bat2888 Privacy Policy – Pakistan Player Data Protection

This Privacy Policy explains how bat2888 ("bat2888", "we", "us", "the platform") collects, stores, uses, and protects the personal information of players who register and use bat2888. It applies to all bat2888 services accessible at bat2888.app and through any associated mobile interface.

This policy is written for Pakistani players and takes into account the typical data interactions that occur on the bat2888 platform — account registration, PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard, live casino gaming, and customer support interactions.

By registering an account on bat2888, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. This policy should be read alongside the bat2888 Terms and Conditions, which govern your overall use of the platform.

bat2888 collects personal data in two broad categories: information you provide directly when using the platform, and technical data generated automatically by your device and browser during your session.

Data You Provide Directly

• Account registration data: Full name, Pakistani mobile number, date of birth, and a password (stored only in hashed form — bat2888 cannot read your password).
• Identity verification documents: Where bat2888 requests KYC (Know Your Customer) verification — for example before processing withdrawals above a certain threshold — you may be asked to submit a copy of your CNIC (Computerised National Identity Card) or other government-issued identification.
• Payment information: Mobile wallet identifiers (your Easypaisa or JazzCash registered number), bank account details for IBFT transfers, and the last four digits and card network of any Visa or Mastercard used for deposits. Full card numbers and CVV codes are never stored by bat2888.
• Customer support communications: The content of any messages exchanged with bat2888 support via live chat or email, including any attachments or screenshots you share.

Data Collected Automatically

• Device information: Device type, operating system version, browser type and version, screen resolution, and a device fingerprint hash used for fraud prevention.
• Connection data: IP address, approximate geographic location (city level, derived from IP), internet service provider, and connection timestamp.
• Platform activity: Login and logout timestamps, games played, bet amounts and outcomes, deposit and withdrawal transaction records, promotional offer usage, and session duration data.
• Cookie and tracking data: Session cookies, analytics identifiers, and referral source data. See Section 7 for full details.

bat2888 collects personal data through the following specific channels and interactions:

• Registration form: When you create a bat2888 account, you enter your name, mobile number, date of birth, and password directly into the registration form.
• Payment processing: When you make a deposit or withdrawal, your payment details pass through bat2888's payment gateway integration. Mobile wallet transactions go through the Easypaisa and JazzCash APIs. Card transactions go through a PCI-DSS compliant processor. bat2888 receives a transaction reference and confirmation — not your raw card data.
• Automated technical collection: Every time you visit bat2888, standard web server logs record your IP address, browser type, and the pages or game sections you access. This is universal to all web platforms and cannot be disabled without blocking access to the site entirely.
• Live chat and email: When you contact bat2888 support, the conversation is recorded and stored for quality assurance, dispute resolution, and regulatory compliance purposes.
• KYC verification: If bat2888 requests identity verification, you upload documents directly through the secure upload interface in your account settings. These documents are stored in an encrypted document store accessible only to authorised bat2888 compliance staff.

bat2888 processes your personal data only for specific, legitimate purposes. We do not collect data speculatively or "just in case". Every data point bat2888 holds about you has a defined use. Here is the full list:

bat2888 does not sell, rent, or trade your personal data. We share it only with the specific categories of third parties described below, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT partner banks, and our card payment gateway provider receive the transaction data necessary to process your deposit or withdrawal. These providers are contractually bound to use your data only for payment processing purposes.
• Identity verification services: If bat2888 uses a third-party KYC verification service to validate your CNIC, that provider receives only the documents and data required for the verification check. They do not retain copies beyond their contractual obligations.
• Fraud detection technology providers: bat2888 uses industry-standard fraud prevention tools that analyse device fingerprints and IP data. These services process data in real time and do not build marketable profiles from bat2888 player data.
• Game platform providers: For live dealer games (Baccarat, Andar Bahar) and other titles provided by third-party developers, your account identifier and game session data are shared with the game provider to facilitate gameplay. No financial data is shared with game providers.
• Regulatory and law enforcement authorities: bat2888 will disclose personal data to regulators, law enforcement agencies, or courts when legally required to do so. bat2888 will inform you of such a disclosure unless prohibited by law from doing so.

bat2888 places payment data security at the top of its data protection priorities. Given that the platform processes PKR transactions through six different payment methods, robust payment data handling is not optional — it is the foundation of player trust.

When you make a card payment on bat2888, your card number and CVV are entered directly into a form served by our PCI-DSS Level 1 compliant payment processor. This data passes directly to the processor over an encrypted connection — it does not touch bat2888 servers in its raw form. bat2888 stores only the card network (Visa/Mastercard), the last four digits for display in your account, and the tokenised reference provided by the processor for future transactions you authorise.

For Easypaisa and JazzCash transactions, bat2888 communicates with these platforms via their official APIs using mutual authentication. Your mobile wallet PIN is never visible to or stored by bat2888 at any point in the transaction flow. bat2888 receives only transaction confirmation and reference data.

All financial records associated with your bat2888 account — deposit history, withdrawal history, and current balance — are stored in bat2888's internal database, which is access-controlled and encrypted at rest. Access to financial records is restricted to bat2888 finance team members with specific authorisation, and all access is logged and auditable.

bat2888 uses cookies and similar browser storage technologies to make the platform function correctly and to understand how players use the site so that it can be improved. Here is exactly what each type of cookie does:

• Session cookies (essential): These keep you logged into your bat2888 account during your gaming session. Without session cookies, you would be logged out every time you navigate between pages. These cookies expire when you close your browser and cannot be disabled without breaking the platform.
• Authentication cookies (essential): A persistent cookie stores a secure, encrypted token that allows bat2888 to remember your login if you choose the "Remember me" option. This token is rotated regularly and is invalidated on logout.
• Analytics cookies (non-essential): bat2888 uses anonymised, aggregated analytics data to understand which game sections are most popular, how long players typically spend on the platform, and where technical issues are occurring. This data does not identify individual players.
• Fraud prevention (essential): bat2888 uses browser fingerprinting stored via local storage to detect suspicious activity such as multiple account creation attempts from the same device. This is essential to platform security and cannot be disabled.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from using bat2888 as intended. Disabling analytics cookies will not affect your ability to use the platform.

bat2888 retains personal data only for as long as it is needed for the stated purposes, and for the minimum period required by applicable legal and regulatory obligations. Specific retention periods are as follows:

• Account data: Retained for the lifetime of your active bat2888 account plus a minimum of 5 years following account closure, as required for financial record-keeping and regulatory compliance.
• Transaction records: All deposit and withdrawal records are retained for a minimum of 7 years to meet financial services record-keeping obligations.
• KYC documents: Identity verification documents are retained for a minimum of 5 years following the verification check, or 5 years from account closure, whichever is later.
• Customer support records: Chat and email records are retained for 3 years from the date of the interaction, to support dispute resolution and quality assurance.
• Game session data: Detailed game history (bet-by-bet records) is retained for 2 years. Summary statistics for your account are retained for the lifetime of the account.
• Analytics data: Anonymised, aggregated analytics data may be retained indefinitely as it does not identify individual players.

When data reaches the end of its retention period, it is securely deleted from bat2888's systems using industry-standard secure deletion methods. Backups are purged on a rolling schedule aligned with the primary retention periods above.

bat2888 respects your rights over your personal data. You can exercise any of the following rights by contacting bat2888 support via live chat or by emailing support@bat2888.app:

bat2888 is strictly an adult platform and does not knowingly collect personal data from anyone under the age of 18. Registration on bat2888 requires confirmation of age at the point of sign-up, and bat2888 verifies age through the date of birth provided and, where necessary, through CNIC verification.

If bat2888 discovers or has reasonable grounds to believe that an account has been created by or on behalf of a minor, that account will be immediately suspended, all associated data will be securely deleted, and deposited funds will be returned to the originating payment method. Any winnings generated by an underage account will be forfeited.

Parents and guardians who believe a minor may have created a bat2888 account should contact support@bat2888.app immediately. bat2888 will act within 24 hours of receiving a verified report.

bat2888 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, alteration, disclosure, or destruction.

Encryption

All data transmitted between your device and bat2888 is encrypted using TLS 1.3 (256-bit). The connection is served over HTTPS with an Extended Validation certificate. Data stored in bat2888 databases is encrypted at rest using AES-256 encryption. Passwords are never stored in plain text — they are hashed using bcrypt with a unique salt per account.

Access Controls

bat2888 operates a strict role-based access control system for all internal systems. Staff members can access only the data necessary for their specific role. Access to sensitive data such as KYC documents and financial records requires two-factor authentication and is audited. No single employee has unrestricted access to the full player database.

Infrastructure Security

bat2888's platform is hosted on enterprise-grade infrastructure with automatic failover, real-time intrusion detection, DDoS protection, and regular penetration testing by an independent security firm. Security patches are applied within 24 hours of release for critical vulnerabilities.

Breach Response

In the event of a data breach that affects your personal information, bat2888 will notify affected players promptly — within 72 hours of becoming aware of the breach — with details of what data was involved, what bat2888 is doing about it, and what steps you should take to protect yourself.

bat2888 may update this Privacy Policy from time to time as the platform evolves, as new payment methods are added, as legal requirements change, or as our data practices are refined. The date of the most recent revision is displayed at the top of this page.

When bat2888 makes material changes to this policy — meaning changes that meaningfully affect your rights or how your data is used — we will notify active players through:

• A notification displayed when you next log into bat2888, requiring acknowledgement of the updated policy.
• An SMS to your registered Pakistani mobile number for significant changes.

Minor updates — such as clarifications of existing practices, corrections of typographical errors, or updated contact details — will be made without individual notification and will take effect from the date of publication. bat2888 recommends reviewing this policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or how bat2888 handles your personal data, please reach out through any of the following channels:

• Live chat: Available 24/7 directly on the bat2888 platform. This is the fastest way to get a response for most data queries.
• Email: support@bat2888.app — for formal data rights requests, privacy complaints, or detailed queries that require a written response. bat2888 targets a response within 4 business hours and a full resolution within 15 business days.

bat2888 support handles privacy queries in English and Urdu. For formal data access or deletion requests, please include your registered mobile number and account username to help us locate your records promptly.

bat2888 is committed to resolving all privacy concerns fairly and transparently. If you raise a concern and are not satisfied with the response, you are entitled to escalate the matter to the relevant regulatory or data protection authority in Pakistan.