bat222 Privacy Policy

bat222 processes your personal data on the following legal grounds depending on the nature of the processing activity:

• Contractual necessity: Processing your identity, contact, and financial data is required to fulfil our obligations under the account registration agreement — without it, we cannot create your account, process payments, or verify your identity.
• Legal obligation: Anti-money laundering (AML) regulations require bat222 to collect, verify, and retain identity and transaction data for a minimum statutory period. This processing is mandatory and cannot be opted out of.
• Legitimate interests: Technical and usage data is processed to detect fraud, prevent multi-accounting, maintain platform security, and improve service quality. These interests do not override your fundamental privacy rights.
• Consent: Marketing communications (promotional offers, seasonal campaigns tied to events like Eid, Pohela Boishakh, or BPL) are sent only where you have provided explicit opt-in consent. You may withdraw this consent at any time.

bat222 uses your personal data exclusively for the following purposes:

• Creating, verifying, and maintaining your player account.
• Processing deposits and withdrawals through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard.
• Conducting Know Your Customer (KYC) and age verification checks to confirm you are 21 years of age or older.
• Detecting and preventing fraud, money laundering, multi-accounting, and bonus abuse.
• Providing customer support and resolving account disputes.
• Sending transactional notifications (deposit confirmations, withdrawal status updates, security alerts) by email or SMS.
• Monitoring gaming behaviour to support responsible gaming obligations and identifying players who may need intervention.
• Complying with applicable legal and regulatory requirements.
• Sending promotional communications where you have provided explicit consent.

bat222 uses cookies and similar tracking technologies to operate the Platform effectively. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in after using the bat222 Login. They cannot be disabled.
• Performance cookies: Collect anonymised data about how players navigate the Platform — which games are most popular, which pages load slowly — to help us improve overall performance.
• Functional cookies: Remember your preferences such as language settings and notification preferences to personalise your experience.
• Analytics cookies: Used with privacy-respecting analytics tools to understand aggregate user behaviour without identifying you personally.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your ability to use some features of the Platform.

bat222 shares personal data with third parties only in the following limited circumstances, and only to the extent necessary for each specific purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners receive transactional data (amount, account reference) necessary to execute your payment instructions.
• Identity verification providers: Third-party KYC and AML compliance services receive identity documents submitted during account verification. These providers are contractually bound to strict confidentiality and data security standards.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and game session data to deliver game content and resolve game-related disputes. They do not receive your full personal identity.
• Legal and regulatory authorities: Where required by applicable law or a valid legal order, bat222 may disclose personal data to government authorities, law enforcement agencies, or courts.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bat222's business, player data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy.

bat222 implements a layered security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Multi-factor authentication (MFA) options available to players via the bat222 Login settings.
• Regular independent security audits and penetration testing of the Platform infrastructure.
• Role-based internal access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
• Automated anomaly detection systems that flag unusual login patterns, suspicious transactions, and potential data breach indicators.

While bat222 takes all reasonable technical and organisational precautions, no system is entirely immune to risk. In the event of a data breach that is likely to affect your rights and freedoms, bat222 will notify affected players promptly in accordance with applicable notification requirements.

bat222 retains different categories of personal data for different periods, determined by the purpose for which the data was collected and applicable legal requirements:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years in accordance with financial record-keeping standards applicable to payment processing activities.
• Support communications: Retained for three (3) years from the date of the last communication to facilitate dispute resolution and quality monitoring.
• Technical and usage data: Retained in aggregated, anonymised form indefinitely for platform analytics. Raw technical logs are deleted after ninety (90) days.
• Marketing consent records: Retained for the duration of the consent plus three (3) years to demonstrate compliance in the event of a regulatory query.

When data reaches the end of its retention period, it is securely deleted using industry-standard data destruction methods or fully anonymised so that it can no longer be attributed to you.

bat222's primary servers are operated in secure data centre environments. Some of our third-party service providers — including certain game providers and KYC verification partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, bat222 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose obligations equivalent to those described in this Policy on any overseas recipient of your data.

By using the Platform, you acknowledge and consent to the transfer of your personal data to service providers located outside Bangladesh where such transfers are necessary for the operation of the Platform.

The bat222 Platform is strictly for adults aged 21 and above. bat222 does not knowingly collect, store, or process the personal data of any individual under the age of 21. Registration by individuals under 21 is prohibited. If bat222 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account permanently closed.

If you believe that a minor under the age of 21 has created an account or provided personal data to bat222, please contact us immediately at [email protected] so we can take prompt corrective action.

bat222 may send you promotional content about new games, bonuses, cricket betting offers (including BPL, IPL, and T20 tournaments), seasonal campaigns tied to events such as Eid, Pohela Boishakh, Victory Day (16 December), and Independence Day (26 March), and other bat222 Platform updates — but only where you have given explicit opt-in consent.

• You may opt in to marketing communications during registration or at any time via your account settings.
• You may withdraw consent and unsubscribe from all marketing communications at any time by contacting [email protected] or using the unsubscribe link included in every promotional email.
• Withdrawal of marketing consent does not affect the lawfulness of any processing conducted prior to withdrawal, and does not affect your ability to continue using the Platform.

bat222 may update this Privacy Policy from time to time to reflect changes in our data practices, technology, or applicable legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Where changes are significant, bat222 may provide additional notice through account notifications or email.

Your continued use of the Platform after any update to this Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how bat222 protects your personal data.