44bat Privacy Policy — Your Data, Our Responsibility

01 Information We Collect

When you register and use the 44bat platform, we collect personal data that is necessary to deliver our services, maintain account security, comply with legal obligations, and improve your overall experience. The categories of personal data we collect are set out below.

Registration & Identity Data

At the point of account creation, we collect the information you provide directly in the registration form. This includes your Bangladesh mobile phone number (used as your primary identifier and for OTP verification), your date of birth (used to confirm you meet the 18+ age requirement), and a password you set yourself. You may also be asked to provide your full name and a preferred display username at this stage.

Identity Verification Data

Where identity verification is required — for example, before processing a large withdrawal or where our compliance checks flag an account for review — we may request the following documentary evidence:

• A copy of your National Identity Card (NID), passport, or birth certificate.
• A recent mobile banking statement or screenshot confirming that your registered bKash, Nagad, Rocket, or Upay wallet is registered in your own name.
• A selfie photograph held alongside your identity document, where required for enhanced verification.

Documents submitted for verification are processed by our compliance team, stored in an encrypted document management system, and are not used for any purpose other than identity verification and regulatory compliance.

Financial Transaction Data

When you make deposits or request withdrawals, we record the transaction amount (in BDT), the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the mobile wallet number or bank account reference associated with the transaction, the transaction timestamp (Bangladesh Standard Time, UTC+6), and the outcome status of each transaction. We do not store full mobile banking PINs or passwords — payment authentication is handled directly by the respective payment provider's own secure gateway.

Betting & Gaming Activity Data

We record a complete log of all betting and gaming activity conducted through your 44bat account. This includes individual bet placements and outcomes, casino session start and end times, game titles accessed, wager amounts, win/loss results, and bonus offer redemptions. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting purposes.

Technical & Device Data

We automatically collect certain technical information when you access the 44bat platform. This includes your IP address, device type (mobile, tablet, or desktop), operating system and version, browser type and version, and approximate geographic location derived from your IP address. We also collect session data such as pages visited, time spent on each page, clicks, and navigation paths through the platform. This data is collected to ensure the security and stability of the platform, to detect fraudulent access patterns, and to improve site performance for users in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, and across Bangladesh.

Communications Data

When you contact our support team — whether via live chat, email, or any other supported channel — we retain a record of the correspondence. This includes the content of your messages, the date and time of contact, and the resolution or outcome of each support interaction. This data is used to manage your support history, ensure service quality, and resolve future queries more efficiently.

02 How We Use Your Data

We use your personal data only for the purposes described in this policy and only to the extent necessary for those purposes. The primary uses of your data are as follows:

Marketing Communications

With your consent, we may send you promotional notifications about 44bat bonuses, seasonal offers (such as Eid promotions, BPL cricket season offers, or Pohela Boishakh specials), new game launches, and VIP tier upgrades. You can withdraw your consent to receive marketing communications at any time through your account notification settings or by contacting us at [email protected]. Withdrawal of marketing consent does not affect the processing of your data for essential service-delivery purposes.

Automated Decision-Making

44bat uses automated systems to detect fraudulent activity, identify potential problem gambling patterns, and enforce responsible gaming limits. Where an automated system flags your account for a restriction — such as a temporary withdrawal hold or a bet acceptance limit — you have the right to request that a human member of our compliance team reviews the decision. To exercise this right, contact our support team and reference the specific restriction applied to your account.

03 Legal Basis for Processing

Every instance of personal data processing carried out by 44bat is underpinned by one of the following legal bases. We document which basis applies to each processing activity and review these assessments periodically.

• Contractual necessity — Processing required to fulfil our contractual obligations to you as a registered player. This includes account management, payment processing, bet settlement, and customer support.
• Legal obligation — Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) checks, age verification obligations, tax reporting requirements, and responses to lawful requests from regulatory authorities.
• Legitimate interests — Processing carried out in the pursuit of 44bat's legitimate business interests, such as fraud prevention, platform security, analytics, and service improvement. In each case, we have assessed that these interests do not override your fundamental rights and freedoms.
• Consent — Processing based on your freely given, specific, and informed consent. This applies primarily to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

04 Data Sharing & Disclosure

44bat does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment Service Providers

To process your deposits and withdrawals, we share relevant transaction data with your chosen payment provider — bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, or a participating bank such as BRAC Bank, City Bank, Islami Bank, Sonali Bank, or Dutch-Bangla Bank. The data shared is limited to what is required to authenticate and settle the transaction. Each payment provider processes this data under their own privacy terms and security standards.

Game Technology Providers

The casino and slots games available on 44bat are supplied by certified third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. To deliver a seamless gaming experience, these providers receive a session token and anonymised player identifier when you launch a game. They do not receive your full name, phone number, or financial data. Game session outcomes are logged by both 44bat and the provider for audit and dispute resolution purposes.

Legal & Regulatory Authorities

We may be required to disclose personal data to regulatory or law enforcement authorities in response to a lawful request, court order, or legal process. Where we receive such a request, we will review it for legal validity before disclosing any data and will notify you of the disclosure where we are legally permitted to do so.

Fraud Prevention & AML Partners

To fulfil our anti-money laundering and fraud prevention obligations, we may share data with specialist compliance partners who provide identity verification, risk scoring, and transaction monitoring services. These partners process data strictly under data processing agreements that bind them to confidentiality and data protection standards equivalent to those applied by 44bat.

05 Cookies & Tracking

44bat uses cookies and similar tracking technologies to operate the platform, maintain your login session, analyse site performance, and deliver a personalised experience. Below is a summary of the cookie categories we use.

You can manage your cookie preferences at any time through your account settings panel. Please note that disabling performance or functional cookies may affect certain non-essential platform features such as personalised game recommendations and saved filter preferences. Strictly necessary cookies and responsible gaming cookies cannot be disabled as they are integral to the secure and compliant operation of the platform.

44bat does not use third-party advertising cookies or tracking pixels from ad networks. We do not engage in cross-site behavioural advertising. Any analytics tracking on the 44bat platform is conducted using first-party data under our direct control.

06 Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. The following retention periods apply to the main categories of data we hold.

When a retention period expires, data is securely deleted or anonymised in line with our internal data disposal procedures. Anonymised data — from which it is no longer possible to identify an individual — may be retained indefinitely for aggregate statistical analysis and platform improvement purposes.

Account Inactivity

If your 44bat account has had no login activity for a continuous period of 24 months, we will notify you by SMS to your registered mobile number before taking any action. If no response is received within 30 days of that notification, the account may be classified as dormant and subject to a data minimisation review, in which non-essential personal data may be deleted while records required for legal compliance purposes are retained.

07 Your Rights

As a registered user of the 44bat platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within five business days.

• Right of access — You may request a copy of all personal data we hold about you, together with information about how it is processed and shared.
• Right to rectification — If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated promptly.
• Right to erasure — In certain circumstances, you may request that we delete your personal data. This right is subject to our legal obligations — for example, we are required to retain financial transaction records for a minimum period regardless of a deletion request.
• Right to restrict processing — You may request that we limit how we use your personal data in specific circumstances, such as while you are contesting the accuracy of data we hold.
• Right to data portability — You may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider where technically feasible.
• Right to object — You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring and fraud detection. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

08 Data Security

44bat applies a layered approach to data security, combining technical controls, procedural safeguards, and staff training to protect your personal data against unauthorised access, loss, alteration, or disclosure. The key security measures we employ include:

• TLS 1.3 encryption on all pages and API endpoints, ensuring that data in transit between your device and our servers is protected against interception.
• AES-256 encryption at rest for all stored personal data, including identity documents and financial records held in our databases.
• Hashed credential storage — your account password is stored as a salted hash, meaning that even our own technical staff cannot read your password in plain text.
• Role-based access controls limiting access to personal data to authorised 44bat staff who require it for their specific job function.
• Multi-factor authentication for all internal staff accounts that have access to production systems containing player data.
• Regular security audits and penetration testing conducted by qualified third-party security professionals to identify and remediate vulnerabilities.
• Intrusion detection systems that monitor for anomalous access patterns and trigger automated alerts for immediate investigation.

Security Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, 44bat will notify affected users without undue delay — and in any case within 72 hours of becoming aware of the breach — via SMS notification to your registered mobile number and, where possible, a platform notification at next login. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking or have taken to address it.

09 Third-Party Services

The 44bat platform integrates with a number of carefully selected third-party service providers to deliver its full range of betting and gaming services. Each third-party provider is subject to a contractual data processing agreement that binds them to data protection standards consistent with those applied by 44bat. We do not permit third-party providers to use your data for their own marketing or commercial purposes.

The principal categories of third-party services used by 44bat, and the data each category receives, are as follows:

• Game studios (Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe) — receive an anonymised session token to launch and log game sessions. They do not receive your name, phone number, or payment details.
• Payment processors (bKash, Nagad, Rocket/DBBL, Upay, and participating banks) — receive the transaction data necessary to process your deposit or withdrawal request as described in Section 04.
• Identity verification providers — receive identity documents submitted during the KYC process for automated or manual verification. Documents are not retained by the provider beyond the verification event.
• Infrastructure and hosting providers — provide the server infrastructure on which the 44bat platform operates. All data hosted on these servers is encrypted at rest. Hosting providers do not have access to decryption keys for player data.

44bat does not use social media tracking pixels, advertising networks, or data broker integrations on any page of the platform. Links to external websites are not included on the 44bat platform, and we are not responsible for the privacy practices of any third-party website that may reference 44bat content.

10 Policy Updates

44bat reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make changes, we will publish the revised policy on this page with an updated effective date at the top. Where changes are material — for example, if we introduce a new category of data processing or change our data sharing arrangements — we will notify registered players via a platform notification at next login or via SMS to their registered mobile number.

Your continued use of the 44bat platform after a Privacy Policy update constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should cease using the platform and may request account closure as described in our Terms & Conditions.

Contact & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you, please contact our dedicated support team. We are available 24 hours a day, 365 days a year, with a live chat response time of under five minutes.

Email contact: [email protected] — displayed as plain text and not a clickable link. Please include "Privacy Policy Query" in the subject line of your message so that it is routed directly to the appropriate team member.