999bat Privacy Policy

01 Introduction and Scope

This Privacy Policy describes how 999bat (referred to in this document as "999bat", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal information of individuals who access or use the 999bat platform at https://999bat.asia (the "Platform"). This Policy applies to all registered account holders, visitors, and any other person whose personal data is processed in connection with the Platform.

By registering an account on or otherwise using the 999bat Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and may request account closure in accordance with the Terms & Conditions.

02 Personal Data We Collect

999bat collects personal data through a number of channels, including the account registration process, account activity on the Platform, customer support interactions, and the use of cookies and similar technologies. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, gender, and National Identity Card (NID) number or passport number collected during registration and KYC verification.
• Contact Data: Email address, mobile phone number, and residential address (city and district level, e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account Data: Username, encrypted password hash, account balance, transaction history, betting history, game session data, and responsible gaming settings.
• Financial Data: Mobile financial service account references (bKash, Nagad, Rocket, Upay), bank account details where applicable (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and payment card last-four digits and card type (Visa, Mastercard). Full card numbers are never stored by 999bat.
• Technical Data: IP address, device type, operating system, browser type and version, session identifiers, and approximate geolocation data derived from IP address.
• Usage Data: Pages visited, features accessed, games played, bet amounts and outcomes, session duration, and click-path data within the Platform.
• Communications Data: Records of correspondence with the 999bat support team, including support tickets, chat transcripts, and email exchanges.
• KYC Document Data: Scanned copies or photographs of identity documents submitted during the account verification process.

999bat does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion or problem gambling support request.

03 How We Use Your Personal Data

999bat processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your personal data are as follows:

• Account Management: To create, maintain, and manage your 999bat account, including processing your registration, verifying your identity, and enabling you to log in securely.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payments, and to maintain accurate financial records of your account activity.
• KYC and Fraud Prevention: To verify your identity in accordance with responsible gaming standards and to detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct.
• Platform Operation and Improvement: To deliver, maintain, and improve the Platform's features, performance, and security, including diagnosing technical issues and analysing usage patterns.
• Customer Support: To respond to your enquiries, complaints, and support requests promptly and effectively.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to apply player-requested account restrictions (deposit limits, self-exclusion), and to contact you if responsible gaming concerns are identified.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about 999bat offers and updates.
• Legal Compliance: To comply with applicable legal obligations and to respond to lawful requests from competent authorities.

04 Sharing Your Personal Data

999bat does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and card payment processors (Visa, Mastercard) receive transaction data required to execute deposits and withdrawals on your behalf.
• KYC and Identity Verification Providers: Third-party identity verification services may process copies of your identity documents to assist with KYC compliance. These providers are bound by strict data processing agreements.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and game result data required to deliver their games on the Platform. These providers do not receive your full identity or financial data.
• IT Infrastructure and Cloud Service Providers: Third-party hosting, database, and security service providers who process data on our behalf under contractual data protection obligations.
• Fraud Prevention and Security Services: Specialist fraud detection and cybersecurity service providers who process technical data (IP addresses, device fingerprints) to protect the Platform.
• Legal and Regulatory Authorities: Competent governmental, regulatory, or law enforcement authorities where disclosure is required by applicable law or a valid legal order.

All third-party service providers with whom 999bat shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with 999bat's documented instructions.

05 Cookies and Tracking Technologies

The 999bat Platform uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, maintain session security, and analyse Platform performance. Cookies are small text files stored on your device by your browser at the instruction of the Platform.

The types of cookies used by 999bat include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing the Platform's core functionality.
• Functional Cookies: Store your preferences such as language settings, currency display, and responsible gaming limits so that these are remembered across sessions.
• Performance and Analytics Cookies: Collect anonymised or pseudonymised data about how visitors use the Platform — which pages are visited most, which features are used, and where errors occur. This data is used solely to improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic and unauthorised access attempts.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. 999bat does not use third-party behavioural advertising cookies that track your activity on other websites.

06 Data Retention

999bat retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following general retention principles apply:

• Active Account Data: Retained for the duration of your active account relationship with 999bat.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of the relevant transaction to meet financial record-keeping standards.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of account closure or the last transaction, whichever is later.
• Support and Communications Records: Retained for three (3) years from the date of the last communication.
• Technical and Usage Data: Typically retained for thirteen (13) months in identifiable form, after which it is anonymised or deleted.
• Self-Exclusion Records: Retained for the duration of the exclusion period plus five (5) years to prevent re-registration during an active exclusion.

When personal data is no longer required, 999bat will securely delete or anonymise it in accordance with our internal data retention and destruction procedures.

07 Your Data Rights

As a 999bat account holder, you have the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.

08 Data Security

999bat implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following controls:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. HTTPS is enforced site-wide with HSTS headers.
• Encryption at Rest: Sensitive data fields including passwords (stored as salted hashes), payment references, and identity document data are encrypted at rest in our databases.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Intrusion Detection: Real-time monitoring systems detect and alert on unusual access patterns, potential data exfiltration attempts, and other security anomalies.
• Regular Security Assessments: The Platform undergoes periodic security assessments to identify and remediate vulnerabilities proactively.

While 999bat applies rigorous security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 999bat account credentials and for notifying us immediately at [email protected] if you believe your account has been compromised.

09 Children and Minors

The 999bat Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a person under the age of 21 has registered an account on the 999bat Platform, please notify us immediately at [email protected] with the subject line "Minor Account Report". We take all such reports seriously and will investigate and act promptly.

10 Changes to This Privacy Policy

999bat reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features of the Platform. Where material changes are made to this Policy, registered account holders will be notified via email or via a prominent notice on the Platform prior to the changes taking effect. The effective date of the current version is displayed at the top of this document.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how 999bat protects your information.

11 Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by 999bat, please contact our support team using the details below. All privacy-related correspondence must be submitted in English and should include your registered account username and a clear description of your enquiry.

• Privacy Enquiries Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request — [Your Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Username]"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Acknowledgement Time: Within 5 business days of receipt
• Full Response Time: Within 30 calendar days for standard requests