.
• Fraud prevention and security: Detecting and investigating suspicious activity, protecting against unauthorised account access, and preventing financial crime.
• Customer support: Resolving account queries, bet settlement disputes, payment issues, and responsible gaming requests.
• Platform improvement: Analysing aggregate usage data to identify technical issues, improve game performance, and develop features that better serve Pakistani players.
• Legal compliance: Meeting obligations under applicable law, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records as required.

Mostbit does not use your personal data for personalised advertising on third-party platforms. Your gaming history and personal details are not shared with advertising networks or used to build advertising profiles about you.

Mostbit processes your personal data on the following legal bases depending on the specific purpose:

• Contract performance: Processing that is necessary to deliver the service you signed up for — running your account, processing bets, handling deposits and withdrawals. Without this data, we cannot provide the Mostbit service.
• Legal obligation: Processing required to comply with applicable laws — identity verification, anti-money laundering checks, record retention requirements, and responses to lawful regulatory requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics. In each case, these interests are proportionate and do not override your privacy rights.
• Consent: Where Mostbit sends you promotional communications about offers and bonuses, this is done on the basis of your consent given at the time of registration. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

Mostbit does not sell personal data to third parties. Your personal information is shared only where necessary to deliver the service, comply with legal obligations, or protect against fraud. The categories of third parties with whom your data may be shared are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors receive the transaction data necessary to process deposits and withdrawals. They operate under their own privacy policies and are responsible for the data they receive in that context.
• Identity verification services: Third-party KYC providers who process document submissions to verify age and identity. These providers are selected based on their security standards and data handling practices.
• Fraud detection services: Specialised security services that analyse technical and behavioural data to identify suspicious patterns. These services receive anonymised or pseudonymised data wherever possible.
• Regulatory and law enforcement authorities: Where Mostbit is legally required to disclose information — for example, in response to a lawful court order or regulatory investigation — we will comply with that obligation. We will notify you of such disclosures where legally permitted to do so.
• Game software providers: In some cases, game engines and results are provided by third-party studios. These providers receive the minimum data needed to run the game session — typically a session token and stake value, not your full personal profile.

All third parties who receive personal data from Mostbit are required to handle it in accordance with applicable data protection standards. Mostbit does not permit third parties to use your data for their own marketing purposes.

Mostbit retains personal data for as long as is necessary for the purpose for which it was collected, subject to any longer retention period required by law. The following general principles apply:

• Active accounts: All personal and account data is retained for the lifetime of your account plus a minimum of five years after account closure. This retention period reflects legal and regulatory requirements around financial record keeping and anti-money laundering compliance.
• Transaction records: PKR deposit, withdrawal, and betting transaction records are retained for a minimum of seven years from the date of the transaction, in line with financial record-keeping obligations.
• KYC documents: Identity documents submitted for verification are retained for five years from the date of submission or from account closure, whichever is later.
• Support communications: Chat logs and email correspondence are retained for three years from the date of the communication, for dispute resolution purposes.
• Technical and device data: Server log data and session information is retained for up to 12 months, after which it is deleted or anonymised.

When data is no longer required for any purpose and is not subject to a legal retention obligation, Mostbit will delete or irreversibly anonymise it. Anonymised data — which cannot be connected to any individual — may be retained indefinitely for aggregate analytics purposes.

Mostbit applies technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These are not checkbox security measures — they are substantive controls that reflect the actual risk to player data.

• Encryption in transit: All data transmitted between your browser or app and the Mostbit servers is protected by 256-bit SSL/TLS encryption. The padlock icon you see in your browser address bar reflects this active encryption.
• Encryption at rest: Sensitive data stored on Mostbit servers — including identity documents and financial records — is encrypted at the storage layer, meaning that physical access to the storage medium does not expose readable data.
• Access controls: Internal access to player personal data is restricted to staff members whose role requires it. Access is logged and audited. No Mostbit employee can access your data without a legitimate business reason being recorded.
• Payment card security: Mostbit does not store full card numbers on its servers. Card transactions are handled through PCI-DSS compliant processors who tokenise card data, meaning we store a reference token rather than the actual card details.
• Account security tools: Two-factor authentication (2FA) is available for all Mostbit accounts and is recommended for all players. Unusual login attempts trigger security alerts sent to your registered email and mobile number.

No online system can guarantee absolute security against all possible attacks. If Mostbit becomes aware of a data breach that is likely to result in a risk to your rights, we will notify affected players as quickly as practicable and take immediate remedial action.

Mostbit uses cookies — small text files stored by your browser — to make the platform work correctly and to understand how it is being used. The types of cookies Mostbit uses are:

• Essential cookies: Required for the platform to function. They maintain your login session, remember your language preference, and protect against cross-site request forgery. These cookies cannot be disabled without breaking the platform's functionality.
• Analytics cookies: Used to collect aggregate, anonymised information about how players navigate the site — which pages are visited, how long sessions last, and where users encounter errors. This data helps Mostbit improve the platform. Individual users are not identified through analytics data.
• Functional cookies: Remember your preferences — such as whether you prefer to view odds in decimal or fractional format — so you do not need to reset them each visit.

Mostbit does not use advertising cookies or tracking pixels that follow you across third-party websites. No third-party advertising network has access to Mostbit cookies.

You can manage cookie settings through your browser. Most browsers allow you to view, disable, and delete cookies stored by specific websites. Note that disabling essential cookies will prevent the Mostbit platform from functioning correctly. Instructions for managing cookies vary by browser — consult your browser's help documentation for specific steps.

As a Mostbit player, you have specific rights over your personal data. These rights are genuine — you can exercise them, and Mostbit will respond within a reasonable timeframe. To exercise any of these rights, contact us at support@mostbit.app with a clear description of your request. We may ask you to verify your identity before processing the request, to protect against unauthorised access to another person's data.

Mostbit will not charge a fee for responding to data rights requests unless they are manifestly unfounded or excessive in volume. In those circumstances, a reasonable administrative fee may apply, or the request may be refused. We will always explain our reasoning if we are unable to fulfil a request in full.

Mostbit is strictly a platform for adults aged 18 and above. The collection of personal data from individuals under 18 is not permitted, and Mostbit takes active steps to prevent it through age verification at registration and KYC verification before withdrawals are processed.

If Mostbit becomes aware that personal data has been collected from a person under 18, the account will be suspended immediately, the data will be reviewed, and a deletion request will be processed unless legal obligations require retention. Any balance held in the account will be handled in accordance with the Terms and Conditions applicable to underage accounts.

If you believe that a person under 18 has registered a Mostbit account, please contact us at support@mostbit.app with the relevant details so we can investigate and act without delay.

Mostbit reviews this Privacy Policy periodically and updates it when our data practices change, when the law requires changes, or when we introduce new features that affect how data is used. Material changes — meaning changes that significantly affect your rights or how your data is used — will be communicated to registered account holders by email at the address held on file, and a notice will be displayed on the Mostbit website.

Updated versions of this Privacy Policy take effect 14 days after notification, giving you time to review the changes before they apply. If you object to any material change, you may request account closure before the effective date. Continuing to use Mostbit after the effective date constitutes acceptance of the updated policy.

The date at the top of this policy reflects when it was last materially updated. We do not change the effective date for minor corrections such as fixing typographical errors or clarifying existing policy language without changing its meaning.

For any question, concern, or request relating to this Privacy Policy or your personal data held by Mostbit, please contact us directly. Our team responds in both English and Urdu, and treats data protection enquiries as a priority. You do not need to use any specific form or template — a plain-language description of your request is sufficient.

Email: support@mostbit.app

For data access, correction, and deletion requests: include your registered email address and a description of what you are requesting. We will acknowledge your request within 48 hours and provide a substantive response within 30 days. If your request requires additional time, we will inform you before the 30-day deadline and explain why.

For general account support that does not involve data rights requests — such as withdrawal questions, bet settlement, or VIP enquiries — please use the live chat function inside your Mostbit account, where response times are typically under three minutes around the clock.