Privacy Policy — mamabet

mamabet collects personal information from you in order to provide a functional, secure, and legally compliant online gaming service. The categories of personal data we collect depend on how you interact with the platform and at what stage of your player journey you are.

A. Information You Provide Directly

When you register an account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide us with personal information that may include:

• Identity Information: Your full legal name, date of birth, gender, and nationality as it appears on your government-issued identification document.
• Contact Information: Your email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi) and postal code.
• Account Credentials: Your chosen username and a hashed (never plain-text) version of your account password.
• Identity Documents: Copies of government-issued photo ID such as your National ID Card (NID), passport, or driving licence, submitted for KYC verification purposes.
• Payment Information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, or card details (Visa, Mastercard) used to make deposits or receive withdrawals. Full card numbers are never stored on our servers — card transactions are tokenised by our payment processor.
• Support Communications: Any messages, attachments, or information you send to the mamabet support team via email or live chat.

B. Information Collected Automatically

When you access and use the mamabet platform, certain technical and behavioural data is collected automatically through cookies, server logs, and analytics tools:

• Device & Browser Data: IP address, device type (mobile or desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages viewed, games played, bets placed, session duration, click paths, search queries entered on the platform, and feature interactions.
• Transaction Logs: Records of all deposits, withdrawals, bonus credits, wager amounts, game outcomes, and account balance changes, timestamped in Bangladesh Standard Time (BST, UTC+6).
• Location Data: General geographic location inferred from your IP address (country and city level). We do not collect precise GPS location data.
• Referral Data: The URL of the site or advertisement that referred you to mamabet, if applicable.

C. Information From Third Parties

In limited circumstances, mamabet may receive information about you from third-party sources, including:

• Payment Processors: Transaction status confirmations and fraud-flag alerts from bKash, Nagad, Rocket, Upay, and card processing partners.
• Identity Verification Services: Results of automated ID checks performed by our KYC verification partners.
• Fraud Prevention Databases: Records from industry-standard fraud and self-exclusion databases to protect the integrity of our platform and the wellbeing of our players.

mamabet uses the personal data we collect only for legitimate, defined purposes. We do not use your data for any purpose beyond those described in this policy. The table below summarises the primary purposes for which we process your personal information and the lawful basis on which each processing activity rests.

mamabet does not use automated decision-making or profiling in ways that produce legal or similarly significant effects on players, except where required by AML compliance obligations. Where automated tools are used to flag suspicious activity, a human review is conducted before any account action is taken.

mamabet does not sell, rent, or trade your personal data to any third party. However, to deliver our services effectively and meet our legal obligations, we share limited categories of personal data with trusted third-party service providers under strict contractual data protection agreements.

The third parties with whom we share data, and the reasons for sharing, are as follows:

• Payment Service Providers: We share transaction-relevant data (e.g., account number, transaction amount in BDT, timestamp) with our payment partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposits and withdrawals. These partners operate under their own privacy policies and security frameworks.
• KYC & Identity Verification Partners: We share identity documents and personal details with authorised third-party KYC verification providers to confirm your identity and age in compliance with applicable regulations. These providers process your data on our behalf under binding data processing agreements.
• Game Technology Providers: Game session data (such as game ID, wager amounts, and outcomes) is shared with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi solely to operate and certify the games you play. These providers do not receive your name, contact details, or payment information.
• Fraud Prevention & AML Services: We share relevant transactional and behavioural data with specialist fraud prevention and anti-money-laundering service providers to identify and mitigate financial crime risk on the platform.
• IT Infrastructure Providers: Our hosting, cloud storage, and database management providers process data on our behalf to keep the platform running. These providers are contractually required to implement appropriate technical and organisational security measures.
• Legal & Regulatory Authorities: In response to a lawful court order, government directive, or regulatory investigation, mamabet may be required to disclose personal data to relevant authorities. We will notify affected players where we are legally permitted to do so.

All third-party data processors engaged by mamabet are required to handle your data strictly in accordance with our instructions, to maintain appropriate security standards, and to delete or return your data when the processing relationship ends. We do not permit any third-party processor to use your data for their own purposes.

mamabet does not transfer your personal data to countries outside of a framework providing adequate data protection without implementing appropriate safeguards such as standard contractual clauses or equivalent data transfer mechanisms.

mamabet uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse site performance, and protect account security. A cookie is a small text file placed on your device by a website when you visit it. Cookies do not contain executable code and cannot access other files stored on your device.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive notifications before cookies are placed. Please note that disabling essential cookies will impair your ability to use the mamabet platform, including the ability to log in to your account.

In addition to cookies, mamabet may use pixel tags (web beacons) embedded in promotional emails to track whether those emails have been opened and whether links within them have been clicked. This helps us measure the effectiveness of our marketing communications. You can prevent pixel tracking by disabling image loading in your email client.

mamabet retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The specific retention periods that apply to different categories of data are summarised below.

When the applicable retention period expires, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised data (which cannot be used to identify any individual) may be retained indefinitely for statistical and research purposes.

If you request deletion of your account and personal data under your rights (see Section 7), mamabet will process your request within 30 days, subject to any overriding legal obligations that require us to retain certain records for a defined period regardless of your request.

mamabet takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction.

Our security infrastructure includes, but is not limited to, the following measures:

• 256-Bit SSL Encryption: All communications between your browser or app and our servers are encrypted using industry-standard TLS/SSL protocols, making data interception effectively impossible under normal operating conditions.
• Password Hashing: Account passwords are never stored in plain text. We use a strong, salted cryptographic hashing algorithm so that even in the unlikely event of a data breach, your actual password cannot be retrieved.
• Access Controls: Access to personal data within mamabet is strictly limited to staff and contractors who require it to perform their job functions. All internal access is logged, audited, and subject to role-based access control policies.
• Secure Data Centres: Player data is stored on servers hosted in secure, access-controlled data centres with physical security measures including CCTV monitoring, biometric access, and redundant power systems.
• Penetration Testing: Our platform undergoes regular third-party security assessments and penetration testing to identify and address potential vulnerabilities before they can be exploited.
• Fraud Detection Systems: Automated real-time monitoring systems analyse account activity continuously to detect unusual patterns that may indicate unauthorised access or fraud, triggering alerts for manual review by our security team.
• Card Data Tokenisation: We never store full card numbers on our servers. All card transactions are processed through tokenised payment gateways that meet PCI-DSS compliance standards.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and freedoms, mamabet will notify affected players promptly and take all reasonable steps to contain and remediate the breach. Suspected security incidents should be reported immediately to support@mamabet.

As a player on mamabet, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please submit a written request to support@mamabet from the email address registered to your account. mamabet will acknowledge your request within 3 business days and respond in full within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data mamabet holds about you, along with information about how it is being used. We will provide this data in a clear, readable format within 30 days of a verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic profile information directly from your account settings; for changes to identity documents or payment details, please contact support.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request the deletion of your personal data. mamabet will process erasure requests within 30 days, except where we are legally required to retain certain data (for example, transaction records held under AML obligations). In those cases, we will explain which data must be retained and why.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of your data or have objected to processing — you may request that mamabet restrict its use of your data while the matter is resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive a copy of the personal data you have provided to us in a structured, machine-readable format (e.g., CSV or JSON), and to request that this data be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though mamabet may be able to demonstrate compelling grounds that override your objection in certain circumstances (e.g., fraud prevention).
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce significant effects on you, except where such processing is necessary for fraud prevention or legal compliance. In those cases, you may request human review of any automated decision.

mamabet will never discriminate against players who exercise their privacy rights. Exercising your rights will not result in reduced service quality, account suspension, or denial of promotions, unless the exercise of a right (such as an erasure request) necessitates account closure.

If you are not satisfied with mamabet's response to a privacy request or believe that we are processing your data unlawfully, you have the right to escalate the matter by contacting our support team and requesting a formal review. We take all privacy complaints seriously and aim to resolve disputes within 14 business days.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mamabet handles your personal data, please contact our dedicated privacy support team using the details below. All privacy-related correspondence should be directed exclusively to this contact — do not send sensitive personal information via channels other than those listed here.

When contacting us regarding a privacy matter, please include your registered account username or email address so we can locate your account securely. Do not include your full password, payment card numbers, or complete NID number in your initial message — our support team will guide you through a secure verification process.

mamabet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email to their registered address and update the "Effective Date" displayed at the top of this page. Continued use of mamabet following notification of changes constitutes acceptance of the revised Privacy Policy.

We recommend reviewing this Privacy Policy periodically — particularly before making a new deposit, updating your account details, or participating in a new promotional campaign — to ensure you remain informed about how your data is handled.