bat222 Privacy Policy

This Privacy Policy ("Policy") applies to all individuals who access, browse, register on, or otherwise interact with the bat222 platform, including the website at bat222.biz, the bat222 mobile web application, and all associated services (collectively, the "Platform"). bat222 is the data controller responsible for the personal data collected through the Platform.

By registering an Account on bat222 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must immediately cease use of the Platform.

This Policy is to be read together with the bat222 Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

bat222 is committed to ensuring that your privacy is protected at all times. We maintain this Policy in plain English to ensure it is accessible and understandable to all players, including those based in Dhaka, Chittagong, Sylhet, Khulna, and across Bangladesh.

bat222 collects the following categories of personal data. The table below provides a structured reference of data categories, specific data points collected, and the primary purpose of collection.

bat222 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case that information is used solely to administer the responsible gaming measure.

bat222 collects personal data through the following channels:

• Direct registration: Data you provide when creating your bat222 Account, including your name, mobile number, email address, and date of birth.
• Account activity: Data generated by your use of the Platform, including gameplay records, betting history, deposit and withdrawal transactions, and session data.
• KYC submissions: Identity and address verification documents you upload in response to a bat222 verification request.
• Support interactions: Information you provide when contacting bat222 via live chat, WhatsApp (+880 1700 000 222), or email.
• Automated technical means: Cookies, server logs, and similar tracking technologies that collect technical and usage data as you navigate the Platform. See Section 7 for full details on cookies.
• Payment providers: Confirmation data and transaction references received from bKash, Nagad, Rocket, Upay, and bank partners when you make a deposit or withdrawal.
• Third-party fraud and identity verification services: Where bat222 engages specialist third-party providers to assist with KYC and fraud screening, those providers may supply bat222 with verification outcomes and risk scores.

bat222 uses the personal data it collects for the following purposes:

• Account creation and management: To register your bat222 Account, maintain it, and provide you with access to Platform features including games, betting markets, and the cashier.
• Identity and age verification: To confirm that you meet the 18+ age requirement and to verify that your identity matches the payment methods registered to your Account.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfers, and to maintain accurate financial records of all transactions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other forms of abuse on the Platform.
• Responsible gaming: To monitor player activity for signs of problem gambling and to administer deposit limits, loss limits, session timers, reality checks, and self-exclusion arrangements.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Legal and regulatory compliance: To comply with applicable legal obligations, including record-keeping requirements, anti-money laundering (AML) obligations, and responses to lawful requests from authorities.
• Service improvement: To analyse aggregate usage patterns and improve the bat222 Platform, its games, and its user experience.
• Promotional communications: To send you information about bat222 bonuses, promotions, and offers, where you have opted in to receive such communications. You may opt out at any time by contacting support.

bat222 does not use your personal data for automated individual decision-making or profiling in a manner that produces legal or similarly significant effects without human review.

bat222 processes personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between bat222 and the player — i.e., to operate the bat222 Account, process payments, and deliver the services described in the Terms & Conditions.
• Legitimate interests: Processing for purposes of fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations and responses to lawful orders from competent authorities.
• Consent: Processing for purposes where bat222 has obtained your specific, informed, and freely given consent, including optional promotional communications. You may withdraw consent at any time by contacting [email protected] without affecting the lawfulness of processing carried out prior to withdrawal.

bat222 does not sell, rent, or trade your personal data. bat222 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals.
• Identity and KYC verification providers: Specialist third-party services engaged by bat222 to perform document verification and age checks.
• Fraud prevention and AML screening services: Third-party providers that assist bat222 in detecting suspicious activity and fulfilling anti-money laundering obligations.
• Game technology providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who power games on the bat222 Platform. These providers may receive technical session data necessary to deliver their games.
• IT infrastructure and hosting providers: Cloud hosting and server infrastructure providers who process data on bat222's behalf under strict data processing agreements.
• Legal and regulatory authorities: Competent governmental or regulatory authorities where bat222 is required by law or a valid legal order to disclose personal data.

bat222 requires all third-party data processors to implement appropriate technical and organisational security measures and to process personal data only in accordance with bat222's documented instructions.

bat222 uses cookies and similar tracking technologies on the Platform to enhance user experience, maintain session state, and support security and analytics functions. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the Platform. These cookies maintain your login session, remember your language preference, and enable core security functions. They cannot be disabled without affecting Platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how visitors use the Platform, including pages visited, session duration, and error events. This data helps bat222 identify and fix usability issues and improve Platform performance.
• Functional cookies: Used to remember your preferences within the Platform, such as your chosen game view, responsible gaming settings, and notification preferences.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious session behaviour.

bat222 does not use third-party advertising or retargeting cookies. No cookies on the bat222 Platform are used to track your activity across unrelated third-party websites.

You may control cookie settings through your browser settings. Disabling strictly necessary cookies may impair your ability to log in to and use the bat222 Platform. Disabling other cookie categories will not affect core Platform access but may reduce the quality of your experience.

bat222 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Account data (active accounts): Retained for the full duration of your Account relationship with bat222 and for a period of five (5) years following Account closure, to satisfy legal and regulatory record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with financial record-keeping requirements applicable to the platform.
• KYC verification documents: Retained for five (5) years following Account closure or the completion of the relevant verification process, whichever is later.
• Customer support and communications records: Retained for three (3) years from the date of the last communication, to support dispute resolution.
• Technical and usage data (logs): Retained for thirteen (13) months on a rolling basis, after which they are automatically purged from active systems.
• Self-exclusion records: Retained indefinitely to prevent the re-registration of excluded players, unless a player formally requests removal following the expiry of their exclusion period and bat222 is satisfied that retention is no longer necessary.

Where bat222 is required by law to retain data for a longer period than specified above, the legally required retention period shall apply. Where bat222 is required to delete data sooner than the periods specified above by a valid legal order, bat222 will comply with that order subject to any applicable legal challenge process.

bat222 respects your rights in relation to your personal data. You may exercise the following rights by submitting a request to [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data that bat222 holds about you, along with information about how that data is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that bat222 holds about you. You may also update basic Account information directly from your Account settings panel.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing on legitimate interest grounds. This right is subject to bat222's legal obligations to retain certain data as described in Section 8.
• Right to Restrict Processing: You have the right to request that bat222 restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: You have the right to receive the personal data you have provided to bat222 in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data on the basis of bat222's legitimate interests. bat222 will cease that processing unless bat222 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bat222 will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or bat222 receives a high volume of requests simultaneously, bat222 may extend this period by a further thirty (30) days, in which case bat222 will notify you of the extension and the reason for it within the initial thirty-day period.

bat222 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive, in which case bat222 reserves the right to charge a reasonable administrative fee or to decline the request, with reasons provided.

bat222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the bat222 Platform is protected using 256-bit TLS/SSL encryption. All bat222 pages are served exclusively over HTTPS.
• Encryption at rest: Sensitive personal data, including payment details and KYC documents, is encrypted at rest using AES-256 encryption on bat222's servers.
• Access controls: Access to personal data within bat222's internal systems is restricted to staff members who require that access to perform their specific job functions, on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication (2FA): bat222 offers 2FA via registered Bangladeshi mobile number for all player Accounts and enforces 2FA for all internal administrative access.
• Penetration testing and vulnerability assessments: bat222 conducts regular independent security assessments of the Platform and its underlying infrastructure to identify and remediate vulnerabilities.
• Incident response: bat222 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a high risk to your rights, bat222 will notify affected players without undue delay.

While bat222 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials. bat222 strongly recommends enabling 2FA and using a unique, strong password for your bat222 Account.

The bat222 Platform is strictly intended for adults aged 18 years and above. bat222 does not knowingly collect personal data from individuals under the age of 18. bat222 operates a mandatory age verification process at registration and reserves the right to request proof of age at any time.

If bat222 discovers or is notified that personal data has been collected from an individual under the age of 18, bat222 will immediately close the relevant Account, void all associated bets and winnings, return any deposited funds to the payment source, and permanently delete all personal data associated with that Account from bat222's systems.

If you are a parent or guardian and you believe that your child may have registered an Account on bat222, please contact bat222 immediately at [email protected] so that bat222 can take the appropriate remedial action.

bat222 reserves the right to update this Privacy Policy at any time to reflect changes in bat222's data processing practices, applicable law, or the services offered on the Platform. The effective date displayed at the top of this page will be updated each time a revision is made.

Where bat222 makes a material change to this Policy — meaning a change that significantly affects the way bat222 collects or uses your personal data — bat222 will provide advance notice to registered players via a prominent notice on the Platform and/or by notification to your registered mobile number or email address at least seven (7) days before the change takes effect.

For non-material changes (such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or additions of new sections that describe existing practices more clearly), bat222 may update the Policy without advance notice, but will always update the effective date.

Your continued use of the bat222 Platform following the notification of any material change to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to any revised Privacy Policy, you must close your Account and cease use of the Platform prior to the date on which the revised Policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or to bat222's handling of your personal data, please contact the bat222 Data Support team through the following channels:

• Email: [email protected] — Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• WhatsApp: +880 1700 000 222
• Live Chat: Available 24/7 via the bat222 Platform
• Service Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

bat222 aims to respond to all privacy-related written enquiries within 48 hours and to all live chat privacy queries within 5 minutes during standard operational conditions. Data rights requests as described in Section 9 are subject to the 30-day response period set out in that section.