09bat Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 09bat ("09bat", "we", "us", "our") collects, uses, stores, shares and protects the personal information of users ("you", "your", "User") who access or use the 09bat platform, website and related services available at 09bat.lat.

09bat is an online betting and casino platform serving the Bangladesh market. We understand that your personal data is important to you, and we take our obligations as a data processor seriously. This Policy is designed to give you a complete and honest picture of our data practices, written in plain English so that it is accessible to all users — not just legal professionals.

This Policy applies to all data collected through:

• The 09bat website at 09bat.lat
• The 09bat account registration and login process
• Payment transactions processed via bKash, Nagad, Rocket and Upay
• Customer support communications via email or live chat
• Any promotional or marketing communications that you have opted into

By creating a 09bat account or continuing to use the 09bat platform after this Policy has been updated, you acknowledge that you have read and understood its contents. This Policy should be read alongside the 09bat Terms & Conditions and Responsible Gaming policy, both of which form part of your agreement with 09bat.

2 Data Controller

09bat operates as the data controller for all personal information collected through the 09bat platform. As data controller, 09bat determines the purposes for which your personal data is processed and the means by which it is processed. All data collected is held and managed by 09bat's operations team, which is based in Dhaka, Bangladesh and operates on Bangladesh Standard Time (BST, UTC+6).

If you have any questions about how 09bat handles your personal data, or if you wish to exercise any of your data rights described in Section 11 of this Policy, please contact our dedicated data privacy team at:

• Email: [email protected]
• Subject Line: "Privacy Enquiry – [Your Account Username]"
• Response Time: Within 5 business days for formal privacy enquiries

3 Data We Collect

09bat collects several categories of personal data, depending on the nature of your interaction with the platform. The table below provides a clear breakdown of each data category and specific examples.

4 How We Collect Your Data

4.1 Data You Provide Directly

The most significant portion of your personal data is collected directly from you when you interact with 09bat. This includes data you provide when you:

• Register a new 09bat account (name, date of birth, email, mobile number)
• Complete the KYC identity verification process (ID documents, proof of address)
• Make a deposit or withdrawal via bKash, Nagad, Rocket or Upay
• Contact the 09bat support team via live chat or email
• Participate in a survey, promotion or seasonal contest
• Update your account profile or responsible gaming settings

4.2 Data Collected Automatically

When you visit 09bat.lat or use the 09bat platform, certain technical and usage data is collected automatically through cookies, server logs and similar technologies. This includes your IP address, device identifiers, browser type, pages visited and actions taken within the platform. This data is collected to ensure platform security, improve service performance and detect fraudulent or suspicious activity.

4.3 Data from Third Parties

In limited circumstances, 09bat may receive personal data about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay) — transaction confirmation data including account holder name and transaction reference
• KYC verification providers — identity confirmation results and risk scoring outputs where 09bat uses a third-party verification service
• Fraud prevention services — data about known fraudulent accounts or suspicious behaviour patterns shared by industry-standard fraud detection networks

In all cases, 09bat only accepts data from reputable third-party sources and processes it strictly for the purposes described in this Policy.

5 Purpose of Data Processing

09bat processes your personal data for the following clearly defined purposes. We do not process your data for any purpose not listed here without first obtaining your explicit consent.

5.1 Account Management

We use your identity and contact data to create, maintain and manage your 09bat account. This includes verifying your identity on registration, resetting your password if requested, sending account-related notifications and maintaining an accurate record of your account activity.

5.2 Payment Processing

Financial data and payment method details are used exclusively to process deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket and Upay. Transaction data is also used to detect and prevent financial fraud and to comply with anti-money laundering (AML) obligations.

5.3 Platform Operation and Improvement

Technical and usage data is used to operate the 09bat platform, maintain system security, diagnose and fix technical issues, and improve the overall user experience. Aggregated and anonymised usage data may be used for internal analytics to understand how users interact with different parts of the platform — such as which games are most popular or where users encounter difficulty during the registration process.

5.4 Legal and Compliance Obligations

09bat is required to process certain personal data to comply with its legal obligations, including Know Your Customer (KYC) requirements, anti-money laundering (AML) checks, responsible gaming monitoring obligations and responding to lawful requests from law enforcement or regulatory authorities.

5.5 Responsible Gaming

Account activity data — including betting patterns, session duration, deposit frequency and loss amounts — is monitored to support our responsible gaming obligations. Where our systems identify patterns consistent with problem gambling behaviour, this data may be used to trigger responsible gaming interventions such as account restrictions or outreach from the support team.

5.6 Marketing Communications

Where you have explicitly opted in to receive marketing communications, we use your contact data and account preferences to send you information about promotions, seasonal offers (such as Eid, Pohela Boishakh or BPL cricket season promotions) and platform updates. You may opt out of marketing communications at any time by contacting [email protected] or updating your account notification preferences.

6 Legal Basis for Processing

09bat processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to deliver the 09bat service under the Terms and Conditions you agreed to when creating your account — for example, processing your deposits and withdrawals, managing your bet history and maintaining your account.
• Legal Obligation: Processing required for 09bat to comply with applicable law — for example, KYC identity verification, AML transaction monitoring and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing that serves 09bat's legitimate business interests, provided those interests are not overridden by your rights and freedoms — for example, fraud detection, platform security monitoring and internal analytics for service improvement.
• Consent: Processing based on your freely given, specific and informed consent — for example, sending promotional emails or SMS notifications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

7 Data Sharing

7.1 Third-Party Service Providers

09bat shares personal data with a limited set of third-party service providers who assist in delivering the 09bat platform and its associated services. All such providers are contractually required to process your data only for the specific purpose for which it was shared, to maintain appropriate security standards and to not retain the data beyond the agreed period.

Third-party categories with whom 09bat shares data include:

• Payment processors — bKash, Nagad, Rocket and Upay, for the processing of deposits and withdrawals
• KYC verification providers — identity and document verification services used to complete the account verification process
• Game studios — Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe and other licensed game providers who deliver games on the platform. Game session data (but not full identity data) may be shared with studios for game integrity and technical support purposes
• Hosting and infrastructure providers — cloud infrastructure and server providers who host the 09bat platform and its data
• Customer support tools — live chat and support ticketing software providers who facilitate the 09bat support service

7.2 Law Enforcement and Regulatory Disclosure

09bat may disclose personal data to law enforcement agencies, courts or regulatory authorities where required to do so by applicable law, court order or regulatory direction. Where legally permitted, 09bat will notify you of such a disclosure request before complying. 09bat will not voluntarily disclose personal data to law enforcement beyond what is required by law.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale or restructuring of 09bat's business, your personal data may be transferred to the acquiring entity as part of the transaction. If such a transfer occurs, 09bat will notify registered users in advance and ensure the acquiring entity commits to processing your data under terms consistent with this Policy.

7.4 What We Do NOT Do

09bat does not sell, rent, license or trade your personal data to any third party for commercial, marketing or advertising purposes. We do not share your data with social media platforms, advertising networks or data aggregators. Your personal data is used exclusively for the purposes described in this Policy and in the context of delivering the 09bat service to you.

8 Data Retention

09bat retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

When personal data is no longer required and its retention period has expired, 09bat will securely delete or anonymise the data so that it can no longer be linked to any individual user. Where anonymisation is used instead of deletion, the resulting anonymised dataset is no longer personal data and is not subject to this Policy.

9 Data Security

09bat applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 09bat platform is encrypted using industry-standard TLS 1.2 or higher protocols, ensuring that your login credentials, payment information and personal data cannot be intercepted in transit.
• Encrypted Password Storage: User passwords are never stored in plain text. 09bat uses a strong one-way cryptographic hashing algorithm with per-user salting to store password data securely.
• Two-Factor Authentication (2FA): 09bat strongly encourages all users to enable 2FA on their accounts. 2FA adds a second layer of verification — typically a time-sensitive code sent to your registered mobile number — before access is granted.
• Access Controls: Access to personal data within 09bat's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose role requires access to specific categories of data are granted that access.
• Intrusion Detection and Monitoring: 09bat operates continuous security monitoring systems to detect and respond to suspicious access attempts, abnormal data queries and potential security breaches in real time.
• Regular Security Reviews: 09bat conducts periodic internal security reviews and, where appropriate, engages third-party security professionals to perform independent audits of its data handling and security infrastructure.

While 09bat applies robust security measures, no online platform can guarantee absolute security against all threats. You are responsible for keeping your account credentials confidential and for notifying 09bat immediately if you suspect your account has been accessed without your authorisation.

10 Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences and track how you interact with the site. 09bat uses cookies and similar technologies (such as local storage and session tokens) on the 09bat.lat website.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the 09bat platform to function. They include session authentication tokens that keep you logged in during your visit, security cookies that protect your account from cross-site request forgery attacks, and cookies that remember your language and display preferences. These cookies cannot be disabled without impairing your ability to use the platform.
• Performance and Analytics Cookies: These cookies collect anonymous information about how visitors use the 09bat platform — such as which pages are visited most frequently, how long users spend on each page and what actions they take before registering or making a deposit. This data helps 09bat improve the platform experience. All data collected by performance cookies is aggregated and anonymised.
• Functional Cookies: These cookies remember choices you make on the 09bat platform — such as your preferred deposit method, your responsible gaming settings, and whether you have dismissed certain informational banners — to provide a more personalised experience on future visits.

10.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies or receive a notification before a cookie is stored. Note that disabling strictly necessary cookies will prevent you from logging in to your 09bat account and using key platform features.

For detailed guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser vendor (e.g., Chrome, Firefox, Safari, Edge, Opera, Samsung Internet).

11 Your Data Rights

As a user of the 09bat platform, you have the following rights in relation to your personal data. 09bat is committed to honouring these rights promptly and without unnecessary barriers.

11.1 Right of Access

You have the right to request a copy of all personal data that 09bat holds about you. This is commonly known as a Subject Access Request (SAR). 09bat will respond to SAR requests within 5 business days and will provide the data in a structured, commonly used format.

11.2 Right to Rectification

If any personal data that 09bat holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as your email address and phone number) directly within your account settings. For changes to identity data (such as your registered name or date of birth), please contact [email protected] and provide supporting documentation.

11.3 Right to Erasure

You have the right to request that 09bat delete your personal data ("right to be forgotten") where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and there is no other legal basis for processing. Note that this right is subject to 09bat's legal obligations — data that must be retained to comply with AML, KYC or financial record-keeping requirements cannot be erased before the applicable statutory retention period has expired.

11.4 Right to Restriction of Processing

You have the right to request that 09bat restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interests and a determination is pending.

11.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transferred to another data controller where technically feasible.

11.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of legitimate interests, on grounds relating to your particular situation. 09bat will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

11.7 How to Exercise Your Rights

To exercise any of the above rights, please contact 09bat's privacy team at [email protected] with the subject line "Data Rights Request – [Your Account Username]". 09bat will acknowledge your request within 2 business days and provide a full response within 5 business days. In complex cases, this period may be extended by a further 10 business days, in which case 09bat will notify you of the extension and the reason for it.

12 Minors

The 09bat platform is strictly intended for individuals aged 21 years and above. 09bat does not knowingly collect, store or process personal data belonging to individuals under the age of 21. If you believe that a person under the age of 21 has created a 09bat account or submitted personal data to the platform, please contact us immediately at [email protected].

Upon receiving credible notification that personal data has been collected from a minor, 09bat will take prompt steps to verify the claim, suspend the affected account and permanently delete any personal data associated with the underage individual. Any winnings or balances held in an account confirmed to belong to a minor will be forfeited and will not be returned.

13 International Data Transfers

09bat is operated primarily for users based in Bangladesh. However, some of the third-party service providers that 09bat works with — particularly game studios such as Pragmatic Play, Evolution Gaming and NetEnt, as well as certain cloud infrastructure providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred outside Bangladesh, 09bat takes steps to ensure that the transfer is subject to appropriate safeguards, including:

• Contractual obligations that require the recipient to protect your data to a standard equivalent to the protections described in this Policy
• Selection of service providers who maintain internationally recognised security certifications (such as ISO 27001) and operate in jurisdictions with strong data protection frameworks
• Minimisation of the data transferred to the minimum necessary for the specific service purpose

If you have concerns about international data transfers affecting your personal data, please contact 09bat's privacy team at [email protected] for further information about the specific safeguards in place.

14 Changes to This Privacy Policy

09bat reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law or changes to the 09bat platform and its services. When material changes are made to this Policy, 09bat will notify registered users by email to the address registered on their account, and will display a prominent notice on the 09bat platform for a minimum period of 14 days prior to the changes taking effect.

The date on which this Policy was most recently updated is clearly stated at the top of this document ("Last Updated: 1 January 2026"). We encourage you to review this Policy periodically, even if you have not received a notification of changes, to stay informed about how 09bat protects your data.

Your continued use of the 09bat platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using the platform and request account closure by contacting [email protected] before the updated Policy takes effect.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or 09bat's handling of your personal data, please contact us using the details below:

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request – [Your Username]"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Time: Within 2 business days for acknowledgement; within 5 business days for a full response
• Operating Time Zone: Bangladesh Standard Time (BST, UTC+6)

For formal complaints relating to data privacy — including disputes about the accuracy of your data or how a data rights request has been handled — please email [email protected] with the subject line "Formal Privacy Complaint" and include a clear description of the issue, your account username and any relevant supporting documentation. 09bat's privacy team will investigate your complaint and provide a written response within 10 business days.