bat888 Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all personal data collected and processed by bat888 in connection with the operation of the bat888 online gaming platform accessible at bat888.asia. It covers data collected through the website, account registration and management processes, deposit and withdrawal transactions, customer support interactions, bonus and promotional participation, and any other feature or service offered on the bat888 platform.

This policy applies to all registered and prospective players accessing the bat888 platform from Pakistan and any other jurisdiction where the platform is accessible. By registering an account with bat888 or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

This Privacy Policy should be read together with the bat888 Terms & Conditions and Responsible Gaming Policy, each of which is incorporated by reference. In the event of any conflict between this policy and the Terms & Conditions on matters of data privacy, this Privacy Policy shall prevail.

2. Data Controller

For the purposes of applicable data protection law, bat888 — the operator of the platform at bat888.asia — acts as the Data Controller in respect of all personal data collected and processed through the platform. As Data Controller, bat888 determines the purposes for which and the means by which personal data is processed.

Where bat888 engages third-party service providers to process data on its behalf (for example, payment processors, KYC verification partners, or IT infrastructure providers), those parties act as Data Processors and are bound by contractual obligations that restrict their processing to the specific purposes authorised by bat888. bat888 remains responsible to you for the actions of its Data Processors with respect to your personal data.

3. Data We Collect

bat888 collects personal data from you directly (information you provide during registration, KYC verification, transactions, or customer support interactions), automatically (data generated by your use of the platform), and in limited circumstances from third parties (identity verification bureaus, fraud prevention databases, payment networks).

The categories of personal data bat888 may collect are set out in the table below:

bat888 does not knowingly collect sensitive personal data beyond what is strictly necessary for identity verification (CNIC) and responsible gaming purposes. bat888 does not collect biometric data beyond what is required for liveness-check identity verification during KYC.

4. How We Use Your Data

bat888 processes your personal data for the following purposes:

• Account Management: To register, maintain, and administer your bat888 account, including verifying your eligibility to hold an account, processing logins, and managing account settings.
• Identity Verification (KYC): To verify your identity, age (21+), and payment method ownership as required by bat888's international gaming licence obligations and anti-money laundering (AML) compliance programme.
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, bank transfer, and Cash OTC channels, and to maintain an accurate record of all financial activity on your account.
• Platform Operation: To deliver gameplay, sportsbook markets, live casino tables, slot games, fishing games, and arcade titles; to maintain game integrity; and to ensure platform availability and performance.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeover, collusion, and other prohibited conduct as defined in the bat888 Terms & Conditions.
• Regulatory Compliance: To meet bat888's obligations under its international gaming licence, including AML record-keeping, responsible gaming requirements, and cooperation with any lawfully authorised regulatory or law enforcement inquiry.
• Responsible Gaming: To apply and maintain responsible gaming restrictions (deposit limits, self-exclusion, cooling-off periods) and to identify patterns of play that may indicate problem gambling requiring intervention.
• Customer Support: To respond to your support enquiries, complaints, and feedback, and to maintain records of such communications for quality assurance and dispute resolution purposes.
• Marketing (with consent): To send you promotional communications about bat888 offers, bonuses, and new game launches where you have expressly consented to receive such communications. You may withdraw consent at any time as described in Section 13 below.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the platform, personalise your experience, and develop new features. This analysis does not involve individual profiling for purposes other than platform personalisation.

5. Legal Basis for Processing

bat888 processes your personal data on one or more of the following legal bases depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and bat888 — principally account registration, KYC verification, transaction processing, gameplay delivery, and account management.
• Legal Obligation: Processing required for bat888 to comply with its legal and regulatory obligations, including AML record-keeping, gaming licence conditions, and cooperation with lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out in pursuit of bat888's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — principally direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Data

bat888 does not sell personal data. bat888 shares personal data only in the following circumstances and only to the extent strictly necessary for the stated purpose:

6.1 Payment Processors

bat888 shares financial and identity data with payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — to process your deposit and withdrawal transactions. These processors receive only the data necessary to execute and verify the relevant transaction and are bound by their own regulatory data protection obligations as licensed financial service providers in Pakistan.

6.2 KYC and Fraud Prevention Partners

bat888 works with third-party identity verification and fraud detection providers to verify your CNIC, confirm your age, and screen transactions against AML watchlists. These providers process your identity data solely for verification purposes under contractual data processor agreements with bat888.

6.3 IT and Infrastructure Providers

bat888 uses cloud hosting, database management, and cybersecurity service providers to operate the platform. These providers may host or process your data solely as technical service providers and are contractually prohibited from accessing or using your data for any other purpose.

6.4 Regulatory and Law Enforcement Disclosure

bat888 may disclose personal data to regulatory authorities, gaming licence supervisory bodies, financial intelligence units, or law enforcement agencies where required to do so by a lawful order, warrant, or regulatory direction, or where bat888 reasonably believes disclosure is necessary to prevent or detect a serious crime, protect national security, or protect the rights of third parties.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bat888's business, your personal data may be transferred to the acquiring entity as part of the transaction. bat888 will provide reasonable notice of any such transfer and confirm that the acquiring entity will be bound by obligations no less protective than those in this Privacy Policy.

7. Cookies & Tracking Technologies

bat888 uses cookies and similar tracking technologies — including local storage, session tokens, and pixel tags — to operate and improve the platform. The categories of cookies bat888 uses are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without causing the platform to malfunction.
• Functional Cookies: Used to remember your preferences such as language settings, game lobby layout, and responsible gaming limit configurations. These improve your experience but are not essential.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the platform, which games are most popular, and where technical errors occur. This data is used solely to improve platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious session behaviour. These are operational security measures, not marketing tools.

bat888 does not use third-party advertising or retargeting cookies. bat888 does not permit third-party advertising networks to place cookies on the platform. You may manage cookie preferences through your browser settings, but disabling strictly necessary cookies will impair your ability to use the platform.

8. Data Security

bat888 implements a layered approach to data security designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bat888 servers.
• AES-256 encryption for sensitive data fields (CNIC numbers, payment method identifiers) stored in bat888 databases.
• Role-based access controls limiting employee access to personal data to those with a genuine operational need.
• Multi-factor authentication required for all bat888 staff accessing systems that contain player personal data.
• Regular penetration testing and security audits of the bat888 platform by independent third-party security specialists.
• Intrusion detection and real-time threat monitoring systems operating 24/7 across bat888 infrastructure.
• Secure, encrypted backup systems with geographically redundant storage to protect data availability and integrity.

Notwithstanding these measures, no internet transmission or digital storage system can be guaranteed to be 100% secure. In the event of a personal data breach that poses a risk to your rights, bat888 will notify you and relevant regulatory authorities within the timeframes required by applicable law.

9. Data Retention

bat888 retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to overriding legal and regulatory retention obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for five (5) years following account closure, in compliance with AML record-keeping requirements under bat888's international gaming licence.
• Transaction and Financial Data: Retained for five (5) years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Responsible Gaming Data: Self-exclusion and restriction records are retained for the duration of the restriction and for five (5) years thereafter to prevent circumvention of self-exclusion commitments.
• Customer Support Communications: Retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of consent and for two (2) years following withdrawal of consent, to maintain a record of the consent lifecycle.
• Technical and Analytics Data: Anonymised after thirteen (13) months, at which point individual identification is no longer possible.

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised using industry-standard deletion protocols. bat888 conducts regular data lifecycle audits to verify that retention schedules are being observed.

10. International Data Transfers

bat888 is an international gaming platform operating under an international gaming licence. In the course of operating the platform, your personal data may be transferred to, stored in, or processed in countries outside Pakistan. This may occur, for example, where bat888's cloud infrastructure provider hosts servers in data centres located in other jurisdictions, or where bat888 engages a KYC verification partner with processing facilities outside Pakistan.

Where your data is transferred outside Pakistan, bat888 ensures that adequate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Safeguards include: contractual data transfer clauses binding the recipient to data protection obligations no less stringent than those applicable to bat888; transfers to jurisdictions assessed as providing adequate protection for personal data; and where required, explicit consent to the specific transfer.

You may request further information about the safeguards bat888 has in place for any specific international data transfer by contacting [email protected].

11. Your Data Rights

bat888 respects and upholds your rights over your personal data. The rights available to you are set out below. To exercise any of these rights, please submit your request in writing to [email protected]. bat888 will respond within 30 calendar days and will not charge a fee for the exercise of rights in ordinary circumstances.

bat888 may need to verify your identity before processing a data rights request to ensure the request is genuinely made by the account holder. In exceptional circumstances bat888 may extend the 30-day response period by a further two months and will notify you of this extension with an explanation. Where bat888 declines to action a request, it will provide written reasons and information about your right to escalate the matter.

12. Children & Minors

The bat888 platform is strictly intended for individuals aged 21 years and above. bat888 does not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory step in the bat888 account registration and KYC process, and bat888 reserves the right to request documentary proof of age at any time.

If bat888 becomes aware that it has inadvertently collected personal data from an individual below the age of 21, it will immediately close the relevant account, delete all associated personal data to the extent not required for regulatory reporting, and where appropriate report the matter to relevant authorities. Parents or guardians who believe a minor has registered with bat888 should contact [email protected] immediately with supporting information so that the matter can be actioned without delay.

13. Marketing Communications

bat888 will send you promotional communications — including bonus offers, new game announcements, PSL cricket betting promotions, and seasonal campaigns — only where you have given explicit consent to receive such communications during registration or subsequently via your account notification settings.

You may withdraw your consent to receive marketing communications at any time by: (a) updating your notification preferences in your bat888 account settings; or (b) clicking the unsubscribe link included in any marketing email; or (c) contacting [email protected] with a written request to opt out. Withdrawal of marketing consent will take effect within five (5) business days and will not affect the lawfulness of any marketing communications sent prior to withdrawal.

Withdrawal of marketing consent does not affect bat888's ability to send you transactional or service communications — such as deposit confirmations, withdrawal notifications, account security alerts, KYC verification requests, or responsible gaming notifications — which are sent on the basis of contractual necessity and will continue regardless of marketing preference.

14. Amendments to This Policy

bat888 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. Where amendments are material — meaning they substantively affect how bat888 processes your personal data or your rights in relation to that data — bat888 will provide at least 14 days' advance notice via the email address registered to your account and/or via a prominent notice on the platform.

Non-material amendments — such as typographical corrections, clarifications of existing practices, or structural reorganisation without substantive change — may take effect upon publication without prior notice. The "Last Updated" date at the top of this page will always reflect the most recent revision. bat888 recommends reviewing this Privacy Policy periodically. Continued use of the platform following any amendment constitutes acceptance of the revised policy.

Where bat888 intends to process your personal data for a new purpose not covered by this Privacy Policy, it will obtain your consent before doing so (where consent is the applicable legal basis) or notify you in advance and provide an opportunity to object (where legitimate interests is the applicable legal basis).

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to bat888's handling of your personal data, please contact the bat888 data privacy team at:

bat888 takes all privacy complaints seriously. Where you are not satisfied with bat888's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority under bat888's international gaming licence jurisdiction. bat888 will provide information about the applicable supervisory authority upon request.

For responsible gaming-related data requests — such as records of self-exclusion history, deposit limit settings, or responsible gaming correspondence — please visit our Responsible Gaming page or contact support directly. bat888 is committed to handling all data-related communications with transparency and in good faith.