golsbat Privacy Policy — How We Protect Your Data
This Privacy Policy explains how golsbat collects, uses, stores, and protects the personal data of registered players across Bangladesh. We are committed to handling your information with transparency, security, and respect. Please read this document carefully before registering or using any feature of golsbat.net.
This Privacy Policy ("Policy") describes how golsbat ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data provided by or collected from registered players ("you", "your") who access and use golsbat.net from Bangladesh. By registering an account or using any service on golsbat.net, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, please cease using golsbat.net and contact [email protected] to request account closure.
Secure Data Storage
All personal data collected by golsbat is stored on encrypted, access-controlled servers. We apply industry-standard AES-256 encryption to data at rest and TLS 1.3 for all data in transit between your browser and golsbat.net.
No Data Selling
golsbat does not sell, rent, or trade your personal data to third-party advertisers or marketing companies. Your information is used exclusively for the purposes described in this Privacy Policy and to operate the golsbat platform.
Your Data Rights
As a golsbat player, you retain the right to access, correct, export, and request deletion of the personal data we hold about you. Submit a data rights request at any time by contacting our support team at [email protected].
Transparent Cookie Use
golsbat uses cookies and similar tracking technologies solely for platform functionality, session management, fraud prevention, and aggregate analytics. We do not use third-party advertising cookies or behavioural tracking cookies for off-site marketing.
KYC & AML Compliance
golsbat collects identity verification data as part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) processes. This data is handled with strict confidentiality and used solely for compliance and responsible gaming purposes.
Minimal Data Collection
golsbat collects only the personal data necessary to operate the platform, verify player identity, process transactions, and comply with applicable regulations. We do not collect data that is not required for these defined purposes.
Data We Collect
golsbat collects personal data from you directly when you register, make a deposit, or contact support, and automatically when you use the platform.
| Data Category | Examples | Collection Method | Purpose |
|---|---|---|---|
| Identity Data | Full legal name, date of birth, NID/passport number, photograph | Provided by you at registration and during KYC verification | Age verification, identity confirmation, AML compliance |
| Contact Data | Email address, Bangladesh mobile number (bKash/Nagad registered), city of residence | Provided by you at registration or account update | Account communication, support, promotional messages (with consent) |
| Financial Data | bKash/Nagad/Rocket wallet number, bank account details, transaction history, deposit/withdrawal amounts in BDT | Provided by you during deposit/withdrawal, generated automatically by platform | Payment processing, AML monitoring, fraud prevention |
| Gaming Activity Data | Game sessions, bet amounts, wagering history, win/loss records, bonus usage | Generated automatically during platform use | Account management, responsible gaming monitoring, bonus administration |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session duration | Collected automatically when you access golsbat.net | Fraud detection, security, geographic access controls, performance analytics |
| Communication Data | Support ticket content, live chat transcripts, email correspondence with golsbat | Provided by you when contacting golsbat support | Customer support, dispute resolution, quality assurance, record-keeping |
golsbat does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data (other than self-exclusion records held for responsible gaming compliance), or biometric data. National Identity Card (NID) numbers collected during KYC are treated as sensitive data and subject to enhanced access controls and encryption standards.
How We Use Your Data
golsbat processes your personal data on clearly defined legal bases for specific, documented purposes only.
2.1 Platform Operation and Account Management
golsbat uses your personal data to create and maintain your player account, authenticate your golsbat Login sessions, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banks, administer bonuses and promotions, and provide customer support. This processing is necessary for the performance of the contract between you and golsbat and cannot be opted out of while you maintain an active account.
2.2 Identity Verification and KYC Compliance
golsbat is obligated to verify the identity and age of all registered players as part of our responsible gaming and anti-money laundering commitments. Identity data including NID details, date of birth, and supporting documents are processed for this purpose. This processing is carried out on the basis of legal obligation and legitimate interest in maintaining a safe, compliant platform for all Bangladesh players.
2.3 Fraud Prevention and Security
Technical data including IP addresses, device fingerprints, and session patterns are processed by golsbat's security systems to detect and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other prohibited activities. This processing is based on golsbat's legitimate interest in protecting the integrity of the platform and the financial security of all registered players.
2.4 Responsible Gaming Monitoring
golsbat processes gaming activity data — including deposit frequency, session duration, bet size patterns, and loss rates — to identify players who may be exhibiting signs of problem gambling behaviour. Where such patterns are identified, golsbat may proactively contact the affected player, apply responsible gaming interventions, or restrict account activity in accordance with our Responsible Gaming Policy. This processing is carried out on the basis of legitimate interest in player welfare and is a core commitment of the golsbat platform.
2.5 Marketing Communications
With your consent, golsbat may use your contact data (email address and mobile number) to send you promotional communications about new games, bonuses, seasonal promotions (including Eid, Pohela Boishakh, BPL cricket season offers), and other golsbat offers relevant to Bangladesh players. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Disclosure
golsbat does not sell your personal data. We share data only in limited, documented circumstances with trusted parties bound by confidentiality obligations.
3.1 Game Technology Providers
To deliver the golsbat gaming catalogue, your account identifier and gaming session data are shared with licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate under their own data processing agreements with golsbat and are contractually prohibited from using golsbat player data for any purpose other than delivering the agreed game service.
3.2 Payment Processing Partners
Financial transaction data — including your registered bKash, Nagad, Rocket, or Upay wallet number, transaction amounts in BDT, and account reference identifiers — is shared with our payment processing partners solely for the purpose of completing deposit and withdrawal instructions. golsbat does not share full financial data sets with payment partners beyond what is operationally necessary for each transaction.
3.3 Legal and Regulatory Disclosure
golsbat may disclose personal data to government authorities, law enforcement agencies, or financial intelligence units in Bangladesh if required to do so by applicable law, court order, or regulatory direction. golsbat will endeavour to notify affected players of such disclosure requests where legally permitted to do so. Disclosures made under legal compulsion are not voluntary and do not constitute a breach of this Privacy Policy.
3.4 Business Transfers
In the event that golsbat undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held about registered players may be transferred to the acquiring entity as part of that transaction. golsbat will notify registered players via their registered email address if such a transfer results in a material change to this Privacy Policy or to the way in which their personal data is processed.
golsbat does not sell, rent, lease, or otherwise commercially transfer your personal data to third-party marketers, data brokers, advertising networks, or any other commercial third party for their own use. If you are ever contacted by a third party claiming to have obtained your details from golsbat for marketing purposes, please report this to [email protected] immediately — this would represent an unauthorised disclosure and golsbat would treat it as a serious data security incident.
Cookies & Tracking
golsbat uses cookies and similar technologies to operate the platform, maintain session security, and understand aggregate usage patterns.
4.1 What Are Cookies?
Cookies are small text files placed on your device by golsbat.net when you visit the platform. They allow golsbat to recognise your browser across pages, maintain your authenticated session, remember your platform preferences, and gather aggregate data about how players use the site. Cookies do not contain executable code and cannot access other files on your device.
4.2 Types of Cookies Used by golsbat
- Strictly Necessary Cookies: Required for the golsbat platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without affecting core platform functionality, including the golsbat Login process.
- Functional Cookies: Remember your platform preferences such as language setting, notification preferences, and display options. Disabling these cookies may reduce the personalised experience but will not prevent access to golsbat.net.
- Analytics Cookies: Used by golsbat to collect aggregate, anonymised data about how players navigate golsbat.net — including pages visited, session duration, and features used. This data is used to improve the platform. golsbat uses privacy-respecting analytics tools and does not share raw analytics data with advertising networks.
- Security Cookies: Used for fraud detection and prevention purposes, including device fingerprinting to identify suspicious login patterns and protect your golsbat account from unauthorised access attempts.
4.3 Managing Cookies
You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in to your golsbat account and using core platform features. Instructions for managing cookies in common browsers can be found in your browser's help documentation. golsbat does not use third-party advertising cookies or retargeting pixels on golsbat.net.
Data Security
golsbat implements layered technical and organisational security measures to protect your personal data from unauthorised access, loss, or disclosure.
5.1 Technical Security Measures
golsbat.net is protected by SSL/TLS encryption (minimum TLS 1.2, TLS 1.3 preferred) on all pages, including the golsbat Login page, deposit and withdrawal pages, and all account management areas. All personal data at rest in golsbat's databases is encrypted using AES-256 encryption. Access to production databases is restricted to authorised personnel only, via multi-factor authentication and IP-allowlisted connections.
5.2 Organisational Security Measures
golsbat operates a strict internal data access policy based on the principle of least privilege — golsbat staff members are granted access only to the personal data necessary for their specific role. All personnel with access to player personal data are subject to confidentiality obligations. golsbat conducts regular internal reviews of data access permissions and promptly revokes access for personnel whose role changes or who leave the organisation.
5.3 Password and Credential Security
golsbat stores player passwords using industry-standard one-way hashing algorithms. golsbat staff cannot view your password in plain text and will never ask you to provide your password via any communication channel, including email, live chat, or phone. If you receive any communication purporting to be from golsbat and requesting your password or OTP, do not respond and report it to [email protected] immediately — this would be a phishing attempt and not a legitimate golsbat communication.
5.4 Data Breach Response
In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, golsbat will notify affected players via their registered email address without undue delay, describing the nature of the breach, the categories of data affected, the likely consequences, and the measures golsbat has taken or proposes to take to address the breach. golsbat maintains a documented incident response procedure for data security events.
Data Retention
golsbat retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal obligations.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML regulatory compliance, dispute resolution, fraud prevention |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations, AML audit trail |
| KYC Verification Documents | 5 years after account closure | AML/KYC regulatory requirement |
| Gaming Activity Logs | 3 years from session date | Dispute resolution, responsible gaming review, fraud detection |
| Support Communications | 3 years from last interaction | Quality assurance, dispute resolution, regulatory compliance |
| Self-Exclusion Records | Minimum 7 years | Responsible gaming obligation — prevent re-registration during exclusion period |
| Marketing Consent Records | Duration of consent + 3 years | Demonstrate lawful basis for marketing communications |
| Technical / Log Data | 12 months from collection | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, golsbat will securely delete or irreversibly anonymise the relevant personal data. Anonymised, aggregate data (i.e., data from which all identifying information has been removed and cannot be re-linked to any individual) may be retained indefinitely for statistical and platform improvement purposes. Deletion requests made by players prior to the expiry of a mandatory retention period cannot be fully fulfilled where retention is required by law — golsbat will explain this clearly if you submit a deletion request that affects data still within its mandatory retention window.
Your Privacy Rights
golsbat respects your rights over your personal data. The following rights apply to all registered players on golsbat.net.
7.1 Right of Access
You have the right to request a copy of all personal data golsbat holds about you. This includes your account registration data, KYC documents on file, transaction history, gaming activity records, and communication history. Access requests will be fulfilled within 30 days of receipt. Submit your request to [email protected] with the subject line "Data Access Request" and your registered account email address.
7.2 Right of Rectification
If any personal data golsbat holds about you is inaccurate or incomplete, you have the right to request that we correct it. Corrections to account registration data can be made directly in your account settings for minor details. Corrections to KYC identity data require submission of a revised verification document and a written rectification request to [email protected].
7.3 Right to Erasure
You may request that golsbat delete your personal data. golsbat will honour erasure requests to the extent permitted by applicable law. Where data must be retained to comply with AML, KYC, or financial record-keeping obligations, golsbat will inform you of the specific legal basis for continued retention and specify the earliest date on which deletion will be possible.
7.4 Right to Data Portability
You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). golsbat will provide a portable data export covering your account details, transaction history, and gaming activity records upon request. Submit your portability request to [email protected] with the subject line "Data Portability Request". Requests are fulfilled within 30 days.
7.5 Right to Restrict Processing
You may request that golsbat restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing based on legitimate interest and golsbat is reviewing that objection. During a restriction period, golsbat will continue to store your data but will not carry out active processing beyond storage and security monitoring.
7.6 Right to Withdraw Marketing Consent
Where golsbat processes your contact data for marketing communications on the basis of your consent, you may withdraw that consent at any time. Withdrawal of marketing consent will be processed within 5 business days. After withdrawal, golsbat will cease sending promotional emails and SMS messages to your registered contact details. Transactional communications related to your account (such as deposit confirmations, security alerts, and support replies) are not marketing communications and will continue regardless of marketing consent status.
To exercise any of the privacy rights described above, contact the golsbat support team at [email protected] (plain text — not a clickable link). Please include your full registered account email address, the specific right you wish to exercise, and any relevant details that will help golsbat locate and process your request efficiently. golsbat will acknowledge all privacy rights requests within 5 business days and will fulfil them within 30 days of receipt, or notify you if an extension is required. golsbat will not charge a fee for routine privacy rights requests. Where requests are manifestly unfounded or excessive, golsbat reserves the right to charge a reasonable administrative fee or decline to act, with written explanation provided.
Contact & DPO
If you have any questions, concerns, or complaints about how golsbat handles your personal data, please contact us using the details below.
8.1 General Privacy Enquiries
For general questions about this Privacy Policy, how golsbat handles your data, or to submit a data rights request, contact the golsbat support team:
- Email (plain text — not a link): [email protected]
- Subject line: Include "Privacy" or your specific request type (e.g., "Data Access Request", "Data Deletion Request", "Marketing Opt-Out")
- Response time: Within 5 business days for acknowledgement; within 30 days for full response
- Languages accepted: English
8.2 Complaints
If you are dissatisfied with golsbat's response to a privacy concern or data rights request, you have the right to escalate your complaint. golsbat is committed to resolving all privacy complaints fairly and transparently. Please submit a formal complaint to [email protected] with the subject line "Privacy Complaint" and a description of your concern, including any previous correspondence with golsbat on the matter. golsbat will acknowledge formal complaints within 3 business days and provide a substantive response within 21 business days.
8.3 Policy Updates and Notifications
golsbat reviews this Privacy Policy periodically and will update it to reflect changes in our data practices, applicable law, or platform functionality. The current version number and effective date are displayed at the top of this page. When material changes are made to this Privacy Policy, golsbat will notify registered players via their registered email address prior to the changes taking effect. Continued use of golsbat.net following notification of a revised Privacy Policy constitutes acceptance of the updated Policy. If you do not accept a material change, please cease using golsbat.net and contact [email protected] to request account closure before the revised Policy takes effect.
golsbat is committed to plain-English explanations of all data practices. If any part of this Privacy Policy is unclear, please contact us at [email protected] (plain text — not a clickable link) before registering or continuing to use the platform. We are happy to explain any provision in straightforward terms. For further information about your data rights and responsible gaming tools, visit the Responsible Gaming and FAQ pages.
Explore golsbat With Confidence
Your data is protected. Your identity is secure. Now explore cricket betting, live casino, slots, and more — all on a platform built for Bangladesh players. 18+ only. Play responsibly.