22bat Privacy Policy

Introduction

This Privacy Policy governs how 22bat collects and processes personal data for all registered players in Bangladesh.

Data We Collect

22bat collects only the data necessary to operate the platform, verify your identity, process payments, and keep your account secure.

Full Privacy Policy

Tap any section to read the full policy text. All sections apply to every registered 22bat player.

• 1 How We Collect Your Data

  22bat collects personal data through the following channels:

  • Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
  • Automatically: when you use the platform, our servers log technical data including your IP address, device information, session timestamps, and in-app navigation patterns.
  • From payment processors: when you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the respective processor shares transaction confirmation data with us to reconcile your account balance.
  • From identity verification partners: where we use third-party KYC services to verify documents you submit, those services may return structured data (e.g. name match scores, document validity flags) that is stored alongside your account record.
• 2 How We Use Your Data

  We process your personal data only for the following lawful purposes:

  • Account management: to create and maintain your player account, authenticate your identity at login, and keep your account secure.
  • Payment processing: to facilitate deposits and withdrawals in BDT, reconcile transaction records, and comply with anti-money-laundering obligations.
  • Responsible gaming: to monitor play patterns and, where necessary, apply deposit limits, time-outs, or self-exclusion at a player's request or where we identify signs of problem gambling.
  • Customer support: to respond to your enquiries, resolve disputes, and maintain records of interactions where required for quality assurance or regulatory compliance.
  • Marketing and promotions: to send you relevant offers and updates about 22bat promotions by SMS or other channels, provided you have not opted out. You may withdraw consent at any time by contacting support at [email protected].
• 3 Data Sharing and Third Parties

  22bat does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

  • Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard): only the data necessary to execute your requested transaction is shared. These processors are bound by their own security and data protection obligations.
  • KYC and identity verification providers: document data is shared with our verification partner solely to confirm your eligibility to use the platform. Verification partners are contractually prohibited from using your data for any other purpose.
  • Legal and regulatory authorities: where we are required by applicable law or a lawful order to disclose data to a regulatory body, law enforcement agency, or court of competent jurisdiction, we will comply with that obligation and, where permitted, notify you of such disclosure.
• 4 Cookies and Tracking Technologies

  22bat uses cookies and similar lightweight tracking technologies to support core platform functionality and improve your experience. We use three categories of cookies:

  • Essential cookies: required for the platform to function (e.g. session tokens, login state, CSRF protection). These cannot be disabled without breaking core features.
  • Analytical cookies: used to understand aggregate usage patterns — pages visited, session length, features used — so we can prioritise platform improvements. No individual player is singled out through analytical data.
  • Preference cookies: remember your language setting and display preferences so you do not need to re-select them on each visit. You may clear these at any time through your browser settings.
• 5 Data Security

  22bat applies industry-standard security measures to protect all personal and financial data on our platform. Our security architecture includes:

  • SSL/TLS encryption on all data transmitted between your device and our servers, ensuring that payment details, login credentials, and personal information cannot be intercepted in transit.
  • Encrypted storage of sensitive fields (passwords are hashed using a one-way algorithm and are never stored in plaintext; payment instrument details are tokenised).
  • Access controls limiting which internal staff can view sensitive player data, with all access logged and auditable.
  • Regular security reviews and vulnerability assessments conducted against our platform infrastructure to identify and remediate risks before they can be exploited.
• 6 Data Retention

  22bat retains personal data only for as long as is necessary to fulfil the purpose for which it was collected. In practice, account data and transaction history are retained for a minimum of five years following account closure to satisfy anti-money-laundering record-keeping requirements. Analytical and session data that does not identify individual players is retained in aggregate form for up to two years for platform improvement purposes.

  When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to any individual. Players who close their account may request confirmation of deletion of non-retention-mandatory data by contacting support at [email protected].

• 7 International Data Transfers

  22bat's primary data infrastructure is operated within the Asia-Pacific region. In certain circumstances, data may be processed by third-party service providers (such as KYC verification partners or cloud infrastructure providers) whose systems are located outside Bangladesh. Where such transfers occur:

  • We ensure that any receiving party is bound by contractual data protection obligations at least equivalent to those applied by 22bat itself.
  • We limit the data transferred to only what is strictly necessary for the specific purpose of the transfer.
  • We do not transfer data to jurisdictions with inadequate data protection standards without first implementing appropriate safeguards.
• 8 Children and Minors

  The 22bat platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that a registered account belongs to a person under 21, that account will be immediately suspended, all associated funds will be reviewed in accordance with our Terms & Conditions, and all personal data related to that account will be deleted. If you believe a minor has registered on 22bat, please contact us immediately at [email protected].

• 9 Policy Updates

  22bat reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make a material change, we will revise the "Last Updated" date at the top of this page. For significant changes that affect your core rights, we will also send a notification to your registered mobile number or email address. Your continued use of 22bat after the effective date of any update constitutes acceptance of the revised Privacy Policy.

• 10 Governing Law

  This Privacy Policy is governed by applicable law. Any dispute arising from or in connection with this Policy that cannot be resolved informally through our support team will be subject to the jurisdiction of the appropriate courts. Nothing in this Policy limits any statutory rights you hold as a data subject under applicable data protection legislation. For any privacy concern, contact us first at [email protected] — we aim to respond to all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6).

Your Data Rights

As a 22bat player, you hold the following rights over your personal data. To exercise any of these rights, contact [email protected].

Contact Our Privacy Team

For any privacy-related question, data rights request, or concern about how 22bat handles your personal information, reach our team directly.