Privacy Policy

This privacy policy clarifies how MelBet gathers, manages, retains, and safeguards personal information for users of our platform. It includes all website guests, individuals who register on our site, and all users of our services. MelBet processes personal information while observing the data protection regulations, including the General Data Protection Regulation (GDPR), where applicable. MelBet is fully transparent about how we handle your information. By choosing to engage with our platform, we expect that you agree to this policy.

1. Data We Collect

We collect two categories of data: information you provide directly and information collected automatically when you use the platform.

Information You Provide

• Full name, date of birth, and nationality — required during account registration to verify your identity and confirm eligibility
• Email address — used for account verification, transactional notifications, and communication regarding your account
• Telephone number — used for SMS verification, two-factor authentication, and account recovery
• Residential address — required for identity verification and compliance with regulatory obligations
• Payment information — details of deposit and withdrawal methods, including card numbers (partially masked), e-wallet identifiers, and bank account details
• Identity documents — copies of government-issued photo ID, proof of address, and proof of payment method submitted during the KYC verification process
• Communication records — transcripts of live chat sessions, emails, and phone calls with our support team

Information Collected Automatically

• IP address and approximate geographic location derived from it
• Device information, including device type, operating system, browser type and version, and screen resolution
• Pages visited, time spent on each page, click patterns, and navigation paths within the platform
• Referral source — how you arrived at the platform (direct visit, search engine, advertising campaign, or external link)
• Cookies and similar tracking technologies — session identifiers, preference data, and analytics markers
• Login timestamps, session duration, and frequency of visits

2. How We Use Your Data

The data we collect is used exclusively for the following purposes:

• Account creation and management — processing your registration, maintaining your account, and enabling you to use platform features
• Identity verification — confirming your identity, age, and address in compliance with KYC and AML regulations
• Transaction processing — executing deposits, withdrawals, and bet settlements securely and accurately
• Customer support — responding to your enquiries, resolving issues, and improving the quality of our support services
• Platform improvement — analysing usage patterns to optimise the user interface, fix technical issues, and develop new features
• Security and fraud prevention — detecting suspicious activity, preventing unauthorised access, and protecting against financial crime
• Legal compliance — fulfilling our obligations under applicable laws and regulations, including responding to lawful requests from authorities
• Marketing communications — sending promotional offers and updates, but only with your explicit consent and with an opt-out option in every message

We do not use your data for any purpose beyond those listed above. If we intend to process your data for a new purpose in the future, we will notify you and obtain your consent where required.

3. Legal Basis for Processing

Each data processing activity is grounded in a specific legal basis:

• Contractual necessity — processing required to provide you with the services you have requested, including account operation and transaction execution
• Legal obligation — processing required to comply with applicable laws and regulations, such as AML reporting and tax obligations
• Legitimate interest — processing that serves our reasonable business interests, such as fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental rights
• Consent — processing based on your explicit opt-in, such as receiving marketing communications or enabling non-essential cookies

You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data Sharing with Third Parties

MelBet does not sell, rent, or trade your personal data to third parties for commercial or advertising purposes. We share data only in the following limited circumstances:

• Payment processors — certified providers that handle deposit and withdrawal transactions on our behalf, bound by strict confidentiality agreements
• Identity verification services — third-party providers that assist with KYC checks by cross-referencing submitted documents against official databases
• Technology providers — hosting, cloud infrastructure, and anti-fraud services that support platform operations, all bound by data processing agreements
• Regulatory and legal authorities — in response to court orders, regulatory requests, or when required by law to report suspicious activity
• Professional advisors — legal counsel, auditors, and consultants who require access to data in the course of providing professional services to MelBet
• Corporate transactions — in the event of a merger, acquisition, or sale of assets, users will be notified in advance of any change in data control

All third parties that process data on our behalf are contractually required to implement security measures equivalent to our own and are prohibited from using data for any purpose outside the defined scope of their engagement.

5. International Data Transfers

MelBet works in several countries around the world. Your data may be stored where you live. When we transfer data to other countries, we put measures in place for data protection by having contract templates signed by the data protection authorities in those countries, checking if the protection for data in that country is adequate, and other technical protection measures like data protection by encryption while it is being transferred and stored. You may demand to be informed about the measures that protect your data when we transfer it to other countries.

MelBet stores most user data in servers that are located in the European Economic Area (EEA). When user data is transferred to processors located outside the EEA, we perform a transfer impact assessment and check the legal protections that are available in the country where the processors are located. If the legal protections are inadequate, we apply additional measures like pseudonymisation and limiting the number of users who can access the data. Our data protection team keeps a record of all the data that we transfer to other countries, and this record can be accessed by the regulatory bodies that ask to see it.

6. Cookies and Tracking Technologies

MelBet uses cookies and similar technologies to operate the platform, analyse traffic, and personalise your experience. We categorise cookies as follows:

• Essential cookies — required for core platform functionality such as login, navigation, and security. These cannot be disabled
• Analytics cookies — collect anonymised data about how visitors use the site, helping us identify the most popular pages and detect usability issues
• Functional cookies — store your preferences such as language, currency, and display settings to provide a customised experience on return visits
• Advertising cookies — used to measure the effectiveness of marketing campaigns and display relevant promotional content

Cookie Preferences can be modified by either the consent banner shown during your first visit or your browser settings. You can use the platform without analytics or advertising cookies. Essential core functionality cookies may be disabled according to your preference. The Cookie Policy page will have the full details.

7. Data Security

We implement comprehensive technical and organisational measures to protect your data against unauthorised access, loss, alteration, or destruction:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• AES-256 encryption for sensitive data stored in our databases
• Password hashing using salted algorithms that prevent recovery of plaintext passwords
• Role-based access controls ensure that staff can only access data necessary for their specific functions
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Continuous monitoring systems that generate real-time alerts for unusual access patterns or potential breaches
• Encrypted backups stored in geographically separate, access-restricted environments
• Incident response procedures that ensure affected users are notified within 72 hours of a confirmed data breach

8. Data Retention

We retain your data only for as long as necessary to fulfil the purposes for which it was collected. The following retention schedule applies:

• Active account data — retained for the duration of account activity
• Financial transaction records — retained for a minimum of five years in compliance with AML regulations
• KYC documentation — retained for five years from the date of account closure
• Customer support records — retained for twelve months from the date of ticket resolution
• Navigation logs and session data — retained for ninety days
• Analytics cookie data — retained for a maximum of twenty-six months

Once the retention period ends, we permanently delete data or anonymize it so that re-identification is impossible.

We accept requests regarding the premature deletion of user data via our helpdesk. However, we will assess data deletion requests individually, remain cognizant of the applicable laws that may hinder deletion practices, and require us to retain data.

9. Your Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• Right of access — request a copy of all personal data we hold about you
• Right to rectification — correct any inaccurate or incomplete data
• Right to erasure — request deletion of your data when it is no longer necessary for the purposes for which it was collected
• Right to restriction — request that we limit the processing of your data in certain circumstances
• Right to object — object to data processing based on legitimate interest grounds
• Right to data portability — receive your data in a structured, commonly used, machine-readable format
• Right to withdraw consent — revoke any previously given consent without affecting the lawfulness of prior processing
• Right to lodge a complaint — file a complaint with the relevant data protection authority if you believe your rights have been violated

To exercise any of these rights, use the Contact Us page to reach out to our data protection team. We will respond to requests within 30 days. For more complex exercises of rights that require additional verification, we will notify you of an extended 60 days to respond.

10. Protection of Minors

MelBet maintains a strict policy of avoiding the collection and processing of personal data of individuals below the age of 18. There are age verification checks embedded in our registration process, which prevent the under-18s from registering. Once we know that a minor has submitted personal data, we will delete such data without delay and remove the account. We suggest guardians keep a watch on their minor’s digital footprints and use blocking software to deny access to online gambling servers.

MelBet advertises only on age-18-and-above-legal gambling sites and does not publish ads on media where the under-18s are the main audience. Every marketing campaign is reviewed to ensure that it does not target the youth and that it does not use imagery or words that appeal to under-18s. If we discover that a third-party partner informs the under-18s about MelBet, that partnership will be evaluated and may be terminated.

11. Changes to This Policy

This policy may change as the law, technology, or the way we do business changes. We will post the date of the most recent revision at the top of the policy. Significant changes will be communicated via email to our users who have registered at least 7 days before the effective date of the changes. If you continue to access our services, we will assume you have consented to our revised terms.

12. Contact Us

If you have questions about this privacy policy or how we handle your personal data, you can reach out to us through the live chat feature on our website and mobile app, which is available 24/7, the privacy email on the Contact Us page, or through the contact form in your dashboard. Requests regarding the handling of your personal data will be answered within 15 business days. If you have concerns regarding our compliance, you can also reach out to the data protection authority in your country or PAGCOR through www.pagcor.ph.