17bat Privacy Policy — Your Data, Your Rights

i Introduction

17bat ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform at https://17bat.org. This Privacy Policy ("Policy") describes in plain language how we collect personal information, the purposes for which we use it, who we may share it with, how long we retain it, and the rights you have in relation to your data. This Policy applies to all users of the 17bat platform, including registered players, visitors browsing without an account, and any person who contacts our support team.

By registering an account on 17bat or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood its contents. If you have any questions about this Policy or wish to exercise any of your data rights, please contact our support team at [email protected]. We will acknowledge all data enquiries within 5 business days and respond fully within 30 days.

1 Information We Collect

17bat collects several categories of personal information depending on how you interact with our platform. The main categories are set out below:

2 How We Use Your Information

17bat uses your personal data only for legitimate, documented purposes. We do not use your data for purposes that are incompatible with those stated here. The principal uses of your data are:

• To create and manage your 17bat player account, including verifying your identity, processing your registration, and maintaining your account settings and preferences
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods, and to maintain accurate financial records of all transactions
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct on the 17bat platform
• To personalise your experience on 17bat, including recommending games based on your play history and providing relevant promotional offers that match your activity
• To send you service communications including transaction confirmations, account security alerts, and important updates about the 17bat platform and these policies
• To comply with applicable legal obligations, including anti-money laundering regulations, age verification requirements, and any requests from competent authorities

3 Legal Basis for Processing

Every processing activity at 17bat is underpinned by one of the following legal bases:

• Contract performance — processing your account registration, deposits, withdrawals, and game participation is necessary to deliver the 17bat service you have signed up for
• Legal obligation — identity verification, age checks, transaction record-keeping, and fraud investigation are required by applicable financial and gaming regulations
• Legitimate interests — fraud prevention, platform security monitoring, and service improvement activities are pursued where our interests do not override your fundamental rights
• Consent — where we send you optional marketing communications about promotions, bonuses, or new games, we do so on the basis of your explicit consent, which you may withdraw at any time by contacting support

4 How We Share Your Information

17bat does not sell your personal data to any third party. We share data only in the following limited circumstances:

• Payment processors — bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive only the minimum transaction data required to process your deposit or withdrawal. 17bat does not store full card numbers or mobile wallet PINs.
• Game technology providers — Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other certified providers may receive a pseudonymous player identifier and session data to deliver their games. They do not receive your name, mobile number, or financial data.
• Regulatory and law enforcement authorities — 17bat will disclose personal data to competent authorities where required to do so by law, court order, or regulatory obligation. We will notify you of any such disclosure where legally permitted to do so.
• Fraud prevention services — we may share limited account and transaction data with specialist fraud detection providers to protect the integrity of the 17bat platform and its player community

5 Payment Data and Mobile Money Privacy

When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, the transaction is processed directly between your mobile money account and the 17bat platform payment gateway. 17bat stores a transaction reference number, amount, timestamp, and masked payment identifier (for example, the last four digits of a mobile number) sufficient to match transactions to accounts and resolve disputes. We do not store your full mobile wallet number or PIN at any point in the transaction flow.

All financial transaction data held by 17bat is encrypted at rest using AES-256 and in transit using TLS 1.3. Transaction logs are retained for a minimum of five years in compliance with applicable financial record-keeping requirements. Access to financial data is restricted to authorised 17bat staff on a strict need-to-know basis and is logged and audited.

6 Cookies and Tracking Technologies

The 17bat platform uses cookies and similar local storage technologies to operate correctly and to improve your experience. We use three categories of cookies:

• Essential cookies — required for the platform to function. These include session authentication tokens, security cookies that protect against CSRF attacks, and cookies that remember your language preference. These cannot be disabled without breaking the service.
• Performance cookies — collect anonymised data about how players navigate the 17bat platform (page views, session duration, error rates) to help us identify and fix technical issues and optimise page performance
• Functional cookies — remember your account preferences such as display settings and responsible gaming limits you have set, so you do not need to reconfigure them each session

You can manage cookie preferences via your mobile browser settings. Please note that disabling essential cookies will prevent the 17bat platform from functioning correctly and you will not be able to log in or play games. 17bat does not use advertising or cross-site tracking cookies.

7 Data Retention

17bat retains your personal data for as long as your account remains active and for a period after closure sufficient to meet our legal obligations. Specifically: account registration and identity data is retained for the duration of the account relationship plus five years after closure; financial transaction records are retained for five years from the date of each transaction; gaming session data is retained for three years; technical and device logs are retained for twelve months; and marketing preference records are retained until you withdraw consent.

When your data is no longer required for any of the purposes described in this Policy and no legal retention obligation applies, 17bat will securely delete or anonymise it. Anonymised data that can no longer be linked to any individual may be retained for statistical and platform improvement purposes indefinitely.

8 Data Security

17bat implements layered technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security architecture includes: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest in our databases; multi-factor authentication requirements for 17bat staff accessing player data; regular automated vulnerability scanning and penetration testing; IP-level access controls and anomaly detection on our payment processing infrastructure; and 24/7 security monitoring by our dedicated security team based in Bangladesh Standard Time (BST, UTC+6).

9 Your Data Rights

As a 17bat player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your account mobile number and a description of your request:

• Right of access — you may request a copy of all personal data that 17bat holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your verified request.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations that prevent deletion
• Right to restrict processing — you may ask us to suspend processing of your personal data in certain circumstances, for example while a dispute about its accuracy is resolved, without requiring full deletion of the data
• Right to withdraw consent — where we process your data on the basis of consent (such as for optional marketing messages), you may withdraw that consent at any time by contacting our support team, without affecting the lawfulness of processing carried out before withdrawal

17bat will not charge a fee for handling any data rights request unless the request is manifestly unfounded or excessive. We may ask you to verify your identity before we act on any request to ensure we are responding to the correct account holder.

10 Children's Privacy

The 17bat platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data belonging to any individual under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe your child has registered an account on 17bat, please contact [email protected] immediately so we can take appropriate action.

11 Changes to This Privacy Policy

17bat reserves the right to update this Privacy Policy at any time. When we make material changes, we will publish the revised Policy on this page with an updated "Last updated" date and, where the changes are significant, we will notify registered players via a platform notification or by message to their registered mobile number. Your continued use of the 17bat platform after a revised Policy has been published constitutes your acceptance of the updated terms. We recommend reviewing this page periodically so you remain informed about how we protect your data.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 17bat handles your personal data, please reach out to our support team. We handle all privacy enquiries with strict confidentiality and respond within 30 days.

Email our support team at [email protected]