bitbat Privacy Policy

bitbat is the data controller responsible for your personal information collected through the Platform at https://bitbat.pro. As data controller, bitbat determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Policy or the handling of your personal data, you may contact our data protection team at: [email protected]. We aim to respond to all data-related enquiries within five (5) business days.

bitbat collects personal data in the following categories, limited strictly to what is necessary for the purposes described in this Policy:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and chosen username provided when you create your account.
• Identity verification (KYC) data: Government-issued photo identification (National ID card or passport), proof of payment method ownership, and in certain cases, proof of address. This data is collected to comply with anti-money-laundering obligations and to verify your age (21+).
• Financial transaction data: Deposit amounts, withdrawal requests, payment method identifiers (e.g., bKash wallet number, Nagad account reference), transaction timestamps, and transaction reference numbers. Full payment credentials are never stored directly on our servers.
• Gameplay and betting data: Game sessions, bet amounts, wager history, win/loss records, bonus usage, and session durations. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring.
• Communications data: Records of support interactions, emails, chat logs, and any correspondence you send to bitbat. This enables us to resolve disputes and improve our support quality.
• Technical and device data: IP address, device type, browser type and version, operating system, referring URLs, pages visited, and session duration. This data is collected automatically via server logs and cookies when you access the Platform.
• Responsible gaming data: Self-imposed deposit limits, loss limits, time-out periods, and self-exclusion records. This data is used exclusively to enforce the tools you have set and is never used for marketing profiling.

bitbat does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where disclosure of health-related information is volunteered by you in connection with a responsible gaming support request, in which case it is handled with the highest degree of confidentiality.

bitbat processes your personal data only for specific, legitimate purposes. The legal bases and corresponding purposes are as follows:

• Performance of contract: To create and manage your account; to process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to credit and settle bets and game outcomes; to apply bonuses and enforce wagering requirements; and to provide customer support.
• Legal obligation: To conduct KYC and age verification (21+ requirement); to comply with anti-money-laundering (AML) obligations; to maintain transaction records as required by applicable law; and to respond to lawful requests from competent authorities.
• Legitimate interests: To detect and prevent fraud, money laundering, bonus abuse, and multi-accounting; to maintain platform security and integrity; to analyse aggregate gameplay trends for product improvement; and to monitor compliance with our Terms and Conditions.
• Consent: To send you promotional communications about bonuses, seasonal offers (e.g., BPL season, Eid, Pohela Boishakh promotions), and platform updates, where you have opted in to receive such communications. You may withdraw consent at any time.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, in order to proactively offer responsible gaming tools and support where appropriate.

bitbat does not use your personal data for automated decision-making that produces significant legal effects, except where such processing is required by applicable law or is necessary for fraud prevention — in which case you have the right to request human review of any such decision.

bitbat does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, and Upay receive only the minimum transactional data required to process your deposit or withdrawal. Each payment partner operates under its own privacy policy and is responsible for its own data handling practices.
• Game studios and content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (e.g., a session token and account identifier) to launch and authenticate game sessions. They do not receive your full registration profile.
• KYC and identity verification services: Where bitbat uses a third-party verification platform to process identity documents, that provider receives only the documents and data necessary to complete the verification. Such providers are contractually bound to process data solely for that purpose.
• Fraud prevention and security providers: bitbat may share IP addresses and device fingerprints with specialised fraud detection services to identify suspicious activity. No personally identifiable payment data is shared in this context.
• Legal and regulatory authorities: bitbat will disclose personal data in response to a lawful court order, subpoena, or regulatory request, or where disclosure is otherwise required by applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bitbat's business, your data may be transferred to the acquirer as part of the transaction, subject to equivalent data protection commitments.

All third-party service providers engaged by bitbat are required to process personal data only in accordance with our instructions and to implement appropriate technical and organisational security measures.

The bitbat Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. Cookies are small text files placed on your device when you visit the Platform.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations. Disabling these may affect your user experience but will not prevent access to the Platform.
• Analytical cookies: Help us understand how players navigate and use the Platform by collecting aggregated, anonymised usage data. We use this data exclusively to improve Platform performance and content — not to identify individual users.
• Security cookies: Used to detect fraudulent activity, prevent bot access, and protect account integrity. These are strictly necessary and cannot be disabled.

bitbat does not use third-party advertising cookies or cross-site tracking pixels. You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impair your ability to log in or use the Platform's full functionality.

bitbat retains your personal data only for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. The following retention periods apply:

• Account and registration data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to comply with financial record-keeping and AML obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, in accordance with applicable anti-money-laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the transaction date to support dispute resolution and regulatory compliance.
• Gameplay and betting logs: Retained for a minimum of three (3) years for dispute resolution purposes. Aggregated, anonymised analytics data may be retained indefinitely.
• Support communications: Retained for two (2) years following resolution of the relevant support case.
• Responsible gaming records: Retained for the duration of any active self-exclusion or limit period plus two (2) years after expiry, to ensure re-registration restrictions are properly enforced.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. If you request early deletion of your data, we will honour that request to the extent permitted by our legal obligations.

bitbat employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the bitbat Platform is encrypted using 256-bit SSL/TLS encryption, preventing interception by third parties.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their job functions. All access is logged and subject to audit.
• Password security: User passwords are stored as salted cryptographic hashes. Plain-text passwords are never stored or transmitted. We recommend using a strong, unique password for your bitbat account.
• Intrusion detection: The Platform is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous behaviour patterns.
• Vendor security assessments: Third-party service providers with access to personal data are subject to security assessments and contractual obligations to maintain equivalent security standards.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights and interests, bitbat will notify you as promptly as practicable and will take all reasonable steps to mitigate any harm.

You are responsible for maintaining the security of your account credentials. Do not share your password with anyone, and contact us immediately at [email protected] if you suspect unauthorised access to your account.

As a player on the bitbat Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your account details and a clear description of your request.

The bitbat Platform is strictly for adults aged 21 years and over. We do not knowingly collect, process, or store personal data from anyone under the age of 21. Age verification is conducted at the point of first withdrawal, and we reserve the right to request documentary proof of age at any time during the account lifecycle.

If bitbat becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and refund any real-money deposits made by that individual, less any withdrawals already processed.

If you believe that a minor has registered on the Platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

bitbat primarily processes and stores personal data within secure data centre infrastructure accessible to our operations. Certain third-party service providers — including game studios such as Pragmatic Play and Evolution Gaming, and KYC verification providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a third-party processor operating outside Bangladesh, bitbat ensures that such transfers are governed by appropriate data protection agreements requiring the recipient to maintain standards equivalent to those described in this Policy. bitbat will not transfer personal data to any country or organisation that does not provide an adequate level of data protection.

With your consent, bitbat may send you promotional communications by email or SMS, including information about new bonuses, seasonal promotions (BPL season, Eid, Pohela Boishakh, Durga Puja), game launches, and platform updates. You will only receive marketing messages if you have opted in during registration or subsequently.

You may withdraw your consent and opt out of promotional communications at any time by:

• Clicking the "unsubscribe" link in any promotional email; or
• Contacting our support team at [email protected] with a clear opt-out request.

Opting out of marketing communications will not affect your receipt of transactional messages (e.g., withdrawal confirmations, login alerts, security notifications), which are necessary for the operation of your account and cannot be disabled while your account remains active.

bitbat will never send promotional communications to players who have activated a cooling-off period, time-out, or self-exclusion under our responsible gaming tools.

bitbat reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. Where material changes are made, we will notify registered players by email to the address on record, or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have questions about any changes to this Policy, contact us at [email protected] before continuing to use the Platform.

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data, please contact the bitbat data protection team:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: Daily 09:00 – 24:00 BST (UTC+6)
• Response time: We aim to respond to all data-related enquiries within five (5) business days.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to an appropriate data protection authority or seek independent legal advice. bitbat is committed to resolving all privacy complaints fairly and transparently.