bat277 Privacy Policy —
How We Protect Your Data

When you create a bat277 account, you are required to provide the following personal information:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify you are 18 years of age or older)
• Residential address (including city, district, and postcode within Bangladesh)
• Email address (used for account communication, transaction notifications, and promotional messages where consented)
• Mobile phone number (used for two-factor authentication and account security alerts)
• Username and encrypted password

This data forms the core of your bat277 player profile and is required to open and maintain an active account. Without this data, bat277 cannot provide its services to you.

In accordance with bat277's KYC obligations, the following documentation and associated personal data may be collected at the time of account verification or prior to processing a withdrawal:

• Scanned copy or photograph of a government-issued photo ID (National ID Card, Passport, or Driving Licence)
• Proof of residential address document (utility bill, bank statement, or official correspondence dated within 90 days)
• Proof of payment method ownership (screenshot or statement linking your name to your bKash, Nagad, Rocket, Upay, or bank account number)
• In cases of enhanced due diligence: source of funds documentation or additional identity attestation

KYC documents are processed securely and are used solely for identity verification and regulatory compliance purposes. They are not used for profiling, marketing, or any purpose outside the stated compliance function.

bat277 records the following financial data in connection with your use of the platform:

• Deposit amounts, dates, and payment method references (bKash transaction IDs, Nagad references, bank transfer confirmations)
• Withdrawal requests, amounts, and processing status
• Account balance history and bonus credit/debit records
• Partial payment method identifiers (e.g., last four digits of a card number or the last three digits of a mobile wallet number) — bat277 does not store full card numbers

Financial transaction data is retained for a minimum of seven (7) years to comply with anti-money laundering record-keeping obligations.

bat277 records a full history of your betting and gaming activity on the platform, including:

• Sports bets placed (event, market, selection, stake, odds, outcome, settlement)
• Casino game sessions (game title, provider, session duration, stake amounts, wins/losses)
• Crash game and slots activity (session start/end times, RTP data, round-by-round records)
• Bonus activation and wagering progress records

Betting and gaming activity data is used for dispute resolution, bonus compliance monitoring, responsible gaming assessments, and fraud detection. It is not shared with third parties for commercial purposes.

When you access bat277.club, our systems automatically collect certain technical information about your device and session, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Session timestamps (login time, logout time, session duration)
• Pages visited and features used within the bat277 platform
• Referring URL (the page you visited before arriving at bat277.club, if applicable)

Technical data is used for platform security monitoring, fraud detection, performance optimisation, and to ensure that multiple-account policies are being observed. IP data is not disclosed to third parties for commercial purposes.

bat277 shares personal data with the following categories of service provider, strictly to the extent necessary for each provider to perform its contracted function:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposits and withdrawals
• KYC & Identity Verification Providers: Third-party identity verification platforms that validate submitted documentation against official databases
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios — limited session data is shared to facilitate game delivery and dispute resolution
• Cloud Hosting & Infrastructure Providers: Secure cloud infrastructure providers that host the bat277 platform and its databases under strict data processing agreements
• Platform Analytics Providers: Anonymised and aggregated usage data may be shared with analytics services to support platform performance monitoring

bat277 may be required to disclose personal data to law enforcement authorities, regulatory bodies, courts, or other government agencies where such disclosure is required or permitted by applicable law. bat277 will disclose the minimum amount of data necessary to satisfy a lawful request and will notify the affected player of such a disclosure where legally permitted to do so. bat277 will not disclose player data to any government authority without a valid legal basis or formal written request.

In the event that bat277 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player personal data held by bat277 may be transferred to the acquiring entity as part of that transaction. In such circumstances, bat277 will notify registered players by email before any such transfer of their personal data takes place, and the acquiring entity will be required to honour the privacy commitments made in this Privacy Policy.

• Account and registration data: Retained for the duration of your active account plus a minimum of 5 years following permanent account closure, to meet AML and audit obligations.
• KYC documents and identity verification data: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction in accordance with financial record-keeping obligations.
• Betting and gaming activity logs: Retained for a minimum of 5 years from the date of each recorded activity event.
• Technical and device logs: Retained for a maximum of 13 months from collection for performance and security purposes, then deleted.
• Customer support correspondence: Retained for 3 years from the date of the last message in each support thread.
• Marketing consent records: Retained until consent is withdrawn plus 1 year for audit purposes.

bat277 player data is stored on secure cloud infrastructure. All data storage facilities used by bat277 maintain industry-standard physical and logical security controls. bat277 takes reasonable steps to ensure that any cross-border data transfers (where applicable for cloud infrastructure providers operating regionally) are governed by adequate data protection safeguards including contractual data processing agreements and standard technical security measures.

• SSL/TLS Encryption: All data in transit between your browser and bat277's servers is encrypted using TLS 1.2 or TLS 1.3 protocols. HTTPS is enforced across all pages of bat277.club with HSTS headers applied.
• Data Encryption at Rest: Personal data and financial records stored in bat277's databases are encrypted at rest using AES-256 encryption. KYC document files are stored in encrypted object storage with access restricted to authorised verification personnel only.
• Password Hashing: Player account passwords are never stored in plain text. bat277 uses bcrypt hashing with an appropriate work factor to protect password data in the event of a security incident.
• Two-Factor Authentication: bat277 offers two-factor authentication (2FA) via SMS OTP for all player accounts. Players are encouraged to enable 2FA to add an additional layer of protection to their accounts.
• Access Controls: Access to player data is restricted to bat277 personnel on a strict need-to-know basis. All internal data access events are logged and subject to regular audit review.
• Penetration Testing: bat277's platform undergoes regular security assessments including external penetration testing and vulnerability scanning to identify and remediate potential security weaknesses.

In the event of a personal data breach that poses a risk to player data, bat277 will take immediate steps to contain the breach and assess its scope. Affected players will be notified by email as promptly as reasonably possible following confirmation of a breach that materially affects their personal data. The notification will describe the nature of the breach, the categories of data affected, and the steps bat277 is taking in response. Players who suspect their bat277 account has been compromised are urged to contact [email protected] immediately and change their account password without delay.

bat277 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or data processing practices. Material changes to this Privacy Policy will be communicated to registered players via email at least 7 days before the changes take effect. The updated Privacy Policy will be published at https://bat277.club/privacy-policy with an updated effective date and version number. Your continued use of bat277 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bat277 handles your personal data, please contact the bat277 privacy support team using the details below. All privacy-related correspondence will be handled with strict confidentiality.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: Within 5 business days for general enquiries; within 30 calendar days for formal data rights requests
• Support Hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
• Language: English

bat277 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with bat277's response to a privacy concern, you may escalate the matter through bat277's formal complaints process by emailing [email protected] with the subject line "Formal Privacy Complaint".