mostbd Privacy Policy

1. Introduction

mostbd ("we", "us", "our") is committed to protecting the privacy and personal data of all players who use the mostbd online casino and sports betting platform ("Platform"), accessible at https://mostbd.app. This Privacy Policy ("Policy") describes in detail the types of personal data we collect, the purposes for which we process it, the parties with whom it may be shared, the safeguards we apply to protect it, and the rights available to you as a data subject.

This Policy applies to all users of the Platform who are located in Bangladesh or who access the Platform from any other location. It covers data collected through the website, any associated mobile-optimised interface, customer support channels, and any other means through which you interact with mostbd.

We operate the Platform as an English-language service targeting adult players in Bangladesh. All data processing activities described in this Policy are conducted in accordance with the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2. Data Controller

mostbd, operating the platform at https://mostbd.app, acts as the data controller in respect of all personal data collected from players and visitors to the Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that processing is carried out lawfully and fairly.

If you have any questions about how your data is handled, or wish to exercise any of your rights described in Section 11 of this Policy, you may contact us using the details provided in Section 16.

3. Data We Collect

3.1 Identity and Registration Data

When you register an account with mostbd, we collect the information you provide during the registration process. This includes your chosen username, email address, date of birth, and any other information requested at sign-up. For the purposes of Know Your Customer ("KYC") verification, we may additionally request your full legal name, national identification number, passport number, or a scanned copy of a government-issued identity document.

3.2 Financial and Transaction Data

We collect information relating to deposits and withdrawals made through your account. This includes the mobile wallet service used (bKash, Nagad, Rocket, or Upay), transaction reference numbers, amounts, timestamps, and the outcome of each transaction. We do not store full mobile wallet credentials or PIN numbers. Payment data is handled in accordance with the security standards of the relevant payment service provider.

3.3 Gaming Activity Data

mostbd records your gameplay activity on the Platform. This includes the games you play, the amounts you stake, the outcomes of rounds and bets, session start and end times, and your overall win/loss history. This data is used for account management, responsible gaming monitoring, and regulatory compliance purposes.

3.4 Technical and Device Data

When you access the Platform, we automatically collect certain technical data about your device and connection. This includes your IP address, browser type and version, operating system, device model, screen resolution, referring URL, and session timestamps. This information helps us maintain platform security, detect fraudulent access, and improve the user experience.

3.5 Communications Data

If you contact our support team — whether by email or through the Platform's support feature — we retain the content of your communications, including your queries, complaints, and our responses. This data is used to deliver customer support, resolve disputes, and improve our service quality.

3.6 Responsible Gaming Data

Where you use responsible gaming tools such as deposit limits, cooling-off periods, or self-exclusion, we record the details of those elections. This data is processed specifically to give effect to your responsible gaming choices and to meet our obligations under our responsible gaming policy.

4. How We Collect Your Data

mostbd collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, use responsible gaming tools, or contact our support team.
• Automatically — when you browse or use the Platform, through cookies, server logs, and session-tracking technology that records technical and device data as described in Section 3.4.
• From third-party service providers — identity verification agencies and payment processors may share data with us in the course of completing a transaction or a KYC check. Such sharing occurs under contractual data processing agreements.
• From fraud prevention and security partners — in cases where we have reason to believe that an account may be associated with fraudulent activity, we may receive signals or flags from fraud detection services to which we subscribe.

5. How We Use Your Data

mostbd uses the personal data we collect for the following purposes:

• Account creation and management — to register, maintain, and administer your player account, including login authentication and session management.
• Identity and age verification — to confirm that you meet the 18+ age requirement and to carry out KYC checks in accordance with our Terms & Conditions.
• Payment processing — to process your deposits and withdrawals via bKash, Nagad, Rocket, or Upay and to maintain accurate financial records of all transactions.
• Fraud and security — to detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the Platform.
• Responsible gaming — to monitor gameplay patterns for indicators of problem gambling, to apply deposit limits and self-exclusion settings, and to fulfil our duty of care to players.
• Customer support — to respond to your enquiries, resolve disputes, and improve the quality of our support service.
• Platform improvement — to analyse usage patterns, diagnose technical issues, and develop improvements to the Platform's functionality and design.
• Legal compliance — to fulfil obligations under applicable anti-money laundering requirements, responsible gaming regulations, and other applicable legal obligations.
• Account communications — to send you transactional notifications (e.g., deposit confirmations, withdrawal updates, security alerts) that are necessary for the operation of your account. We do not send unsolicited marketing emails without your explicit consent.

6. Legal Basis for Processing

mostbd processes your personal data on the following legal bases:

• Contractual necessity — processing your registration data, payment data, and gaming activity data is necessary for the performance of the contract between you and mostbd (i.e., the Terms & Conditions you agreed to at registration).
• Legal obligation — processing your identity data for KYC purposes and retaining financial records are necessary for mostbd to comply with applicable anti-money laundering and responsible gaming obligations.
• Legitimate interests — processing technical data for fraud prevention, security monitoring, and platform analytics serves the legitimate interests of mostbd and its players, provided those interests are not overridden by your rights and freedoms.
• Consent — where we process your data for any purpose not covered by the above bases (such as optional marketing communications), we will seek your explicit consent before doing so. You may withdraw consent at any time by contacting [email protected].

7. Data Sharing and Disclosure

7.1 We Do Not Sell Your Data

mostbd does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data belongs to you, and its disclosure is limited strictly to what is necessary to operate the Platform and fulfil our legal obligations.

7.2 Authorised Third-Party Processors

We may share your personal data with trusted third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment service providers — bKash, Nagad, Rocket, and Upay, to process your deposits and withdrawals.
• Identity verification providers — to conduct KYC checks on documents you submit.
• Fraud prevention services — to analyse transaction patterns and flag potentially fraudulent activity.
• IT infrastructure providers — hosting and cloud infrastructure partners who store Platform data under strict security and confidentiality obligations.
• Customer support tooling — platforms used to manage and log support tickets and correspondence.

7.3 Legal Disclosure

mostbd may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by applicable law, when responding to a valid legal process, or when disclosure is necessary to protect the rights, property, or safety of mostbd, its players, or the public.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of mostbd's business assets, personal data held by mostbd may be transferred to the acquiring entity as part of that transaction. Affected users will be notified in advance of any such transfer and the privacy policy applicable to their data post-transfer.

8. International Data Transfers

mostbd is operated as a platform serving the Bangladesh market. Data may be processed or stored on servers located outside Bangladesh. Where personal data is transferred to a third country, mostbd takes appropriate steps to ensure that such transfers are conducted under adequate data protection safeguards, including contractual clauses that bind the receiving party to processing standards equivalent to those described in this Policy.

If you have concerns about the international transfer of your personal data, please contact us using the details in Section 16.

9. Data Retention

mostbd retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The general retention periods applicable to each category of data are summarised in the table provided earlier on this page.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where anonymised data is retained for statistical or analytical purposes, it no longer constitutes personal data and falls outside the scope of this Policy.

If you request deletion of your account and personal data (see Section 11), mostbd will action that request subject to any overriding legal obligation to retain specific records (e.g., financial transaction records required for AML compliance).

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store certain preferences or session information.

10.2 Cookies We Use

mostbd uses the following categories of cookies:

• Essential / Session Cookies — These are strictly necessary for the Platform to function. They maintain your login session and preserve your preferences while you navigate the Platform. These cookies are deleted when you close your browser and cannot be disabled without impairing core Platform functionality.
• Analytics Cookies — These cookies collect anonymised information about how visitors use the Platform — for example, which pages are visited most often and whether users encounter error messages. This data helps us improve Platform performance. Analytics cookies have a lifespan of up to 13 months.
• Security Cookies — Used to detect and prevent fraudulent or abusive activity on the Platform, such as session hijacking or credential-stuffing attacks.

10.3 No Advertising Cookies

mostbd does not deploy third-party advertising cookies, retargeting pixels, or any cross-site tracking technology on the Platform. We do not share cookie data with advertising networks.

10.4 Managing Cookies

You may control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies will prevent the Platform from functioning correctly and may make it impossible to maintain a login session. Instructions for managing cookies are available in your browser's help documentation.

11. Your Data Rights

As a data subject, you have the following rights in respect of your personal data held by mostbd:

• Right of access — You may request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe following verification of your identity.
• Right to rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your email address can be updated by contacting support.
• Right to erasure — You may request that we delete your personal data. We will action this request where no overriding legal obligation requires us to retain the data (e.g., AML record-keeping requirements).
• Right to restriction of processing — You may request that we restrict the processing of your data in certain circumstances, such as while a correction request is being assessed.
• Right to data portability — You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it may be transferred to another service.
• Right to object — You may object to the processing of your data where that processing is based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, contact us at the email address provided in Section 16. We may ask you to verify your identity before processing your request. We will respond to all valid requests within 30 days.

12. Security Measures

mostbd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS/SSL encryption — All data transmitted between your device and the mostbd Platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted data storage — Sensitive personal data, including identity documents and financial records, is stored in encrypted format in access-controlled environments.
• Access controls — Access to personal data is restricted to authorised personnel who require it to perform their job functions, on a strictly least-privilege basis. All access is logged and audited.
• Intrusion detection — The Platform infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential security incidents.
• Vulnerability management — mostbd conducts regular security assessments to identify and remediate vulnerabilities in the Platform's software and infrastructure.
• Incident response — In the event of a data security incident that affects your personal data, mostbd will notify you and take all reasonable steps to contain and remedy the breach in a timely manner.

While we take all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying us promptly if you suspect any unauthorised use of your account.

13. Children and Minors

The mostbd Platform is strictly intended for adults aged 18 years and over. We do not knowingly collect personal data from any person under the age of 18. If we become aware that a registered account belongs to a person under 18, the account will be immediately closed, any deposited funds returned, and any data collected will be deleted as promptly as practicable.

If you are a parent or guardian and believe that a minor in your care has created a mostbd account, please contact us immediately at the address provided in Section 16 so that we can take appropriate action.

14. Third-Party Links

The mostbd Platform may contain references to third-party game studios and payment service providers. Where third-party services are accessed — for example, when a payment is processed via bKash or Nagad — those services are governed by the privacy policies of the respective third-party provider. mostbd has no control over and accepts no responsibility for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party services you use in connection with your mostbd account.

15. Updates to This Policy

mostbd reserves the right to update or amend this Privacy Policy at any time. When changes are made, the "Last Updated" date at the top of this page will be revised, and the version number will be incremented. Where changes are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — we will notify active account holders by email or through a prominent in-platform notice prior to the changes taking effect.

Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend that you review this page periodically to stay informed about how mostbd protects your data.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mostbd, please contact our support team. We are available 24 hours a day, 7 days a week, operating on Bangladesh Standard Time (BST, UTC+6).

Contact email (plain text — not a link): [email protected]

Please include "Privacy Request" in the subject line of your message, along with your registered username, so that we can identify your account and process your request promptly.

For responsible gaming concerns, deposit limit requests, or self-exclusion, please visit our dedicated Responsible Gaming page.

For a full understanding of your rights and obligations as a mostbd player, please also review our Terms & Conditions.