229bat Privacy Policy

📋 Introduction

This Privacy Policy ("Policy") describes how 229bat ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "the Player", "the User") who register an account, visit the 229bat website, or use any of the services offered by 229bat — including sports betting, live casino, slots, crash games, and customer support communications.

By creating a 229bat account, by making a deposit, or by continuing to access the platform after the effective date of this Policy, you acknowledge that you have read and understood this Policy in full and consent to the collection and use of your personal data as described herein. If you do not consent, please discontinue use of the platform and request account closure via our support team.

229bat is committed to handling your personal data responsibly and in accordance with internationally recognised data protection principles. We apply industry-standard 256-bit SSL encryption to all data in transit and maintain secure, access-controlled storage for all data at rest. We do not sell your personal information to third parties for marketing, advertising, or profiling purposes.

🔑 Our Privacy Principles

Every data-handling decision at 229bat is guided by six core principles. These are not aspirational — they are operational commitments embedded in how the platform is built and managed.

Data We Collect

229bat collects personal data through several channels: directly from you when you register or contact support, automatically through your use of the platform, and from third-party verification and payment partners where necessary for compliance purposes.

1.1 — Registration Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify the 21+ age requirement)
• Email address (used for account communications and security alerts)
• Mobile phone number registered in Bangladesh (used for account verification and two-factor authentication)
• Residential address (used for KYC compliance)
• Preferred currency: Bangladeshi Taka (BDT)

1.2 — Identity Verification (KYC) Data

• Scanned copy or photograph of a government-issued National Identity Card (NID), passport, or driver's licence
• Proof of address document (utility bill or bank statement no older than three months)
• Selfie photograph (where requested for liveness verification)
• Mobile banking account screenshot (bKash, Nagad, Rocket) confirming account ownership

1.3 — Financial Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Payment method details (mobile wallet account number, bank account name — card numbers are handled exclusively by our PCI-compliant payment partners and are never stored on 229bat servers)
• Account balance history and wagering activity logs

1.4 — Technical and Usage Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, game sessions played, and bet history
• Session timestamps and login history
• Cookies and similar tracking technologies (see Section 6)

1.5 — Communications Data

• Records of live chat conversations with 229bat customer support
• Email correspondence sent to or from 229bat support addresses
• Feedback, complaints, and dispute-related records

How We Use Your Data

229bat processes your personal data only for specific, legitimate purposes. The following table sets out the main processing activities and the lawful basis for each.

2.1 — Service Delivery

We use your registration data, financial transaction data, and technical data to create and manage your account, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and participating local banks, and to provide access to betting markets, casino games, and customer support. This processing is necessary to perform our contract with you.

2.2 — Identity and Age Verification

229bat is obligated to verify that all account holders are aged 21 or above and that their identity matches the payment methods used. KYC data is processed to satisfy this legal obligation and to comply with anti-money laundering (AML) requirements applicable to the jurisdiction under which 229bat operates.

2.3 — Fraud Prevention and Security

Technical and usage data — including IP address, device fingerprint, login history, and betting patterns — is analysed in real time to detect suspicious activity, prevent fraud, identify multi-accounting, and protect the integrity of the platform. This processing is based on 229bat's legitimate interest in maintaining a safe and fair environment for all players.

2.4 — Responsible Gaming Monitoring

229bat uses account activity data to identify patterns that may indicate problem gambling behaviour, such as rapidly escalating deposit amounts, extended session durations, or frequent reversal of withdrawal requests. Where such patterns are detected, our responsible gaming team may reach out to offer support resources. This processing serves both our legal obligations and your direct interests as a player.

2.5 — Marketing Communications

With your explicit consent (provided during registration or at any time via your account settings), 229bat may send you promotional emails or SMS messages about new games, bonuses, seasonal offers (such as Eid specials, BPL cricket promotions, or Pohela Boishakh bonuses), and platform updates. You may withdraw consent and unsubscribe at any time by adjusting your communication preferences in your account dashboard or by contacting support.

Data Sharing & Third Parties

229bat does not sell, rent, or trade your personal data. We share data with third parties only where strictly necessary to operate the platform, comply with legal requirements, or protect the safety of our players and the integrity of our services.

3.1 — Payment Processors

To process deposits and withdrawals, 229bat shares the minimum necessary transaction data with our payment partners, which include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These partners are contractually bound to use shared data solely for the purpose of processing the specific transaction and are required to maintain security standards no less stringent than those applied by 229bat.

3.2 — KYC and Identity Verification Partners

229bat may use specialist third-party KYC and identity verification service providers to validate the documents you submit. These providers process your identity documents on our behalf under data processing agreements that restrict their use of your data to the verification task only.

3.3 — Game Providers

To facilitate gameplay, a session token and anonymised player identifier may be passed to game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full name, contact details, or financial information. Game providers are contractually prohibited from using session data for any purpose other than delivering the specific game session.

3.4 — Legal and Regulatory Disclosures

229bat may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised third parties when required to do so by applicable law, a valid court order, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will not disclose more data than is legally required in any such situation.

3.5 — Business Transfers

In the event that 229bat undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address registered to your account prior to any such transfer taking effect, and your rights under this Policy will be preserved by the acquiring entity.

Data Retention

229bat retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce our agreements. The following retention periods apply:

• Account data — retained for the lifetime of your account plus five years following permanent account closure, to satisfy AML record-keeping obligations
• KYC documents — retained for five years from the date of verification or from account closure, whichever is later
• Financial transaction records — retained for seven years from the date of the transaction to comply with financial record-keeping requirements
• Betting and gaming history — retained for five years from the date of each wager or game round
• Support communications — retained for three years from the date of the last communication in a support thread
• Marketing consent records — retained for as long as your account is active, or until you withdraw consent, plus one year thereafter as evidence of your consent decision
• Technical / log data — typically retained for 12 months for security monitoring purposes, then deleted or anonymised

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

Your Data Rights

As a 229bat player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 days of receiving a verifiable request.

Cookies & Tracking Technologies

229bat uses cookies and similar technologies to operate the platform, remember your preferences, maintain your login session, detect fraud, and — with your consent — deliver relevant promotions. Cookies are small text files placed on your device by your browser when you visit the 229bat website.

6.1 — Types of Cookies We Use

• Strictly necessary cookies — required for the platform to function. They maintain your authenticated session, remember your language preference, and ensure secure page transitions. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies — collect anonymised data about how players use the platform (e.g., most-visited pages, average session duration) to help us improve user experience. No personally identifiable information is stored in these cookies.
• Functional cookies — remember your preferences such as preferred game lobby view, notification settings, and deposit method shortcuts.
• Marketing cookies (consent-based) — used to measure the effectiveness of promotional campaigns. Activated only with your explicit consent.

6.2 — Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use 229bat's core services, including account login and payment processing. Instructions for managing cookies in common mobile browsers are available in each browser's help documentation.

Data Security

229bat implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 229bat servers
• Encryption of sensitive data fields (including identity document copies) stored in our databases
• Role-based access controls ensuring that only authorised personnel can access player data, and only to the extent required for their specific job function
• Multi-factor authentication required for all internal administrative accounts
• Regular penetration testing and security audits conducted by independent third-party security specialists
• Automated real-time monitoring and alerting for anomalous access patterns or potential data breaches
• Incident response procedures tested and updated annually

While 229bat takes every reasonable precaution to secure your data, no system connected to the internet can be guaranteed to be completely impenetrable. You are responsible for keeping your account credentials confidential and for using a secure internet connection when accessing the platform, particularly when conducting financial transactions.

Policy Updates & Contact

229bat reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The revised Policy will be published on this page with an updated effective date. Where changes are material — for example, a change in the categories of data collected or a new third-party data sharing arrangement — we will notify registered players via the email address or mobile number associated with their account at least seven days before the changes take effect.

Your continued use of the 229bat platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and contact our support team to close your account.

8.1 — Contact Our Privacy Team

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the 229bat privacy team using the details below. All privacy-related requests are handled with strict confidentiality:

This Privacy Policy was last reviewed and approved on 1 January 2026. It supersedes all previous versions of the 229bat Privacy Policy.