229bat Privacy Policy

1. Introduction

229bat ("we", "us", "our") operates the online casino and sports betting platform accessible at https://229bat.bid (the "Platform"). We are committed to protecting the privacy and personal data of all users, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh.

This Privacy Policy explains how 229bat collects, uses, stores, shares, and protects the personal information you provide when you register, deposit funds, place bets, contact support, or otherwise interact with the 229bat Platform. It also describes the rights you hold in relation to your personal data and how you may exercise them.

By accessing or using the 229bat Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue your use of the Platform. This Privacy Policy should be read in conjunction with our Terms & Conditions.

2. Data We Collect

2.1 Information You Provide Directly

When you register for a 229bat account or interact with the Platform, we may collect the following categories of personal data:

• Identity Data: Full name, date of birth, gender, and national identification number or passport number (required for KYC verification).
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh).
• Account Credentials: Username and hashed password. Plain-text passwords are never stored.
• Financial Data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (where applicable), transaction history, deposit and withdrawal amounts in Bangladeshi Taka (BDT).
• Verification Documents: Copies of government-issued identification (National ID card, passport), proof of address, and proof of payment method ownership, submitted during the KYC process.
• Communications: The content of messages you send to 229bat support via live chat, email, or any other contact channel.

2.2 Data Collected Automatically

When you use the 229bat Platform, certain technical and behavioural data is collected automatically through our systems and third-party analytics services:

• Device & Technical Data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages and game pages visited, time spent on the Platform, bet history, game session data, search queries, and navigation paths within the Platform.
• Location Data: Approximate geographic location derived from your IP address for fraud prevention and eligibility verification purposes. We do not collect precise GPS-level location data.
• Cookie & Tracking Data: Information collected through cookies and similar tracking technologies, as described in Section 6 of this Policy.

3. How We Use Your Data

229bat uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact, Credentials
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer	Financial, Identity
KYC identity verification and age confirmation (18+)	Identity, Verification Documents
Fraud prevention, anti-money laundering (AML) checks, and security monitoring	Identity, Financial, Technical, Location
Delivering and improving Platform features, games, and betting markets	Usage, Technical
Personalising your 229bat experience and game recommendations	Usage, Account Credentials
Sending account notifications, transaction confirmations, and security alerts	Contact, Financial
Sending promotional communications (with your consent where required)	Contact, Usage
Resolving disputes, investigating complaints, and providing customer support	Identity, Communications, Financial
Complying with applicable legal and regulatory obligations	All categories as required by law

4. Legal Basis for Processing

229bat processes your personal data on the following legal grounds:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you, including operating your account, processing transactions, and delivering betting and gaming services.
• Legal Obligation: Processing is necessary for 229bat to comply with applicable laws, including identity verification requirements, anti-money laundering obligations, and fraud prevention duties.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including Platform security, fraud detection, service improvement, and responsible gambling monitoring, where such interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — for example, to send you marketing communications — you have the right to withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

229bat does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties solely to the extent necessary for legitimate operational purposes:

• Payment Service Providers: bKash, Nagad, Rocket (Dutch-Bangla), Upay (UCB), Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive only the financial transaction data required to process your deposits and withdrawals.
• KYC & Identity Verification Partners: Third-party identity verification providers may receive copies of your identity documents and personal details to facilitate the KYC process. These partners are contractually bound to handle your data securely and use it only for verification purposes.
• Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and gameplay data necessary to deliver their games through the 229bat Platform.
• Analytics Providers: Anonymised or aggregated usage data may be shared with analytics providers to help us understand Platform performance and user behaviour.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law, a valid legal order, or to protect the rights and safety of 229bat, its users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 229bat's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party service providers engaged by 229bat are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than that for which it was shared.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 229bat Platform. They enable the Platform to recognise your device, remember your preferences, maintain your session, and collect usage analytics. Similar technologies including web beacons, pixel tags, and local storage may also be used for equivalent purposes.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in during your visit. They cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: These collect anonymised data about how users navigate the Platform — which pages are visited most, how long sessions last, and where errors occur. This data helps 229bat improve the user experience.
• Functional Cookies: These remember your preferences, such as your preferred language, display settings, or last-visited game category, so you do not need to reconfigure them on each visit.
• Targeting & Advertising Cookies: Where applicable, these cookies may be used to deliver promotions and bonus offers relevant to your activity on 229bat. They do not track your activity on external websites.

6.3 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies may impair your ability to log in to your 229bat account or complete transactions. Detailed guidance on managing cookies is available through your browser's help documentation.

7. Data Retention

229bat retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with the following principles:

• Active Accounts: Personal data is retained for the duration of the account relationship to enable ongoing service delivery, dispute resolution, and responsible gambling monitoring.
• Closed Accounts: Following account closure, 229bat retains identity and financial transaction records for a minimum of five (5) years to comply with anti-money laundering obligations and to resolve any residual disputes.
• Communications: Support communications are retained for three (3) years from the date of the last interaction.
• Marketing Data: If you withdraw consent to receive marketing communications, your preference will be recorded and your contact details removed from active marketing lists within thirty (30) days, while a suppression record is retained to prevent re-subscription without your re-consent.

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

8. Data Security

229bat implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or mobile device and 229bat servers.
• One-way cryptographic hashing (bcrypt) for all account passwords. Plain-text passwords are never stored or transmitted.
• Role-based access controls ensuring that only authorised 229bat personnel with a legitimate business need may access personal data.
• Regular security audits and vulnerability assessments of Platform infrastructure.
• Intrusion detection and real-time monitoring systems to identify and respond to suspicious activity.
• Secure, encrypted storage for KYC documents with strict access logging.

While 229bat takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system is completely immune from risk. In the unlikely event of a data breach that affects your rights and freedoms, 229bat will notify affected users without undue delay.

9. Your Rights

As a user of the 229bat Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us using the details provided in Section 13:

• Right of Access: You have the right to request a copy of the personal data 229bat holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to Data Portability: You have the right to receive the personal data you have provided to 229bat in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

229bat will respond to all data rights requests within ten (10) business days. In complex cases, we may extend this period by a further ten (10) business days, in which case we will inform you of the extension and the reasons for it.

10. Third-Party Links

The 229bat Platform may contain references to game providers, payment partners, and other third-party services. Where third-party brand names appear on the Platform (for example, game provider logos or payment method icons), these are displayed for informational purposes only and do not constitute a hyperlink to an external website unless explicitly noted.

229bat is not responsible for the privacy practices or content of any third-party websites or services. If you choose to interact with a third-party service accessed independently of the 229bat Platform, we encourage you to review that party's privacy policy before providing any personal information.

11. Children's Privacy

The 229bat Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor in your care has registered on or provided data to the 229bat Platform, please contact our support team immediately at support@229bat.bid.

Upon receiving a verified report of underage use, 229bat will promptly close the account, delete the associated personal data, and void any transactions conducted on that account. 229bat employs age verification measures during registration and KYC to minimise the risk of underage access.

12. Policy Updates

229bat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered users by email to the address on file or via an in-Platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy will be revised each time changes are published. Your continued use of the 229bat Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you must stop using the Platform and may request account closure.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 229bat handles your personal data, please contact our Data Protection team through the following channels:

• Email: support@229bat.bid (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the live chat widget within your 229bat account.
• Response Time: Privacy-related enquiries are responded to within 6 hours during Bangladesh Standard Time (BST, UTC+6) operational hours, and all formal data rights requests are acknowledged within 24 hours.

When submitting a data rights request, please include your registered email address and a clear description of the right you wish to exercise. 229bat may request proof of identity before processing the request to protect against unauthorised data access.