Privacy Policy — How bat299 Protects Your Data

When you register for and use a bat299 account, we collect personal information in several ways. The categories below describe all types of data bat299 may collect, the context in which each category arises, and the lawful basis on which we rely to process it.

1.1 Registration & Identity Data

When you create a bat299 account, you provide us with foundational identity information. This includes your full legal name, date of birth, email address, Bangladeshi mobile phone number, and preferred currency (Bangladeshi Taka, ৳). This data is collected on the basis of contractual necessity — without it, we cannot operate your account or verify your eligibility to use the platform.

1.2 KYC Verification Documents

To comply with anti-money laundering obligations and to confirm that all players are aged 18 or above, bat299 collects copies of government-issued identification documents. Accepted documents include:

• National Identity Card (NID) issued by the Bangladesh Election Commission;
• Valid Bangladeshi passport (biographical data page);
• Driver's licence issued by BRTA;
• Recent utility bill or bank statement confirming residential address (within 90 days).

KYC documents are processed and stored securely. Access is restricted to authorised compliance personnel only. Documents are never used for any purpose beyond identity verification and legal compliance.

1.3 Financial & Payment Data

When you make a deposit or withdrawal, bat299 collects transaction-related information including your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), the mobile number or account number associated with that method, transaction amounts in BDT, and transaction timestamps. bat299 does not store complete card numbers or mobile banking PINs — payment authentication is handled directly by your payment provider.

1.4 Gameplay & Activity Data

bat299 automatically records your activity on the platform to enable fair play, dispute resolution, and responsible gaming monitoring. This includes game history, bet amounts, win/loss records, session start and end times, and interactions with bonus offers. This data is processed on the basis of contractual performance and our legitimate interest in maintaining platform integrity.

1.5 Technical & Device Data

When you access bat299 via a web browser or mobile device, we automatically collect certain technical data, including:

• IP address and approximate geographic location (city/region level);
• Browser type and version;
• Device type, operating system, and screen resolution;
• Referring URL and pages visited within the bat299 platform;
• Session duration and click-path data.

This data is used to optimise the platform experience, detect fraudulent access, and diagnose technical issues.

1.6 Communications Data

If you contact bat299 support via email at [email protected], or through any on-platform messaging feature, we retain records of that correspondence. This allows us to maintain continuity in support interactions and to resolve disputes fairly.

bat299 does not sell your personal data. We share personal information only with the categories of third parties described below, and only to the extent necessary for each stated purpose.

3.1 Payment Processors

To process deposits and withdrawals, bat299 shares relevant financial data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or your bank. Each of these providers operates under its own privacy policy and data protection obligations. bat299 is not responsible for the data practices of third-party payment processors, but selects only established, regulated financial service providers.

3.2 Game Content Providers

Games on the bat299 platform are supplied under licence from third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited session and gameplay data to facilitate game delivery, record-keeping, and RNG (random number generator) certification. Game providers do not receive your full identity data or payment details.

3.3 KYC & Compliance Services

bat299 may use third-party identity verification services to assist with the KYC process. These services process identity document images and cross-reference them against available databases solely for the purpose of confirming your identity and age. They are bound by strict data processing agreements and may not use your data for any other purpose.

3.4 Legal & Regulatory Disclosure

bat299 may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of bat299, its players, or the public. bat299 will disclose only the minimum data required to satisfy any such legal obligation.

3.5 Business Transfers

In the event that bat299 undergoes a merger, acquisition, or sale of assets, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to data processing practices that results from it, prior to data being transferred.

bat299 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. While no online platform can guarantee absolute security, bat299 applies industry-standard best practices across all systems that handle personal data.

5.1 Technical Safeguards

• TLS/SSL Encryption: All data in transit between your device and bat299 servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Encrypted Data Storage: Sensitive fields including passwords, KYC document references, and financial identifiers are stored in encrypted form using industry-standard algorithms.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Firewalls & Intrusion Detection: bat299 infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection monitoring.
• Regular Security Audits: The bat299 platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

5.2 Organisational Safeguards

• All bat299 personnel with access to personal data are bound by confidentiality obligations;
• Data handling procedures are documented and reviewed regularly;
• In the event of a data breach affecting your personal information, bat299 will notify affected players without undue delay, describing the nature of the breach, the data affected, and the steps taken to mitigate harm.

5.3 Your Role in Account Security

The security of your account also depends on steps you take yourself. bat299 recommends using a strong unique password, enabling two-factor authentication where available, and never sharing your login credentials. bat299 will never ask for your password in any communication. If you suspect your account has been compromised, contact [email protected] immediately.

bat299 respects your right to understand and control how your personal data is used. The following rights are available to all bat299 players. To exercise any of these rights, contact the bat299 privacy team at [email protected] with the subject line "Privacy Request — [Right Name]". bat299 aims to respond to all privacy requests within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of all personal data bat299 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. bat299 will provide this information in a clear, structured format at no charge.

7.2 Right to Rectification

If any personal data bat299 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered email address has changed or your name was entered incorrectly during registration, we will update your records promptly upon verification of the correction.

7.3 Right to Erasure

You may request that bat299 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and bat299 has no overriding legitimate interests. As noted in Section 6, certain data categories are subject to mandatory legal retention periods and cannot be deleted early.

7.4 Right to Restrict Processing

You may request that bat299 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and the outcome of that objection is pending.

7.5 Right to Data Portability

Where bat299 processes your personal data on the basis of your consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.

7.6 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, bat299 will immediately cease all marketing communications to you. To unsubscribe from marketing, email [email protected] with the subject "Unsubscribe".