933bat Privacy Policy — How We Handle Your Personal Data

1. Information We Collect

933bat collects personal information through several channels: directly from you when you register an account or contact support; automatically through your use of the platform; and from third-party payment processors and identity verification providers where necessary to operate the service lawfully and securely.

1.1 Information You Provide Directly

When you register, verify your identity, make transactions, or contact support on the 933bat platform, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (National Identity Card number, passport number, or driving licence number).
• Contact Data: Email address, mobile phone number (Bangladesh-registered), and residential address including district, division, and postal code.
• Financial Data: Mobile banking account references (bKash, Nagad, Rocket, Upay wallet identifiers), card type and last four digits for Visa or Mastercard transactions, deposit and withdrawal history, and account balance records.
• Account Credentials: Username and hashed password. Passwords are never stored in plain text and are not visible to 933bat staff.
• Communications Data: Records of your correspondence with the 933bat support team via live chat, email, or any other communication channel operated by the platform.
• Responsible Gaming Preferences: Any deposit limits, session time limits, loss limits, self-exclusion periods, or cooling-off preferences you set within your account.

1.2 Information Collected Automatically

When you access and interact with the 933bat platform, certain technical and behavioural data is collected automatically through server logs, cookies, and similar technologies:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage Data: Pages visited, game sessions initiated, bet history, session start and end times, click patterns, and feature interactions within the platform interface.
• Transaction Logs: Timestamped records of every deposit, withdrawal, bonus activation, wager placed, and game outcome associated with your account.
• Geolocation Data: Approximate geographic location derived from your IP address, used to apply jurisdiction-appropriate access controls. 933bat does not access your device's precise GPS location.

1.3 Information from Third Parties

933bat may receive personal data about you from the following third-party sources where this is necessary to deliver the service or meet legal requirements:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard to reconcile deposits and withdrawals.
• Identity Verification Providers: Results of automated document and biometric verification checks conducted as part of the KYC (Know Your Customer) process.
• Fraud Prevention Services: Risk signals and device fingerprint data shared by anti-fraud technology partners to protect the platform and its players from fraudulent activity.

2. How We Use Your Data

933bat processes your personal data only where there is a lawful basis for doing so. The purposes for which we use your data, and the corresponding lawful basis for each, are set out in the table below.

933bat will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

3. Data Sharing & Disclosure

3.1 Service Providers

933bat shares personal data with carefully selected third-party service providers who process data on our behalf under strict contractual data-processing agreements. These providers include:

• Payment processors — bKash, Nagad, Rocket, Upay, and card network processors — to facilitate financial transactions.
• Identity verification and KYC providers who conduct automated document and liveness checks as part of the account verification process.
• Cloud infrastructure and hosting providers who supply the servers and data storage infrastructure on which the 933bat platform runs.
• Game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive anonymised session data to deliver their game content to your device.
• Fraud prevention and cybersecurity providers who receive device and behavioural signals to identify and block malicious activity on the platform.

All service providers are contractually prohibited from using your personal data for their own purposes and must process it only in accordance with 933bat's documented instructions.

3.2 Legal Disclosures

933bat may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities without prior notice where we are legally required or permitted to do so. This includes but is not limited to:

• Compliance with a court order, subpoena, or other legally enforceable demand.
• Reporting obligations under applicable anti-money-laundering regulations.
• Cooperation with fraud investigations initiated by financial institutions or law enforcement.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a material part of the assets of the entity operating the 933bat platform, your personal data may be transferred to the successor entity. In such a scenario, 933bat will notify affected players via the email address on record and will ensure that the acquiring entity provides equivalent data protection commitments before the transfer takes place.

3.4 What We Never Do

4. Cookies & Tracking Technologies

The 933bat platform uses cookies and similar client-side storage technologies to deliver core functionality, maintain session integrity, and analyse platform performance. The following table describes the categories of cookies in use.

Strictly necessary cookies are deployed without requiring your consent as they are essential to the operation of the platform. Functional and analytics cookies may be disabled by adjusting your browser settings; however, doing so may impair certain platform features. 933bat does not place third-party advertising cookies or social media tracking pixels on its platform pages.

5. Data Retention

933bat retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. The following retention periods apply as a baseline — specific circumstances (such as an ongoing investigation or legal hold) may require longer retention.

• Active account data (identity, contact, financial records) is retained for the full duration of the account's active status plus a minimum of five years after account closure, in line with standard anti-money-laundering record-keeping requirements.
• Transaction logs (deposit, withdrawal, and wager records) are retained for a minimum of seven years from the date of each transaction to satisfy financial record-keeping obligations.
• Customer support communications are retained for three years from the date of the last exchange in a support thread.
• Analytics data is held in anonymised, aggregated form and is not subject to the same individual retention limits; it does not identify any specific player after anonymisation.
• Inactive account data for accounts with no login activity for 24 consecutive months is flagged for review; identifiable personal data not subject to a legal hold may be anonymised or deleted following a formal review process.

Where you request deletion of your personal data and there is no legal basis for continued retention, 933bat will action that deletion within 30 calendar days of confirming the request, subject to any applicable legal hold that may prevent immediate deletion.

6. Data Security Measures

933bat implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Transport Encryption: All communications between your browser or device and the 933bat platform are encrypted using TLS 1.3 with strong cipher suites. HTTP connections are automatically redirected to HTTPS.
• Data-at-Rest Encryption: Sensitive personal and financial data stored in 933bat's databases is encrypted using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Internal access to personal data is governed by a strict role-based access control policy. Only personnel with a documented operational need may access identifiable player data, and all such access is logged and audited.
• Password Security: Player passwords are hashed using a modern adaptive hashing algorithm (bcrypt) with a per-user salt. Plain-text passwords are never stored or transmitted.
• Intrusion Detection: The platform employs real-time monitoring and automated alerting to detect and respond to anomalous access patterns, brute-force attempts, and other indicators of compromise.
• Vendor Security Assessments: Third-party service providers who process 933bat player data are subject to security assessment before onboarding and periodic review thereafter.

Despite these measures, no security system is entirely infallible. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 933bat will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

7. Your Privacy Rights

As a player on the 933bat platform, you hold the following rights with respect to your personal data. These rights may be subject to certain conditions and limitations — for example, where exercising a right would conflict with a legal obligation to retain records.

To exercise any of the rights listed above, submit your request in writing to the 933bat support team at [email protected]. Please include your registered username, the email address on your account, and a clear description of the right you wish to exercise. 933bat will acknowledge your request within five business days and will respond fully within 30 calendar days.

Where a request is particularly complex or where 933bat receives a high volume of concurrent requests, the response period may be extended by a further 60 days. In such cases, you will be notified of the extension and the reason for it within the initial 30-day window.

8. Contact & Privacy Queries

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how 933bat handles your personal data, please contact the 933bat Data Privacy team using the details below. All privacy-related communications should be directed in writing to ensure a full and auditable response.

933bat is committed to resolving all privacy queries fairly and promptly. If you are not satisfied with the outcome of a privacy request or complaint submitted to 933bat directly, you retain the right to escalate the matter to the relevant data protection authority or seek independent legal advice.

8.1 Updates to This Privacy Policy

933bat may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality, or applicable law. When material changes are made, we will update the "Effective Date" at the top of this page. Where changes are significant, we may also notify registered players by email. We encourage you to review this Privacy Policy periodically. Continued use of the 933bat platform following the publication of an updated policy constitutes your acknowledgement of the changes.

This Privacy Policy was last reviewed and updated on 01 January 2026. It supersedes all previous versions of the 933bat privacy notice.