golbat Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how golbat ("golbat", "we", "us", "our"), the operator of the online betting and casino platform at golbat.biz, collects, uses, stores, and shares personal information about individuals ("you", "Player", "User") who register for or use any golbat service.

This Policy applies to all personal data processed by golbat in connection with the use of the golbat platform, whether accessed via desktop browser, mobile browser, or any other compatible device. By registering a golbat account or otherwise using the platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

This Policy should be read together with golbat's Terms & Conditions and Responsible Gaming page, both of which form part of the overall agreement governing your use of golbat services.

2 Data We Collect

golbat collects personal data across several categories, depending on how you interact with the platform. The table below summarises the categories of data we collect and examples of specific data points within each category.

golbat does not collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where you voluntarily provide such information in a support communication and it is necessary to resolve your query.

3 How We Collect Your Data

golbat collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically: When you access the golbat platform, our servers automatically record technical data including your IP address, device identifiers, browser information, and session activity logs.
• Via cookies and similar technologies: golbat uses first-party cookies and session storage to maintain your login state, remember preferences, and collect aggregate analytical data about platform usage. See Section 8 for full details.
• From payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, golbat receives transaction confirmation data from the respective payment provider. golbat does not receive or store your full mobile banking PIN or password.
• From identity verification services: During KYC checks, golbat may work with identity verification partners to confirm the authenticity of documents you submit. These partners process your document data solely for the purpose of verification.

4 Why We Use Your Data

golbat uses the personal data it holds for the following specific purposes:

• Account creation and management: To register your golbat account, verify your identity, maintain your account settings, and provide you with access to the platform.
• Payment processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, and bank transfer channels, and to maintain an accurate record of your financial transactions on the platform.
• Service delivery: To enable you to place bets, play casino games, participate in promotions, and access all golbat features to which you are entitled.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct as described in the golbat Terms & Conditions.
• Responsible gaming compliance: To monitor your betting and gaming activity for indicators of problem gambling, to apply self-exclusion or deposit limit settings you have requested, and to fulfil our duty of care obligations.
• Customer support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance and audit purposes.
• Legal and regulatory compliance: To comply with applicable anti-money laundering requirements, retain records as required by law, and respond to lawful requests from government authorities.
• Service improvement: To analyse aggregate platform usage data, identify technical issues, improve user experience, and develop new features. This analysis is conducted on anonymised or pseudonymised data wherever possible.
• Promotional communications: Where you have not opted out, to send you information about golbat promotions, seasonal offers (such as those tied to BPL, Eid, or Pohela Boishakh), and platform updates that may be of interest to you.

5 Legal Basis for Processing

golbat processes your personal data on the following legal grounds:

• Contractual necessity: Processing that is necessary to perform the contract between you and golbat — including account management, bet settlement, and payment processing — is carried out on the basis that it is required to deliver the service you have signed up for.
• Legal obligation: Certain processing activities, such as maintaining transaction records and conducting identity verification, are carried out because golbat is required to do so under applicable law.
• Legitimate interests: golbat processes technical and activity data for fraud prevention, platform security, and service improvement purposes, where these activities represent golbat's legitimate business interests and do not override your fundamental privacy rights.
• Consent: Where golbat relies on your consent to process personal data — for example, to send promotional emails — you may withdraw that consent at any time by contacting [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

golbat does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share personal data only in the limited circumstances described below:

• Payment service providers: golbat shares the minimum data necessary with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard to process your financial transactions. These providers are contractually obligated to handle your data securely and only for payment processing purposes.
• Identity verification partners: During KYC processes, golbat may share document images and identity data with third-party verification services. These partners process data solely for the purpose of confirming your identity on golbat's behalf.
• Game software providers: When you play casino games from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited technical data (such as a pseudonymous player identifier and session token) is shared with the studio to deliver the game. These studios do not receive your full identity or financial data.
• Legal and regulatory authorities: golbat may disclose personal data to law enforcement agencies, courts, or other governmental authorities where required by applicable law, by a valid court order, or where disclosure is necessary to protect golbat's legal rights or prevent imminent harm.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of golbat's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections remaining in place.

7 Payment Data & Processors

golbat takes payment data security very seriously. All financial transactions on the golbat platform are processed through encrypted, industry-standard payment channels. The following specific points apply to how payment data is handled:

• golbat does not store your full bKash, Nagad, or Rocket mobile banking PIN, password, or authentication credentials at any point during or after a transaction.
• Your mobile wallet number (e.g., your bKash registered phone number) is stored by golbat solely to facilitate future withdrawals to your verified account and to maintain your transaction history.
• For card payments via Visa or Mastercard, golbat uses tokenised card processing. Full card numbers are not stored on golbat's servers; only a tokenised reference is retained for recurring transactions.
• All payment data in transit between your device, golbat's servers, and payment processors is protected by 256-bit SSL/TLS encryption.
• golbat performs regular internal audits of payment data access logs to detect any unauthorised access attempts.

8 Cookies & Tracking Technologies

golbat uses cookies and similar client-side storage technologies on the golbat.biz platform. The following types of cookies are in use:

• Essential cookies: These are strictly necessary for the platform to function. They maintain your login session, store your language and display preferences, and enable the bet slip and cashier to operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Analytical cookies: golbat uses first-party analytical cookies to understand aggregate patterns of platform usage — for example, which pages are most visited, average session duration, and common navigation paths. This data is used in anonymised form to improve platform performance and user experience.
• Security cookies: golbat sets security cookies to detect and prevent fraudulent login attempts, bot activity, and session hijacking. These cookies do not track your activity across other websites.

golbat does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies. You may manage cookie preferences through your browser settings; however, disabling essential cookies will prevent core platform features from functioning correctly.

9 Data Retention

golbat retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active golbat account, plus a minimum of 5 years following account closure to meet record-keeping requirements.
• Transaction records: Financial transaction data (deposit and withdrawal records) is retained for a minimum of 5 years from the date of each transaction.
• Support communications: Records of support interactions are retained for 3 years from the date of the communication.
• Analytical and technical data: Aggregated and anonymised analytical data may be retained indefinitely as it no longer constitutes personal data. Raw IP logs and session logs are retained for up to 12 months.
• Responsible gaming records: Self-exclusion records and deposit limit histories are retained for the full duration of any exclusion period plus 5 years thereafter.

When data is no longer required, golbat will securely delete or anonymise it in accordance with industry-standard data destruction practices.

10 Your Rights Over Your Data

As a golbat player, you have the following rights in relation to your personal data. To exercise any of these rights, contact golbat at [email protected] with the subject line "Data Subject Request" along with your full name and registered account email address.

• Right of access: You may request a copy of all personal data golbat holds about you. golbat will provide this within 30 days of receiving a valid request.
• Right to rectification: If any personal data golbat holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details (such as contact email or address) can be updated directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to its processing. Note that golbat may be required to retain certain data for legal compliance purposes even after an erasure request.
• Right to restrict processing: You may request that golbat restrict the processing of your personal data in certain circumstances, for example while a dispute regarding accuracy is being resolved.
• Right to data portability: You may request a copy of your personal data in a commonly used, machine-readable format to enable you to transfer it to another service provider.
• Right to object: You may object to golbat processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though golbat may be able to demonstrate compelling grounds to continue.
• Right to withdraw consent: Where golbat processes your data based on consent (e.g., for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

golbat will respond to all valid data subject requests within 30 days. In complex cases, this period may be extended by a further 30 days, and golbat will notify you of any such extension within the initial 30-day period.

11 Children's Privacy

golbat's platform is strictly for adults aged 18 years and above. golbat does not knowingly collect, use, or store personal data from individuals under the age of 18. If you are under 18, you must not register an account or attempt to use any golbat service.

If golbat becomes aware that it has inadvertently collected personal data from an individual under the age of 18, it will immediately delete that data, close the associated account, and take all reasonable steps to prevent further data collection from that individual. If you believe that a minor has registered on the golbat platform, please notify us immediately at [email protected].

12 Security Measures

golbat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your browser and golbat's servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive personal data stored in golbat's databases is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within golbat's systems is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Intrusion detection: golbat's infrastructure is monitored by automated intrusion detection systems that flag and respond to suspicious access patterns in real time.
• Two-factor authentication: golbat offers optional two-factor authentication (2FA) for player accounts to provide an additional layer of security beyond the standard username and password.
• Regular security reviews: golbat conducts periodic internal security assessments and engages third-party security professionals to perform vulnerability assessments of its platform infrastructure.

While golbat takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, golbat will notify affected players without undue delay in accordance with applicable requirements.

13 Amendments to This Policy

golbat reserves the right to amend, update, or replace this Privacy Policy at any time. When material changes are made, golbat will post the updated Policy on this page with a revised "Last Updated" date and, where practically feasible, notify registered players via the email address associated with their account.

Your continued use of the golbat platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must cease using the platform and may request account closure by contacting [email protected]. We encourage you to review this page periodically to stay informed about how golbat protects your personal information.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or golbat's handling of your personal data, please contact the golbat data team using the details below. All privacy-related enquiries should be submitted in writing via email.

• Privacy Enquiries Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Subject Request"
• Response Time: golbat aims to acknowledge all privacy enquiries within 48 hours and provide a substantive response within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

For general account support, bet queries, or payment issues, please use the same email address and our support team will direct your enquiry to the appropriate department.