Privacy Policy

67bat collects personal data from you in the course of providing its online casino and sports betting services. The categories of data we collect depend on how you interact with the platform — whether as an unregistered visitor browsing our pages, a player creating a new account, or an existing account holder making deposits, placing wagers, and requesting withdrawals.

1.1 Data You Provide Directly

When you register for a 67bat account or interact with our platform features, you may provide the following categories of personal data:

1.2 Data Collected Automatically

When you visit the 67bat website, our servers and analytics systems automatically collect certain technical data about your device and browsing behaviour. This includes:

• Device and browser data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution, and device language settings.
• Usage data: Pages visited on the 67bat platform, time spent on each page, click-path data, search queries entered within the platform, and game sessions initiated.
• Session data: Login timestamps, session duration, logout events, and geographic location data derived from IP address (country and city level only — we do not use GPS tracking).
• Cookie and tracking data: Data collected via first-party cookies and similar technologies as described in Section 4 of this policy.

67bat uses the personal data it collects for clearly defined purposes. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. The primary purposes for which we process personal data are as follows:

2.1 Account Management and Service Delivery

The majority of your personal data is processed because it is necessary to perform the contract between you and 67bat — that is, to provide you with the online casino and sports betting services you have signed up for. This includes:

• Creating, managing, and maintaining your 67bat account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and linked bank accounts.
• Settling wagers and crediting winnings to your account balance in BDT.
• Communicating with you about your account status, transaction confirmations, and service announcements.
• Providing customer support and resolving complaints or disputes related to your account.

2.2 Identity Verification and Fraud Prevention

67bat is required to verify the identity of its Players in order to comply with applicable anti-money laundering obligations and to prevent underage gambling. We process identity documents and financial data for the following purposes:

• Confirming that you are at least 18 years of age before allowing you to wager real money.
• Verifying that the payment methods linked to your account are registered in your own name.
• Detecting and investigating suspected fraud, account takeover, or multiple-account abuse.
• Complying with anti-money laundering (AML) requirements, including source-of-funds checks on large transactions.

2.3 Responsible Gaming

67bat uses your gaming activity data — including session duration, wager frequency, deposit patterns, and loss history — to power the responsible gaming tools available in your account settings. Specifically, this data is used to:

• Monitor whether your gaming activity shows patterns consistent with problem gambling.
• Enforce deposit limits, loss limits, and session time restrictions that you have set yourself.
• Activate or maintain self-exclusion periods requested by you through the Responsible Gaming page.
• Contact you proactively if our monitoring systems flag significant changes in your gambling behaviour.

2.4 Platform Improvement and Analytics

Aggregated and anonymised usage data is processed to help us understand how Players interact with the 67bat platform, which game categories are most popular, and where technical or user-experience improvements may be beneficial. This processing does not identify you as an individual and is based on our legitimate interest in operating and improving a high-quality betting platform for Bangladeshi players.

2.5 Marketing Communications

If you have opted in to receive promotional communications from 67bat, we may use your contact details (email address and/or mobile number) to send you information about new games, seasonal promotions, BPL and IPL cricket betting offers, bonus offers, and platform updates. You may opt out of marketing communications at any time by following the unsubscribe link in any email we send, or by contacting support at [email protected]. Opting out of marketing will not affect your ability to use the 67bat platform or receive transactional account notifications.

67bat does not sell, rent, or trade your personal data to any third party for that party's own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

3.1 Service Providers and Technology Partners

We work with a small number of carefully selected third-party service providers who assist us in operating the 67bat platform. These providers may process your personal data on our behalf, strictly under contract and in accordance with this Privacy Policy. Categories of service providers include:

• Game providers: Licensed game studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive session data necessary to deliver game content and verify game outcomes. These providers do not receive your full identity data.
• Payment processors: bKash, Nagad, Rocket, Upay, and our banking partners receive the minimum transaction data required to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers may process your identity documents to assist with age and identity verification. All such providers are contractually bound to use your data only for the verification purpose.
• Cloud infrastructure: Our platform is hosted on secured cloud infrastructure. Hosting providers have access only to technical data and do not process personal gaming data independently.

3.2 Legal and Regulatory Disclosure

67bat may disclose your personal data to competent authorities, law enforcement agencies, or regulators where we are legally required to do so, or where disclosure is necessary to:

• Comply with a court order, legal process, or binding government directive.
• Investigate, prevent, or take action against suspected fraud, money laundering, or other criminal activity.
• Protect the rights, property, or safety of 67bat, its employees, its Players, or the public.

3.3 Business Transfers

In the event that 67bat undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, 67bat will notify affected Players via email prior to any such transfer, and the successor entity will be required to honour the terms of this Privacy Policy.

67bat uses cookies and similar browser-based technologies on its platform. Cookies are small text files stored in your browser that help us recognise you between sessions, maintain your login state, and understand how you use our platform. This section explains which types of cookies we deploy and how you can manage your preferences.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the 67bat platform to function correctly. They enable core features such as maintaining your logged-in session, remembering your account preferences, and ensuring that your balance and bet history are displayed accurately. You cannot disable strictly necessary cookies without affecting the functionality of the platform.
• Performance and Analytics Cookies: These first-party cookies collect anonymised data about how visitors navigate the 67bat website — for example, which pages are most visited and how long Players spend on game category pages. This data is used exclusively to improve the platform. We do not use third-party analytics platforms that share your data beyond 67bat.
• Functional Cookies: These cookies remember choices you have made on the platform, such as your preferred language setting, display preferences, and whether you have acknowledged any important platform notices. They improve your experience by personalising the interface without using your data for advertising.

4.2 What We Do Not Use

67bat does not deploy:

• Third-party advertising cookies or retargeting pixels from advertising networks.
• Social media tracking cookies (Facebook Pixel, Twitter tags, etc.).
• Cross-site behavioural tracking technologies that follow you across websites you visit outside of 67bat.

4.3 Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or clear existing cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use core features of the 67bat platform. For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser's developer.

67bat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure is reviewed and updated on a regular basis to address emerging threats and industry best practices.

5.1 Technical Safeguards

• Encryption in transit: All data transmitted between your browser or mobile device and 67bat's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms that your connection is secured.
• Encryption at rest: Sensitive data fields — including identity documents, payment references, and authentication credentials — are encrypted at rest using AES-256 encryption in our database layer.
• Access controls: Access to personal data within 67bat's internal systems is restricted on a strict need-to-know basis. Staff members who require access to Player data are individually authenticated and their access is logged for audit purposes.
• Two-factor authentication: Player accounts support OTP-based two-factor authentication via the mobile number registered to the account. We strongly recommend all Players enable this feature for additional account security.

5.2 Organisational Safeguards

• 67bat personnel who handle personal data are trained on data protection obligations and confidentiality requirements.
• Third-party service providers with access to Player data are bound by contractual data protection obligations that require them to maintain security standards equivalent to those applied by 67bat.
• We conduct periodic internal reviews of our data processing activities and security measures.

5.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights or interests, 67bat will notify affected Players without undue delay via the email address registered to their account. The notification will describe the nature of the breach, the categories of data affected, and the steps we are taking to contain and remediate the incident. We will also take prompt internal steps to secure our systems and prevent recurrence.

As a Player on the 67bat platform, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. The table below summarises your key rights and how to exercise them.

To exercise any of the rights above, please contact us at [email protected]. We may need to verify your identity before processing a rights request to ensure that we do not disclose or delete another person's data in error. We will respond to all valid requests within 14 calendar days. In complex cases, this may be extended to 30 days, in which case we will notify you of the extension and the reason for it.

67bat retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:

• Account and identity data: Retained for the duration of your active account, plus a minimum of 5 years following account closure. This retention period reflects standard financial record-keeping requirements applicable to online payment platforms operating in Bangladesh.
• Transaction and financial data: All deposit, withdrawal, and wagering records are retained for a minimum of 5 years from the date of each transaction, in order to comply with anti-money laundering obligations and to resolve any disputes relating to payments.
• KYC and identity verification documents: Retained for a minimum of 5 years following account closure or the completion of the relevant verification process, whichever is later.
• Gaming activity and session logs: Retained for 2 years from the date of each session, after which they are aggregated and anonymised for statistical purposes.
• Support and communications records: Retained for 2 years from the date of the last communication in a support thread.
• Marketing consent records: Retained for the duration of your account, plus 1 year following account closure or opt-out, to demonstrate your consent or its withdrawal.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Data subject to a legal hold (e.g., where it is relevant to an ongoing fraud investigation or legal proceeding) may be retained beyond these standard periods until the hold is lifted.

67bat reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, applicable law, or industry best practice. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where a change to this Privacy Policy is material — meaning it significantly affects how we process your personal data or the rights available to you — we will notify registered Players via the email address associated with their account at least 14 days before the change takes effect. For minor, non-material updates (such as clarifications of existing language or corrections of typographical errors), we may update the policy without advance notice.

Continued use of the 67bat platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with a material change to this policy, you should close your account and request deletion of your personal data before the change takes effect. Please review this page regularly to stay informed about how 67bat protects your privacy.

If you have any questions about this Privacy Policy or about the way 67bat handles your personal data, please contact our support team in English at [email protected]. We aim to respond to all privacy enquiries within 2 business days.