badbat Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how badbat ("badbat", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("Player", "User", "you") who register an account, place bets, play casino games, or otherwise interact with the badbat platform at badbat.app. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, which together constitute the full agreement governing your use of badbat.

By registering an account with badbat or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the badbat platform and may request account closure by contacting our support team.

01 Data We Collect

badbat collects personal data through several channels: directly from you when you register an account or contact our support team; automatically when you interact with the platform; and from third-party partners where required for payment processing or identity verification.

The categories of personal data we collect include, but are not limited to, the following:

Category	Examples	Collection Method
Identity Data	Full name, date of birth, National ID (NID) number, passport number	Provided directly by you at registration or KYC verification
Contact Data	Email address, mobile number, residential address (district, division)	Provided directly by you
Financial Data	bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account details, deposit and withdrawal history	Provided by you; received from payment processors
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session timestamps	Collected automatically when you access the platform
Usage Data	Pages visited, games played, bets placed, wagering amounts, win/loss records, session duration	Collected automatically via platform analytics
Communications Data	Live chat transcripts, support emails, feedback submissions	Provided directly by you when contacting support

02 How We Use Your Data

badbat processes your personal data on the basis of contractual necessity (to operate your account and deliver the services you have requested), legal obligation (to comply with anti-money-laundering, responsible gaming, and identity verification requirements), and legitimate interest (to improve the platform and prevent fraud).

The specific purposes for which your data is used are as follows:

• Account creation and management: To register your account, verify your identity, maintain your profile, and enable you to log in securely to badbat.
• Transaction processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and Visa/Mastercard in Bangladeshi Taka (BDT).
• KYC and fraud prevention: To verify your age (18+ compliance), confirm your identity, detect and prevent fraudulent activity, money laundering, and bonus abuse.
• Responsible gaming: To monitor your betting and gaming activity for signs of problem gambling, apply self-exclusion requests, and enforce deposit limits or account time-outs as instructed by you or required by our responsible gaming programme.
• Customer support: To respond to your queries, complaints, and requests submitted via live chat or email.
• Platform improvement: To analyse aggregated usage patterns and improve the performance, design, and game selection of the badbat platform.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign updates — only where you have opted in to receive such communications. You may withdraw your consent to marketing at any time by contacting support or updating your account preferences.
• Legal and regulatory compliance: To maintain records as required by applicable law and to respond to lawful requests from regulatory or law enforcement authorities.

03 Cookies & Tracking Technologies

badbat uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform effectively and to understand how players engage with our services. A cookie is a small text file placed on your device when you visit badbat.app. Cookies do not contain executable code and cannot carry viruses.

The types of cookies used on badbat are described below:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that help prevent cross-site request forgery. These cookies cannot be disabled without breaking the platform.
• Functional Cookies: Used to remember your preferences, such as your preferred language, default deposit method, and display settings. These improve your experience but are not essential to the platform's operation.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate the platform, which pages are most visited, and where technical errors occur. This data helps us improve badbat's performance and reliability.
• Responsible Gaming Cookies: Used to track session duration and display responsible gaming prompts or time-out warnings in accordance with our player protection obligations.

You can manage or disable non-essential cookies via your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, or receive alerts before a cookie is stored. Please note that disabling certain cookies may affect the functionality of your badbat account.

04 Data Sharing & Third Parties

badbat does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your personal data with third parties only in the following limited circumstances:

• Payment processors: Your financial data (mobile wallet number, bank details) is shared with bKash, Nagad, Rocket, Upay, and our international card processing partners solely to process your deposits and withdrawals. These providers operate under strict data security obligations and are prohibited from using your data for any other purpose.
• Identity verification providers: Where required to complete KYC checks, we may share your identity documents with regulated third-party verification services. These providers process your data only for the purpose of confirming your identity and age.
• Game providers: Certain games on badbat are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the technical data (e.g., session token, stake amount) required to deliver the game to your device. They do not receive your full personal profile.
• Legal and regulatory authorities: badbat may disclose your personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, or where we believe disclosure is necessary to protect the safety, rights, or property of badbat or its players.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of badbat's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms of the new entity before the transfer takes effect.

05 Data Security

badbat implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit TLS/SSL encryption on all data transmitted between your device and our servers.
• Encrypted storage for sensitive data fields including identity document details, payment references, and authentication credentials.
• Access controls: Personal data is accessible only to badbat staff and contractors who require it to perform their job functions. All personnel with access to personal data are subject to strict confidentiality obligations.
• Intrusion detection and monitoring systems that continuously scan for suspicious access patterns, brute-force attempts, and anomalous data requests.
• Regular security assessments conducted to identify and remediate vulnerabilities in the badbat platform and its supporting infrastructure.
• Secure password hashing: Account passwords are never stored in plain text. badbat uses industry-standard one-way hashing algorithms so that even internal staff cannot retrieve your password.

Despite the measures above, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a significant risk to affected individuals, badbat will notify affected players in a timely manner and take all reasonable steps to contain and remediate the breach.

06 Data Retention

badbat retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law, our responsible gaming obligations, and our legitimate business interests in resolving disputes and preventing fraud.

The general data retention periods applied by badbat are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, in line with standard anti-money-laundering record-keeping requirements.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five (5) years from the date of each transaction.
• Betting and gaming history: Your full wagering history is retained for a minimum of three (3) years from the date of each bet or game session.
• Support communications: Live chat transcripts and support emails are retained for two (2) years from the date of the communication.
• KYC documents: Identity verification documents are retained for five (5) years following account closure, after which they are securely destroyed.
• Marketing preferences: Records of your marketing consent or opt-out are retained for the lifetime of your account and for two (2) years thereafter.

When personal data is no longer required for the purposes for which it was collected and all applicable retention periods have expired, badbat will securely delete or anonymise that data in accordance with our internal data disposal procedures.

07 Your Privacy Rights

As a player using the badbat platform from Bangladesh, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in the Privacy Contact section below.

• Right of Access: You have the right to request a copy of the personal data that badbat holds about you, along with information about how that data is being used. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (e.g., updating your mobile number) can be made directly via your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that badbat delete your personal data. This right is subject to our legal obligations — for example, transaction records that must be retained under anti-money-laundering rules cannot be erased on request.
• Right to Restrict Processing: You may request that we limit the way we use your data while a complaint or dispute is being investigated.
• Right to Object to Marketing: You have the right to object to badbat processing your data for direct marketing purposes at any time. Once you opt out, we will cease all marketing communications promptly.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service.

08 Privacy Contact & Policy Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or to badbat's data practices generally, please contact our support team. All privacy-related communications should be directed to the following contact point:

• Email: [email protected] (subject line: "Privacy Request")
• Live Chat: Available 24/7 in English via the badbat platform
• Response Time: We aim to acknowledge all privacy requests within 48 hours and to provide a full response within 30 calendar days. All times are Bangladesh Standard Time (BST, UTC+6).

Policy Updates: badbat reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account and update the "Last Updated" date at the top of this document. The version published on this page at badbat.app/privacy-policy is always the current and binding version. We encourage you to review this Policy regularly.