1 Introduction
This Privacy Policy describes how Mostbit ("we", "us", "our", "Platform") collects, uses, stores, and protects the personal information of members and visitors who use the Mostbit website and gaming services ("you", "member", "user").
Mostbit is an online gaming platform built for users in Pakistan. We understand that data privacy is important to our members and we are committed to handling personal information responsibly and transparently. This policy is written in plain English — not legal language designed to obscure what we actually do — because we believe you deserve to understand exactly how your data is treated.
This Privacy Policy applies to all personal data collected through the Mostbit website, mobile browser experience, customer support interactions, and any other touchpoints between you and the platform. It forms part of Mostbit's overall Terms and Conditions. By registering a Mostbit account or using the platform, you confirm that you have read and understood this policy.
2 Personal Data We Collect
Mostbit collects personal data in two categories: information you provide directly, and information collected automatically when you use the platform.
Information you provide directly:
- Full name as it appears on your national identity document
- Date of birth (required for age verification — Mostbit is 18+ only)
- Pakistani mobile phone number
- Email address
- Residential address
- National Identity Card (NIC) number or passport number (for KYC verification)
- Documents submitted for identity and address verification (CNIC copy, utility bill, etc.)
- Payment account details — Easypaisa number, JazzCash number, NayaPay/SadaPay account, bank account details for IBFT, or card information for Visa/Mastercard transactions
- Communications you send to our support team via live chat, email, or any other channel
Information collected automatically:
- IP address and approximate geographic location derived from it
- Device type, operating system, browser type and version
- Session data including login times, pages visited, games played, and session duration
- Betting and gaming history including stakes, game titles, outcomes, and transaction amounts in PKR
- Deposit and withdrawal transaction records with timestamps
- Bonus and promotion usage records
- Cookie and tracking data (see Section 11 for full cookie details)
📋 Data Collection at a Glance
| Data Type | Collected At | Primary Purpose | Shared With |
|---|---|---|---|
| Name, DOB, CNIC | Registration / KYC | Identity verification, age check | KYC verification provider |
| Mobile & Email | Registration | Account communication | No third parties |
| Payment details | Deposit / Withdrawal | Transaction processing | Payment gateway only |
| Betting history | During gameplay | Account records, dispute resolution | No third parties |
| IP address / Device | Every visit | Security, fraud prevention | No third parties |
| Support messages | When you contact us | Query resolution, training | No third parties |
| Cookie data | Every visit | Session management, analytics | Analytics provider (anonymised) |
3 How We Collect Your Data
Mostbit collects personal data through the following channels:
- Account registration form: When you sign up on Mostbit, you provide your name, contact details, and date of birth directly.
- KYC verification uploads: When you submit identity documents through the verification section of your account.
- Cashier transactions: When you make a deposit or withdrawal, the payment platform records the transaction details including the PKR amount and your payment account reference.
- Gameplay and betting: Our platform automatically logs all game sessions and bet activity associated with your account.
- Support interactions: When you contact Mostbit via live chat or email, the conversation content is stored as part of your account record.
- Device and session data: Collected automatically via standard web technologies when you access the platform from any device.
- Cookies and similar technologies: Placed on your device to maintain session state, remember preferences, and analyse platform usage (see Section 11).
4 How We Use Your Data
Mostbit uses your personal data for the following specific purposes only. We do not use data for any purpose not listed here:
- Account management: Creating, maintaining, and securing your Mostbit account. Verifying your identity and age during registration and KYC.
- Payment processing: Processing your PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card transactions; processing your withdrawal requests to your named payment account.
- Platform delivery: Providing access to casino games, sports betting markets, jackpot slots, fishing games, and all other Mostbit services.
- Security and fraud prevention: Detecting and preventing fraudulent account activity, duplicate accounts, money laundering, and system abuse. IP and device data are central to this.
- Compliance obligations: Meeting know-your-customer (KYC), anti-money-laundering (AML), and other regulatory obligations applicable to online gaming platforms.
- Customer support: Resolving your queries, complaints, and disputes. Support conversation records ensure continuity when you follow up on an issue.
- Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling, and providing proactive support where the responsible gaming team considers it appropriate.
- Platform improvement: Analysing anonymised, aggregated usage data to improve game performance, page load times, and the overall platform experience for Pakistani users.
- Communication: Sending transactional messages (deposit confirmations, withdrawal receipts, security alerts) and, where you have opted in, promotional communications about Mostbit offers.
5 Legal Basis for Processing
Mostbit processes your personal data on the following legal bases:
- Contract performance: Processing necessary to deliver the services you signed up for — running your account, processing transactions, providing access to games.
- Legal obligation: Processing required by applicable laws and regulations — KYC verification, AML record-keeping, age verification, and any reporting obligations applicable to the platform's operations.
- Legitimate interest: Processing for security, fraud prevention, and platform improvement where these interests do not override your data rights. We conduct an assessment for each legitimate interest use case to confirm this balance.
- Consent: Marketing communications and non-essential cookies, where you have specifically opted in. Consent can be withdrawn at any time and withdrawal does not affect any other aspect of your account.
6 Data Sharing and Third Parties
Mostbit does not sell your personal data to anyone. We do not share your data with advertisers, data brokers, or any other commercial third parties. The only sharing that occurs is with the specific service providers required to operate the platform:
- KYC and identity verification providers: Your identity documents and personal details are shared with accredited third-party verification providers solely for the purpose of completing the KYC process. These providers are contractually bound to use the data only for verification and to delete it after the process concludes.
- Payment processors: Transaction data is shared with the relevant payment gateway (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT operators, or card processors) solely to process your specific transaction. Card processing is handled through PCI DSS-compliant gateways — Mostbit does not store full card numbers on its own servers.
- Game software providers: Some third-party game providers receive a session token to authenticate your game session. They receive no personally identifiable information beyond what is required for that session.
- Analytics: Anonymised, aggregated usage data is shared with platform analytics providers to help us understand how the platform is being used and where improvements are needed. No personally identifiable information is included in these analytics reports.
- Legal and regulatory authorities: Where required by court order, applicable law, or a legitimate request from a regulatory authority, Mostbit may be required to disclose specific account information. We review all such requests carefully before complying.
7 Payment Data and Financial Security
Payment data is the most sensitive category of personal information Mostbit handles. We apply specific controls to it beyond our general data security measures:
- Easypaisa and JazzCash mobile wallet numbers are stored in encrypted form and used only to process deposits and withdrawals to your verified account.
- Full card numbers for Visa and Mastercard transactions are never stored on Mostbit's servers. Card transactions are handled by a PCI DSS Level 1 certified payment gateway. Mostbit stores only a truncated reference (last four digits and card type) for display in your transaction history.
- Bank account details provided for IBFT withdrawals are stored in encrypted form and used only for withdrawal processing to your verified account.
- All payment data is accessible only to staff members with specific authorisation for cashier operations. Access is logged and audited.
- Transaction records are retained as required by applicable financial regulations. After the mandatory retention period has passed, records are deleted from live systems.
All withdrawals on Mostbit must go to a payment method registered in the account holder's own name. This is a strict data and financial security requirement — it prevents misuse of accounts and ensures that your money can only reach you.
8 Data Security
Mostbit implements multiple layers of technical and organisational security to protect your personal data:
- Encryption in transit: All data transmitted between your device and Mostbit's servers is encrypted using TLS 1.2 or higher (SSL). The padlock in your browser confirms this is active.
- Encryption at rest: Sensitive data fields including passwords, payment details, and identity document references are stored in encrypted form in the database. Even in the unlikely event of a database breach, this data would not be readable.
- Access controls: Personal data is accessible only to staff with a specific need for it in their role. Access is role-based, logged, and regularly audited.
- Two-factor authentication: Available for member accounts and required for staff accessing sensitive systems.
- Penetration testing: The platform undergoes periodic security testing by third-party specialists to identify and remediate vulnerabilities.
- Incident response: Mostbit maintains a data breach response plan. If a security incident occurs that affects your personal data in a material way, you will be notified without unnecessary delay.
No security system is perfect and no platform can guarantee absolute security. If you notice any suspicious activity on your Mostbit account, contact our support team immediately via live chat. We can lock your account instantly while we investigate.
9 How Long We Keep Your Data
Mostbit retains personal data only for as long as there is a legitimate purpose to do so. Specific retention periods by data category:
- Account and identity data: Retained for the duration of your active account plus a minimum of five years after account closure, as required by standard KYC and AML record-keeping obligations.
- Transaction records (deposits and withdrawals): Retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping requirements.
- Betting and gaming history: Retained for the duration of your active account plus three years after closure. Used for dispute resolution and responsible gaming monitoring during this period.
- Support communications: Retained for two years from the date of each interaction. Used for quality assurance, dispute escalation, and training purposes.
- Marketing consent records: Retained for the duration of your active account plus two years, to provide evidence of consent in the event of a complaint.
- Cookie and session data: Session cookies are deleted when you close your browser. Persistent cookies expire according to their individual settings (see Section 11). Analytics data is retained in anonymised form for up to 26 months.
When retention periods expire, data is deleted from live systems and from backup archives within the next scheduled backup cycle. Where deletion is not technically possible for specific records (for example, within aggregated analytics that cannot be disaggregated), the data is anonymised so that it can no longer be linked to you as an individual.
10 Your Data Rights
As a Mostbit member, you have the following rights in relation to your personal data. To exercise any of these rights, contact support@mostbit.bet with your account details and the specific right you are exercising.
Right of Access
Request a copy of all personal data Mostbit holds about you. Requests are fulfilled within 30 days.
Right to Rectification
Request correction of any inaccurate or incomplete data in your account. We will update records without unnecessary delay.
Right to Erasure
Request deletion of your data where there is no longer a legal or legitimate reason to retain it.
Right to Restriction
Request that we limit the processing of your data in certain circumstances while a query or dispute is resolved.
Data Portability
Request your account data in a structured, machine-readable format where technically feasible.
Right to Object
Object to processing based on legitimate interests or marketing consent. Objections to marketing are actioned immediately.
11 Cookies and Similar Technologies
Mostbit uses cookies — small text files stored on your device — and similar tracking technologies to make the platform work properly and to understand how it is being used. Here is a breakdown of the cookies in use:
| Cookie Type | Purpose | Duration | Required? |
|---|---|---|---|
| Session cookies | Keep you logged in during your visit | Browser session | |
| Security cookies | CSRF protection, fraud detection | Session / 30 days | |
| Preference cookies | Remember language and display settings | 1 year | |
| Analytics cookies | Anonymised usage stats for platform improvement | Up to 26 months |
Essential cookies are required for the platform to function and cannot be disabled without breaking core features like login and the cashier. Functional and analytics cookies can be managed through your browser settings or by contacting Mostbit support.
Mostbit does not use advertising cookies or share cookie data with advertising networks. The analytics cookies in use are configured to anonymise IP addresses so no individual member can be identified from analytics data alone.
12 Children's Privacy
Mostbit is strictly an adults-only platform. No person under the age of 18 is permitted to register or use any Mostbit service. We do not knowingly collect personal data from anyone under 18.
Age is verified during the KYC process using government-issued identity documents. If Mostbit discovers at any point that an account has been created by someone under 18, the account will be closed immediately, any balance will be forfeited, and the personal data collected will be deleted as quickly as is permitted by applicable regulations.
If you are a parent or guardian and believe a person under 18 has registered on Mostbit using false information, contact support immediately at support@mostbit.bet. We will act promptly to investigate and close the account.
13 Changes to This Privacy Policy
Mostbit may update this Privacy Policy from time to time. When material changes are made, we will notify registered members via email and through an in-platform notification at least 7 days before the changes take effect. The date at the top of this page always reflects the most recent update.
Minor clarifications — correcting a typo, adding a clearer explanation that does not change the substance of what we do — may be made without prior notice. We recommend reviewing this policy periodically, particularly before providing new types of personal information.
Continued use of Mostbit after a policy update takes effect constitutes acceptance of the updated policy. If you disagree with changes, please contact support to discuss your options, which include closing your account with your final balance made available for withdrawal.
14 Contact Us About Privacy
All privacy-related queries, data access requests, deletion requests, and complaints should be directed to the Mostbit support team. We are available 24 hours a day, 7 days a week, in both English and Urdu.
- Live chat: Available directly within the platform — the fastest route to a response. Average response time under 5 minutes.
- Email: support@mostbit.bet — include "Privacy Request" in the subject line for the fastest routing.
Formal data subject access requests (requests for a copy of all your personal data) will be acknowledged within 48 hours and fulfilled within 30 calendar days. If a request is complex or covers a large volume of data, we will inform you of any extension to this timeline with an explanation.
Mostbit takes privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you have the right to escalate through the appropriate channel for your jurisdiction. Contact support for details of the escalation route applicable to Pakistan-based members.