mxbet Privacy Policy

This Privacy Policy ("Policy") is issued by mxbet ("we", "us", "our") and applies to all users ("you", "your") who access, register with or otherwise interact with the mxbet platform, accessible at mxbet.cam. This Policy forms part of our broader Terms and Conditions and should be read alongside that document.

We are committed to handling your personal data responsibly and transparently. This Policy explains in plain terms what categories of personal data we collect, the purposes for which that data is processed, the legal grounds on which we rely, who we may share it with and how long we retain it. It also sets out the rights available to you and how to exercise them.

mxbet serves users across Pakistan — including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and we recognise that privacy expectations and applicable laws may differ across jurisdictions. We process your data in accordance with the applicable legal framework governing our operations and in a manner consistent with internationally recognised data protection principles.

By registering an account or continuing to use the mxbet platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact our Support team to close your account.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

We collect personal data in three primary ways: information you provide directly, information generated automatically by your use of the platform, and information obtained from third parties for verification and fraud-prevention purposes.

3.1 Information You Provide Directly

• Registration details: full name, date of birth, nationality, residential address, email address and mobile phone number.
• Identity documents: CNIC, passport or other government-issued identification submitted during KYC verification.
• Financial information: payment method details sufficient to process deposits and withdrawals. We do not store full card numbers — payment processing is handled by regulated third-party providers.
• Communications: records of your interactions with our Support team, including live chat transcripts, emails and Help Centre requests.
• Responsible gambling declarations: self-reported information about your gambling habits provided when setting limits or requesting self-exclusion.

3.2 Information Collected Automatically

• Technical data: IP address, browser type and version, device type and operating system, screen resolution and time zone.
• Usage data: pages visited, session duration, betting activity, game history, deposit and withdrawal transactions, and click-stream data.
• Cookie data: session identifiers, preference settings and analytics identifiers collected via cookies and similar tracking technologies (see Section 9).

3.3 Information from Third Parties

• Identity verification providers: confirmation of identity document authenticity and age verification checks.
• Fraud and AML screening services: information about whether your details appear on sanctions lists, politically exposed persons (PEP) registries or fraud databases.
• Payment processors: transaction status and confirmation data from payment providers — which may include locally familiar infrastructure such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah, referenced here purely as contextual payment channels and not implying any endorsement of mxbet's operations.

We process your personal data for the specific purposes described in the table below. Each purpose is supported by a lawful basis, which is set out in Section 5.

We process your personal data on one or more of the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and mxbet — for example, operating your account, processing your bets and managing withdrawals.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations — including anti-money laundering obligations, age verification requirements and regulatory reporting duties.
• Legitimate Interests: Processing carried out in pursuit of mxbet's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security and service improvement.
• Consent: Processing based on your freely given, specific and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mxbet does not sell, rent or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• KYC & Identity Verification Providers: Specialist third-party services used to verify the authenticity of identity documents and confirm age and residency information.
• Payment Processors: Regulated financial service providers that facilitate the processing of your deposits and withdrawals. These providers operate under their own data protection obligations.
• Fraud Prevention & AML Services: Third-party screening services used to check your details against sanctions lists, PEP registers and known fraud databases.
• Technology & Infrastructure Providers: Cloud hosting, platform infrastructure and analytics service providers who process data on our behalf under strict data-processing agreements.
• Regulatory & Law Enforcement Authorities: Where we are legally required to disclose personal data — for example, in response to a court order, regulatory investigation or law enforcement request.
• Responsible Gambling Organisations: Where you have requested self-exclusion or where we are required to share data with a responsible gambling scheme under applicable regulatory obligations.

The mxbet platform is operated by an entity licensed in a jurisdiction outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those applicable in your location.

Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place — including the use of standard contractual clauses, data-processing agreements and other recognised transfer mechanisms. We only transfer data to processors and service providers who have committed to maintaining security and confidentiality standards equivalent to those set out in this Policy.

If you would like further information about the safeguards applicable to a specific international transfer, please contact our Support team.

We retain your personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention principles apply:

At the end of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

mxbet uses cookies and similar tracking technologies to operate the platform, maintain session security, remember your preferences and understand how users interact with the site. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential to the operation of the platform — including session authentication, security tokens and load-balancing cookies. These cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, display options and saved account choices — to personalise your experience.
• Analytics Cookies: Used to collect aggregated, anonymised information about how users navigate the platform — including pages visited, time on site and referral sources — to improve platform performance and user experience.
• Marketing Cookies: Used, where you have provided consent, to deliver relevant promotional content and track the effectiveness of marketing communications.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the platform. Your browser documentation will provide instructions for managing cookies on your specific browser and device.

Depending on the applicable data protection laws governing your use of the platform, you may have some or all of the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data held on your account.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data — for example, where it is no longer necessary for the purpose for which it was collected and no legal retention obligation applies.
• Right to Restriction: You may request that we temporarily restrict the processing of your data — for example, while the accuracy of your data is being contested.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your data in a structured, commonly used and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Please note that certain rights may be subject to limitations where legal retention obligations, fraud prevention requirements or other legitimate grounds override your individual rights. Where we are unable to fulfil a request in full, we will explain the reason clearly.

The mxbet platform is strictly intended for adults aged 18 or older — or the higher minimum age required by the operator or applicable license jurisdiction. We do not knowingly collect personal data from individuals below the applicable minimum age.

Age verification is a mandatory step in our KYC process. We may request documentary evidence of age — such as a valid CNIC or passport — at any point during the account lifecycle. Where we discover that an account has been registered by a person below the applicable minimum age, we will immediately suspend the account, retain the data only as required for legal and regulatory compliance, and will not use it for any commercial purpose.

If you believe that a minor may have registered an account using false information, please contact our Support team immediately so that we can investigate and take appropriate action.

mxbet implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or alteration. Key measures include:

• SSL/TLS encryption for all data transmitted between your device and the platform.
• Restricted internal access to personal data on a role-based, need-to-know basis.
• Regular security assessments and vulnerability testing of platform infrastructure.
• Secure storage of sensitive data including hashed passwords and tokenised payment information.
• Data-processing agreements with all third-party processors requiring equivalent security standards.

While we take reasonable and appropriate steps to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and for notifying us promptly if you suspect any unauthorised access to your account.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate remedial action and notify affected users and relevant authorities as required by applicable law.

The mxbet platform may contain references to third-party payment infrastructure — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — cited solely as familiar Pakistan payment context. These references do not constitute links to or endorsements of those providers' own websites, services or data practices.

This Policy applies solely to data collected and processed by mxbet. We are not responsible for the privacy practices of any third-party services, and we encourage you to review their respective privacy notices before providing any personal data to those services directly.

We may update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law or platform features. The version date at the top of this page indicates when the Policy was last revised.

Where a material change is made to this Policy, we will take reasonable steps to notify registered users — for example by displaying a prominent notice on the platform or by sending a notification to your registered email address. Your continued use of the platform following notification of any change constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Prior versions of this Policy may be requested from our Support team.

If you have any questions, concerns or requests relating to this Privacy Policy or the way mxbet handles your personal data, please contact our Support team through one of the following channels:

When contacting us about a data rights request, please include your registered username, a clear description of your request and, where applicable, any relevant account or transaction references. This will allow us to locate your data accurately and respond as efficiently as possible.

We aim to acknowledge all privacy-related contacts promptly and to resolve substantive requests within a reasonable timeframe consistent with applicable regulatory expectations.