bat399 Privacy Policy — Your Data, Protected

bat399 collects personal data from players in several ways: directly through the account registration and verification process, automatically through your use of the platform, and occasionally from trusted third-party sources. We only collect data that is genuinely necessary for the purposes described in this Privacy Policy, and we do not retain personal data for longer than required.

1.1 Information You Provide Directly

When you create and manage a bat399 account, you voluntarily provide us with personal information including:

• Identity data: Full legal name, date of birth, nationality, and national identity document (NID) or passport number provided during KYC (Know Your Customer) verification.
• Contact data: Email address, mobile phone number, and residential address (including city — such as Dhaka, Chittagong, Sylhet, or Rajshahi — and postal code).
• Account credentials: Username and encrypted password. bat399 stores passwords using one-way hashing; we never store or view your plain-text password.
• Financial data: Payment method details including bKash mobile number, Nagad account number, Rocket account, Upay account, Visa/Mastercard card details (last four digits only), or bank account information for Dutch-Bangla Bank, City Bank, or other supported institutions. Full card numbers are handled exclusively by our payment processors and are never stored on bat399 servers.
• Communications: Content of messages you send to bat399 customer support via email or live chat, including your name, contact details, and the substance of your enquiry.
• Responsible gaming data: Any self-exclusion requests, deposit limits, session time limits, or cooling-off periods you set through your account settings.

1.2 Information Collected Automatically

When you access and use the bat399 platform, our systems automatically record certain technical data about your device and browsing behaviour. This includes:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited on the bat399 platform, games played, bets placed, time and duration of sessions, clickstream data, and search queries entered within the platform.
• Transaction data: Full record of deposits, withdrawals, bets, wins, losses, and bonus redemptions associated with your account.
• Location data: Approximate geographic location derived from your IP address. bat399 does not collect precise GPS-level location data unless you explicitly grant permission on a mobile device.
• Log data: Server logs recording access times, error events, and platform interactions, retained for security monitoring and fraud prevention purposes.

1.3 Information from Third Parties

bat399 may receive personal data about you from the following trusted third-party sources where this is necessary to operate the platform safely and compliantly:

• Identity verification providers: We use third-party KYC services to verify the authenticity of identity documents and confirm your age and identity against your account registration data.
• Payment processors: Our payment partners (including mobile financial service providers such as bKash, Nagad, and Rocket) may share transaction confirmation data with bat399 to verify deposits and process withdrawals.
• Fraud and risk management services: bat399 works with specialist fraud detection partners who may provide risk scores or flag suspicious activity associated with an IP address, device, or payment method.

bat399 processes your personal data only for lawful, specified, and legitimate purposes. The following table summarises the primary purposes for which we use your data, along with the legal basis for each:

bat399 does not sell your personal data to any third party, and we do not use your data for purposes incompatible with those listed above. Where we rely on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

If bat399 intends to use your personal data for a new purpose that is materially different from those described in this policy, we will notify you in advance and, where required, seek your explicit consent before proceeding.

bat399 treats your personal data with strict confidentiality. We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. We share your data only in the following limited and controlled circumstances:

• Service providers and processors: bat399 engages carefully selected third-party service providers who process personal data on our behalf under written data processing agreements. These include KYC verification providers, payment processors (bKash, Nagad, Rocket, Visa, Mastercard, Dutch-Bangla Bank, City Bank), fraud detection services, customer support platforms, and IT infrastructure providers. These processors may only use your data for the specific purpose for which they were engaged and may not use it for any independent purpose.
• Game providers: Where you play games hosted by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Ezugi), certain session and transaction data may be shared with the game provider to facilitate gameplay, dispute resolution, and compliance with game-level RNG certification requirements. Game providers receive only the minimum data necessary for these purposes.
• Legal and regulatory disclosures: bat399 may disclose personal data to law enforcement authorities, regulators, or other governmental bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, bat399 will disclose only the specific data requested and will, where legally permissible, notify the affected player of the disclosure.
• Business transfers: In the event of a merger, acquisition, corporate restructuring, or sale of all or part of the bat399 business, your personal data may be transferred to the acquiring entity as part of that transaction. bat399 will notify affected players of any such transfer and the privacy terms applicable to their data under the new ownership.
• Protection of rights: bat399 may share personal data where it reasonably believes disclosure is necessary to protect the rights, property, or safety of bat399, its players, or the public — for example, in the investigation of fraud, money laundering, or serious abuse of the platform.

bat399 uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, maintain your login session, detect and prevent fraud, and analyse usage patterns to improve the player experience.

4.1 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and enable core features such as the game lobby and bet placement. These cookies cannot be disabled without breaking platform functionality.
• Performance and analytics cookies: These collect anonymised data about how players use bat399 — which pages are most visited, where players encounter errors, and how navigation flows are used. This data is aggregated and does not identify individual players.
• Functional cookies: These remember your personalisation choices such as preferred sports markets, display settings, and notification preferences.
• Security cookies: These assist in detecting and preventing fraudulent activity, bot access, and account takeover attempts. They record device fingerprints and session tokens for authentication purposes.

4.2 Managing Cookies

You may control the use of non-essential cookies through your browser settings. Most modern browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may prevent you from logging in or using core bat399 platform features. Disabling performance or functional cookies will not prevent you from using the platform but may reduce the quality of your experience.

bat399 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on third-party websites.

bat399 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption: All data transmitted between your device and bat399 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This protects your login credentials, payment details, and personal information in transit.
• Encrypted data storage: Sensitive personal data — including identity documents, payment method references, and account credentials — is encrypted at rest using AES-256 encryption on our secure servers.
• Access controls: Access to personal data within bat399 is restricted on a strict need-to-know basis. Staff members with access to player data are subject to confidentiality obligations and regular security training.
• Intrusion detection and monitoring: bat399 operates 24/7 security monitoring of its platform infrastructure to detect and respond to potential security incidents in real time.
• Regular security audits: Our platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.

5.1 Data Retention

bat399 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Active account data is retained for the lifetime of your account plus a minimum of five (5) years following account closure, to comply with applicable anti-money laundering and record-keeping requirements.
• KYC identity verification documents are retained for a minimum of five (5) years following the verification event, as required by applicable law.
• Transaction records (deposits, withdrawals, bets, wins, bonuses) are retained for a minimum of five (5) years.
• Customer support communications are retained for up to three (3) years from the date of the last interaction.
• Marketing preference data is retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

As a bat399 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]. bat399 will respond to all legitimate requests within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data that bat399 holds about you, together with information about how it is used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update many details directly through your bat399 account settings.
• Right to erasure ("right to be forgotten"): You may request that bat399 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that this right is subject to bat399's legal obligations to retain certain data for minimum periods as described in Section 5.1.
• Right to restrict processing: You may request that bat399 restrict the processing of your data — for example, while the accuracy of data you have disputed is being verified, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where bat399 relies on legitimate interests as its legal basis. You also have the right to object at any time to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bat399 will not charge a fee for responding to a privacy rights request unless the request is manifestly unfounded, excessive, or repetitive. Where a fee is applied, bat399 will notify you in advance of the applicable charge.

The bat399 platform integrates with a number of third-party services to deliver its full product offering. These include game content providers, payment gateways, and analytics platforms. While bat399 carefully vets all third-party partners and requires them to maintain appropriate data protection standards, please be aware of the following:

• Game studios: Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate their own platforms and may collect certain session-level data in connection with your gameplay. bat399 recommends reviewing the privacy policies of individual game studios for details of their data practices.
• Payment providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or any supported banking service, the payment provider operates under its own terms of service and privacy policy. bat399 is not responsible for the data practices of payment providers once a transaction has been initiated through their systems.
• Analytics tools: bat399 may use third-party analytics services to collect aggregated, anonymised usage data. These services are configured to anonymise IP addresses and are prohibited from using bat399 player data for their own purposes.

bat399 is not responsible for the privacy practices of any third-party service or website that is not operated directly by bat399. Any data you provide directly to a third party — outside the bat399 platform — is governed by that party's own privacy policy.

bat399 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. When we make material changes to this policy, we will publish the updated version on this page with a revised effective date. For significant changes, we may also notify you directly via email or through an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how bat399 protects your personal data. Your continued use of the bat399 platform following any update constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bat399 handles your personal data, please contact our dedicated data protection team at:

bat399 takes all privacy-related enquiries seriously. If you are not satisfied with the outcome of a privacy complaint submitted to bat399, you retain the right to escalate the matter through applicable legal channels.