365bat Privacy Policy

365bat operates the online casino and sports betting platform accessible at 365bat.club. For the purposes of this Privacy Policy, 365bat acts as the data controller in respect of all personal data collected through the platform from players located in Bangladesh.

As data controller, 365bat determines the purposes and means by which personal data is processed. We are responsible for ensuring that your data is handled lawfully, fairly, and transparently, and that appropriate technical and organisational measures are in place to protect it against unauthorised access, loss, or misuse.

Our designated Data Protection contact can be reached at support@365bat.club. All data-related enquiries, access requests, and complaints should be directed to this address. We aim to acknowledge all data-related correspondence within two Business Days and to resolve substantive requests within thirty (30) calendar days.

This Privacy Policy applies to:

• All registered players who hold an active or inactive 365bat account;
• Visitors who browse the 365bat.club website without registering;
• Individuals who contact 365bat customer support via email;
• Any person whose personal data is submitted to 365bat in connection with a know-your-customer (KYC) verification process, a withdrawal request, or a responsible gaming self-exclusion request.

This policy does not apply to the data practices of third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), payment service providers (such as bKash, Nagad, Rocket, or Upay), or any other third-party services that may be accessible through or alongside the 365bat platform. Those parties operate under their own independent privacy policies, and 365bat encourages you to review those policies directly.

This policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which contain additional provisions that interact with and complement this Privacy Policy.

365bat collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the website, and from third-party verification and payment partners. The categories of data we collect are described below.

3.1 Registration and Identity Data

• Full legal name (as it appears on your National Identity Card or passport)
• Date of birth (used to verify the 18+ age requirement)
• Bangladeshi mobile number registered in your own name
• Email address (optional, used for account communications)
• Username and encrypted password
• National Identity Card (NID) number and, where requested, a scanned copy or photograph of the NID for KYC verification
• Proof of address documentation (where required for enhanced due-diligence checks)

3.2 Financial and Transaction Data

• Deposit and withdrawal transaction history, including amounts in Bangladeshi Taka (৳), timestamps, and payment method used
• bKash, Nagad, Rocket, or Upay mobile wallet identifiers (phone numbers linked to those wallets)
• Bank account details (where bank transfer is used as a payment method), including account number and bank name
• Card details where Visa or Mastercard is used — note that full card numbers are never stored by 365bat; card processing is handled entirely by PCI-DSS-compliant payment processors
• Bonus and promotional credit history, including wagering activity related to active bonus offers

3.3 Gaming Activity Data

• Game session logs, including games played, bet amounts, outcomes, and session duration
• Sports betting market selections, odds accepted, and settlement outcomes
• Win and loss history across all game categories
• Responsible gaming tool usage, including deposit limit settings, cooling-off periods activated, and self-exclusion status

3.4 Technical and Device Data

• IP address at the time of registration and each subsequent login
• Device type, operating system, and browser version
• Screen resolution and language settings
• Cookie identifiers and session tokens (see Section 7 for full cookie details)
• Pages visited, time spent on each page, and navigation path through the platform

3.5 Communications Data

• Content of emails sent to support@365bat.club, including any personal information you choose to include in your message
• Records of customer support interactions, including timestamps and resolution notes
• Any documents or attachments submitted as part of a KYC or dispute resolution process

365bat uses personal data collected from players for the following specific purposes. We do not use personal data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

• Account creation and management: To register your account, verify your identity, manage your account settings, and provide you with access to the full range of 365bat games and betting markets.
• Age and identity verification: To confirm that you meet the 18+ minimum age requirement and to fulfil our KYC obligations by verifying that your identity documents match the details provided at registration.
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks, and to process withdrawal requests to your verified payment method in Bangladeshi Taka.
• Fraud prevention and security: To detect and investigate suspicious login activity, identify duplicate accounts, prevent the use of automated bots or scripts, and protect the integrity of the platform for all players.
• Anti-money-laundering (AML) compliance: To monitor transaction patterns for indicators of money laundering or terrorist financing, to conduct source-of-funds checks on large transactions, and to file reports with relevant authorities where legally required.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, to enforce deposit limits, cooling-off periods, and self-exclusion settings activated by you, and to flag accounts that exhibit patterns associated with at-risk gambling behaviour.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes in a fair and timely manner.
• Platform improvement: To analyse aggregate, anonymised usage data in order to improve the performance, stability, and user experience of the 365bat platform.
• Promotional communications: Where you have opted in, to send you information about relevant bonuses, promotions, and seasonal offers (such as Eid or BPL-related promotions). You may opt out of marketing communications at any time by contacting support@365bat.club.

365bat does not engage in automated individual decision-making (including profiling) that produces legal or similarly significant effects without human oversight. Where automated tools are used to flag accounts for review (for example, in fraud detection), a member of the 365bat compliance team reviews the flag before any account action is taken.

365bat processes your personal data on the following legal grounds:

• Contractual necessity: The majority of processing activities — including account registration, identity verification, payment processing, and game access — are necessary for the performance of the contract between you and 365bat as set out in the Terms & Conditions. Without this processing, we cannot provide you with the service.
• Legal obligation: Certain processing activities — including KYC verification, AML transaction monitoring, and age verification — are required by applicable law. We are obligated to carry out this processing regardless of your preferences.
• Legitimate interests: Some processing — including fraud prevention, security monitoring, platform analytics, and responsible gaming behavioural monitoring — is carried out on the basis of 365bat's legitimate interests in maintaining a safe, fair, and compliant platform. We have balanced these interests against your privacy rights and determined that the processing is proportionate and necessary.
• Consent: Marketing communications and the placement of non-essential cookies are carried out on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

365bat does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Personal data may be shared with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and card-processing partners (Visa/Mastercard acquirers). Data shared is limited to what is strictly necessary to execute your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC service providers who assist in verifying National Identity Card documents and confirming that you are who you say you are. These providers are bound by strict confidentiality and data-processing agreements with 365bat.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game content providers may receive your account identifier and session token in order to serve game content. They do not receive your full identity or financial data.
• Fraud prevention services: Specialist anti-fraud platforms that help 365bat detect and block suspicious account activity, duplicate registrations, and bot traffic.
• Legal and regulatory authorities: Where 365bat is legally required or compelled by a valid court order, law-enforcement request, or regulatory directive to disclose personal data. In such cases, 365bat will disclose only the minimum data required and, where legally permissible, will notify the affected player.
• Business succession: In the event of a merger, acquisition, or sale of substantially all of 365bat's assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer by email and given the opportunity to close their account if they do not wish their data to be transferred.

365bat uses cookies and similar tracking technologies on the 365bat.club website. A cookie is a small text file placed on your device by a web server. Cookies allow the platform to recognise your device, maintain your session, and collect aggregate usage data.

Types of cookies used by 365bat:

• Strictly necessary cookies: These are essential for the operation of the platform. They include session cookies that keep you logged in during a game session and security cookies that prevent cross-site request forgery attacks. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These remember your preferences — such as your language setting, display preferences, and responsible gaming limit settings — so that you do not need to re-enter them on each visit.
• Analytics cookies: These collect anonymous, aggregated data about how visitors use the 365bat.club website (pages visited, session duration, navigation paths). This data is used exclusively to improve the platform and is never used to identify individual players.
• Security and fraud-prevention cookies: These help 365bat identify suspicious login attempts, detect bot activity, and protect against account takeover attacks.

365bat does not use third-party advertising cookies or behavioural tracking cookies that build a profile of your online activity across third-party websites.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the platform. Disabling functional or analytics cookies will not prevent you from using core platform features but may result in a degraded experience.

365bat retains personal data for as long as is necessary to fulfil the purposes described in this policy and to comply with applicable legal retention obligations. The specific retention periods applicable to each data category are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and platform improvement purposes.

If you request account closure, 365bat will cease active use of your data for marketing and gaming purposes immediately. However, data subject to a legal retention obligation will be retained in a restricted, access-controlled archive for the period specified above, after which it will be securely deleted.

365bat implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the 365bat servers is encrypted in transit using industry-standard TLS 1.2 or higher. The padlock icon in your browser's address bar confirms that your connection is encrypted.
• Encrypted data storage: Sensitive personal data — including NID details and financial identifiers — is encrypted at rest using AES-256 encryption on servers housed in access-controlled data centres.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a modern, computationally expensive hashing algorithm before storage, meaning that even in the unlikely event of a data breach, your actual password cannot be recovered.
• OTP-based authentication: Login and high-value transaction activities are protected by one-time passwords (OTPs) sent to your registered Bangladeshi mobile number. This ensures that account access requires both your password and physical access to your registered SIM card.
• Access controls: Access to player data within the 365bat organisation is restricted on a strict need-to-know basis. Staff members with access to personal data undergo regular training on data protection obligations. All internal access to sensitive data is logged and audited.
• Penetration testing and security audits: The 365bat platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that affects your rights and freedoms, 365bat will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

You are responsible for maintaining the security of your own login credentials. 365bat will never ask you for your password. If you receive a communication purporting to be from 365bat that requests your password, treat it as fraudulent and report it to support@365bat.club immediately.

As a player on the 365bat platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at support@365bat.club. We will respond to all substantive requests within thirty (30) calendar days. We may ask you to verify your identity before processing a data rights request in order to protect against unauthorised access to another person's data.

• Right of access: You have the right to request a copy of the personal data that 365bat holds about you, together with an explanation of how it is being used and with whom it has been shared.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update most account details directly within your account settings; for identity document corrections, please contact support.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Note that this right is subject to legal retention obligations; data that must be retained by law cannot be deleted before the end of the applicable retention period.
• Right to restriction of processing: You have the right to request that we restrict the processing of your data while a dispute about its accuracy or the legal basis for its processing is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to 365bat in a structured, commonly used, machine-readable format (such as CSV), where the processing is based on consent or contractual necessity and is carried out by automated means.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud detection. 365bat will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or that the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

The 365bat platform is strictly intended for adults aged 18 and above. 365bat does not knowingly collect, store, or process personal data belonging to any individual under the age of 18. If you are under 18, you must not attempt to register an account or use the 365bat platform in any capacity.

As part of the registration process, 365bat requires all applicants to confirm that they are 18 years of age or older. Where 365bat has reasonable grounds to suspect that an account holder may be under 18, the account will be suspended and age verification documents will be requested. If the account holder cannot demonstrate that they are 18 or older, the account will be permanently closed and any deposits will be returned to the payment method from which they were made, with any associated winnings forfeited.

If you believe that a minor has registered an account on the 365bat platform, please notify us immediately at support@365bat.club. We will investigate and take appropriate action as a matter of high priority. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms.

The 365bat platform integrates content and services from third-party providers, including game studios and payment processors. When you interact with third-party game content — for example, a live dealer game powered by Evolution Gaming or a slot provided by Pragmatic Play — a session token and your account identifier may be shared with that provider solely for the purpose of delivering the game. 365bat does not share your full identity or financial data with game studios.

When you initiate a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a banking partner, your transaction details are shared with that payment service provider to the extent necessary to complete the transaction. Each payment provider maintains its own privacy policy governing its use of your data, and 365bat strongly recommends that you review those policies.

365bat does not embed third-party advertising networks, social media tracking pixels, or behavioural retargeting technologies on the 365bat.club website. Any analytics tools used by 365bat collect only anonymised, aggregated data that cannot be used to identify individual users.

365bat reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or improvements to the platform. The updated policy will always be available at 365bat.club/privacy-policy, clearly marked with the effective date of the current version.

Where amendments are material — meaning they significantly alter the way we collect or use your personal data, or meaningfully affect your rights — we will notify registered players by email to the address on file at least seven (7) days before the amended policy takes effect. Non-material amendments (such as typographical corrections or clarifications that do not change the substance of our data practices) may take effect immediately upon publication.

Your continued use of the 365bat platform after the effective date of any amendment constitutes your acknowledgment of the updated policy. If you do not agree with the amended policy, you may close your account by contacting support@365bat.club prior to the effective date. Account closure requests submitted in response to a Privacy Policy amendment will be processed within one Business Day.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about the way 365bat handles your personal data, please get in touch using the details below.

• Email: support@365bat.club (plain text — not a clickable link)
• Subject line recommended: "Privacy Request — [Your Username]" for data rights requests
• Response time: Acknowledgement within 2 Business Days; full response within 30 calendar days
• Operating hours: 24 hours a day, 7 days a week, 365 days a year
• Language: English

For responsible gaming requests — including self-exclusion, deposit limit activation, or cooling-off periods — please visit the Responsible Gaming page or contact support directly. These requests are treated as high priority and will be actioned as quickly as possible, typically within one hour during normal operating conditions.