bat93 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bat93 ("bat93", "we", "us", "our") collects, uses, stores, discloses and protects the personal data of individuals ("you", "User", "Player") who access or use the bat93 platform, including its website, mobile-optimised interface and all associated services (collectively, the "Platform").

By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

bat93 is committed to handling your personal data with integrity, transparency and in a manner consistent with applicable data-protection legislation in the jurisdiction where bat93 is licensed and operates. This Policy was last updated on 1 January 2026.

Definitions

In this Policy, the following defined terms apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, contact details, financial information, device identifiers and behavioural data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, deletion or any combination thereof.
• "Data Controller" — bat93, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of bat93 under a data-processing agreement.
• "KYC Data" — identity and document verification information collected in compliance with Know Your Customer and anti-money-laundering requirements.
• "Cookies" — small text files placed on your device by the Platform to store and retrieve information about your session and preferences.
• "Consent" — a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Sensitive Data" — a category of personal data warranting heightened protection, including financial details, identity documents and data related to health or vulnerability.

Data We Collect

bat93 collects personal data through a number of channels, including direct input by you, automated collection through the Platform, and information provided by third-party service providers. The categories of data we collect are set out below.

How We Use Your Data

bat93 processes your personal data only for specified, legitimate purposes. The primary purposes for which we use your data are set out below:

• Account Management: To create, maintain and administer your account, verify your identity and enable access to the Platform.
• Service Delivery: To process bets, settle winnings, handle deposits and withdrawals, and provide the full range of sporting and casino services on the Platform.
• Regulatory Compliance: To fulfil our anti-money-laundering (AML), Know Your Customer (KYC), counter-terrorism financing (CTF) and responsible-gambling obligations under applicable law and licence conditions.
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, account abuse, multiple-account creation and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your queries, complaints and support requests, and to maintain a record of our communications with you.
• Responsible Gambling: To monitor behavioural data for indicators of problem gambling, to apply player-requested limits and to action self-exclusion requests.
• Platform Improvement: To analyse aggregated usage patterns, test new features, optimise performance and improve the overall player experience.
• Marketing Communications: To send you personalised promotions, bonus notifications and platform updates, where you have consented to receive such communications or where we have a legitimate interest in keeping you informed.
• Legal Obligations: To comply with court orders, regulatory investigations and any other legal requirement that mandates disclosure or retention of personal data.

Legal Basis for Processing

bat93 processes personal data only where a valid legal basis exists under applicable data-protection law. The legal bases we rely on are as follows:

• Contractual Necessity: Processing required to perform the contract between you and bat93 — including account creation, payment processing and service delivery.
• Legal Obligation: Processing required to comply with AML, KYC, CTF and other mandatory regulatory requirements under the law of bat93's licence jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring and business analytics, where our interests do not override your rights and freedoms.
• Consent: Processing for direct marketing and non-essential cookies, where you have provided specific and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third Parties

bat93 does not sell, rent or trade your personal data to any third party for commercial purposes. We may share your personal data with third parties only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: To process deposits and withdrawals. These providers receive only the minimum financial data required to complete the transaction.
• Identity Verification Partners: To perform KYC checks, age verification and document authentication in compliance with our regulatory obligations.
• Fraud Detection & Security Providers: To detect and prevent account fraud, money laundering and prohibited conduct across the Platform.
• IT Infrastructure & Hosting: Cloud hosting, database and infrastructure providers that store and process data on our behalf under strict data-processing agreements.
• Regulatory & Law Enforcement Authorities: Where required by court order, applicable law, or our licence conditions, we may disclose personal data to competent authorities.
• Corporate Transactions: In the event of a merger, acquisition or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party Data Processors engaged by bat93 are subject to contractual obligations requiring them to process personal data only on bat93's documented instructions and to maintain appropriate security standards.

Data Retention

bat93 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law or our licence obligations. The following retention guidelines apply:

• Account and registration data is retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC and identity documents are retained for the period required under the applicable AML/CTF regulations of bat93's licence jurisdiction, typically five (5) years from the date of verification or account closure, whichever is later.
• Financial transaction records are retained for a minimum of five (5) years in compliance with applicable financial regulations.
• Support communications are retained for up to three (3) years from the date of the interaction, or longer if the communication is relevant to an ongoing dispute or legal proceeding.
• Marketing preference records are retained for the duration of the account relationship or until consent is withdrawn, whichever is earlier.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Cookies & Tracking Technologies

bat93 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable you to log in, navigate between pages and access secure areas. They cannot be disabled without impacting core functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how players use the Platform — such as pages visited, time spent and errors encountered — to help us improve performance.
• Functional Cookies: Allow the Platform to remember your preferences — such as language, odds format and display settings — to personalise your experience.
• Marketing & Targeting Cookies: Used, with your consent, to deliver relevant promotional content and to measure the effectiveness of marketing campaigns.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the Platform. Refer to your browser's help documentation for guidance on managing cookie preferences.

Data Security

bat93 implements appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our security measures include, but are not limited to:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Strict access controls limiting data access to authorised personnel only, on a need-to-know basis.
• Regular security assessments, vulnerability scanning and penetration testing of the Platform.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Incident response procedures for detecting, reporting and responding to personal data breaches.

Your Rights as a Data Subject

Subject to the applicable data-protection law in bat93's licence jurisdiction, you may have the following rights in relation to your personal data. bat93 will endeavour to honour these rights in a timely and transparent manner:

• Right of Access: You may request a copy of the personal data bat93 holds about you, along with information about how it is used.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some corrections can be made directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, for example while you contest its accuracy.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling and direct marketing. You may opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the bat93 support team via Live Chat or by email at [email protected] (plain text — not a clickable link). We will respond to verified requests within a reasonable timeframe in accordance with applicable law. We may need to verify your identity before processing a data rights request.

International Data Transfers

bat93 may transfer your personal data to countries or territories outside your country of residence, including for the purpose of hosting, processing or service delivery by third-party providers located abroad. Where such transfers occur, bat93 will ensure that appropriate safeguards are in place to maintain an equivalent level of data protection, in accordance with applicable data-protection law.

For players located in Pakistan, please note that Pakistan's data-protection framework continues to evolve. bat93 does not represent that international transfers of your data are subject to Pakistani government oversight or regulatory approval. You are responsible for understanding the data-protection implications under local law.

Minors

The bat93 Platform is strictly intended for adults aged 18 or over (or the higher minimum age required by the operator/licence jurisdiction). bat93 does not knowingly collect personal data from persons under the age of 18. If we become aware that personal data has been collected from a minor without parental consent, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered or provided personal data on the Platform, please contact our support team immediately so that we can investigate and take appropriate action.

Policy Amendments

bat93 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or our licence obligations. Where changes are material, we will endeavour to provide reasonable advance notice via the Platform or by email to your registered address.

The "Last Updated" date at the top of this page will be revised each time a new version of this Policy is published. Your continued use of the Platform after publication of a revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by bat93, please get in touch through the following channels:

• Live Chat: Available 24/7 directly through the Platform — the fastest way to reach our Data Protection team for urgent privacy queries.
• Help Centre: Submit a support ticket through the Platform's Help Centre, selecting the "Privacy & Data" category for privacy-related enquiries.
• Email: [email protected] (plain text only — not a clickable link; copy and paste into your mail client).

Support is available in English. Urdu-language assistance is available through selected Live Chat channels. Our target response time for privacy-related email enquiries is 48 hours on business days, in accordance with our internal data-rights handling procedures.