365bat Privacy Policy

1.1 365bat is the data controller responsible for the personal data collected through the 365bat.onl platform. As data controller, we determine the purposes and means by which your personal data is processed.

1.2 If you have any questions about this Policy, wish to exercise your data rights, or need to contact us regarding a data-related matter, you may reach our team at [email protected]. Please mark the subject line of your email as "Privacy Enquiry" so that it is routed to the correct team promptly.

365bat collects personal data through several channels, including account registration, identity verification, financial transactions, platform usage, and direct communication with our support team. The categories of data we collect include:

We do not intentionally collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) and ask that you do not submit such information through any channel on our platform.

3.1 Direct Collection. The majority of personal data we hold is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in any promotional activity.

3.2 Automated Collection. When you use the 365bat platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data helps us maintain platform security and improve the user experience. Please refer to Section 9 of this Policy for full details on our use of cookies.

3.3 Third-Party Sources. In some cases, we may receive data about you from third-party sources, including identity verification service providers, payment processors, and fraud detection agencies. Data received from these sources is used solely to verify your identity, process payments, and protect the security of the platform.

365bat processes your personal data on the following legal grounds:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to provide you with an account, process your deposits and withdrawals, and deliver our gaming and betting services.
• Legal obligation: We are required to collect and retain certain data to comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and responsible gaming regulations.
• Legitimate interests: We process technical and usage data based on our legitimate interest in maintaining the security of the platform, preventing fraud, and improving the services we offer to players.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your consent, which you may withdraw at any time.

365bat uses the personal data we collect for the following purposes:

• To create and manage your player account, including verifying your age (21+) and identity
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods
• To detect, investigate, and prevent fraudulent transactions, multi-accounting, and other prohibited activities
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and security alerts
• To send promotional communications about bonuses, new games, and special offers — where you have consented to receive such messages
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may suggest problem gambling behaviour
• To analyse platform usage in aggregate to improve the quality, performance, and range of our gaming and betting services
• To respond to your enquiries, complaints, and support requests
• To comply with applicable legal and regulatory obligations

5.1 Automated Decision-Making. 365bat may use automated systems to flag accounts for fraud review, identify unusual betting patterns, or apply responsible gaming interventions. Where a significant decision affecting your account is made by an automated system, you have the right to request human review of that decision by contacting our support team.

6.1 We Do Not Sell Your Data. 365bat does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. Full stop.

6.2 Service Providers. We share personal data with carefully selected third-party service providers who assist us in operating the platform. These include identity verification providers, payment processors, fraud detection services, cloud hosting providers, and customer support platforms. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service.

6.3 Game Content Providers. When you play games supplied by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited technical data (such as your player session ID) is shared with those providers to deliver the game experience. These providers do not receive your full identity or financial data.

6.4 Legal Disclosures. We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where we reasonably believe that disclosure is necessary to protect the safety of any person or to prevent illegal activity.

6.5 Business Transfers. In the event that 365bat undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via your registered email address before your data becomes subject to a different privacy policy.

7.1 Retention Periods. We retain your personal data for as long as your account is active and for a period after account closure as required by our legal and regulatory obligations. As a general guide:

• Account and identity data — retained for a minimum of 5 years following account closure to comply with AML and KYC regulations
• Financial transaction records — retained for a minimum of 5 years from the date of the transaction
• Support and communication records — retained for 3 years from the date of last contact
• Marketing consent records — retained until consent is withdrawn or for 3 years from the last recorded interaction, whichever is earlier
• Technical and usage logs — typically retained for 12 months from the date of collection for security and fraud investigation purposes

7.2 Erasure Requests. After the applicable retention period has expired, you may request the deletion of your personal data by contacting us at [email protected]. We will confirm the deletion or explain any reason why erasure is not possible within 30 days of your request.

As a user of the 365bat platform, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain data directly through the My Account section of the platform.
• Right to erasure: Subject to our legal retention obligations, you may request that we delete your personal data. This right does not apply where we are required by law to retain the data.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to our processing of your data based on legitimate interests. We will assess your objection and either cease the processing or explain our compelling grounds for continuing.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We may need to verify your identity before processing the request.

9.1 What Are Cookies. Cookies are small text files placed on your device when you visit the 365bat platform. They allow us to recognise your browser, remember your preferences, and gather data on how the platform is used.

9.2 Types of Cookies We Use.

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional cookies: Allow the platform to remember your preferences, such as your language settings and display options, to provide a more personalised experience.
• Analytics cookies: Help us understand how players navigate the platform, which pages receive the most traffic, and where technical issues occur. This data is used in aggregate and does not identify individual users.
• Marketing cookies: Used to deliver relevant promotional content on the platform based on your usage history. These are only placed with your prior consent.

9.3 Managing Cookies. You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please be aware that disabling strictly necessary cookies may prevent certain core platform functions — including login and payment processing — from working correctly.

10.1 Technical Safeguards. 365bat implements a range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, strict access controls limiting data access to authorised personnel only, and regular security audits.

10.2 Your Responsibilities. While we take every reasonable measure to protect your data on our end, you also play an important role in keeping your account secure. You should use a strong, unique password for your 365bat account, never share your login credentials with anyone, and log out of your account after each session — particularly when using shared or public devices.

10.3 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 365bat will notify affected users without undue delay via their registered email address, and will take all reasonable steps to contain the breach and mitigate any harm caused.

11.1 The 365bat platform is primarily operated for players based in Bangladesh. However, some of our third-party service providers — including cloud hosting and identity verification partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, we ensure that appropriate safeguards are in place, including contractual data protection clauses that require the recipient to maintain data security standards equivalent to those described in this Policy.

11.2 By using the 365bat platform, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh. We will always ensure that any such transfer is carried out with your data security as the primary consideration.

12.1 The 365bat platform is strictly for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that a user is under the minimum age, their account will be immediately closed and all personal data associated with that account will be deleted, subject to any legal retention obligations.

12.2 If you are a parent or guardian and believe that a minor has registered an account on the 365bat platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13.1 365bat reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made, we will update the effective date at the top of this page and, where the changes significantly affect your rights, notify you via your registered email address.

13.2 We encourage you to review this Privacy Policy periodically. Your continued use of the 365bat platform following the publication of an updated Policy constitutes your acceptance of the revised terms.