bat388 Privacy Policy

bat388 takes the privacy and security of your personal data seriously. As Pakistan's premier online gaming platform — serving players across Karachi, Lahore, Islamabad, Faisalabad and beyond — bat388 handles a significant volume of personal and financial data on behalf of its registered player base. We recognise that the trust you place in bat388 when providing your personal information is a responsibility that must be honoured through robust data protection practices, transparency about our processing activities, and genuine respect for your privacy rights.

This Policy describes in plain, clear language exactly what data bat388 collects, why we collect it, how we use it, who we may share it with, and how long we retain it. We also explain your rights in relation to your personal data and how to exercise those rights through the bat388 support team. If you have questions about anything in this Policy, our 24/7 bilingual support team is available to help.

For the purposes of applicable data protection legislation, bat388 is the data controller responsible for the personal data collected from players and users of the bat388 platform. bat388 determines the purposes for which and the manner in which your personal data is processed. All data processing activities conducted by bat388 are subject to the requirements of our international gaming licence, which includes specific obligations relating to player data protection, retention, and security.

bat388 collects the following categories of personal data from players and users. The specific data collected depends on the nature of your interaction with the bat388 platform:

bat388 collects personal data through the following means:

• Direct collection: Information you provide when registering your bat388 account, completing identity verification, making deposits or withdrawals, contacting support, or completing any other interaction with the Platform.
• Automated collection: Technical and behavioural data collected automatically when you access and use bat388, including through cookies, server logs, and game session recording systems.
• Third-party sources: Identity verification data may be cross-referenced with third-party identity verification services to confirm the accuracy of information provided during KYC (Know Your Customer) processes.
• Payment processors: Transaction confirmation data shared with bat388 by JazzCash, EasyPaisa, and banking partners as part of deposit and withdrawal processing.

bat388 uses your personal data for the following purposes:

bat388 relies on the following legal bases to process your personal data, consistent with internationally recognised data protection principles:

• Contract performance: Processing necessary to fulfil the bat388 player agreement — including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws and licensing conditions, including AML regulations, age verification mandates, and regulatory reporting obligations.
• Legitimate interests: Processing carried out to pursue bat388's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw consent at any time without detriment to your bat388 account by contacting support.

bat388 does not sell, rent, or otherwise commercialise your personal data to third parties. bat388 may share your data only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other authorised payment providers receive the minimum necessary financial data to process your deposits and withdrawals.
• Identity verification services: bat388 may share identity data with authorised KYC and AML verification partners for the purpose of verifying player identity and compliance with anti-money laundering obligations.
• Game content providers: Certified game studios providing bat388's slot, live casino, and other game content may receive session-level technical data necessary for game delivery and fairness certification. No personally identifiable information is shared with game providers beyond session identifiers.
• Regulatory and licensing authorities: bat388 may be required by its licensing authority or applicable regulators to disclose player data for compliance, audit, or investigation purposes. bat388 will always comply with lawful regulatory requests.
• Law enforcement: bat388 will disclose personal data to law enforcement agencies where required by a valid legal order, court order, or equivalent legal process.
• Corporate transactions: In the event of a merger, acquisition, or sale of bat388 assets, player data may be transferred to the successor entity under equivalent data protection obligations.

bat388 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply as general guidelines:

• Active account data: Retained for the duration of the Player's active bat388 account plus a minimum period of five (5) years following account closure, as required by AML and licensing regulations.
• Financial transaction records: Retained for a minimum of seven (7) years in compliance with financial record-keeping obligations applicable to licensed gaming operators.
• KYC / identity verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Game session logs: Retained for a minimum of three (3) years from the date of each session for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for a minimum of two (2) years from the date of each interaction.
• Marketing consent records: Retained for the duration of consent plus a reasonable period thereafter to demonstrate compliance.

Upon the expiry of applicable retention periods, bat388 will securely delete or anonymise your personal data so that it can no longer be associated with you.

bat388 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and bat388 servers
• Encryption at rest for sensitive personal data fields stored in bat388 databases
• Two-Factor Authentication (2FA) available on all bat388 player accounts via Pakistani mobile number verification
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Intrusion detection and monitoring systems operating continuously across bat388's server infrastructure
• Regular security audits and penetration testing conducted by independent cybersecurity specialists
• Segregated player funds — your PKR balance is held separately from bat388 operational accounts

bat388 uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience as a Pakistani player. The categories of cookies bat388 uses are:

• Strictly Necessary Cookies: Essential for bat388 to function correctly — including session management, login state maintenance, and security protections. These cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated data about how players use bat388 — including pages visited, session duration, and error events — to improve Platform performance. These cookies do not identify you individually.
• Functional Cookies: Store your bat388 preferences — such as language settings and responsible gaming configuration — to personalise your experience.
• Marketing Cookies: Used to deliver promotional content relevant to your interests, where you have provided consent. You may opt out of marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bat388 platform. bat388 does not use cookies to collect personal data beyond what is described in this Policy.

As a bat388 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact bat388 support via live chat or email. bat388 will respond to all data rights requests within 30 days of receipt:

The bat388 platform is strictly intended for individuals aged 21 years and above. bat388 does not knowingly collect, process, or store personal data belonging to persons under the age of 21. If bat388 discovers that personal data has been collected from a person under the minimum age — whether through registration or any other means — that data will be deleted promptly and the associated account will be closed in accordance with our Terms and Conditions. If you have reason to believe that a minor has registered a bat388 account, please contact our support team immediately.

bat388 operates internationally and your personal data may be processed in countries outside of Pakistan, including the jurisdiction in which bat388 holds its gaming licence and those in which our technology infrastructure providers operate. Where personal data is transferred internationally, bat388 ensures that appropriate safeguards are in place — including contractual data protection clauses — to provide a level of protection equivalent to that described in this Policy. bat388 will not transfer your data to any jurisdiction that does not provide adequate protection under applicable law without your explicit consent or a lawful transfer mechanism being in place.

The bat388 platform may reference or integrate with third-party services — including payment gateways and game content providers. bat388 is not responsible for the privacy practices of third-party services operating independently of the bat388 platform. Players who interact directly with third-party services — including JazzCash, EasyPaisa, or bank portals accessed outside the bat388 interface — are subject to those services' own privacy policies. bat388 encourages players to review the privacy policies of any third-party service they use in connection with their bat388 activity.

bat388 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. Material changes to this Policy will be communicated to registered players via email and/or a prominent notice on the bat388 platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this Policy reflects when the most recent version came into effect. Your continued use of bat388 following notification of a Policy update constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you should cease using bat388 and contact support to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or bat388's data processing activities, please contact us through the following channels: