bat288 Privacy Policy —
How We Protect Your Data

bat288 operates the online gaming platform accessible at bat288.com (the "Platform"). bat288 is committed to protecting the personal data of all users — including registered members across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, Quetta, and every other city and district in Pakistan from which the Platform is accessed.

This Privacy Policy ("Policy") describes the personal data that bat288 collects from you when you register an account, make a deposit, place a bet, use the live casino, contact customer support, or interact with the Platform in any way. It also explains how bat288 processes, stores, and protects that data, and what rights you have in relation to it.

This Policy forms part of the bat288 Terms and Conditions. By accepting the Terms and Conditions — which you do by registering an account or continuing to use bat288 — you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

bat288 processes personal data in compliance with the requirements of its international gaming licence, which includes obligations relating to data protection, KYC (Know Your Customer), and anti-money laundering (AML) record-keeping. These regulatory obligations govern some of bat288's mandatory data collection and retention practices and cannot be waived by individual user request.

For the purposes of applicable data protection law, the data controller responsible for personal data collected through bat288.com is the bat288 operating entity, which holds the international gaming licence under which the Platform is authorised to offer gaming and sports betting services.

bat288's designated Data Protection contact can be reached at [email protected]. Any queries, requests, or complaints relating to the processing of your personal data should be directed to this address, clearly marked "Data Privacy Request" in the subject line. bat288 will acknowledge all data privacy requests within 5 business days.

bat288 collects the following categories of personal data from its users. The data collected varies depending on how you interact with the Platform:

bat288 does not collect sensitive personal data (such as biometric data, health data, or data relating to religious beliefs) except where a CNIC or passport document submitted for KYC verification incidentally contains such information, in which case that information is used solely for identity verification purposes and is not processed for any other purpose.

bat288 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, session timestamps, and in-game event logs. This data is collected via server logs, cookies, and similar tracking technologies (see Section 8).
• Third-party providers: Identity verification data from KYC service providers who cross-reference your CNIC against government-issued identity databases. Payment data from payment processing partners including JazzCash, EasyPaisa, and Pakistani banking institutions. Fraud detection signals from third-party security and risk management services.
• Game studios: Aggregated game session data from bat288's certified game studio partners, which is used for RTP reporting, dispute resolution, and responsible gaming monitoring. Game studios do not receive individually identifiable player data beyond what is strictly necessary for session integrity.

bat288 processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to register your account, execute deposits and withdrawals, operate your PKR Wallet, and provide access to bat288's gaming Services pursuant to the bat288 Terms and Conditions.
• Legal obligation: Processing required to comply with bat288's international gaming licence obligations, including KYC verification, AML record-keeping, age verification, and responsible gaming monitoring. bat288 cannot waive these processing activities on the basis of individual user objection, as they are mandatory regulatory requirements.
• Legitimate interests: Processing carried out to protect bat288's platform from fraud, abuse, and security threats; to investigate and resolve disputes; to maintain the technical integrity and performance of the Platform; and to conduct internal business analytics for product improvement purposes.
• Consent: Processing of your data for direct marketing communications (email, SMS) where you have opted in to receive such communications. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

bat288 uses your personal data for the following specific purposes:

• Account management: Creating and maintaining your bat288 account, verifying your identity and age, managing your PKR Wallet balance, and processing your deposit and withdrawal transactions via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, USDT TRC20, or Retail Cash).
• Gaming services delivery: Enabling access to bat288's live casino, slot games, sports betting markets, crash games, and all other Platform products; recording game sessions and transaction logs for audit and dispute resolution purposes.
• KYC and AML compliance: Verifying your identity against your CNIC, cross-referencing against sanction lists and politically exposed persons (PEP) databases, and maintaining the records required under bat288's licensing obligations. These records are retained for the period prescribed by the applicable regulatory framework regardless of account closure.
• Fraud prevention and security: Detecting and preventing account fraud, payment fraud, multi-accounting, bonus abuse, and other prohibited conduct as defined in the bat288 Terms and Conditions. This includes automated risk-scoring of account activity using technical data and gaming behaviour patterns.
• Responsible gaming: Monitoring your gaming activity to identify patterns that may indicate problem gambling behaviour; triggering responsible gaming interventions including cooling-off notifications, deposit limit prompts, and referrals to support resources in appropriate cases.
• Customer support: Responding to your support queries via Live Chat and email; maintaining records of your interactions with the bat288 support team for quality assurance and dispute resolution.
• Marketing communications: Sending you information about bat288 promotions, bonuses, and new product launches where you have opted in to receive such communications. bat288 will not send marketing communications to Players who have activated self-exclusion or a cool-off period.
• Platform improvement: Analysing aggregated and anonymised usage data to improve Platform performance, game selection, payment processing speeds, and the overall user experience for Pakistani players.

bat288 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

bat288 does not sell your personal data to third parties. bat288 shares your personal data only in the following limited circumstances:

• Payment processors: Your financial data and identity data are shared with JazzCash, EasyPaisa, Pakistani banking partners (HBL, UBL, Meezan Bank, Allied Bank, SadaPay), and USDT processing providers strictly for the purpose of executing your deposit and withdrawal transactions. These providers are contractually prohibited from using bat288 player data for any purpose other than transaction processing.
• KYC verification providers: Your identity documents and CNIC data are shared with bat288's licensed KYC verification service providers for the purpose of identity and age verification. KYC providers process this data under strict data processing agreements and are prohibited from retaining or re-using it beyond verification purposes.
• Game studios: Session data (game ID, stake, outcome, timestamp) is shared with certified game studios to the extent required for game integrity and dispute resolution. Game studios do not receive your identity data, payment data, or contact information.
• Fraud and security services: Technical data (IP address, device fingerprint, session metadata) is shared with third-party fraud detection providers to identify and prevent prohibited conduct on the Platform.
• Regulatory and legal authorities: bat288 will disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required by law, regulation, court order, or bat288's licensing obligations. bat288 will not notify the affected user of such disclosure where prohibited from doing so by law.
• Business transfers: In the event of a merger, acquisition, or sale of bat288's operating entity, player data may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections described in this Policy. bat288 will notify affected users prior to any such transfer where practicable.

bat288 uses cookies and similar tracking technologies on bat288.com to operate the Platform, maintain your login session, and collect usage analytics. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session, security tokens, and load-balancing cookies. These cookies cannot be disabled without significantly impairing your use of bat288.
• Functional cookies: Cookies that remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so that you do not need to reconfigure them on each visit.
• Analytics cookies: Cookies that collect anonymised data about how players interact with bat288.com — which pages are visited most frequently, how long sessions last, and which game categories receive the most engagement. This data is used to improve Platform performance and content for Pakistani players.
• Security and fraud detection cookies: Cookies and device fingerprinting technologies used to identify suspicious login activity, detect multi-accounting, and flag potential fraudulent transactions for review.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent bat288 from functioning correctly. bat288 does not use cookies to serve third-party advertising on the Platform.

bat288 retains personal data for the periods set out below. Retention periods are determined by the purpose for which the data was collected and by bat288's regulatory obligations under its international gaming licence:

Following the expiry of the applicable retention period, bat288 will securely delete or anonymise personal data so that it can no longer be associated with an identifiable individual. Data that has been anonymised may be retained indefinitely for analytical purposes.

bat288 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all bat288.com pages, including the login, deposit, withdrawal, and account settings pages. All data transmitted between your device and bat288's servers is encrypted in transit.
• Encrypted data storage: Sensitive personal data — including CNIC numbers, payment account details, and KYC documents — is stored in encrypted form at rest on bat288's servers.
• Access controls: Access to personal data within bat288's systems is restricted on a strict need-to-know basis. Internal access is controlled through role-based permissions, multi-factor authentication, and audit logging.
• Intrusion detection: bat288's technical infrastructure is monitored 24/7 for unauthorised access attempts, data exfiltration patterns, and anomalous system behaviour.
• Third-party security audits: bat288 undergoes periodic security assessments as part of its licensing obligations, including penetration testing and infrastructure vulnerability reviews.

While bat288 takes all reasonable steps to protect your personal data, no internet transmission or storage system is 100% secure. You are responsible for maintaining the confidentiality of your bat288 account credentials. bat288 will never ask you for your password via any communication channel. If you believe your account has been compromised, contact support immediately via Live Chat.

Subject to bat288's regulatory and legal obligations, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data that bat288 holds about you. bat288 will provide this within 30 days of a verified request, in a structured, commonly used, and machine-readable format where technically feasible.
• Right to rectification: If any personal data that bat288 holds about you is inaccurate or incomplete, you may request that it be corrected. Certain corrections may require re-submission of KYC documentation.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. bat288 will honour erasure requests except where retention is required by regulatory obligation (as set out in Section 9), for fraud prevention purposes, or for the establishment, exercise, or defence of legal claims.
• Right to restriction: You may request that bat288 restrict processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• Right to data portability: You may request that bat288 provide your personal data in a portable format for transfer to another service provider, where the processing is based on your consent or contractual necessity and is carried out by automated means.
• Right to object: You may object to processing of your personal data carried out on the basis of bat288's legitimate interests. bat288 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact bat288 at [email protected] with "Data Privacy Request" in the subject line. bat288 will verify your identity before processing any data rights request and will respond within 30 calendar days. If bat288 is unable to fully comply with your request due to regulatory obligations, bat288 will explain the specific legal basis for any restriction on compliance.

bat288 is strictly an adult platform. All bat288 Services are available exclusively to individuals who are 21 years of age or older. bat288 does not knowingly collect personal data from individuals under the age of 21.

bat288 enforces the 21+ age requirement through CNIC-based identity verification at the point of registration and through ongoing KYC monitoring throughout the account lifecycle. Any account found to belong to a person under 21 years of age will be immediately closed, all gaming activity will be voided, all funds will be returned to the original payment source, and the relevant personal data will be deleted except where retention is required by law.

Parents and guardians are responsible for ensuring that minors in their household do not access bat288.com or create bat288 accounts. If you believe a minor has registered a bat288 account using falsified identity information, contact [email protected] immediately. bat288 will investigate and act within one business day.

bat288 may send you promotional communications — including bonus offers, tournament announcements, and new game launches — via email and SMS, subject to the following conditions:

• bat288 will only send marketing communications where you have provided explicit opt-in consent during registration or subsequently via your account settings.
• Every marketing communication from bat288 includes a clear and functional unsubscribe option. You may opt out of all bat288 marketing communications at any time by clicking the unsubscribe link in any communication, or by updating your communication preferences in your account settings.
• bat288 will not send marketing communications to Players who have activated a self-exclusion or a cool-off period on their account. Marketing suppression is applied automatically when these tools are activated.
• bat288 does not share your contact details with third-party advertisers for their own marketing purposes.
• Opting out of marketing communications does not affect the operation of your bat288 account, your ability to deposit, withdraw, or play, or the application of responsible gaming tools on your account.

bat288.com does not contain links to third-party websites other than those operationally required for the provision of bat288's Services (e.g. payment provider portals accessed during the deposit or withdrawal flow). Where the Platform does link to a third-party service, bat288 is not responsible for the privacy practices of that third party.

bat288 recommends that you review the privacy policy of any third-party service you access in connection with your use of bat288 — particularly your mobile wallet provider (JazzCash or EasyPaisa) and your banking institution — as their data practices are governed by their own policies, not by this bat288 Privacy Policy.

bat288 reserves the right to update this Privacy Policy at any time to reflect changes in bat288's data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this Policy will be revised whenever a change is made.

Where changes are material — meaning they significantly affect how bat288 collects or uses your personal data — bat288 will notify you via your registered email address at least 14 days before the changes take effect. For minor clarifications or non-substantive amendments, bat288 may update the Policy without prior notice.

Your continued use of bat288 following any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using bat288 and contact support to arrange withdrawal of any remaining balance and closure of your account.

Previous versions of the bat288 Privacy Policy are available on request by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to make a complaint about bat288's data practices, please contact us through the following channels:

• Email: [email protected] — use the subject line "Data Privacy Request" for all personal data queries. bat288 will acknowledge your request within 5 business days and provide a full response within 30 calendar days.
• Live Chat: Available 24/7 from your bat288 dashboard. Live Chat is suitable for general privacy questions. For formal data rights requests, email is preferred to ensure a documented audit trail.

If you are not satisfied with bat288's response to your data privacy request or complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or gaming regulatory body under whose jurisdiction bat288's licence is held.