Privacy Policy — How bitbat Protects Your Data

§1 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is the operator of the bitbat platform, accessible at bitbat.vip. When this Policy refers to "bitbat", "we", "us", or "our", it means the platform operator in its capacity as the entity that determines the purposes and means of processing your personal data.

If you have any questions about how bitbat handles your personal data, or if you wish to exercise any of your data rights, you may contact us directly using the details provided in Section 15 of this Policy. All data-related enquiries are handled by our dedicated support team and are treated as confidential.

§2 Data We Collect

2.1 Information You Provide Directly

When you register an account, complete identity verification, make a deposit or withdrawal, or contact our support team, you provide us with personal data that may include:

• Identity data: Full legal name, date of birth, gender, and nationality as stated on government-issued identification documents such as your National Identity Card (NID) or passport.
• Contact data: Email address, mobile phone number, and residential address including city, district, and postal code within Bangladesh or your country of residence.
• Financial data: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details, or card details (where applicable). Full card numbers are never stored on bitbat servers — payment tokenisation is handled by our certified payment processors.
• Verification data: Copies of identity documents and proof of address submitted during KYC verification procedures.
• Communication data: The content of messages you send to our support team via live chat, email, or any other communication channel.

2.2 Data Collected Automatically

When you access and use the bitbat Platform, we automatically collect certain technical data, including:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and time zone settings.
• Usage data: Pages visited, features used, betting and gaming activity (game titles played, bet amounts, session duration), login timestamps, and navigation paths through the Platform.
• Cookie data: Information stored by session and analytics cookies as described in Section 5 of this Policy.
• Transaction data: A complete record of all deposits, withdrawals, bets placed, winnings received, and bonus claims associated with your account.

2.3 Data from Third Parties

We may receive supplementary data about you from trusted third-party sources in specific circumstances, including:

• Identity verification and fraud prevention agencies that cross-reference the information you provide against public records.
• Payment processors who confirm the status and ownership of payment methods linked to your account.
• Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may share gameplay session data necessary for dispute resolution.

§3 Legal Basis for Processing

bitbat processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contract performance: Processing is necessary to create and manage your account, process deposits and withdrawals, settle bets, and provide the services you have requested.
• Legal obligation: Processing is necessary to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and responsible gaming obligations, including age verification.
• Legitimate interests: Processing is necessary for bitbat's legitimate interests in preventing fraud, maintaining platform security, improving our services, and communicating operational updates, provided these interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent — for example, for optional marketing communications or non-essential analytics cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

§4 How We Use Your Data

4.1 Platform Operations

The primary purpose of collecting your personal data is to operate and deliver the bitbat platform. This includes creating and maintaining your account, processing financial transactions, settling bets and casino game outcomes, providing customer support, and sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.

4.2 Identity Verification and Compliance

bitbat is required by law and by responsible gaming obligations to verify the identity and age of all players before processing withdrawals and at various stages of account activity. Your identity and address data are used solely for this purpose and are not processed for any commercial use beyond compliance requirements.

4.3 Fraud Prevention and Security

We use device data, IP addresses, transaction patterns, and behavioural analytics to detect and prevent fraudulent activity, money laundering, multi-accounting, and any other conduct that violates our Terms & Conditions. This processing is carried out in our legitimate interests and in the interests of the wider player community.

4.4 Service Improvement

Aggregated and anonymised usage data is used to analyse platform performance, identify technical issues, optimise the user experience, and develop new features. Where possible, this analysis is conducted on data that cannot be linked back to any individual player.

4.5 Personalisation

With your consent, we may use your gameplay history and stated preferences to personalise the content, promotions, and recommendations shown to you on the Platform. You can opt out of personalisation at any time from your account settings or by contacting support.

4.6 Responsible Gaming Monitoring

bitbat monitors account activity to identify signs of problem gambling behaviour, including unusual increases in deposit frequency, prolonged session durations, and rapid loss escalation. Where such patterns are identified, our responsible gaming team may reach out to offer support tools. This processing is conducted in your best interests and forms part of our duty of care obligations.

§5 Cookies & Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device, maintain session state, and record your preferences. bitbat uses both first-party cookies (set directly by bitbat) and third-party cookies (set by our trusted service providers).

5.2 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your login session, remember items in your account, and ensure secure navigation between pages. These cookies cannot be disabled without affecting core functionality.
• Analytics cookies: These cookies collect anonymised information about how visitors use the Platform — which pages are visited most, where users encounter errors, and how traffic flows through the site. This data is used to improve the platform experience. These cookies are only set with your consent.
• Preference cookies: These cookies remember your language settings, display preferences, and any account-level customisations you have configured.

5.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impair the functionality of some features on the Platform. bitbat does not use cookies for the purpose of serving third-party advertising, and we do not share cookie data with advertising networks.

§6 Data Sharing & Disclosure

bitbat does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the following circumstances, and only to the extent necessary:

6.1 Service Providers

We share data with carefully selected service providers who assist in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC and identity verification providers, cloud hosting and infrastructure services, game content providers, and customer support tools. All service providers are required to process your data strictly in accordance with our instructions and are prohibited from using it for their own purposes.

6.2 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bitbat, its players, or the public. Where permitted, we will notify you of any such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bitbat's business assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer via email or Platform notification in advance, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.

6.4 Aggregate and Anonymised Data

bitbat may share aggregated, anonymised statistical data — for example, total numbers of active players in Dhaka, average session duration, or most-played game categories — with third parties for research or commercial purposes. This data cannot be used to identify any individual player.

§7 International Data Transfers

bitbat primarily processes and stores player data on servers located within or serving the South Asia region. In some cases, data may be transferred to or processed by service providers located in other countries. Where such transfers occur, bitbat ensures that appropriate safeguards are in place — including contractual data protection clauses — to ensure that your data receives a level of protection consistent with this Policy.

By using the bitbat Platform, you acknowledge and consent to the potential transfer of your personal data to servers and processors located outside your country of residence, subject to the safeguards described above.

§8 Data Retention

bitbat retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any ongoing disputes or enforce our Terms & Conditions.

• Active account data: Retained for the duration of your account relationship with bitbat.
• Transaction and betting records: Retained for a minimum of 5 years from the date of the transaction, in accordance with anti-money laundering regulations.
• KYC and identity verification documents: Retained for a minimum of 5 years from account closure or the last transaction date, whichever is later.
• Support communications: Retained for a minimum of 2 years from the date of the interaction.
• Self-exclusion records: Retained indefinitely to ensure that self-excluded players cannot be re-registered on the Platform, even after their exclusion period has elapsed.

When data is no longer required for any of the above purposes, it is securely deleted or irreversibly anonymised.

§9 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bitbat:

• Right of access: You may request a copy of the personal data we hold about you. We will respond to access requests within 30 days of receipt.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data. Some corrections can be made directly via your account settings; others may require identity re-verification.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no legal obligation requires us to retain it.
• Right to restriction: You may request that we restrict the processing of your data — for example, while a correction request is being resolved — rather than deleting it outright.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to bitbat, where processing is based on consent or contract.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. bitbat will assess the objection and cease processing unless compelling legitimate grounds override your rights.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our support team using the details in Section 15. We may ask you to verify your identity before processing any data rights request.

§10 Children's Privacy

The bitbat Platform is strictly intended for individuals aged 18 years and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that personal data has been collected from a person under 18, that account will be immediately closed, all associated data will be deleted, and any deposited funds will be returned to the original payment source after investigation.

Parents and guardians who believe that a minor may have registered on the Platform are encouraged to contact our support team immediately at [email protected] so that appropriate action can be taken promptly.

§11 Third-Party Links

The bitbat Platform may display references to or information about third-party services, such as game providers and payment partners. However, bitbat does not include outbound links to external websites. Should any third-party service you access in connection with the Platform have its own privacy policy, that policy governs the collection and use of your data by that third party. bitbat is not responsible for the privacy practices of third-party service providers beyond the data-processing agreements we maintain with them.

§12 Security Measures

bitbat implements a comprehensive range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• Transport security: All data transmitted between your device and the bitbat Platform is encrypted using 256-bit SSL/TLS protocols.
• Password security: Account passwords are stored using industry-standard one-way cryptographic hashing algorithms. Plaintext passwords are never stored or transmitted.
• Access controls: Access to personal data by bitbat personnel is restricted on a strict need-to-know basis, with role-based access controls and audit logging in place.
• Payment security: Full payment card numbers are never stored on bitbat servers. Card-based transactions are tokenised by our certified payment processors in accordance with applicable payment security standards.
• Monitoring and testing: bitbat conducts regular security assessments, vulnerability testing, and system audits to identify and address potential risks proactively.

While bitbat takes all reasonable steps to protect your data, no internet-based system can guarantee absolute security. You also have a responsibility to protect your account credentials and to notify us immediately if you suspect unauthorised access to your account.

§13 Marketing Communications

With your explicit consent, bitbat may send you promotional communications about offers, bonuses, tournaments, new games, and platform updates by email or SMS. These communications will always be relevant to your account activity and will never be shared with or sent on behalf of third parties.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings, or by replying to any marketing email with an unsubscribe request. Opting out of marketing communications does not affect the delivery of transactional messages such as deposit confirmations, withdrawal notifications, or account security alerts, which are essential to the operation of your account.

§14 Amendments to This Policy

bitbat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our services. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you via email or a prominent Platform notification at least 7 days before the changes take effect.

The most current version of this Privacy Policy will always be accessible at bitbat.vip/privacy-policy, with the effective date prominently displayed at the top of the document. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

§15 Contact & Data Requests

For any privacy-related questions, data access requests, or concerns about how bitbat handles your personal information, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest route for urgent data concerns.
• Email: [email protected] — please include "Privacy Request" in the subject line and your registered account username in the message body.
• Response time: All data rights requests are acknowledged within 48 hours and fully resolved within 30 calendar days of receipt.
• Operating hours: 00:00–23:59 Bangladesh Standard Time (BST, UTC+6) daily.

bitbat treats all privacy-related communications with strict confidentiality. We may ask you to verify your identity before actioning any data request in order to protect the security of your account and personal information.