bat999 Privacy Policy

1 Data Controller

bat999 acts as the data controller in respect of the personal data it collects from players and site visitors. As data controller, bat999 determines the purposes and means of processing personal data and is responsible for ensuring that such processing complies with applicable data protection law. For any privacy-related enquiries, players may contact us directly at [email protected]. We aim to respond to all privacy-related requests within 10 business days of receipt.

2 Personal Data We Collect

bat999 collects personal data through a variety of means including account registration, identity verification processes, payment transactions, and routine platform use. The categories of personal data we may collect include:

bat999 does not knowingly collect personal data from individuals under the age of 21. If we become aware that data has been submitted by a person under 21 years of age, that data will be deleted and the associated account closed.

3 How We Collect Your Data

bat999 collects personal data through the following channels:

• Direct submission: Information you provide when creating your account, completing identity verification, making deposits or withdrawal requests, filling in contact forms, or corresponding with our support team.
• Automated collection: Technical data and usage data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access and interact with the bat999 platform.
• Third-party sources: Identity verification data may be cross-referenced with third-party KYC and anti-fraud service providers. Payment data may be supplemented by information received from payment processors such as bKash, Nagad, Rocket, and Upay. We receive only the data necessary to confirm transaction status and player identity.
• Device and network data: Your device automatically transmits certain technical information including IP address, browser fingerprint, and geolocation signals when you connect to bat999. This data is used solely for security, fraud prevention, and service optimisation.

4 Purposes and Legal Basis for Processing

bat999 processes personal data only where a valid legal basis exists. The primary purposes for which we process your data, and the corresponding legal basis for each, are set out below:

• Account management and Service delivery: Processing is necessary for the performance of the contract between you and bat999, including account creation, identity verification, bet placement, and payment processing.
• Legal and regulatory compliance: bat999 is required to collect and retain certain data to comply with applicable anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and other legal duties. Processing for this purpose is based on legal obligation.
• Fraud prevention and security: bat999 processes technical and behavioural data to detect, investigate, and prevent fraudulent activity, unauthorised access, and other security threats. This processing is based on our legitimate interest in protecting the integrity of the platform and the safety of all players.
• Responsible gaming monitoring: bat999 monitors usage patterns to identify players who may be exhibiting signs of problem gambling. This processing serves our legitimate interest in player welfare and our regulatory obligations in the responsible gaming space.
• Service communications: We send transactional communications (deposit confirmations, withdrawal notifications, security alerts, account updates) based on contractual necessity. Promotional communications are sent only where you have provided consent, and you may withdraw that consent at any time.
• Platform improvement and analytics: Aggregated and anonymised usage data is processed to improve the bat999 platform, personalise the player experience, and develop new product features. This is based on our legitimate interests, subject to appropriate safeguards.

5 Cookies and Tracking Technologies

bat999 uses cookies and similar technologies to operate the platform, remember your preferences, measure site traffic, and support security functions. The types of cookies we use include:

• Strictly necessary cookies: Required for the platform to function. These enable core features such as session management, login authentication, and fraud detection. They cannot be disabled without breaking essential service functionality.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalised experience on return visits.
• Analytical cookies: Collect anonymised data about how players use the bat999 platform — which pages are visited most frequently, how users navigate between sections, and where errors occur. This data is used solely to improve the platform.
• Security cookies: Assist in detecting malicious activity, identifying bot traffic, and enforcing account security policies.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in or use core platform features. bat999 does not use cookies to serve third-party advertising.

6 Data Sharing and Disclosure

bat999 does not sell, rent, or trade your personal data to unaffiliated third parties. We may, however, share your data in the following limited circumstances:

• Payment processors: Financial data is shared with payment service providers — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — strictly to process your deposits and withdrawals. These providers act as independent data controllers for their own processing activities.
• Identity verification providers: KYC and AML compliance service providers may receive identity data for the sole purpose of verifying your identity and screening against applicable watchlists. These providers are bound by strict confidentiality obligations.
• Game technology providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data (e.g., player ID, game session identifiers, wager amounts) necessary to deliver their games on the bat999 platform. No directly identifiable personal data such as your name or address is passed to game providers.
• Legal and regulatory authorities: bat999 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when legally required to do so, or when disclosure is necessary to protect the rights, safety, or property of bat999 or its players.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data held by bat999 may be transferred to the acquiring entity. Players will be notified of any such transfer and any change in data controller identity.

All third-party service providers that process personal data on bat999's behalf are required to implement appropriate technical and organisational security measures and to process data only in accordance with bat999's documented instructions.

7 International Data Transfers

bat999 operates primarily to serve players in Bangladesh. Some of our third-party service providers, including game suppliers and identity verification partners, may be located in or process data from jurisdictions outside Bangladesh. Where such international transfers occur, bat999 takes steps to ensure that appropriate safeguards are in place, including contractual protections consistent with applicable data protection standards. By using the bat999 Service, you acknowledge that your data may be transferred to, stored, and processed in jurisdictions outside your country of residence.

8 Data Retention

bat999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Account data is retained for the duration of your active account relationship with bat999 and for a minimum period of five years following account closure, in order to satisfy AML record-keeping obligations and to resolve any post-closure disputes.
• Transaction records, including deposit and withdrawal history, are retained for a minimum of seven years from the date of the transaction.
• Identity verification documents are retained for as long as required by applicable law, typically five to seven years from the end of the customer relationship.
• Technical and usage data used solely for analytics and platform improvement is retained in anonymised form and may be kept indefinitely in aggregate.
• Support correspondence is retained for three years from the date of last contact, unless related to an ongoing dispute or legal matter.

When personal data is no longer required and no legal retention obligation applies, bat999 will securely delete or anonymise it.

9 Data Security

bat999 applies a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• Industry-standard SSL/TLS encryption for all data transmitted between your device and the bat999 servers.
• Encryption of sensitive data at rest, including financial records and identity documents, using AES-256 or equivalent standards.
• Strict access controls: personal data is accessible only to bat999 personnel whose roles require it, and all access is logged and audited.
• Regular penetration testing and vulnerability assessments carried out by qualified security professionals.
• Multi-factor authentication options for player accounts and mandatory MFA for all administrative staff access to production systems.
• Incident response procedures to detect, contain, and report data security incidents within required regulatory timeframes.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying bat999 immediately if you suspect your account has been compromised.

10 Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal data bat999 holds about you:

• Right of access: You may request a copy of the personal data bat999 holds about you and information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your bat999 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction of processing: You may ask bat999 to restrict the processing of your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contractual relationship, you may request that bat999 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where bat999 processes your data on the basis of your consent (e.g., for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, though bat999 may override such an objection where it has compelling legitimate grounds.

To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 10 business days. We may need to verify your identity before processing your request.

11 Children's Privacy

The bat999 Service is strictly intended for adults aged 21 years and above. bat999 does not knowingly collect, solicit, or process personal data from individuals under the age of 21. If we discover that personal data has been submitted by or on behalf of a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned to the verified payment method used for the deposit.

If you believe that a minor may have registered an account on the bat999 platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

12 Third-Party Links and Services

The bat999 platform may contain references to third-party payment providers and game suppliers whose own privacy policies govern the handling of data collected through their respective services. bat999 is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access in connection with your use of bat999, including the payment providers you use for deposits and withdrawals. Specifically, the privacy practices of bKash, Nagad, Rocket, and Upay are governed independently by those companies and are outside bat999's control.

13 Updates to This Policy

bat999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this page. Where changes are significant, we may also notify active players by email to the address registered to their bat999 account.

Your continued use of the bat999 Service following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how bat999 protects your data.