67bat Privacy Policy — How We Handle Your Personal Data

Introduction

What This Privacy Policy Covers

This Privacy Policy ("Policy") describes how 67bat ("the Platform", "we", "us", "our"), operating through 67bat.bio, collects, processes, stores, and protects the personal information of players and website visitors ("you", "your", "User"). It applies to all interactions you have with the 67bat platform — including account registration, deposits and withdrawals via bKash, Nagad, Rocket, and Upay, live casino gameplay, sports betting activity, and all communications with the 67bat support team.

By registering an account or continuing to use the 67bat platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein. If you do not agree with this Policy, please do not use the 67bat platform and contact [email protected] to close your account. 67bat takes data privacy seriously, and this Policy is written to give you clear, honest information about our practices — not to obscure them.

Data We Collect

Section 1 — Categories of Personal Information We Collect

67bat collects personal information in two ways: information you provide directly when registering or using the platform, and information collected automatically as you use the service. The following table summarises the main categories of data we collect and the primary context in which each is collected.

67bat does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where this is strictly necessary for responsible gaming assessments or where you have provided it voluntarily in a support communication. We do not collect full payment card numbers — all card and mobile money transactions are processed via our payment partners' secure interfaces and we receive only tokenised payment references.

Data Use

Section 2 — How 67bat Uses Your Personal Information

67bat uses the personal information we collect for clearly defined operational purposes. We do not use your data for purposes other than those listed below, and we do not sell your personal information to third parties for marketing.

• Account management and platform operation: processing your registration, authenticating your identity when you log in, maintaining your account balance, processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and delivering the core services of the 67bat platform.
• KYC and identity verification: verifying that you meet the minimum age requirement of 21 years, confirming your identity in accordance with anti-money-laundering obligations, and maintaining the records required to support these compliance activities.
• Fraud prevention and security: detecting and preventing fraudulent transactions, unauthorised account access, money laundering, and other forms of platform abuse; conducting security monitoring of account activity to protect both the platform and its users.
• Responsible gaming: monitoring behavioural data to identify patterns that may indicate problem gambling; enabling deposit limit tools, session timers, and self-exclusion features; contacting players who show signs of gambling-related distress in accordance with our responsible gaming obligations.
• Customer support: receiving, processing, and responding to your support requests; maintaining records of support communications to ensure continuity and quality of service; following up on unresolved disputes in accordance with our dispute resolution process.
• Platform improvement and analytics: analysing aggregated, anonymised usage data to understand how players interact with the platform; identifying technical issues, improving load times, and refining the mobile experience for Bangladesh players on 3G and 4G networks across Dhaka, Chittagong, Sylhet, and all other divisions.

Legal Basis

Section 3 — Legal Basis for Processing Your Personal Data

67bat processes your personal data on one or more of the following legal bases, depending on the specific processing activity.

• Contractual necessity: processing that is necessary to fulfil the contract between you and 67bat — including delivering the gaming and betting services you have signed up for, processing your financial transactions, and maintaining your account.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC verification, anti-money-laundering obligations, transaction record-keeping, age verification requirements, and responding to lawful requests from competent authorities.
• Legitimate interests: processing carried out for purposes that are in 67bat's legitimate interests, including fraud prevention, platform security monitoring, responsible gaming surveillance, and the technical improvement of the platform — provided these interests are not overridden by your privacy rights.
• Consent: where no other legal basis applies, 67bat will seek your explicit consent before processing your personal data for a specific purpose — for example, sending you promotional communications or processing optional profile information. You may withdraw consent at any time.

Payment & KYC

Section 4 — Payment Data and Identity Verification

All payment transactions on the 67bat platform are processed via direct integrations with Bangladesh payment providers including bKash, Nagad, Rocket, and Upay, as well as major Bangladesh banks including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. 67bat does not store full payment card numbers or mobile wallet PINs. Transaction records including amounts, timestamps, and tokenised payment references are retained in accordance with the data retention schedule described in Section 6 of this Policy.

As part of our KYC verification process, 67bat may request copies of government-issued identity documents — typically a National Identity Card (NID), passport, or other official photo identification — to confirm your age, verify your identity, and comply with applicable anti-money-laundering obligations. Identity documents submitted for KYC are stored securely and used only for compliance and verification purposes. They are not shared with third parties except where required by law or to fulfil our AML obligations through approved verification partners.

Cookies

Section 5 — Cookies and Tracking Technologies

67bat uses cookies and similar tracking technologies to operate the platform, remember your session, and collect the technical and behavioural data described in Section 1. The following categories of cookies are used on the 67bat platform.

• Strictly necessary cookies: these cookies are essential for the 67bat platform to function correctly. They maintain your login session, remember your language preference, and enable core features such as account access and transaction processing. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: these cookies collect anonymised data about how visitors use the platform — for example, which pages are visited most frequently, how long sessions last, and where errors occur. This data helps 67bat improve platform performance and the user experience for Bangladesh players.
• Functional cookies: these cookies remember your preferences and settings — such as preferred payment method, notification settings, and display preferences — so that you do not need to re-enter them each time you use the platform.
• Security cookies: these cookies help 67bat detect and prevent fraudulent activity, unauthorised account access, and bot activity. They form part of the platform's multi-layered security infrastructure and are strictly necessary for the safe operation of the service.

Most web browsers allow you to control cookies through their settings. However, disabling strictly necessary cookies will impair the functionality of the 67bat platform and may prevent you from accessing your account or processing transactions. If you wish to review or manage your cookie preferences, please access your browser's privacy or cookie settings directly.

Data Sharing

Section 6 — How We Share Your Information

67bat does not sell, rent, or trade your personal information to third parties. We share personal data only in the specific circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment processing partners: to process your deposits and withdrawals, 67bat shares the minimum necessary transaction data with our Bangladesh payment partners — bKash, Nagad, Rocket, and Upay — and with bank processing partners. These partners are contractually bound to use your data only for transaction processing and to maintain appropriate security standards.
• Game content providers: to deliver live casino games, slots, crash games, and fish shooting games, 67bat shares session-level technical data (not your full personal profile) with third-party game providers including Evolution Gaming, Pragmatic Play, Spribe, Microgaming, NetEnt, and Ezugi. These providers operate under their own data protection standards and are permitted to use only the data necessary to deliver the game session.
• Legal and regulatory authorities: 67bat may disclose personal data to competent authorities — including law enforcement agencies, financial intelligence units, and regulatory bodies — where required to do so by applicable law, court order, or other binding legal process. In such cases 67bat will disclose only the data specifically required and will, where legally permitted, notify the affected user.
• Identity verification partners: where 67bat uses an approved third-party identity verification service to assist with KYC compliance, the minimum necessary personal and identity document data is shared with that partner solely for verification purposes. Such partners are bound by confidentiality obligations and data processing agreements.

Data Retention

Section 7 — How Long We Keep Your Data

67bat retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law. Account data and transaction records are retained for a minimum of five years following account closure to satisfy anti-money-laundering record-keeping requirements. KYC identity documents are retained for a minimum of five years following the end of the business relationship. Support communications are retained for a minimum of two years to ensure continuity of service and support dispute resolution.

Behavioural and analytics data that has been fully anonymised — meaning it can no longer be linked to any individual user — may be retained indefinitely for platform improvement purposes. Where a deletion request is received and no legal obligation requires continued retention, 67bat will securely delete or anonymise the relevant data within 30 days of verifying the request.

Security

Section 8 — How We Protect Your Data

67bat implements a multi-layered approach to data security. All data transmissions between your device and the 67bat platform are encrypted using SSL/TLS protocols. Sensitive data at rest — including identity documents and financial records — is stored using industry-standard encryption. Access to personal data within 67bat is restricted on a need-to-know basis; only authorised personnel involved in compliance, fraud prevention, customer support, or platform operations may access user personal data, and only to the extent necessary for their specific function.

While 67bat takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. You also have a role to play in protecting your own data: keep your password confidential, do not share your login credentials with others, and log out of your account when using a shared or public device. If you believe your account has been compromised, contact [email protected] immediately.

Your Rights

Section 9 — Your Data Rights

67bat respects your rights over your own personal data. The following rights are available to all registered users of the platform. To exercise any of these rights, contact [email protected] with your registered account details and a clear description of your request.

• Right of access: you have the right to request a copy of the personal data that 67bat holds about you. We will respond to verified access requests within 30 days. The response will include the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to rectification: if you believe that personal data 67bat holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account details (name, email, phone number) may be updated directly within your account settings; for KYC-related corrections, please contact support.
• Right to erasure: you have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal obligations — for example, 67bat cannot delete transaction records that are required to be retained for anti-money-laundering compliance.
• Right to restrict processing: in certain circumstances — for example, where you contest the accuracy of data or where processing is unlawful but you do not want erasure — you have the right to request that 67bat restricts how it processes your data while the matter is resolved.
• Right to data portability: where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.

To exercise any of the above rights, email [email protected] from the email address registered on your account. Please include your full name, your registered username, and a description of your request. 67bat will acknowledge your request within 5 business days and respond in full within 30 calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

Minors

Section 10 — Children and Minors Under 21

The 67bat platform is strictly intended for adults aged 21 years and above. 67bat does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 — whether through a misrepresented age at registration or any other means — we will immediately close the relevant account, void any winnings, return any deposited funds to the payment source, and securely delete the personal data of the underage individual. If you are a parent or guardian and believe that a minor in your care has registered an account on 67bat, please contact us immediately at [email protected] so that we can take prompt action.

Policy Updates

Section 11 — Changes to This Privacy Policy

67bat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where material changes are made to this Policy, we will provide notice to registered users by means of an in-platform notification, an email to the address registered on your account, or a prominent notice on the 67bat website. The updated Policy will take effect from the date it is published. Your continued use of the platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed of how 67bat handles your personal data.

Privacy at a Glance

Six Privacy Principles That Guide How 67bat Handles Your Data

Contact

Privacy Questions? Contact the 67bat Data Team

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how 67bat handles your personal information, please contact our support team. All privacy-related requests are handled with priority and in strict confidence.

Privacy contact email: [email protected]