49bat Privacy Policy

49bat ("49bat", "we", "us", "our") is committed to protecting and respecting the privacy of every individual who accesses or uses the 49bat online platform at 49bat.io (the "Platform"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

This Policy applies to all users of the Platform, including registered players, prospective players who browse the Platform without registering, and individuals who contact 49bat support. It covers personal data collected through the Platform itself, through email correspondence, through live chat interactions, and through any other channel by which you communicate with 49bat.

By accessing the Platform or registering an account, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy should be read in conjunction with the 49bat Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference into the overall framework governing your relationship with 49bat.

49bat collects the following categories of personal data:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where explicitly required by applicable law for identity verification purposes and only with your prior explicit consent.

49bat collects personal data through the following methods:

• Direct submission: Information you actively provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, filling in a support contact form, or corresponding with us by email or live chat.
• Automated collection: Technical data collected automatically each time you visit or interact with the Platform, including IP address, device identifiers, browser fingerprint, and session behaviour data, collected via server logs and first-party analytics tools.
• Cookies and similar technologies: Session and persistent cookies stored on your device that help the Platform function correctly, remember your preferences, and measure usage patterns. See Section 9 for full details of our cookie practices.
• Third-party verification providers: Where you submit identity documents for KYC verification, those documents are processed by our trusted identity verification partners, who return a verification decision to 49bat. The full document is not retained by the third-party provider beyond the time necessary to complete the check.
• Payment service providers: Transaction confirmation data returned by bKash, Nagad, Rocket, Upay, and partner banks when a deposit or withdrawal is processed. 49bat receives confirmation of the transaction amount, reference number, and payment method — not your full mobile banking PIN or full bank credentials.
• Fraud detection systems: Automated systems that analyse account behaviour patterns, device characteristics, and transaction data to identify potential fraud or prohibited conduct. These systems may generate risk scores associated with your account for internal compliance purposes.

49bat uses the personal data it collects for the following specific purposes:

• Account registration and management: Creating your account, verifying your identity, maintaining your account records, and enabling you to log in and access Platform features.
• Age and identity verification: Confirming that you meet the minimum age requirement of 21 years and that the identity information you have provided is accurate. This is a legal obligation that 49bat takes seriously.
• Transaction processing: Facilitating deposits into and withdrawals from your account via your chosen payment method, including communicating with payment service providers to confirm transaction status.
• Customer support: Responding to your support enquiries, investigating complaints, resolving disputes, and maintaining records of support interactions for quality assurance and training purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the Platform, identify technical issues, and prioritise product development decisions.
• Fraud prevention and security: Monitoring account and transaction activity for indicators of fraud, money laundering, prohibited conduct, and unauthorised access, and taking appropriate action where such indicators are identified.
• Responsible gaming compliance: Monitoring player behaviour for indicators of problem gambling, applying deposit limits and self-exclusions requested by players, and ensuring that mandatory responsible gaming interventions are applied in accordance with our Responsible Gaming Policy.
• Promotional communications: Where you have opted in to marketing communications, sending you information about relevant promotions, bonuses, and platform updates. You may opt out of marketing communications at any time via your account settings or by contacting support.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful requests from competent authorities, and fulfilling any legal obligations applicable to the operation of the Platform.

49bat processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and 49bat — i.e., to provide you with access to the Platform, process your bets and transactions, and operate your account. Without this processing, 49bat cannot deliver its services to you.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money-laundering (AML) obligations, age verification requirements, fraud reporting obligations, and data retention mandates imposed by applicable law.
• Legitimate interests: Processing necessary for the legitimate interests of 49bat, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interests include fraud prevention, platform security, product improvement, and the responsible gaming monitoring activities described in Section 4.
• Consent: Where no other legal basis applies, 49bat will rely on your explicit consent for specific processing activities — most notably, optional marketing communications. Consent-based processing can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

49bat does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Personal data is shared only in the following limited circumstances:

• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and any other payment partner you select, solely for the purpose of processing your deposit or withdrawal.
• Identity verification providers: Identity documents submitted for KYC purposes are shared with our accredited verification partners for the sole purpose of completing the verification check. These partners are contractually bound to process your data only for this purpose and to delete it upon completion of the check.
• Game content providers: Where you play games provided by third-party studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), a minimal set of session data (such as a pseudonymous player token and session stake/win data) is shared with the relevant studio to enable the game to function. These studios do not receive your full identity data.
• Fraud prevention and compliance partners: Anonymised or pseudonymised risk data may be shared with specialist fraud detection platforms to enhance our ability to identify and prevent prohibited conduct.
• Legal and regulatory authorities: 49bat will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent public authorities where required to do so by applicable law, valid legal process, or where 49bat reasonably believes disclosure is necessary to protect the rights, property, or safety of 49bat, its players, or the public.
• Business successors: In the event of a merger, acquisition, restructuring, or sale of all or part of 49bat's business, personal data held by 49bat may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations.

49bat retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where anonymisation is used, the resulting anonymised dataset may be retained indefinitely for statistical and platform improvement purposes.

Where a legal dispute is ongoing or reasonably anticipated at the time a retention period would otherwise expire, 49bat may extend the retention period for the relevant data until the dispute is fully resolved.

As a registered player on the 49bat platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Account Username]".

• Right of Access: You have the right to request a copy of all personal data that 49bat holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Minor corrections (such as updating a contact number) can be made directly within your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data. This right is subject to applicable legal retention obligations — we cannot delete data that we are legally required to retain (such as transaction records subject to AML retention requirements). Where erasure is not possible, we will explain the reason in writing.
• Right to Restriction of Processing: You may ask us to restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis on which we are processing your data.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. Where you object, 49bat will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

49bat uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies help the Platform remember information about your visit and improve your experience. The following categories of cookies are used on the 49bat Platform:

49bat does not use third-party advertising or targeting cookies. No cookie data collected on the 49bat Platform is shared with advertising networks or used to build a cross-site behavioural profile of any individual player.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies are available in the help documentation of all major browsers, including Chrome, Firefox, Safari, and Edge.

The 49bat Platform is strictly intended for adults aged 21 years and above. 49bat does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account or use the Platform in any capacity.

If 49bat becomes aware that it has collected personal data from an individual under the age of 21, it will take the following immediate steps:

• Permanently close the relevant account.
• Return any deposited funds to the originating payment source.
• Securely delete all personal data associated with the underage account, subject only to any legal retention obligations that may apply.
• Forfeit any winnings generated by the underage account in their entirety.

Parents and guardians who believe a minor in their household has registered a 49bat account are encouraged to contact us immediately at [email protected]. We will investigate and act promptly. We also encourage parents and guardians to install parental control software on shared devices to prevent underage access to online gambling platforms.

49bat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 49bat Platform is encrypted using industry-standard 256-bit TLS encryption, preventing interception of data in transit.
• Encrypted data storage: Personal data stored on 49bat servers is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only, and all access events are logged and audited.
• Access controls: Strict role-based access controls (RBAC) ensure that 49bat employees can only access personal data that is necessary for their specific job function. No employee has unrestricted access to the full player database.
• Two-factor authentication (2FA): All internal 49bat systems that contain personal data require two-factor authentication for staff access. Players are also strongly encouraged to enable 2FA on their own accounts.
• Regular security assessments: 49bat conducts periodic internal security reviews and vulnerability assessments to identify and address potential weaknesses in the Platform's security architecture.
• Incident response procedures: In the event of a confirmed data security incident, 49bat maintains a documented incident response plan. Affected players will be notified promptly where the incident creates a material risk to their rights or interests.
• Staff training: All 49bat personnel who handle personal data receive regular data protection and security awareness training as a condition of their employment.

While 49bat takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials — including your username and password — confidential. If you suspect that your account has been compromised, please contact [email protected] immediately.

The 49bat Platform may contain references to third-party game providers and payment services. Where links to third-party websites or services exist, please be aware that 49bat has no control over the content, privacy practices, or data processing activities of those third-party services. This Privacy Policy applies solely to data processed by 49bat on the 49bat Platform.

Before providing your personal data to any third-party service, we strongly recommend reviewing that service's own privacy policy. 49bat accepts no responsibility or liability for the privacy practices of any third party.

The 49bat Platform serves players primarily located in Bangladesh. In order to deliver certain platform services — including third-party game content, identity verification, and fraud detection — it may be necessary to transfer personal data to servers or service providers located outside Bangladesh.

Where such international transfers occur, 49bat ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to the protections described in this Policy. These safeguards may include:

• Contractual data processing agreements that impose equivalent data protection obligations on the recipient.
• Use of service providers located in jurisdictions recognised as providing an adequate level of data protection.
• Technical measures such as end-to-end encryption of data in transit across international networks.

If you would like further information about the specific safeguards applicable to any international transfer of your personal data, please contact our support team at [email protected].

49bat reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or our internal data processing practices. The date of the most recent revision is always displayed at the top of this page and in the Table of Contents sidebar.

Where changes to this Policy are material — meaning they meaningfully affect how your personal data is processed or the rights available to you — 49bat will notify registered players by email at least fourteen (14) days before the revised Policy takes effect. The notification email will include a summary of the key changes and a link to the full revised Policy.

Where changes are non-material (such as corrections of typographical errors, clarifications of existing practices that do not alter their substance, or updates to contact details), 49bat may update this Policy without advance notification, although the effective date will be updated accordingly.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of that revised Policy. If you do not agree with the changes, you must discontinue use of the Platform and may close your account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 49bat processes your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request — [Your Account Username]"
• Subject line for general privacy enquiries: "Privacy Enquiry — [Brief Description]"
• Support hours: Seven days a week, 08:00 – 24:00 Bangladesh Standard Time (BST, UTC+6), including public holidays.
• Response time: General enquiries within one Business Day; data rights requests acknowledged within five Business Days and fully resolved within 30 calendar days.

When submitting a data rights request, please include your registered account username and the email address associated with your account so that we can locate your records and respond efficiently. For security purposes, we may ask you to verify your identity before processing a data access or erasure request.