Effective Date & Scope: This Privacy Policy was last updated in January 2026 and applies to all bat999 account holders, visitors to the bat999 platform, and any person whose personal data is processed by bat999 in connection with the provision of online gaming, sports betting, and related services. By using the bat999 platform, you acknowledge that you have read and understood this Privacy Policy.
SECTION 01
Who We Are
bat999 is an internationally licensed online gaming and sports betting operator providing services to players in Pakistan and other permitted jurisdictions. bat999 acts as the data controller in respect of all personal data collected through the bat999 platform, meaning bat999 determines the purposes and means by which your personal data is processed.
bat999 is operated under an international gaming licence. As a licensed operator, bat999 is subject to data protection obligations imposed by its licensing authority as a condition of its authorisation to provide online gaming services. These obligations form part of the regulatory framework within which bat999 processes your personal data.
For all data-related enquiries, you may contact bat999's data support team via live chat on the platform or by emailing [email protected] — note this address is for reference only and is not a clickable link.
SECTION 02
Data We Collect
bat999 collects the following categories of personal data in connection with the creation and maintenance of player accounts and the delivery of gaming services:
Identity Data: Your full legal name as it appears on your Pakistani CNIC (Computerised National Identity Card), your CNIC number, date of birth, and nationality. This data is mandatory for account registration and cannot be omitted.
Contact Data: Your Pakistani mobile telephone number (used for OTP-based two-factor authentication via networks including Jazz, Zong, Ufone, Warid, and Telenor), your email address, and optionally your city of residence (such as Karachi, Lahore, Islamabad, or Faisalabad).
Financial Data: Transaction reference numbers for JazzCash and EasyPaisa mobile wallet payments, bank account details for HBL, UBL, and Meezan Bank transfers, Visa/Mastercard card references (not full card numbers — bat999 does not store primary account numbers), and PKR transaction amounts. All financial data is processed through PCI-DSS compliant payment gateways.
Technical Data: Your IP address, device identifiers, browser type and version, operating system, screen resolution, and session login/logout timestamps. This data is collected automatically when you access the bat999 platform.
Usage Data: Pages you visit within the bat999 platform, games you play, bets you place (including stake amounts and outcomes), session duration data, and in-platform navigation patterns. Usage data is collected in aggregate and at the individual account level for responsible gaming monitoring purposes.
Communications Data: Records of your interactions with bat999 customer support via live chat or email, including the content of those communications.
SECTION 03
How We Collect Your Data
bat999 collects personal data through the following channels:
- Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or update your account profile, you provide data directly to bat999.
- Automated technical collection: When you access and use the bat999 platform, technical and usage data is automatically collected via server logs, session tracking technologies, and first-party cookies.
- Third-party verification providers: When bat999 conducts identity verification using your CNIC details, data may be cross-referenced with identity verification partners who confirm the authenticity of the documents you submit.
- Payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, or a bank transfer, bat999 receives transaction confirmation data from the relevant payment processor to reconcile your account balance.
- Fraud detection systems: bat999's fraud detection infrastructure may collect supplementary device fingerprinting data to identify patterns indicative of prohibited conduct such as multi-accounting or bonus abuse.
bat999 does not collect personal data from public social media profiles, data brokers, or any source unrelated to your direct interaction with the bat999 platform.
SECTION 04
How We Use Your Data
bat999 uses the personal data it collects exclusively for the following purposes:
- Account creation and management: To register your bat999 account, verify your identity and age (21+ requirement), and maintain your account profile.
- Payment processing: To process PKR deposits and withdrawals via your chosen payment method, reconcile transactions, and resolve payment disputes.
- Service delivery: To provide access to bat999's sports betting, casino, live dealer, and other gaming products, and to personalise your in-platform experience based on your preferences.
- Security and fraud prevention: To detect, investigate, and prevent unauthorised access, fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
- Regulatory compliance: To comply with bat999's obligations under its international gaming licence, including Anti-Money Laundering (AML) checks, Know Your Customer (KYC) procedures, and reporting obligations to the relevant licensing authority.
- Responsible gaming: To monitor account activity for signs of problem gambling, enforce deposit and loss limits you have set, manage self-exclusion requests, and provide access to responsible gaming tools.
- Customer support: To respond to your enquiries, resolve complaints, and provide assistance with account-related issues.
- Platform improvement: To analyse aggregated usage data and improve bat999's platform functionality, game offerings, and user experience.
- Marketing (with consent only): To send you promotional offers, bonus notifications, and platform updates via SMS or email where you have opted in to receive such communications.
bat999 does not use your personal data for any automated decision-making process that produces legal or similarly significant effects without human review, except where expressly required for fraud prevention purposes.
SECTION 05
Legal Basis for Processing
bat999 processes your personal data on the following legal bases:
- Contractual necessity: Processing your identity, contact, and financial data is necessary to fulfil bat999's contractual obligations to you as a registered account holder — specifically, to operate your account, process transactions, and provide gaming services.
- Legal obligation: bat999 is required by its gaming licence and applicable AML/KYC regulations to collect and retain certain categories of personal data. Compliance with these legal obligations is a non-negotiable basis for processing and cannot be opted out of by individual players.
- Legitimate interests: bat999 processes technical and usage data on the basis of its legitimate interests in maintaining platform security, detecting fraud, improving its services, and ensuring responsible gaming compliance. These interests are balanced against your privacy rights and do not override them.
- Consent: Marketing communications are sent only on the basis of your explicit opt-in consent. You may withdraw this consent at any time from your account settings without any adverse effect on your ability to use the bat999 platform.
Note: Where bat999 processes data on the basis of legitimate interests, you have the right to object to that processing. bat999 will consider your objection and cease processing unless bat999 can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for legal claims.
SECTION 06
Data Sharing & Third Parties
bat999 does not sell your personal data to any third party. bat999 shares personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:
- Identity verification providers: bat999 shares CNIC-related identity data with regulated identity verification partners solely to confirm the authenticity of your identity documents during KYC processing.
- Payment processors: bat999 shares the minimum transaction data required with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard payment gateways to process your deposits and withdrawals in PKR.
- Gaming platform providers: Game content on bat999 is supplied by certified third-party game studios. These providers may receive pseudonymised session data necessary to deliver game functionality and calculate RTP. No personally identifiable information is shared with game providers beyond what is technically necessary.
- Fraud prevention services: bat999 uses third-party fraud detection systems that process technical and device data. All such providers are bound by data processing agreements that restrict use of your data to fraud prevention purposes only.
- Regulatory and licensing authorities: bat999 is required to disclose certain player data to its licensing authority and, where legally compelled, to law enforcement agencies. bat999 will disclose only the minimum data required to satisfy any such legal obligation and will notify you of such disclosures where it is legally permitted to do so.
All third parties with whom bat999 shares personal data are contractually required to process that data only in accordance with bat999's instructions and this Privacy Policy, and to maintain appropriate technical and organisational security measures.
SECTION 07
International Data Transfers
bat999 operates under an international gaming licence, and some of the third-party service providers bat999 works with may process your data in jurisdictions outside Pakistan. Where such international transfers occur, bat999 takes steps to ensure that your data receives an equivalent level of protection to that which would apply within a regulated data protection framework.
These steps include: entering into standard contractual data transfer clauses with the relevant service providers; conducting due diligence to confirm that recipient countries or organisations maintain adequate data protection standards; and restricting the scope of data transferred to the minimum necessary for the relevant processing purpose.
By registering a bat999 account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan as described in this section. If you have concerns about international data transfers relating to your account, please contact bat999 customer support.
SECTION 08
Data Security
bat999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:
- Encryption in transit: All data transmitted between your device and bat999 servers is encrypted using TLS 1.3 (Transport Layer Security). The bat999 platform enforces HTTPS on all connections and does not permit unencrypted HTTP access.
- Encryption at rest: All personally identifiable data stored on bat999 servers — including CNIC details, financial data, and account credentials — is encrypted at rest using AES-256 encryption.
- Password security: bat999 passwords are stored using industry-standard one-way cryptographic hashing. bat999 never stores passwords in plain text and never transmits them in plain text. bat999 staff cannot view your password.
- Two-factor authentication: bat999 offers and strongly encourages SMS OTP-based two-factor authentication for all accounts, compatible with all major Pakistani mobile networks.
- Access controls: Access to personal data within bat999's systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their role, and all access is logged and audited.
- Security monitoring: bat999 maintains 24/7 infrastructure monitoring and intrusion detection systems to identify and respond to security incidents in real time.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, bat999 will notify affected account holders without undue delay and will take immediate steps to contain and remediate the breach.
SECTION 09
Cookies & Tracking Technologies
bat999 uses a limited set of first-party cookies and similar tracking technologies on the bat999 platform. bat999 does not use third-party advertising cookies or place cookies on behalf of external advertisers.
Types of cookies bat999 uses:
- Essential session cookies: These cookies are strictly necessary to maintain your login session while you use the bat999 platform. Without these cookies, you would be required to log in on every page. These cookies cannot be disabled without preventing access to the platform.
- Preference cookies: These cookies remember your platform settings such as language preference, game display options, and notification preferences. They improve your experience but are not essential to platform function.
- Analytics cookies: bat999 uses first-party analytics cookies to collect aggregated, anonymised data on how players navigate the platform — including pages visited, time spent, and features used. This data is used solely to improve platform performance and user experience. No individual player is identified through analytics data.
You can manage cookie settings through your browser. Most browsers allow you to block or delete cookies. Note that blocking essential session cookies will prevent you from using the bat999 platform normally. bat999 does not respond to browser "Do Not Track" signals as there is no agreed industry standard for how such signals should be interpreted.
SECTION 10
Your Data Rights
Subject to applicable regulatory restrictions (including AML/KYC retention obligations that may limit some rights in respect of specific data categories), bat999 account holders have the following rights in relation to their personal data:
- Right of access: You have the right to request a copy of the personal data bat999 holds about you. bat999 will respond to access requests within 30 days.
- Right to rectification: If any personal data bat999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data corrections (such as name changes) may require supporting documentation.
- Right to erasure: In certain circumstances, you have the right to request that bat999 delete your personal data. This right is subject to bat999's legal obligation to retain certain data for regulatory compliance purposes. Where full erasure is not possible, bat999 will explain which data must be retained and why.
- Right to restrict processing: You have the right to request that bat999 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is disputed or while an objection to processing is being considered.
- Right to data portability: You have the right to receive a copy of personal data you have provided to bat999 in a structured, commonly used, machine-readable format.
- Right to object: You have the right to object to bat999 processing your data on the basis of legitimate interests. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
- Right to withdraw consent: Where bat999 processes your data on the basis of consent (specifically, marketing communications), you may withdraw that consent at any time via your account settings or by contacting support.
To exercise any of these rights, contact bat999 customer support via live chat or email. bat999 may need to verify your identity before processing a data rights request to ensure the request is made by the account holder.
SECTION 11
Data Retention
bat999 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to minimum retention periods imposed by bat999's licensing authority and applicable anti-money laundering regulations. The following general retention periods apply:
- Identity and financial data: Retained for the duration of your active account and for a minimum of 7 years following permanent account closure, in compliance with AML record-keeping requirements.
- Contact data: Retained for the duration of your active account and for 3 years following closure, to facilitate the resolution of post-closure disputes or regulatory enquiries.
- Technical and security data: IP address logs and security event records are retained for 13 months from collection, sufficient to cover standard fraud investigation and dispute resolution timelines.
- Usage and analytics data: Aggregated usage data is retained for 24 months. Account-level usage data used for responsible gaming monitoring is retained for the duration of the account.
- Marketing preferences: Records of your marketing opt-in consent are retained until you withdraw consent, plus a further period of 3 years to demonstrate compliance with consent requirements.
- Customer support records: Records of support interactions are retained for 3 years from the date of the interaction.
Upon expiry of applicable retention periods, bat999 securely deletes or irreversibly anonymises personal data so that it can no longer be attributed to an identifiable individual.
SECTION 12
Children & Minors
bat999 strictly prohibits the use of its platform by any person under the age of 21. bat999 does not knowingly collect personal data from individuals under 21 years of age. bat999's registration process includes mandatory age verification using CNIC-based identity checks specifically designed to prevent minors from accessing the platform.
If bat999 discovers or has reason to believe that it has inadvertently collected personal data from a person under the age of 21, bat999 will immediately suspend the account, investigate, and — where confirmed — permanently close the account and securely delete all associated personal data, except where retention is required by applicable regulations.
If you are a parent or guardian and believe your child may have registered a bat999 account, please contact customer support immediately with relevant identity verification. bat999 will investigate and resolve such reports as a priority matter.
Strict 21+ Policy: bat999 enforces mandatory age verification on all new account registrations. bat999 takes its obligations to prevent underage gambling seriously and cooperates fully with any regulatory authority investigation into potential underage account access.
SECTION 13
Marketing Communications
bat999 may send promotional communications including bonus offers, deposit match promotions, PSL cricket betting promotions, new game launch notifications, and loyalty programme updates. All marketing communications from bat999 are subject to the following conditions:
- Marketing communications are sent only to players who have explicitly opted in to receive them during registration or subsequently via account settings.
- bat999 sends marketing communications via SMS to your registered Pakistani mobile number and/or via email to your registered email address, depending on your channel preferences.
- You may opt out of all marketing communications at any time, either from the communications settings section of your bat999 account or by following the unsubscribe instructions included in every marketing message bat999 sends.
- Opting out of marketing communications does not affect your access to the bat999 platform, your account status, or your eligibility for promotions — however, you may not receive advance notification of time-limited offers if you have opted out of marketing.
- Transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences.
SECTION 14
Updates to This Privacy Policy
bat999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, bat999's data processing practices, or the services bat999 provides. Where changes are material, bat999 will notify active account holders via email and/or in-platform notification prior to the changes taking effect.
The "Effective Date" at the top of this Privacy Policy indicates when the current version was last updated. bat999 recommends that you review this Privacy Policy periodically. Your continued use
of the bat999 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms.
Previous versions of this Privacy Policy are available upon request by contacting bat999 customer support. bat999 maintains an archive of all prior Privacy Policy versions for a period of not less than 5 years.
SECTION 15
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or bat999's data processing practices, please contact the bat999 data support team through any of the following channels:
- Live chat: Available 24/7 directly within the bat999 platform. Average response time is 3–5 minutes.
- Email: [email protected] — please note this address is displayed as plain text for reference only.
bat999 aims to respond to all data-related enquiries within 5 business days and to formally resolve all data rights requests within 30 days of receipt. Where a request is particularly complex or bat999 is dealing with a high volume of requests, bat999 may extend this period by a further 30 days and will notify you accordingly.
bat999 takes all privacy complaints seriously. If you are not satisfied with bat999's response to a privacy concern, you may escalate the matter to bat999's licensing authority by following the complaints procedure outlined in the responsible gaming section of the bat999 platform.