67bat Privacy Policy

01Introduction

67bat ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses, registers on, or interacts with the 67bat platform at https://67bat.io. This Privacy Policy sets out in clear and transparent terms the categories of personal data we collect, the purposes for which that data is processed, the legal basis for each processing activity, and the rights available to you as a data subject.

This policy applies to all registered players, prospective players who browse the Platform without registering, and any individual who contacts 67bat through any available support channel. It covers all personal data processing activities conducted by 67bat in connection with the operation of its online sports betting, live casino, slots, and gaming services targeted at the Bangladeshi market.

67bat operates as a safe and reliable platform with a strong commitment to fair play, responsible gambling, and the protection of player data. Our data practices are designed to give you full visibility into what we hold, why we hold it, and how long we retain it. We do not engage in opaque data practices, and we do not sell your information to third-party marketers under any circumstances.

This Privacy Policy should be read in conjunction with the 67bat Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and 67bat.

02Data Controller

For the purposes of this Privacy Policy, 67bat acts as the data controller in respect of all personal data collected from players and site visitors through the 67bat platform. As data controller, 67bat determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with applicable data protection principles.

67bat operates the platform specifically for the Bangladeshi market, with all services delivered in the English language and all monetary transactions denominated in Bangladeshi Taka (৳). All data processing activities described in this policy are carried out in this operational context.

03Data We Collect

67bat collects only the personal data that is necessary for the lawful, efficient, and secure operation of the platform. The categories of personal data we may collect and hold are described below.

Registration & Account Data

• Full legal name as it appears on your National Identity Card (NID).
• Date of birth (used to verify that you are 21 years of age or older).
• Mobile phone number (Bangladesh-registered).
• Email address.
• Username and encrypted password hash.
• Preferred language and account currency (BDT).

Identity Verification (KYC) Data

• Scanned copy or photograph of your National Identity Card (NID) or passport.
• Proof of address document (e.g., recent utility bill, bank statement).
• Selfie photograph with identity document for biometric confirmation.

Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay wallet numbers used for deposits and withdrawals.
• Bank account details where bank transfers are used (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank).
• Visa or Mastercard card details (card number, expiry — CVV is never stored).
• Full transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.

Betting & Gaming Activity Data

• Full betting history including markets, stake amounts, odds, and settlement outcomes.
• Casino game session history including game titles, session durations, wager amounts, and win/loss records.
• Live betting activity and in-play market selections.
• Bonus claims, wagering progress, and promotional participation records.

Technical & Device Data

• IP address at time of registration and at each login.
• Device type, operating system, and browser version.
• Session timestamps and duration.
• Geolocation data (country and region level, derived from IP address).
• Cookies and similar tracking technologies (see Section 7).

Communications Data

• Records of live chat conversations with the 67bat support team.
• Email correspondence sent to or received from [email protected].
• Records of any formal dispute submissions and associated responses.

04How We Collect Your Data

67bat collects personal data through the following mechanisms:

• Direct collection: Data you provide directly when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated collection: Technical and device data collected automatically when you access the platform, including IP address, session data, and cookies placed on your device by the 67bat platform.
• Third-party sources: In limited circumstances, 67bat may receive supplementary identity verification data from third-party KYC service providers engaged to assist with age and identity verification. This data is used solely for the purpose of verifying your identity and is not used for any other commercial purpose.
• Payment processors: Transaction confirmation data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks) when your deposit or withdrawal is processed. 67bat receives confirmation and reference data — full card or wallet credentials are never stored on 67bat servers.
• Game Providers: Session-level game data (round IDs, outcomes, timestamps) passed back to 67bat from Game Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, for the purpose of account settlement, dispute resolution, and betting history display.

05Purpose & Legal Basis for Processing

67bat processes personal data only where a clear and legitimate purpose exists. The table below sets out the primary processing activities, the data used, and the purpose served.

06Data Sharing & Third Parties

67bat does not sell, rent, or commercially transfer your personal data to third parties. Data sharing is limited strictly to the operational circumstances described below, and in each case only the minimum data necessary for the specific purpose is shared.

Payment Service Providers

When you initiate a deposit or withdrawal, the relevant transaction details are shared with the payment service provider you have selected (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank) solely for the purpose of processing the transaction. These providers operate under their own privacy policies and are contractually required to handle your data in compliance with applicable data protection standards.

Game Providers

To facilitate gameplay, a limited set of account-level data (typically a pseudonymous player ID and session token) is shared with the relevant Game Provider (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) when you launch a game. These providers do not receive your full name, contact details, or payment information. Game session data returned by providers to 67bat is used for settlement and dispute resolution purposes only.

Identity Verification (KYC) Partners

Where 67bat engages a third-party KYC verification service to assist with identity and age verification, your submitted identity documents and verification data may be processed by that service on 67bat's behalf. Such providers act as data processors under a contractual data processing agreement and are prohibited from using your data for any purpose other than the verification task.

Legal & Regulatory Obligations

67bat may be required to disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required by applicable law, a court order, or a legitimate regulatory request. In such cases, 67bat will disclose only the data specifically required and will notify you of such disclosure where permitted by law to do so.

07Cookies & Tracking Technologies

The 67bat platform uses cookies and similar tracking technologies to ensure the correct functioning of the site, to maintain your login session, and to improve the overall user experience. A cookie is a small text file placed on your device by the Platform when you visit. The following categories of cookies are used on 67bat:

Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your login session, remember your Account preferences, and ensure that betting and payment workflows operate correctly. Essential cookies cannot be disabled without significantly impairing the functionality of the platform.

Functional Cookies

Functional cookies remember your preferences — such as your preferred game category, display language (English), and odds format — so that the platform delivers a personalised experience each time you log in. These cookies do not track your activity across external websites.

Analytical Cookies

Analytical cookies allow 67bat to measure aggregate usage patterns — such as which pages are most frequently visited, how long sessions last, and where technical errors occur. This data is processed in anonymised or pseudonymised form and is used exclusively for platform improvement. No individual player is identified through analytical cookie data.

Security Cookies

Security cookies support fraud detection and the prevention of unauthorised account access by tracking login anomalies, detecting unusual session behaviour, and flagging suspicious IP addresses or device fingerprints for review.

You may manage cookie preferences through your browser settings. Please note that disabling essential or security cookies may prevent you from accessing certain features of the platform, including your Account dashboard and the bet placement flow.

08Data Retention

67bat retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention periods apply as general guidelines:

• Active Account data: Retained for the full duration of your Account's active status plus a period of five years following Account closure, to allow for dispute resolution and any applicable audit requirements.
• KYC identity documents: Retained for a minimum of five years from the date of verification, in accordance with anti-money laundering record-keeping obligations.
• Transaction records: Full deposit and withdrawal history is retained for a minimum of five years to support financial record-keeping and regulatory compliance.
• Betting and gaming records: Retained for a minimum of three years from the date of each transaction for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Live chat transcripts and email correspondence are retained for up to two years from the date of the interaction.
• Technical and device data: IP address logs and session data are retained for up to 12 months for security monitoring and fraud prevention purposes.
• Marketing consent records: Retained for the duration of your Account plus two years to evidence that communications were sent in compliance with your stated preferences.

When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of any individually identifiable record.

09Security Measures

67bat implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The primary security measures in place include:

• 256-bit SSL/TLS encryption: All data in transit between your device and the 67bat platform is encrypted using industry-standard TLS 1.2 or higher protocols. This applies to all pages, including the login flow, deposit and withdrawal screens, and the Account dashboard.
• Password hashing: Account passwords are never stored in plain text. Passwords are processed through a one-way cryptographic hash function with a unique salt per account, ensuring that even in the unlikely event of a data incident, raw passwords cannot be recovered.
• Two-factor authentication (2FA): Players are strongly encouraged to enable SMS-based 2FA on their Account. Once enabled, every login attempt from a new device requires a one-time code sent to your registered mobile number.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Customer support agents can view only the account data relevant to their assigned support function and cannot access full payment credentials or KYC documents beyond what is required for the support task.
• Intrusion detection and monitoring: The platform's infrastructure is monitored continuously for unusual access patterns, login anomalies, and potential security incidents. Automated alerts are triggered for activity that deviates from normal operational baselines.
• Regular security reviews: 67bat conducts periodic internal security reviews of its data handling practices, access logs, and encryption configurations to identify and remediate any emerging vulnerabilities.

10Your Rights as a Data Subject

As a registered player whose personal data is processed by 67bat, you hold the following rights with respect to your personal information. To exercise any of these rights, contact the 67bat support team via live chat or by emailing [email protected].

Right of Access

You have the right to request a copy of all personal data that 67bat holds about you. Upon a verified request, 67bat will provide a structured summary of your Account data, transaction history, KYC records, and communications data within 30 days.

Right to Rectification

If any personal data held by 67bat is inaccurate or incomplete, you have the right to request its correction. Minor corrections (such as a misspelled email address or outdated phone number) can be made directly through your Account dashboard. Corrections to KYC identity data require re-submission of supporting documents.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that certain data — particularly KYC records and transaction histories — must be retained for the minimum periods described in Section 8 in compliance with applicable legal obligations, and cannot be deleted upon request during those mandatory retention windows.

Right to Restriction of Processing

You have the right to request that 67bat restricts the processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested or while a formal objection to processing is under review.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that this data be transferred to another controller where technically feasible. This right applies to data you have directly provided to 67bat and that is processed on the basis of your consent or a contract.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, 67bat will cease processing your data for marketing within five business days. You also have the right to object to processing based on legitimate interests, subject to 67bat's ability to demonstrate compelling legitimate grounds.

11Children & Minors

The 67bat platform is strictly intended for adults aged 21 years and above. 67bat does not knowingly collect, store, or process any personal data belonging to individuals under the age of 21. The age eligibility requirement is enforced at registration through mandatory date-of-birth declaration and is further verified through the KYC identity verification process prior to any withdrawal being processed.

12Payment Data & Financial Privacy

67bat takes the privacy and security of your financial data extremely seriously. All payment processing on the platform is handled in Bangladeshi Taka (৳) and is conducted through established, trusted payment partners operating in Bangladesh. The following principles govern how your financial data is handled:

• Card data minimisation: When you use a Visa or Mastercard for deposits, your card number and expiry date are passed directly to the card processor over an encrypted connection. 67bat never stores full card numbers or CVV security codes on its own servers. Only a masked card reference is retained in your transaction history for display purposes.
• Mobile wallet privacy: Your bKash, Nagad, Rocket, or Upay wallet numbers are stored in encrypted form and are used solely for the purpose of processing your nominated withdrawal to the same wallet used for the originating deposit. Wallet numbers are never shared with third parties for commercial purposes.
• Bank account data: Where bank transfers are used (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), your account number and bank routing details are stored in encrypted form and used exclusively for the deposit or withdrawal transaction you have authorised.
• Transaction history: Your full deposit and withdrawal history is accessible from your Account dashboard at any time. This data is retained for a minimum of five years as described in Section 8 and may be requested in full via a data access request (see Section 10).
• Fraud prevention: Transaction data is monitored by 67bat's internal risk and fraud prevention systems to detect unusual patterns, duplicate account funding, and potential money laundering activity. This monitoring is carried out as a legitimate operational interest and is a condition of using the platform.

13Responsible Gaming Data

67bat maintains a dedicated responsible gaming framework, and all data generated through your use of responsible gaming tools is treated with the highest level of sensitivity and discretion. This includes:

• Deposit limit records: Where you set a daily, weekly, or monthly deposit limit through your Account dashboard, that limit and its history are stored securely and enforced automatically by the platform. This data is never shared outside 67bat's internal player protection systems.
• Self-exclusion records: If you request a self-exclusion — whether for a defined cooling-off period or an indefinite exclusion — that request is recorded and applied immediately. Self-exclusion data is retained for the full duration of the exclusion period and for a minimum of five years thereafter, to prevent re-registration during an active exclusion.
• Session time-out data: Session duration limits and time-out settings configured by you are stored as part of your Account preference profile and are applied automatically at the platform level.
• Responsible gaming flags: If 67bat's internal monitoring systems identify patterns in your betting behaviour that may indicate problem gambling — such as rapid loss-chasing, significantly increased stake amounts, or frequent late-night sessions — a responsible gaming flag may be applied to your Account internally. This flag may trigger a proactive outreach from the support team. Flagged data is used only for player protection purposes and is never shared with third parties.

For more information about the responsible gaming tools available to you on the 67bat platform, please visit the Responsible Gaming page. All responsible gaming requests — including self-exclusion, deposit limit changes, and account cooling-off periods — can be actioned immediately through a live chat session with the support team, 24 hours a day, 7 days a week.

14Amendments to This Privacy Policy

67bat reserves the right to update, revise, or replace this Privacy Policy at any time, at its sole discretion, in response to changes in applicable law, changes in operational practice, or changes in the services offered on the platform. When material changes are made to this policy, 67bat will notify registered players by email to the address associated with their Account and will update the "Last Revised" date displayed at the top of this page and in the sidebar table of contents.

The most current version of this Privacy Policy will always be accessible at https://67bat.io/privacy-policy. It is your responsibility to review this policy periodically. Your continued use of the platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

If you disagree with any revision to this Privacy Policy and do not wish to be bound by the updated terms, you should cease using the platform and contact the support team to request Account closure. Any funds remaining in your Account will be processed for withdrawal to your nominated payment method, subject to completion of any outstanding KYC requirements and the satisfaction of any applicable responsible gaming checks.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 67bat handles your personal data, the support team is available to assist you 24 hours a day, 7 days a week, including all Bangladesh public holidays such as Eid, Victory Day (December 16), and Independence Day (March 26).

You may contact 67bat through the following channels:

• Live Chat: Available directly on the platform at https://67bat.io. Average response time is under 90 seconds. All agents communicate in English and are trained in data protection and responsible gaming protocols.
• Email: [email protected] (plain text — not a clickable link). Email responses are provided within 2 hours during peak hours and within 6 hours at all other times, Bangladesh Standard Time.
• Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

When contacting us regarding a data subject request — such as a request to access, correct, or delete your personal data — please have your Account username, registered email address, and registered mobile number available to allow the team to verify your identity before actioning the request. Identity verification is a mandatory step for all data subject requests to ensure that your personal data is disclosed or modified only upon your own authorised instruction.