bat393 Privacy Policy

This Privacy Policy is issued by bat393 ("bat393", "we", "us", "our"), the operator of the online gaming platform available at bat393.asia. bat393 operates under a valid international gaming licence and acts as the data controller in respect of the personal information collected through the bat393 platform.

This Privacy Policy applies to all personal data collected from individuals who: (a) visit the bat393 website, (b) register or maintain a bat393 player account, (c) use any bat393 gaming, betting, or payment service, (d) communicate with bat393 via live chat, email, or any other channel, or (e) participate in any bat393 promotional activity or marketing communication.

bat393 is committed to handling all personal data in accordance with applicable data protection laws and the standards required under its international gaming licence. This Policy explains your rights as a data subject and bat393's obligations as a data controller in plain language that is easy to understand, whether you are accessing the platform from Karachi, Lahore, Islamabad, or anywhere else in Pakistan.

bat393 collects personal data that falls into the following categories:

bat393 collects personal data through the following channels and mechanisms:

Direct Collection

The majority of personal data bat393 holds about you is provided directly by you when you: register a bat393 account; complete KYC identity verification; make a deposit or request a withdrawal; contact bat393 via live chat or email; complete any form or survey on the bat393 platform; or participate in a promotion or competition.

Automated Technical Collection

When you visit bat393.asia or use the bat393 platform, we automatically collect certain technical data about your device and session. This includes IP address, browser type, device identifiers, session duration, pages visited, and interaction events. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 08 of this Policy.

Third-Party Sources

bat393 may receive certain personal data from trusted third-party sources, including:

• Identity verification service providers who assist with CNIC verification and anti-fraud screening;
• Payment providers including JazzCash and EasyPaisa, who may share transaction confirmation data to facilitate deposit and withdrawal matching;
• Anti-money laundering (AML) screening services that check player identities against sanctions lists and politically exposed person (PEP) databases;
• Analytics partners who provide aggregated, non-personally-identifiable insights about platform usage patterns.

bat393 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your bat393 player account, including processing deposits, settling winnings, and managing account preferences;
• Identity Verification (KYC): To verify your identity in compliance with anti-money laundering regulations and our international gaming licence obligations before processing withdrawals;
• Fraud Prevention and Security: To detect and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct as described in our Terms and Conditions;
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard, and USDT, and to process withdrawal requests to your nominated payment method;
• Regulatory Compliance: To meet our obligations under our international gaming licence, including player activity monitoring, responsible gaming tool administration, and age verification;
• Customer Support: To respond to your queries, resolve disputes, and manage formal complaints through bat393's support channels;
• Responsible Gaming: To monitor for indicators of problem gambling behaviour and to administer deposit limits, cooling-off periods, and self-exclusion arrangements;
• Platform Improvement: To analyse aggregated usage data to improve bat393's product offering, user interface, and overall player experience;
• Marketing Communications: To send you promotional offers, bonus notifications, and product updates where you have opted in to receive such communications. You may unsubscribe at any time through your account preferences or by contacting support.

bat393 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing is necessary to fulfil bat393's contractual obligations to you as a registered player — including account operation, payment processing, and game access;
• Legal Obligation: Processing is required to comply with legal and regulatory requirements applicable to bat393 as a licensed gaming operator, including KYC verification, AML screening, and responsible gaming obligations;
• Legitimate Interests: Processing is necessary for bat393's legitimate interests in operating a secure, fair, and commercially sustainable gaming platform — including fraud prevention, security monitoring, and platform analytics — provided those interests are not overridden by your fundamental rights and freedoms;
• Consent: Where bat393 relies on your consent for a specific processing activity — such as sending marketing communications — we will obtain that consent explicitly and record it. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bat393 does not sell your personal data to any third party. bat393 may share your personal data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard acquiring banks, and cryptocurrency processing partners — for the purpose of processing deposits and withdrawals to and from your bat393 account;
• Identity Verification Providers: Third-party KYC and AML service providers who assist bat393 in verifying player identities, age, and screening against sanctions and PEP databases;
• Game Content Providers: Third-party game studios and live casino providers whose titles are integrated into the bat393 platform may receive limited technical and session data necessary for game operation. These providers operate under data processing agreements with bat393;
• Regulatory Authorities: bat393 is required to share player data with its licensing authority and, where legally required, with law enforcement agencies, financial regulators, or other governmental bodies investigating criminal or fraudulent activity;
• Technology and Hosting Partners: Cloud infrastructure, cybersecurity, and platform technology providers who process data on bat393's behalf under strict data processing agreements and security obligations;
• Professional Advisers: Legal counsel, auditors, and compliance advisers where necessary for bat393 to exercise or defend legal rights.

bat393 is an internationally operated platform. As a result, your personal data may be transferred to, stored in, or processed in countries outside Pakistan, including the jurisdiction in which bat393 is licensed and countries where our technology infrastructure partners operate their servers.

Where such international transfers occur, bat393 implements appropriate safeguards to ensure that your personal data receives a level of protection equivalent to that applied within Pakistan. These safeguards include:

• Contractual data transfer agreements incorporating standard data protection clauses;
• Transfers to jurisdictions recognised as providing adequate levels of data protection;
• Technical security measures including end-to-end encryption for data in transit.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting bat393 support at [email protected].

bat393 uses cookies and similar tracking technologies on the bat393.asia website and platform. Cookies are small data files placed on your device that allow bat393 to recognise your browser session, remember your preferences, and collect technical usage data.

Types of Cookies bat393 Uses

• Strictly Necessary Cookies: Essential for the bat393 platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without disrupting platform functionality;
• Performance Cookies: Collect anonymised data about how players use bat393 — which pages are visited most frequently, where sessions begin and end, and similar usage statistics — to help bat393 improve the platform experience;
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limit configurations, and display options;
• Analytical Cookies: Used by bat393's analytics tools to understand aggregate player behaviour patterns. Data collected through analytical cookies is anonymised and not linked to your identity.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the bat393 platform. bat393 does not use cookies for cross-site advertising tracking or third-party retargeting.

bat393 retains personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, and in accordance with our legal and regulatory obligations as an internationally licensed gaming operator. Specific retention periods are determined by the following criteria:

• Active Account Data: Retained for the full duration of your active bat393 account relationship;
• Post-Closure Account Data: Following account closure, bat393 retains account records, KYC documentation, and transaction history for a minimum period required under its gaming licence and anti-money laundering regulations — typically a minimum of five (5) years from the date of account closure;
• Gaming Activity Logs: Retained for a minimum of five (5) years for regulatory compliance, dispute resolution, and audit purposes;
• Communications Data: Live chat transcripts and email correspondence are retained for a minimum of two (2) years;
• Marketing Data: Retained until you withdraw consent for marketing communications, after which your data is suppressed from marketing lists but not necessarily deleted if required for other purposes;
• Technical and Log Data: Server and access logs retained for a maximum of twelve (12) months unless required for ongoing fraud investigation or legal proceedings.

When personal data is no longer required for any legitimate purpose, bat393 securely deletes or anonymises it in accordance with industry-standard data destruction practices.

As a player whose personal data is processed by bat393, you have the following rights with respect to your personal information:

• Right of Access: You may request a copy of the personal data bat393 holds about you. bat393 will provide this information within 30 days of a valid request;
• Right to Rectification: If any personal data bat393 holds about you is inaccurate or incomplete, you may request that it be corrected. You may also update many account details directly through your bat393 account settings;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances. Note that bat393 may be required to retain certain data for regulatory compliance purposes even following an erasure request — in which case bat393 will inform you of what can and cannot be deleted and the reasons why;
• Right to Restrict Processing: In certain circumstances, you may request that bat393 restricts the processing of your data — for example, while a dispute about data accuracy is being resolved;
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that bat393 provides your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on bat393's legitimate interests. bat393 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Rights Related to Automated Decision-Making: Where bat393 uses automated systems that produce significant decisions about you — such as fraud detection systems that flag accounts — you have the right to request human review of such decisions.

To exercise any of the above rights, contact bat393 at [email protected] with the subject line "DATA RIGHTS REQUEST." bat393 will respond within 30 days and may request identity verification before processing your request.

bat393 applies robust technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bat393's servers is encrypted using TLS 1.3 with 256-bit AES encryption — the same standard applied by Pakistan's major commercial banks;
• Encrypted Data Storage: Sensitive data fields including passwords (hashed using bcrypt), CNIC numbers, and financial identifiers are stored in encrypted form and are not accessible in plain text even by bat393 internal staff;
• Access Controls: bat393 internal access to personal data is governed by strict role-based access controls. Only personnel with a demonstrable business need are granted access to specific data categories;
• Two-Factor Authentication: bat393 offers 2FA for all player accounts and requires 2FA for all internal staff systems that access personal data;
• Penetration Testing: bat393 engages independent cybersecurity firms to conduct regular penetration testing of the platform and infrastructure;
• Incident Response: bat393 maintains a documented data breach response plan. In the event of a breach affecting your personal data, bat393 will notify affected players and the relevant regulatory authority in accordance with applicable legal obligations.

bat393 operates exclusively for adults aged 21 years and above. bat393 does not knowingly collect, process, or store personal data from individuals under 21 years of age. The bat393 platform incorporates age verification mechanisms — including mandatory CNIC-based identity verification — to prevent underage access.

If bat393 discovers or is informed that personal data of an individual under 21 has been collected, bat393 will:

• Immediately suspend the associated account;
• Delete all personal data collected from or about that individual without undue delay;
• Withhold and review any funds associated with that account;
• Report the incident to its licensing authority as required under its regulatory obligations.

If you believe that a minor under the age of 21 has accessed or registered on the bat393 platform, please contact bat393 support immediately at [email protected].

The bat393 platform may contain links to, or integrations with, third-party services — including payment providers such as JazzCash and EasyPaisa, game studios, and identity verification services. When you interact with these third-party services, your data may be subject to their own privacy policies and data processing practices.

bat393 is not responsible for the privacy practices of third-party services accessed through links on the bat393 platform. bat393 recommends that you review the privacy policy of any third-party service before providing your personal information. The presence of a link on bat393 does not constitute an endorsement of that third party's privacy or security practices.

bat393 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or the bat393 platform's functionality. When material changes are made, bat393 will notify you through one or more of the following: a prominent notice on the bat393 homepage, an in-account notification, or an email to your registered address.

The effective date at the top of this Privacy Policy indicates when the current version was last reviewed and updated. bat393 recommends that you check this page periodically. Your continued use of the bat393 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any update to this Policy, you may close your bat393 account by contacting support.

The current version of this Privacy Policy is always available at bat393.asia/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or bat393's handling of your personal data, please contact bat393 through the following channels:

• Email (Data Enquiries): [email protected] — Please use the subject line "PRIVACY ENQUIRY" for data-related requests
• Live Chat: Available 24 hours a day, 7 days a week within the bat393 platform — average response time under 15 minutes

bat393's support team serves players across Pakistan — from Karachi to Lahore, Faisalabad to Islamabad — and is available around the clock to handle privacy queries, data subject rights requests, and data breach notifications. Formal data rights requests should be submitted in writing to the email address above with "DATA RIGHTS REQUEST" clearly stated in the subject line.

bat393 will acknowledge all privacy enquiries within 48 hours and provide a substantive response within 30 days of receiving a valid, identity-verified request.