bat88 Privacy Policy

Introduction

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by bat88 ("bat88", "we", "us", "our") in connection with the operation of the bat88 online betting and casino platform accessible at bat88.io, including any associated mobile applications and related services.

bat88 is committed to protecting the privacy and personal data of all individuals who interact with our platform ("Players", "you", "your"). This Policy has been prepared to ensure that Players registered in Bangladesh and all other users of the bat88 platform understand how their information is handled and what choices they have over that information.

By registering an Account with bat88, making a deposit, or otherwise using the bat88 platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. This Policy is to be read alongside the bat88 Terms and Conditions, which together govern your use of the bat88 platform.

Personal Data We Collect

bat88 collects personal data in several categories depending on the nature of your interaction with the platform. The table below summarises the main categories of data we collect and the primary reason for collection.

bat88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records unrelated to responsible gaming assessments, or biometric data. Where a responsible gaming concern arises, we may record relevant information as part of our duty of care obligations.

How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data bat88 holds is provided directly by you in the course of registering an Account, completing identity verification, making deposits or withdrawal requests, contacting our support team, or participating in promotions and surveys. This includes all information entered into registration forms, KYC document uploads, and support communications.

3.2 Data Collected Automatically

When you access and use the bat88 platform, certain technical data is collected automatically by our systems. This includes your IP address, browser and device information, session timestamps, pages visited, and interaction events within the platform. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 07 of this Policy.

3.3 Data From Third Parties

bat88 may receive personal data about you from third-party sources in limited circumstances, including:

• Payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) — transaction confirmation and wallet verification data.
• Identity verification services — supplementary identity and age verification data used to complete our KYC process.
• Fraud detection partners — risk assessment signals used to protect the platform and its Players from fraudulent activity.
• Game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi) — gameplay session data returned by provider APIs for settlement and dispute resolution purposes.

How We Use Your Personal Data

bat88 uses the personal data we collect for the following purposes:

4.1 Providing and Managing the Platform

We use your identity, contact, and financial data to create and manage your bat88 Account, process deposits and withdrawals, settle bets, and deliver the full range of betting and gaming services available on the platform. Without this data, we are unable to provide our core services.

4.2 Identity Verification and Regulatory Compliance

bat88 is required to verify the identity and age of all registered Players. We use identity and verification document data to confirm that you are at least 21 years of age, to comply with anti-money laundering (AML) obligations, and to meet any other applicable regulatory requirements. This processing is mandatory — refusing to provide required verification data will result in restricted Account access.

4.3 Fraud Prevention and Security

We use technical data, financial data, and gaming activity data to detect and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct. Automated risk-scoring systems and human review processes both form part of our fraud prevention framework.

4.4 Responsible Gaming

bat88 monitors gaming activity data to identify patterns that may indicate problem gambling behaviour. Where such patterns are identified, bat88 may contact the Player, apply responsible gaming interventions such as deposit limits, or in serious cases, initiate a responsible gaming suspension. This processing is carried out in the legitimate interests of player welfare and in fulfilment of our responsible gaming obligations.

4.5 Customer Support and Dispute Resolution

Communications data and gaming activity data are used to resolve support queries, investigate complaints, and settle disputed transactions. Support communications are retained for a minimum of three years to support dispute resolution.

4.6 Marketing and Promotions

Where you have opted in to marketing communications, bat88 may use your contact data and marketing preferences to send you information about promotions, bonuses, new games, and seasonal offers relevant to your interests. You may withdraw your marketing consent at any time by contacting [email protected] or adjusting your Account preferences. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

4.7 Platform Improvement and Analytics

Aggregated and anonymised technical and gaming activity data is used to analyse platform performance, identify usability improvements, optimise the player experience, and develop new features. This analytics processing does not identify individual Players.

Legal Basis for Processing

bat88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you as a registered Player — including Account creation, transaction processing, and service delivery — is carried out on the basis that it is required to fulfil our contractual obligations to you.
• Legal Obligation: Processing carried out to comply with applicable legal and regulatory requirements — including KYC identity verification, AML record-keeping, and age verification — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is carried out on the basis of bat88's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out for direct marketing and optional communications is based on your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data Sharing and Disclosure

6.1 Who We Share Data With

bat88 does not sell, rent, or trade your personal data. We share personal data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose:

• Payment processors and financial institutions — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard — for the purpose of processing deposits and withdrawals.
• Identity and age verification providers — third-party KYC service providers engaged by bat88 to assist with identity document verification and sanctions screening.
• Game studios and content providers — Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and other licensed studios — who receive the minimum data necessary to deliver their games within the bat88 platform.
• Fraud detection and cybersecurity providers — specialist third parties who process technical and behavioural data to assist bat88 in detecting fraudulent and abusive activity.
• IT infrastructure and cloud service providers — providers of hosting, database, and communication infrastructure engaged to support platform operations under strict data processing agreements.
• Legal and professional advisors — lawyers, accountants, and compliance consultants engaged by bat88, who are bound by professional confidentiality obligations.

6.2 Disclosure Required by Law

bat88 may disclose personal data to competent authorities, law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. In such cases bat88 will disclose only the minimum data required to satisfy the legal obligation and, where permitted by law, will notify the relevant Player of the disclosure.

6.3 Business Transfers

In the event that bat88 or any part of its business is acquired by or merged with another entity, personal data held by bat88 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store certain preferences or session information. bat88 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform.

7.2 Types of Cookies Used by bat88

• Strictly Necessary Cookies: These cookies are essential for the bat88 platform to function. They enable core features such as Account login sessions, security tokens, and transaction continuity. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: These cookies collect aggregated information about how Players use the platform — such as which pages are visited most frequently and whether error messages are encountered. This data is used to improve platform performance and user experience.
• Functional Cookies: These cookies allow the platform to remember choices you have made, such as language preferences or game display settings, to provide a more personalised experience.
• Security Cookies: These cookies support our fraud detection and account security systems by storing session integrity tokens and risk assessment signals.

7.3 Managing Cookies

You may manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, doing so may impair your ability to log in to your bat88 Account or use certain platform features. Instructions for managing cookies are available in your browser's help documentation.

Data Security

bat88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• SSL/TLS Encryption: All data transmitted between your device and the bat88 platform is encrypted using industry-standard SSL/TLS protocols. Our platform maintains an active SSL certificate, which you can verify via the padlock indicator in your browser.
• At-Rest Encryption: Sensitive personal data stored in bat88 databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bat88 is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role. All access events are logged and regularly audited.
• Two-Factor Authentication: bat88 systems used to access Player data are protected by mandatory two-factor authentication for all staff.
• Regular Security Audits: bat88 engages independent security professionals to conduct regular penetration testing and vulnerability assessments of our platform infrastructure.
• Incident Response: bat88 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, bat88 will notify affected Players and take all appropriate remedial action as swiftly as operationally possible.

While bat88 applies robust security measures, no data transmission over the internet or electronic storage system is completely immune to risk. Players are encouraged to maintain strong, unique passwords for their bat88 Account and to contact [email protected] immediately if they suspect any unauthorised access.

Data Retention

bat88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with bat88's data destruction procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify any individual.

Your Privacy Rights

As a Player of bat88, you hold the following rights in respect of your personal data. bat88 is committed to facilitating the exercise of these rights promptly and without undue restriction:

10.1 Right of Access

You have the right to request a copy of all personal data that bat88 holds about you. We will provide a written summary of your data within 30 calendar days of receiving a valid request. This is commonly referred to as a Subject Access Request (SAR).

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Where technically feasible, corrections will be applied within 14 calendar days of a valid request. Note that corrections to verified identity data may require re-submission of KYC documents.

10.3 Right to Erasure

You have the right to request that bat88 deletes your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. This right is subject to overriding legal retention obligations — bat88 cannot delete data it is legally required to retain, such as AML records.

10.4 Right to Restrict Processing

You have the right to request that bat88 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request its transfer to another service provider where technically feasible.

10.6 Right to Object

You have the right to object to processing carried out on the basis of bat88's legitimate interests, including profiling for fraud prevention and responsible gaming purposes. bat88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

10.7 How to Exercise Your Rights

All privacy rights requests should be submitted in writing to [email protected] with the subject line "Privacy Rights Request" and must include your full name, registered Account username, and a description of the right you wish to exercise. bat88 may request proof of identity before processing a request to protect against fraudulent access to Player data.

Children's Privacy

The bat88 platform is strictly for adults aged 21 years and over. bat88 does not knowingly collect personal data from any individual under the age of 21. Registration by persons under 21 is prohibited under the bat88 Terms and Conditions, and all registrations are subject to mandatory age verification.

If bat88 becomes aware that personal data has been collected from an individual who is under the age of 21, we will immediately suspend the relevant Account, void any transactions conducted during that period, return any deposited funds, and securely delete the personal data of the underage individual as swiftly as our legal obligations permit.

If you believe that a person under the age of 21 has registered an Account on bat88, please notify us immediately at [email protected] so that we may investigate and take appropriate action.

Third-Party Links and Services

The bat88 platform may contain references to third-party services such as game studio providers. bat88 does not control the privacy practices of these third parties and accepts no responsibility for their data handling activities. Where you interact directly with a third-party service accessible through the bat88 platform — for example, a game studio's own help interface — you are subject to that third party's privacy policy.

bat88 recommends that Players review the privacy policies of any third-party services they interact with. The inclusion of a reference to a third-party service on the bat88 platform does not constitute an endorsement of that party's privacy practices.

Amendments to This Policy

bat88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The effective date at the top of this document will be updated to reflect the date on which the revised Policy enters into force.

Where changes are material — meaning they significantly affect your rights or the way we handle your data — bat88 will provide reasonable advance notice to registered Players via the email address on record. For minor updates that do not materially change your rights or our obligations, bat88 will update the Policy without individual notification, and your continued use of the platform following publication will constitute acceptance of the revised Policy.

Contact and Complaints

bat88 takes all privacy concerns seriously. If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how bat88 has handled your personal data, please contact our Privacy Team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Enquiry" or "Privacy Rights Request" as appropriate
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
• Response Time: Acknowledgement within 72 hours; full response within 30 calendar days

14.1 Formal Complaints Procedure

If your privacy concern is not resolved to your satisfaction following initial contact with the bat88 support team, you may escalate your complaint by submitting a formal written complaint to [email protected] with the subject line "Formal Privacy Complaint". Your complaint should include your full name, registered Account username, a clear description of the concern, the dates of any relevant events, and copies of any supporting documentation.

bat88 will acknowledge all formal privacy complaints within 48 hours and aims to provide a full written response within 14 calendar days of receipt. Where a resolution cannot be reached within that period, bat88 will provide a status update and an estimated resolution timeframe. All formal complaints are reviewed by the bat88 Compliance Team independently of the initial support interaction.

14.2 Data Protection Officer

bat88 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and with applicable data protection obligations. The DPO may be contacted via the support email above, clearly addressed to the attention of the Data Protection Officer. The DPO operates independently and will handle all escalated privacy matters with appropriate confidentiality and impartiality.