bat88 Privacy Policy

1 Data We Collect

bat88 collects personal data through several channels: directly from you when you register an account or contact our support team; automatically through your use of the platform; and, in limited circumstances, from third-party verification and payment service providers. The categories of personal data we collect include the following:

bat88 does not knowingly collect personal data from individuals under the age of 18. 18+ If we become aware that personal data has been collected from an underage user, we will delete that data promptly and close the associated account.

2 How We Use Your Data

bat88 uses the personal data we collect for clearly defined purposes. We do not use your data for any purpose that is incompatible with the original reason for which it was collected. The primary purposes and the corresponding legal bases are set out below:

• Account creation and management: To create, maintain, and administer your bat88 account, including processing login requests, updating account details, and managing account preferences. Legal basis: contractual necessity.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records. Legal basis: contractual necessity.
• Identity verification (KYC): To verify your identity and age in compliance with anti-money-laundering and responsible gaming obligations. Legal basis: legal obligation.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct. Legal basis: legitimate interest.
• Customer support: To respond to your queries, complaints, and support requests submitted via live chat or email. Legal basis: contractual necessity and legitimate interest.
• Personalisation: To tailor promotional offers, game recommendations, and platform content to your activity history and stated preferences, where you have consented to such personalisation. Legal basis: consent.
• Marketing communications: To send you information about bat88 promotions, seasonal offers (such as BPL, IPL, Eid, and Pohela Boishakh campaigns), and new game launches — but only where you have opted in to receive such communications. Legal basis: consent.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and maintain records as required by anti-money-laundering regulations. Legal basis: legal obligation.
• Platform improvement: To analyse aggregated usage data in order to improve platform performance, fix technical issues, and develop new features. Legal basis: legitimate interest.

You may withdraw your consent to marketing communications and personalisation at any time by updating your account preferences or by contacting our support team at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

3 Cookies & Tracking Technologies

bat88 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the platform, remember your preferences, analyse traffic, and deliver relevant content. Cookies are small text files stored on your device by your web browser when you visit the bat88 platform.

• Strictly necessary cookies: These cookies are essential for the bat88 platform to function. They enable core features such as account login sessions, security tokens, and shopping cart state. These cookies cannot be disabled.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and last-visited game section — to provide a more personalised experience. Disabling these cookies may reduce platform functionality.
• Analytics cookies: bat88 uses aggregated analytics data to understand how players navigate the platform and to identify technical issues. Analytics data is processed in aggregate and is not used to identify individual users.
• Marketing and tracking cookies: Where you have consented, bat88 and its affiliate marketing partners may use cookies to track referral paths, measure campaign effectiveness, and deliver relevant promotional content. You may withdraw consent at any time.

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

4 Data Sharing & Third Parties

bat88 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. We share personal data with third parties only where it is necessary to deliver platform services, comply with legal obligations, or protect the security of the platform. The categories of third parties with whom we may share data are:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data necessary to process your deposit and withdrawal transactions. These providers operate their own privacy policies and are independently responsible for the data they hold.
• Identity verification providers: Third-party KYC and AML service providers may receive copies of your identity documents and personal details in order to perform identity verification checks on bat88's behalf. These providers are contractually bound to process your data only for verification purposes.
• Game providers: Technology partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and gameplay data to support game delivery, fairness auditing, and jackpot verification. These providers do not receive your full identity profile.
• IT and hosting providers: Cloud hosting, content delivery, and platform infrastructure providers may process data as part of operating the bat88 platform. All such providers are subject to data processing agreements that restrict their use of your data.
• Fraud prevention and security services: bat88 may share transactional and behavioural data with fraud detection partners to identify and prevent money laundering, bonus abuse, and other prohibited activities.
• Regulatory and law enforcement authorities: bat88 will disclose personal data to relevant authorities where required to do so by applicable law, court order, or regulatory directive. bat88 will notify affected users of such disclosures where it is legally permitted to do so.

All third-party service providers engaged by bat88 are required to implement appropriate technical and organisational security measures to protect your personal data, and are prohibited from using it for any purpose other than the specific service they provide to bat88.

5 Data Retention & Storage

bat88 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, including satisfying applicable legal, regulatory, and accounting obligations. The table below outlines our standard retention periods by data category:

bat88's platform data is hosted on secure servers. Data may be stored and processed in locations outside Bangladesh where our technology partners operate data centres. In all such cases, bat88 ensures that appropriate contractual safeguards are in place to protect the security and confidentiality of your data during any international transfer.

When personal data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with any individual. Where deletion is not technically feasible within an immediate timeframe, the data will be isolated from active processing until deletion is completed.

6 Your Privacy Rights

As a bat88 player, you hold the following rights in relation to your personal data. bat88 is committed to honouring these rights promptly and without undue restriction. To exercise any of the rights below, contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request".

• Right of access: You have the right to request a copy of the personal data that bat88 holds about you, along with information about how it is being used. We will respond to verified access requests within 30 days.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic account information directly through your bat88 account settings.
• Right to erasure: You may request that bat88 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interest. Note that this right is subject to our legal and regulatory retention obligations — we cannot delete data that we are legally required to retain.
• Right to restrict processing: In certain circumstances, you may request that bat88 suspend the processing of your personal data — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data that is based on bat88's legitimate interest, including profiling for marketing personalisation purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.

7 Data Security Measures

bat88 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• TLS/SSL encryption: All data in transit between your device and the bat88 platform is encrypted using Transport Layer Security (TLS 1.2 or higher). You can verify this by checking for the padlock icon in your browser address bar when visiting bat88.im.
• Data encryption at rest: Sensitive data stored in bat88's systems — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within bat88's internal systems is restricted on a strict need-to-know basis. All staff who access personal data are bound by confidentiality obligations and receive data protection training.
• Two-factor authentication: bat88 offers optional 2FA for all player accounts and applies mandatory 2FA for all internal staff accounts with access to production systems.
• Penetration testing and vulnerability management: bat88's platform undergoes periodic security assessments by independent security professionals. Identified vulnerabilities are prioritised and remediated in accordance with their severity level.
• Incident response: bat88 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, bat88 will notify you and relevant authorities within the timeframes required by applicable law.
• Payment security: bat88 does not store full card numbers or bKash/Nagad PIN credentials. Payment processing is handled by PCI DSS-compliant payment gateway partners who apply their own rigorous security standards.

While bat88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also have a role to play in keeping your account secure — please refer to the Account Security section of the bat88 Terms & Conditions for best-practice guidance.

8 Policy Updates & Contact

bat88 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered players by sending an email to the address associated with their bat88 account and by displaying a prominent update notice on the platform for a period of at least 14 days following the change.

The date shown at the top of this Privacy Policy reflects the most recent revision. Continued use of the bat88 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how bat88 handles your personal data.

Previous versions of this Privacy Policy are available on request by contacting our support team. bat88 maintains an archived record of all prior policy versions with their respective effective dates.

If you have any questions, concerns, or requests relating to this Privacy Policy or to bat88's data practices, please contact our Data Protection team using the details below. We aim to respond to all enquiries within 5 business days.