bat66 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how bat66 ("bat66", "we", "us", "our") collects, uses, stores, discloses, and protects personal information provided by users ("you", "your") of the bat66 platform at bat66.app ("Platform"). By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your information as described herein. If you do not agree with this Policy, you must not use the Platform.

bat66 takes data privacy seriously. We collect personal data only to the extent necessary to provide our services — account management, payment processing, responsible gaming compliance, fraud prevention, and customer support. We do not sell your personal data to third parties under any circumstances. We do not share your data with advertising networks for marketing purposes without your explicit consent.

bat66 collects personal information in the following categories when you register an account, use the Platform, or contact bat66 support:

• Identity information: full name, date of birth, and government-issued identification number as provided during KYC verification.
• Contact information: mobile phone number and email address used during registration.
• Payment information: mobile banking account identifiers (bKash, Nagad, Rocket, Upay) and bank account details used for deposits and withdrawals. bat66 does not store full card numbers; payment credentials are tokenised.
• Technical data: IP address, device type, operating system, browser type, session timestamps, and access logs collected automatically when you use the Platform.
• Gaming activity data: game history, wagering records, bonus usage, win/loss records, and responsible gaming tool settings.
• Communications data: records of your correspondence with bat66 customer support, including live chat transcripts and email messages.

bat66 does not collect sensitive personal data such as biometric data, racial or ethnic origin, religious beliefs, or health information. bat66 does not collect data from minors. If bat66 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

bat66 uses the personal information it collects for the following purposes only:

• Account creation and management: to register your account, verify your identity, and maintain your account profile throughout your use of the Platform.
• Payment processing: to process deposits and withdrawals via your registered payment methods (bKash, Nagad, Rocket, Upay, or bank transfer) and to reconcile transaction records.
• Regulatory compliance: to meet anti-money-laundering (AML) obligations, to conduct KYC verification as required, and to comply with any applicable legal obligations including responding to lawful requests from competent authorities.
• Responsible gaming: to monitor gaming activity for signs of problem gambling, to apply deposit limits, loss limits, or self-exclusion settings you have chosen, and to enforce bat66's 21+ age policy.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account abuse, collusion, or any breach of bat66's Terms and Conditions.
• Customer support: to respond to your support queries, to resolve complaints, and to improve the quality of bat66's customer service based on interaction history.
• Service improvement: to analyse aggregated, anonymised usage data in order to improve the Platform's performance, reliability, and user experience. bat66 uses aggregated analytics only — individual player data is not used for profiling.

bat66 processes your personal data on the following legal bases:

• Contractual necessity: processing your data is necessary to perform the contract between you and bat66 (i.e., to provide the Platform services you have requested, including account management and payment processing).
• Legal obligation: processing is necessary for bat66 to comply with applicable laws and regulatory requirements, including KYC, AML obligations, and responses to lawful authority requests.
• Legitimate interests: bat66 processes certain technical and gaming activity data to protect the security and integrity of the Platform, to prevent fraud, and to improve service quality — provided these interests are not overridden by your privacy rights.
• Consent: where bat66 wishes to send you optional marketing communications about promotions, new games, or seasonal offers, bat66 will request your explicit consent beforehand. You may withdraw this consent at any time by contacting bat66 support.

bat66 does not sell or trade your personal data. bat66 may share your personal information with third parties only in the following strictly limited circumstances:

• Payment processors: bat66 shares transaction-relevant identifiers with payment service providers (such as bKash and Nagad gateway operators) solely to facilitate your deposits and withdrawals. These providers are contractually bound to handle your data securely and may not use it for any other purpose.
• Game providers: bat66 passes anonymised player session identifiers to licensed game providers (such as Evolution Gaming, Pragmatic Play, Spribe, and Ezugi) to enable game delivery and to record game outcomes. These providers receive no personal identifying information beyond session tokens.
• Regulatory and law enforcement authorities: bat66 may disclose personal data to competent governmental or regulatory authorities where required by law, court order, or regulatory investigation. bat66 will, where legally permitted, notify affected account holders of such disclosure.
• Service providers supporting Platform operations: bat66 may share limited technical data with trusted third-party service providers (such as cloud hosting, security monitoring, or customer support software vendors) who assist in operating the Platform. These providers are contractually prohibited from using bat66 user data for their own purposes.

All third-party recipients of bat66 user data are subject to contractual data processing agreements that prohibit them from using bat66 user data for any purpose other than delivering the specific service for which the data was shared. bat66 does not permit any third party to use your data for independent marketing, profiling, or resale purposes.

bat66 treats payment and financial data with the highest level of security. Deposits processed via bKash, Nagad, Rocket, and Upay are handled through the respective providers' secure APIs. bat66 does not store your mobile banking PIN, bKash wallet password, Nagad PIN, or any authentication credential associated with your payment accounts. bat66 stores only the information necessary to identify the payment method (such as the last four digits of a registered mobile number or a tokenised account reference) for the purposes of withdrawals and transaction reconciliation.

All financial transaction records are retained for a minimum of five years to comply with applicable financial regulations and AML obligations. This retention period applies regardless of whether the associated account remains active. Upon the expiry of this retention period, financial records are securely deleted in accordance with bat66's data disposal procedures.

bat66 uses cookies and similar session technologies on the Platform for the following purposes:

• Essential session cookies: used to keep you authenticated while you are logged in, to maintain your game session state, and to protect against cross-site request forgery (CSRF). These cookies are strictly necessary for the Platform to function and cannot be disabled without breaking core functionality.
• Preference cookies: used to remember your display preferences (such as language settings) so that you do not need to re-enter them on each visit. These cookies do not track browsing activity outside the bat66 Platform.
• Analytics cookies: bat66 may use anonymised, first-party analytics data to understand aggregate usage patterns, such as which pages are visited most frequently. bat66 does not use Google Analytics or any third-party analytics platform that shares data externally.

You can manage, restrict, or delete cookies at any time through your browser's settings. Please note that disabling essential session cookies will prevent you from logging in to your bat66 account and using core Platform features. bat66 does not use tracking pixels, web beacons, or fingerprinting technologies to identify or monitor you outside the Platform.

bat66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply: account data and identity documents are retained for the duration of your account plus five years following account closure; financial transaction records are retained for a minimum of five years from the date of each transaction; gaming activity logs are retained for three years; customer support correspondence is retained for two years from the date of the last interaction.

When personal data is no longer required and the applicable retention period has expired, bat66 will securely delete or anonymise that data in accordance with its internal data disposal procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and service improvement purposes.

bat66 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data in transit; encryption of sensitive data at rest; access controls that restrict internal access to personal data on a need-to-know basis; regular security assessments and penetration testing of the Platform infrastructure; and staff training on data protection obligations.

No method of transmission over the internet or method of electronic storage is completely secure. While bat66 takes all reasonable steps to protect your personal data, bat66 cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bat66 will notify affected account holders as soon as reasonably practicable following discovery of the breach.

As a bat66 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact bat66 support at [email protected]:

• Right of access: you may request a copy of the personal data bat66 holds about you. bat66 will provide this within 30 days of receiving a valid access request.
• Right to rectification: you may request that inaccurate or incomplete personal data held by bat66 be corrected or completed. bat66 will action corrections within 5 business days of receiving valid supporting documentation.
• Right to erasure: you may request deletion of your personal data. bat66 will honour this request subject to legal retention requirements. Data subject to mandatory AML retention cannot be deleted during the mandatory five-year window.
• Right to restrict processing: you may request that bat66 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to withdraw consent: where bat66 processes your data based on your consent (for example, for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

bat66 will respond to all privacy rights requests within 30 days of receipt. Where a request is complex or bat66 receives a large volume of requests, this period may be extended by a further 30 days, in which case bat66 will notify you of the extension and the reasons for it within the initial 30-day period.

The bat66 Platform is strictly intended for adults aged 21 and above. bat66 does not knowingly collect, use, or retain personal data from any person under the age of 21. If bat66 becomes aware that personal data has been provided by or collected from a person under 21, bat66 will immediately delete that data and permanently close the associated account. All funds in that account will be forfeited in accordance with bat66's Terms and Conditions. If you believe that bat66 may have inadvertently collected personal data from a person under 21, please notify bat66 immediately at [email protected] so that appropriate action can be taken without delay.

bat66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or bat66's data processing practices. Where changes are material — meaning they significantly affect your rights or the way bat66 uses your personal data — bat66 will notify registered account holders via email or a prominent notice on the Platform at least 7 days before the amended Policy takes effect.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. bat66 recommends that you review this Policy periodically. The date at the top of this Policy indicates when it was last updated.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bat66 handles your personal information, you may contact the bat66 privacy team at any time. bat66 aims to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within 5 business days.

Email: [email protected]