melbe Privacy Policy
At melbe, protecting your personal data is a core responsibility, not an afterthought. This Privacy Policy explains exactly what information we collect when you use our platform, why we collect it, how we store and protect it, and the choices you have over your own data. Please read this document carefully.
Information We Collect
When you register an account, use our services, or interact with the melbe platform in any way, we collect certain categories of personal information. We collect only the minimum data necessary to deliver our services safely, securely, and in compliance with our obligations under applicable data protection standards. The categories of information we collect are outlined below.
melbe collects personal data solely for the purposes of operating a safe, compliant, and personalised gaming experience for players based in Bangladesh. We do not sell your personal data to third parties and we do not use your data for purposes unrelated to your melbe account and our platform services.
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Registration and KYC verification |
| Contact Data | Email address, Bangladesh mobile number, residential address | Registration form and account settings |
| Financial Data | bKash/Nagad/Rocket/Upay account references, bank account details, transaction history | Deposit and withdrawal processing |
| Technical Data | IP address, browser type, device identifiers, operating system, screen resolution | Automatic collection via cookies and logs |
| Usage Data | Pages visited, games played, bet history, session duration, click patterns | Automatic collection during platform use |
| Communications Data | Support chat transcripts, emails sent to [email protected], feedback submissions | Customer support interactions |
| Verification Documents | Scanned NID, passport copies, utility bills, payment method screenshots | KYC document upload portal |
We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes, health data, or data concerning a person's sex life or sexual orientation. If you voluntarily disclose such information in the course of communicating with our support team, we will handle it with the highest degree of care and will not use it for any automated profiling purpose.
melbe is committed to collecting only the data we genuinely need. We apply the principle of data minimisation — collecting the least amount of personal information required to fulfil each specific purpose.
- No unnecessary data fields at registration
- KYC documents stored encrypted at rest
- Financial references, not full card/account numbers
- Support transcripts retained only as long as needed
- You may request deletion — see Section 7
How We Use Your Information
melbe processes your personal data for specific, legitimate, and clearly defined purposes. We do not use your data in any manner that is incompatible with the purposes for which it was collected. The primary purposes for which we use your personal information are described below.
- Account Management: To create, maintain, and secure your melbe player account, including identity verification, password resets, and account settings management.
- Service Delivery: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported bank channels; to settle bets and credit winnings to your account.
- Legal and Regulatory Compliance: To fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, verify player eligibility and age (18+), detect fraud, and cooperate with competent authorities where required by law.
- Responsible Gaming: To monitor betting patterns for signs of problem gambling, apply self-exclusion requests, enforce deposit limits, and provide player-protection interventions in accordance with our Responsible Gaming Policy.
- Customer Support: To respond to your queries, resolve disputes, process complaints, and maintain records of your support interactions for quality assurance purposes.
- Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have provided consent, promotional communications about bonuses and offers relevant to the Bangladesh market.
- Platform Improvement: To analyse aggregated usage data, identify technical issues, test new features, and enhance the overall quality and performance of the melbe platform.
- Security and Fraud Prevention: To detect and prevent unauthorised access, abuse of bonus systems, collusion, bot activity, money laundering, and other prohibited conduct described in our Terms & Conditions.
Where we rely on your consent as the legal basis for processing — for example, to send you promotional emails about BPL cricket season offers or Eid reload bonuses — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
melbe relies on the following legal grounds to process your personal data:
- Contract performance — delivering the services you signed up for
- Legal obligation — KYC, AML, age verification
- Legitimate interests — fraud prevention, security, platform improvement
- Consent — marketing communications (opt-in only)
You can unsubscribe from promotional emails at any time by clicking the unsubscribe link in any marketing message, or by contacting support at [email protected]. Opting out of marketing does not affect transactional notifications required to operate your account.
Sharing and Disclosure of Data
melbe does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for each specified purpose.
melbe will never sell or otherwise monetise your personal data to advertisers, data brokers, lead-generation companies, or any other commercial third party. Your data exists on our platform to serve your gaming experience and our legal obligations — nothing else.
The categories of third parties with whom we may share your data, and the reasons for doing so, are as follows:
| Recipient Category | Purpose | Data Shared |
|---|---|---|
| Payment Processors | Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks | Name, mobile number, transaction reference |
| Identity Verification Providers | Automated KYC document checks and age verification | Identity documents, date of birth |
| Game Software Providers | Delivering game content (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, etc.) | Player session token, anonymised player ID |
| IT and Hosting Providers | Providing secure server infrastructure, CDN services, and database hosting | Encrypted user data as necessary for platform operation |
| Fraud and AML Screening Tools | Automated detection of suspicious transactions and account activity | Transaction data, IP addresses, device fingerprints |
| Legal and Regulatory Authorities | Compliance with court orders, law-enforcement requests, or regulatory investigations | Data as specified in the legal request |
All third-party service providers who process personal data on our behalf are contractually required to maintain appropriate technical and organisational security measures and to process your data solely in accordance with our documented instructions. They may not use your data for their own commercial purposes.
In the event that melbe undergoes a business restructure, merger, acquisition, or sale of assets, your personal data may form part of the transferred assets. We will notify you via email or a prominent notice on the melbe platform prior to your data being transferred to or becoming subject to a different privacy policy.
Before engaging any third-party data processor, melbe conducts a vendor assessment covering:
- Security certifications and practices
- Data processing agreement execution
- Sub-processor disclosure requirements
- Incident response and breach notification SLAs
- Geographic data residency requirements
We review all third-party relationships periodically to ensure continued compliance with this Privacy Policy.
Data Security Measures
melbe takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, and disclosure. No system is entirely immune to risk, but our security posture reflects industry best practice for online gaming platforms operating in the Bangladesh market.
All data transmitted between your device and the melbe platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. This ensures that your login credentials, financial transactions, and personal data cannot be intercepted in transit.
Sensitive data stored in our databases — including identity documents, financial references, and account credentials — is encrypted at rest using strong encryption algorithms. Encryption keys are managed separately from the data they protect.
Access to player personal data within melbe's internal systems is restricted on a strict need-to-know basis. All staff and contractors with data access undergo background checks and are bound by confidentiality obligations. Access logs are maintained and reviewed regularly.
melbe employs real-time intrusion detection and prevention systems that monitor network traffic for anomalous patterns. Automated alerts are triggered for suspicious login attempts, unusual transaction volumes, and known attack signatures.
Our platform undergoes periodic security assessments including vulnerability scanning and penetration testing. Identified vulnerabilities are addressed according to a risk-prioritised remediation schedule to maintain the integrity of our systems.
In the event of a data breach that poses a risk to your rights and freedoms, melbe will notify affected players promptly and take immediate remediation steps. We maintain a documented incident response plan that is tested and updated on a regular basis.
While melbe invests heavily in platform-level security, account security is a shared responsibility. You must keep your melbe login credentials confidential and must not share your password with any other person. Enable two-factor authentication (2FA) from your account settings for an additional layer of protection. If you suspect unauthorised access to your account, contact support immediately at [email protected].
Data Retention and Deletion
melbe retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with our legal, regulatory, and contractual obligations. Once your data is no longer needed for any active purpose, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.
| Data Type | Retention Period | Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation (AML / KYC regulations) |
| Identity and KYC documents | Duration of account + 5 years post-closure | Legal obligation (identity verification laws) |
| Financial transaction records | Duration of account + 7 years post-closure | Legal obligation (financial record-keeping) |
| Bet and game history | Duration of account + 3 years post-closure | Dispute resolution and responsible gaming monitoring |
| Customer support records | 3 years from last interaction | Legitimate interest (complaint resolution) |
| Analytics / usage data (anonymised) | Up to 24 months | Legitimate interest (platform improvement) |
| Marketing consent records | Until consent is withdrawn + 1 year | Legal obligation (demonstrating consent) |
Where you request deletion of your personal data, we will honour that request to the fullest extent permitted by law. In some cases, we are legally required to retain certain data — for example, financial transaction records must be maintained for a minimum period under anti-money-laundering legislation. In such cases, we will restrict active processing of your data (i.e., it will be archived and not used for any ongoing purpose) and will delete it as soon as the mandatory retention period expires.
To request deletion of your personal data, please follow these steps:
- Log in to your melbe account and submit a deletion request via account settings, or
- Contact support at [email protected] with the subject line "Data Deletion Request"
- We will confirm receipt within 3 business days
- Deletion or archiving will be completed within 30 days, subject to mandatory legal retention requirements
Your Privacy Rights
As a melbe player, you have specific rights in relation to the personal data we hold about you. We are committed to respecting and facilitating these rights promptly and without unnecessary barriers. The following rights are available to you at any time during your relationship with melbe.
You have the right to request a copy of the personal data we hold about you. We will provide this in a commonly used, machine-readable format within 30 days of your verified request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most account details directly from your account settings.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our mandatory legal retention obligations described in Section 6.
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified or while an objection to processing is being assessed.
Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider of your choice.
You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You may also object at any time to processing for direct marketing purposes, with immediate effect.
To exercise any of the rights listed above, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing any request in order to protect the security of your data. We aim to respond to all privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and provide a reason for the delay.
We will not charge a fee for handling your privacy rights requests in ordinary circumstances. However, if requests are manifestly unfounded, repetitive, or excessive, we reserve the right to charge a reasonable administrative fee or to decline to respond, having first notified you of our decision and the reasons for it.
For any privacy-related request, question, or complaint, reach us at:
- Email: [email protected]
- Subject: "Privacy Rights Request"
- Response time: within 30 calendar days
- Available in English, 24 hours a day, 7 days a week
To protect your data, we will verify your identity before actioning any privacy rights request. Please include your registered email address and account username in your request.
Changes to This Privacy Policy
melbe reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. We are committed to keeping you informed about how your personal data is managed, and we will take reasonable steps to notify you of any material changes before they take effect.
When we make changes to this Privacy Policy, we will update the effective date displayed at the top of this page. For significant changes — those that materially affect your rights or how we process your data — we will provide advance notice via a prominent notice on the melbe platform and, where appropriate, a direct notification to the email address registered to your account. The notice will clearly describe the nature of the change and the date it takes effect.
Your continued use of the melbe platform after any updated Privacy Policy becomes effective constitutes your acknowledgement of the revised policy. If you do not agree with any changes we make, you have the right to close your account and request deletion of your personal data in accordance with Section 6 and Section 7 of this policy. We encourage you to review this page periodically so that you remain informed about how melbe protects your personal information.
If you have any questions about this Privacy Policy, about how your personal data is processed, or about exercising your privacy rights, please do not hesitate to reach out to our support team. We are available 24 hours a day, seven days a week, and we aim to provide clear and helpful responses to all data-related enquiries.
Version 1.0 — Effective 1 January 2026. Initial publication of the melbe Privacy Policy covering data collection, use, sharing, cookies, security, retention, and player rights for the Bangladesh market.
Here is how melbe notifies you when this policy changes:
- Updated effective date at the top of this page
- Platform-wide notice banner for material changes
- Direct email notification to your registered address for significant updates
- At least 7 days advance notice before major changes take effect
We recommend bookmarking this page and checking it periodically, especially after receiving any update notification from melbe.
Questions About Your Privacy?
Our support team is available 24/7 to answer any questions about how melbe handles your personal data. You can also explore our FAQ, review our Responsible Gaming policy, or head straight to the casino.