Privacy Policy

This Privacy Policy describes how malbat (the "Site", accessible at https://malbat.cam) collects, uses, stores and protects information obtained from visitors who access the Site. malbat is an independent online information and guide website serving Pakistani players with educational content on sports betting, online casino products, PKR payment methods and responsible gambling practices.

malbat is committed to handling personal data responsibly, transparently and in compliance with applicable data protection principles. We collect the minimum information necessary to operate this Site effectively and respond to user enquiries.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the Site more broadly.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

malbat acts as the Data Controller for any Personal Data collected through this Site. As Data Controller, malbat determines how and why any personal information is used, and is responsible for ensuring that such use complies with applicable data protection principles.

malbat is an independent information website and is not a gambling operator, payment service provider or financial institution. We do not share a data-controller relationship with any gambling operator referenced in our editorial content.

For any data protection enquiries, please contact us using the details provided in Section 16 (Contact Us) of this Policy.

malbat collects a very limited range of information. The categories of data we may collect are as follows:

4.1 Automatically Collected Technical Data

When you visit the Site, our web server and any analytics tools we use may automatically record technical information including:

• Your IP address (in anonymised or truncated form where possible).
• Browser type, version and language settings.
• Operating system and device type (desktop, mobile, tablet).
• The URL of the page you visited, the referring URL and the time and date of your visit.
• Approximate geographic location derived from IP address (typically at city or country level — not precise location).
• Session duration and pages viewed during a visit.

This technical data is collected in aggregate form to help us understand Site performance and improve content. It is not used to identify individual users.

4.2 Voluntary Contact Data

If you contact us by email at [email protected], we will receive the information you include in that communication — typically your email address and the content of your message. We do not operate web-based contact forms that submit personal data to a backend server.

4.3 What We Do Not Collect

For the avoidance of doubt, malbat does not collect any of the following:

• Payment or financial data of any kind (card numbers, bank account details, PKR wallet credentials, Easypaisa or JazzCash account information).
• Government-issued identification documents or national identity numbers.
• Passwords or authentication credentials.
• Sensitive personal data such as health information, biometric data or political opinions.
• Precise real-time geolocation data.

malbat collects information through the following limited channels:

• Server logs: Standard web server logging captures technical connection data automatically when your browser loads pages from our server.
• Analytics tools: We may use privacy-focused analytics software to record aggregated, anonymised usage data. These tools are configured to minimise Personal Data collection.
• Cookies and similar technologies: As described in Section 8, the Site may place small cookie files on your device for functional and limited analytics purposes.
• Direct email contact: When you send an email to [email protected], we receive the data you include in that message.

We do not purchase third-party marketing lists, use data brokers or obtain Personal Data about you from any external source.

The limited data malbat collects is processed for the following specific purposes only:

malbat does not process Personal Data for advertising profiling, behavioural targeting, automated decision-making or any purpose beyond those listed above.

Where malbat processes Personal Data, we do so on one or more of the following legal bases:

• Legitimate interests: Operating and improving a publicly accessible information website, ensuring Site security and detecting abuse — provided those interests do not override your fundamental data rights.
• Consent: Where you voluntarily provide an email address to contact us, you implicitly consent to that information being used to respond to your enquiry.
• Legal obligation: Retaining certain technical records where required under applicable law.

malbat does not rely on contractual necessity as a legal basis because the Site does not enter into contracts with individual users.

Cookies are small text files stored on your device by your browser when you visit a website. malbat uses cookies in a limited and controlled manner. The categories of cookies that may be used on this Site are:

8.1 Strictly Necessary Cookies

These cookies are essential for the Site to function — for example, maintaining session state or remembering language preferences. They cannot be disabled without affecting Site functionality.

8.2 Analytics Cookies

We may use privacy-conscious analytics cookies to understand how visitors interact with the Site in aggregate. These cookies do not identify individual users and do not track you across other websites. Where possible, IP addresses are anonymised before being recorded.

8.3 Cookies We Do Not Use

malbat does not use any of the following cookie types:

• Advertising or retargeting cookies.
• Social media tracking pixels.
• Third-party behavioural profiling cookies.
• Affiliate tracking cookies linking to gambling operators.

8.4 Managing Cookies

You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that disabling cookies may affect the display or functionality of certain Site features.

malbat does not sell, rent, trade or otherwise transfer your Personal Data to third parties for marketing or commercial purposes. We may share limited, anonymised or aggregated technical data with the following categories of service provider solely to operate and maintain the Site:

• Web hosting and infrastructure providers: Companies that host the Site's servers and deliver content to your browser.
• Analytics service providers: Privacy-focused analytics platforms that process aggregated, anonymised usage data on our behalf.
• Security services: Providers that help protect the Site against DDoS attacks, malicious traffic and other security threats.

Any such third-party service providers are engaged on the basis that they process data only on malbat's instructions and do not use it for their own independent purposes.

malbat may also disclose Personal Data if required to do so by applicable law, court order or lawful request from a public authority.

malbat retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention practices are as follows:

• Server and access logs: Typically retained for a maximum of 90 days for security and diagnostic purposes, after which they are deleted or fully anonymised.
• Analytics data: Aggregated, anonymised analytics data may be retained for up to 24 months to allow year-on-year performance comparisons. This data does not identify individual users.
• Email correspondence: If you contact us by email, we retain that correspondence for up to 12 months from the date of your last message, unless a longer period is required for legal reasons.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymised. You may also request early deletion of your data by contacting us as described in Section 16.

malbat implements appropriate technical and organisational measures to protect any Personal Data we hold against accidental loss, unauthorised access, alteration, disclosure or destruction. These measures include:

• Serving the Site exclusively over HTTPS with TLS encryption to protect data in transit between your browser and our servers.
• Limiting access to any stored personal data to authorised personnel only on a need-to-know basis.
• Regularly reviewing our security practices and keeping server software and dependencies up to date.
• Not storing payment or financial data — eliminating the most sensitive category of data security risk entirely.

No method of transmission over the internet or electronic storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify affected users in a timely manner to the extent required by applicable law.

Subject to applicable law, you have the following rights in relation to Personal Data that malbat holds about you:

• Right of Access: You may request confirmation of whether we hold Personal Data about you and, if so, a copy of that data.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: You may request deletion of your Personal Data where there is no overriding legal basis for retention.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, such as while a dispute is being resolved.
• Right to Data Portability: Where technically feasible, you may request your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, and we will assess whether those interests override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 2–3 business days. We may need to verify your identity before acting on a request.

The malbat Site is not directed at, and should not be used by, persons under the age of 18 years, or the higher minimum age required by the operator or license jurisdiction applicable to the user. malbat does not knowingly collect Personal Data from minors.

If you believe that a minor has provided Personal Data to malbat, or has been accessing this Site, please contact us immediately at [email protected]. We will take prompt steps to delete any such data and, where appropriate, restrict access.

The Site's editorial content references third-party brands, operators and payment providers in an informational context — including names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These references are made solely to assist Pakistani users in understanding the payment landscape and are not links to, integrations with or endorsements of those providers.

malbat does not embed third-party tracking scripts, affiliate pixels or external iframes that would allow third parties to collect Personal Data about users of this Site through our pages. Where we use any third-party service providers (such as analytics or hosting), those are disclosed in Section 9.

If you choose to navigate away from malbat to any external website, that website's own privacy policy will govern how your data is handled. malbat has no control over and accepts no responsibility for the privacy practices of any third-party website.

malbat reserves the right to update or revise this Privacy Policy at any time. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly. Revised versions take effect immediately upon publication on the Site.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle data. If changes are material — for example, if we were to introduce a new category of data collection — we will make reasonable efforts to bring those changes to your attention through a notice on the Site.

Your continued use of the Site following publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.

If you have any questions, concerns or requests relating to this Privacy Policy or the way malbat handles your personal data, please contact our editorial team directly:

Email: [email protected]

We handle data-related requests with priority and aim to respond within 2–3 business days. When submitting a data access or deletion request, please include enough information to allow us to identify any data we may hold about you — typically the email address used to contact us previously.

Please note that malbat handles content and editorial enquiries only. We are not able to assist with account or payment issues relating to any gambling operator — for those matters, please contact your operator directly.