bat22 Privacy
Policy

bat22 operates bat22.io, an online betting and casino platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. The privacy and security of our players' personal data is a foundational principle of how we operate.

This Privacy Policy sets out in detail the types of personal data bat22 collects from players and site visitors, the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights that players hold with respect to their own information.

bat22 acts as the data controller for all personal data processed in connection with the bat22.io platform. Any data sub-processors engaged by bat22 — such as payment processors, identity verification providers, and game studios — operate under data processing agreements that require them to handle your data securely and in accordance with this Privacy Policy.

All references to "we", "us", "our", or "bat22" in this policy refer to bat22.io and the company operating the platform. All references to "you", "your", or "player" refer to any registered account holder or visitor to bat22.io.

bat22 collects personal data across several categories. The specific data collected depends on how you interact with the platform:

Identity & Registration Data

• Full legal name
• Date of birth (for age verification — 21+ policy)
• Username and password (password stored in hashed form only)
• National ID number, passport number, or other government-issued identifier (when required for verification)
• Profile photograph (when submitted as part of identity verification)

Contact Data

• Mobile phone number
• Email address
• Residential address (city and country as a minimum; full address when required for enhanced verification)

Financial & Transaction Data

• bKash, Nagad, Rocket, and Upay mobile wallet reference numbers used for deposits and withdrawals
• USDT wallet addresses (TRC-20 / ERC-20)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and status
• Betting history, game session records, and wagering activity

Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and duration (Bangladesh Standard Time, UTC+6)
• Pages visited, features accessed, and in-platform navigation paths
• Referring URL (the page from which you arrived at bat22.io)

Communications Data

• Live chat transcripts and support ticket content
• Email correspondence with bat22 support
• Promotional communication preferences (opt-in / opt-out status)

bat22 collects personal data through the following channels:

• Direct registration: Data you provide when creating a bat22 account, including name, date of birth, contact details, and preferred payment method.
• Account activity: Data generated when you log in, place bets, play casino games, make deposits, request withdrawals, or update account settings.
• Identity verification submissions: Documents and photographs you upload when completing identity or age verification.
• Support interactions: Content shared through live chat, support tickets, or direct email correspondence with the bat22 team.
• Automated technical collection: Technical and usage data collected automatically when you access bat22.io via server logs, cookies, and similar tracking technologies (see Section 7).
• Third-party payment confirmations: Transaction reference data received from bKash, Nagad, Rocket, Upay, or USDT network confirmations when a deposit or withdrawal is processed.

bat22 does not purchase personal data from data brokers or third-party marketing lists. All data collected originates directly from your interactions with the bat22 platform or from technical systems operating bat22.io.

bat22 processes your personal data for the following specific purposes:

bat22 does not use your personal data to build profiles for sale to advertisers, data analytics firms, or any commercial third party. Automated decision-making that produces legal or similarly significant effects (such as permanent account closure) is always subject to human review upon request.

bat22 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between bat22 and you as a registered player — including account management, deposit processing, game delivery, and withdrawal handling.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) checks, age verification, and fraud reporting.
• Legitimate interests: Processing carried out in pursuit of bat22's legitimate business interests — including fraud prevention, security monitoring, platform improvement, and responsible gaming analysis — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit opt-in consent, primarily for sending promotional communications and marketing offers. You may withdraw your consent at any time by contacting support or updating your account notification preferences.

Where bat22 relies on legitimate interests as a legal basis, a balancing assessment has been conducted to ensure that bat22's interests do not disproportionately override your rights as a data subject.

bat22 does not sell your personal data. Data may be shared with the following categories of third party strictly to the extent necessary to deliver platform services:

• Payment processors: bKash, Nagad, Rocket, Upay, and USDT network providers receive only the minimum transaction reference data needed to process your deposit or withdrawal. bat22 does not share your full identity data with payment processors beyond what those providers require for their own compliance obligations.
• Identity verification providers: Where enhanced KYC (Know Your Customer) verification is required, bat22 may engage a third-party identity verification service. These providers process your submitted documents solely for the purpose of confirming your identity and are contractually prohibited from using the data for any other purpose.
• Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios receive session data necessary to deliver and record game play. Game providers do not receive your full identity or financial data.
• IT infrastructure providers: Hosting, server, and cloud infrastructure providers that process data on bat22's behalf under strict data processing agreements.
• Fraud and AML compliance services: Third-party fraud detection and anti-money laundering screening services may receive identity and transaction data as required for compliance purposes.
• Legal and regulatory authorities: bat22 will disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required to do so by a legally binding obligation or court order.

All third parties engaged by bat22 as data processors are required to maintain appropriate technical and organisational security measures and are strictly prohibited from using your personal data for their own commercial purposes.

bat22.io uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, and analyse platform usage. The following cookie categories are used:

bat22 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of delivering targeted advertising on external platforms.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies will affect platform functionality and may prevent you from logging in to your bat22 account.

bat22 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your bat22 account being open and active.
• Transaction and betting records: Retained for a minimum of 5 years following the relevant transaction date, in line with AML record-keeping requirements.
• Identity verification documents: Retained for a minimum of 5 years following account closure or the completion of the verification process, whichever is later.
• Support communications: Live chat transcripts and support tickets are retained for 2 years from the date of the interaction.
• Technical and usage logs: Server logs and technical data are retained for up to 12 months, after which they are anonymised or deleted.
• Closed or suspended accounts: Data associated with closed accounts is retained for 5 years following account closure to allow for fraud investigation, dispute resolution, and regulatory compliance. After this period, data is securely deleted or anonymised.

Where bat22 is required by a court order, regulatory instruction, or ongoing legal proceeding to retain data beyond the standard retention period, data will be held until the relevant obligation is discharged.

bat22 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bat22.io.
• Password hashing using industry-standard cryptographic algorithms — bat22 never stores plain-text passwords.
• Access controls ensuring that personal data is accessible only to bat22 staff and systems with a documented operational need.
• Intrusion detection systems monitoring bat22 infrastructure 24/7 for anomalous access patterns.
• Regular security assessments of the bat22 platform and associated infrastructure.
• Data minimisation practices that limit the personal data held in any single system to what is operationally necessary.
• Encrypted storage for sensitive data fields including identity document references and payment method details.

In the event of a personal data breach that poses a risk to your rights and freedoms, bat22 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

As a bat22 player and data subject, you hold the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data bat22 holds about you at any time. bat22 will provide this within 5 business days of a verified request.
• Right to rectification: If any personal data bat22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact information directly in your account settings.
• Right to erasure: You may request that bat22 delete your personal data where it is no longer necessary for the purposes for which it was collected. Note that bat22 may be required to retain certain data (e.g., transaction records) for legal compliance purposes even after a deletion request.
• Right to restrict processing: In certain circumstances, you may request that bat22 temporarily suspend the processing of your personal data while a dispute or correction request is being resolved.
• Right to data portability: You may request that bat22 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to bat22 processing your data on the basis of legitimate interests. bat22 will cease such processing unless compelling legitimate grounds exist that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, contact bat22 support via live chat or by emailing [email protected] (plain text — not a clickable link). bat22 will respond to all data rights requests within 5 business days. bat22 may need to verify your identity before processing a data rights request to ensure it is not actioned by an unauthorised party.

bat22 strictly prohibits access to the platform by individuals under the age of 21. bat22.io is not directed at, and does not knowingly collect personal data from, individuals under 21 years of age.

If bat22 discovers that personal data has been collected from a person under the age of 21 — whether through registration, age verification failure, or any other means — bat22 will immediately:

• Close the account associated with that individual.
• Delete all personal data collected in connection with that account, except where retention is required for fraud investigation or legal compliance purposes.
• Void all bets and casino play activity associated with the account.
• Return any real-money deposits to the original payment source after deducting any amounts required for fraud investigation.

If you are a parent or guardian and believe that a person under 21 in your care has registered a bat22 account, please contact bat22 support immediately via live chat. bat22 treats all reports of underage access with the highest priority.

bat22.io may reference the names and services of third-party providers such as payment partners (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming) in the course of describing platform services. bat22 does not include outbound hyperlinks to third-party websites on bat22.io.

Where players independently visit third-party websites — including the websites of payment providers or game studios — bat22 accepts no responsibility for the privacy practices, data collection activities, or security measures of those third parties. Players should review the privacy policies of any third-party service they interact with directly.

bat22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. When material changes are made, bat22 will:

• Update the "Last Updated" date at the top of this page and in the page hero section.
• Notify registered players via email or in-platform notification where the changes materially affect how their personal data is processed.

Continued use of the bat22 platform after the publication of a revised Privacy Policy constitutes your acceptance of the revised terms. bat22 recommends reviewing this policy periodically. The current effective version is always available at bat22.io/privacy-policy.

For any privacy-related enquiries, data rights requests, or concerns about how bat22 handles your personal data, please contact the bat22 support team using one of the following methods:

• Live chat: Available 24/7 directly within your bat22 account dashboard. This is the fastest channel for data rights requests and privacy queries.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line for data rights requests.

bat22 will acknowledge all privacy-related contacts within 1 business day (Bangladesh Standard Time, UTC+6) and will provide a full response to data rights requests within 5 business days. Where a request is complex or involves a large volume of data, bat22 may extend this period by up to an additional 10 business days, in which case we will notify you of the extension in advance.

bat22 will not charge a fee for processing data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply.