1. Personal Data bat999 Collects
bat999 collects personal data in three ways: data you provide directly, data generated automatically through your use of the platform, and data received from trusted third parties for verification and payment processing purposes.
Data you provide directly to bat999:
- Full legal name as it appears on your CNIC or other government-issued identity document.
- Pakistani mobile number used to verify your bat999 account.
- Email address for account communications and security notifications.
- Date of birth for age verification — bat999 serves players aged 18 and above only.
- CNIC number and copies of identity documents provided during KYC (Know Your Customer) verification.
- Payment details — Easypaisa or JazzCash mobile wallet number, bank account details for IBFT transfers, or card details for Visa/Mastercard transactions. Card details are processed by our payment providers and are not stored by bat999 in full.
- Any information you voluntarily provide to bat999 customer support via live chat, email or other communication channels.
Data generated automatically through your use of bat999:
- IP address and approximate geolocation at the time of login and transactions.
- Device type, operating system, browser type and version.
- Pages visited on bat999, time spent on each page and navigation paths.
- Bet history, game play records, deposit and withdrawal transaction logs.
- Session timestamps and login history.
- Cookie data and similar tracking technologies — see Section 8 for details.
Data received from third parties:
- Identity and age verification results from third-party KYC providers.
- Transaction confirmation data from payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners).
- Fraud and risk screening results from security service providers.
2. Why bat999 Collects This Data
bat999 collects and processes your personal data only for specific, legitimate purposes. Every piece of data we hold has a reason for being there:
| Purpose | Data Used | Legal Basis |
|---|
| Account registration and authentication | Name, mobile, email, password | Contract performance |
| Age and identity verification (KYC) | CNIC, date of birth, selfie if required | Legal obligation |
| Processing PKR deposits and withdrawals | Payment method details, transaction amounts | Contract performance |
| Anti-money laundering (AML) compliance | Transaction history, CNIC, source of funds | Legal obligation |
| Fraud detection and prevention | IP, device data, behavioural patterns | Legitimate interest |
| Responsible gaming monitoring | Bet patterns, deposit frequency, session length | Legitimate interest / legal obligation |
| Customer support | Communications history, account data | Contract performance |
| Platform improvement and analytics | Anonymised usage data, page performance | Legitimate interest |
| Marketing communications (opt-in only) | Email, mobile number | Consent |
Plain language: bat999 does not collect data for the sake of it. The list above covers every purpose for which bat999 holds player data. If a purpose is not listed here, bat999 does not use your data for it.
3. Sharing Your Data — Who Sees It and Why
bat999 does not sell your personal data to anyone. bat999 shares your data only with the following categories of recipients, and only where necessary:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card processors receive the payment-related data needed to process your PKR transactions. Each processor operates under their own privacy policy and applicable financial regulations.
- KYC and identity verification providers: Third-party services used to verify your age and identity as required by responsible gaming and anti-money-laundering obligations. These providers receive only the data required for verification and are contractually bound to data protection standards.
- Fraud and security services: Security screening providers that help bat999 detect and prevent fraud, account takeover and money laundering. These services receive device and behavioural data in anonymised or pseudonymised form where possible.
- Legal and regulatory authorities: Where bat999 is required by law to disclose player information — for example in response to a court order, or a request from a financial intelligence unit — we will comply with those legal obligations. bat999 will inform you of such disclosure where legally permitted to do so.
- Successors in a business transaction: If bat999's business is acquired or merged with another entity, player data may be transferred to the successor. Players will be notified in advance of any such transfer.
In all cases, bat999 ensures that data shared with third parties is subject to appropriate contractual data protection obligations. bat999 does not authorise third parties to use your data for their own marketing or commercial purposes.
4. How bat999 Keeps Your Data Secure
bat999 takes the security of player data seriously and implements multiple layers of technical and organisational protection:
- SSL/TLS encryption: All data in transit between your device and bat999 servers is encrypted using industry-standard TLS protocols. The padlock icon in your browser confirms this on every bat999 page.
- Encrypted storage: Sensitive data including passwords (stored as one-way hashes) and payment information is encrypted at rest in bat999 databases.
- Access controls: Employee access to player data is role-based and limited to what is necessary for each job function. All internal access to the bat999 player database is logged and periodically audited.
- Two-factor authentication: bat999 supports two-factor authentication for player accounts and requires it for internal administrative access to player data systems.
- Penetration testing and security audits: bat999 conducts regular security assessments of its platform and infrastructure.
- Incident response: bat999 has a documented data breach response plan. In the event of a breach that poses risk to player data, bat999 will notify affected players promptly.
Your responsibility: bat999's security measures protect data on our side. You are responsible for maintaining the security of your bat999 account password and not sharing it with anyone. bat999 will never ask for your password via email, chat or phone.
5. How Long bat999 Keeps Your Data
bat999 retains personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law:
- Active account data: Held for the lifetime of your bat999 account and for five years following account closure, in compliance with anti-money-laundering record-keeping requirements.
- Transaction records: All PKR deposit, withdrawal and bet transaction records are retained for a minimum of five years from the date of the transaction.
- KYC documents: Identity documents submitted for verification are retained for five years from the date of verification or account closure, whichever is later.
- Customer support communications: Records of support interactions are retained for two years from the date of the interaction.
- Marketing consent records: If you have opted in to bat999 marketing, we retain a record of your consent for the duration of your subscription plus one year after unsubscription.
- Technical and log data: Server logs and session data are typically retained for 90 days unless required longer for security investigations.
When data is no longer required and no legal retention obligation applies, bat999 securely deletes or anonymises it so it can no longer be linked to you personally.
6. PKR Payments and Financial Data
Because bat999 processes PKR deposits and withdrawals via local Pakistani payment methods, some additional points are worth noting about financial data specifically:
- bat999 processes all transactions in PKR. No foreign currency conversion is applied and no data is transmitted to international card networks beyond what is required for Visa/Mastercard processing.
- When you deposit via Easypaisa or JazzCash, bat999 receives confirmation of the transaction from the payment processor. bat999 does not store your full mobile wallet PIN or password.
- For IBFT bank transfers, bat999 receives sender name, bank name and transaction reference. This information is used for reconciliation and fraud prevention only.
- bat999 uses PCI-DSS compliant payment processors for card transactions. Your full card number is never stored on bat999 servers.
- Withdrawal requests are processed to the payment method on record for your account. bat999 may request additional verification before processing large withdrawals to prevent fraud.
AML Obligation: bat999 is required by applicable financial regulations to monitor transactions for signs of money laundering and to file reports where required. This is a legal obligation, not discretionary. It involves automated and manual review of transaction patterns and may occasionally require bat999 to request additional information about your source of funds.
7. Your Privacy Rights as a bat999 Player
As a bat999 player your personal data, and you have specific rights over it. bat999 is committed to honouring these rights promptly and without making you jump through unnecessary hoops:
- Right to access: You can request a copy of all personal data bat999 holds about you. bat999 will provide this within 30 days of a verified request.
- Right to rectification: If any of your personal data held by bat999 is inaccurate or incomplete, you can request that it be corrected. Contact support with the specific data point and the correct information.
- Right to erasure: You can request deletion of your bat999 account and associated personal data. bat999 will delete data subject to our legal retention obligations — transaction records required for AML compliance cannot be deleted before the mandatory retention period expires, but will be anonymised where deletion is not possible.
- Right to restrict processing: You can ask bat999 to stop using your data in certain ways while a dispute or correction request is being processed.
- Right to data portability: You can request your bat999 account data in a structured, machine-readable format.
- Right to object to marketing: You can opt out of bat999 marketing communications at any time via the unsubscribe link in any marketing email or by contacting support directly.
- Right to withdraw consent: Where bat999 processes your data on the basis of consent (for example, marketing), you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact bat999 at support@bat999.wine. bat999 will verify your identity before processing any data rights request. Requests are handled within 30 days. Where a request is complex or numerous, bat999 may extend this by a further 30 days with notice.
8. Cookies and Similar Technologies
bat999 uses cookies — small text files stored on your device — and similar tracking technologies. Here is an honest breakdown of what bat999 uses cookies for:
- Essential / session cookies: Required for the bat999 platform to function. These keep you logged in during a session, maintain your bet slip and ensure security features work correctly. These cannot be disabled without breaking the platform.
- Security cookies: Used to detect and prevent fraudulent activity, bot access and session hijacking. These are a core part of bat999's security infrastructure.
- Performance and analytics cookies: bat999 uses anonymised analytics data to understand how the platform is used — which pages are slow, where players encounter errors, which features are most used. This data does not identify you personally.
- Preference cookies: Store your display preferences — odds format (decimal vs. fractional), language settings and similar choices — so you do not have to reset them every session.
bat999 does not place third-party advertising or retargeting cookies on your device. You will not be tracked across other websites based on your bat999 activity. You can manage cookie preferences in your browser settings. Blocking essential cookies will affect platform functionality.
9. Minors — Under-18 Protection
bat999 is strictly for adults aged 18 and above. bat999 does not knowingly collect personal data from anyone under the age of 18. If bat999 becomes aware that a minor has registered an account, that account will be immediately closed, all data associated with it will be deleted as soon as legally possible, and any winnings will be forfeited.
If you believe a minor may have registered on bat999, contact support at support@bat999.wine immediately with relevant details. bat999 will investigate and act within 24 hours of receiving such a report.
Age verification: bat999 may request official identity documentation at any time to verify a player's age. Account access and withdrawal processing will be suspended until age is confirmed where a concern has been raised. See our Responsible Gaming page for more on how bat999 protects younger users.
10. Marketing Communications
bat999 sends promotional emails and SMS messages — PSL bonus offers, Eid promotions, new game announcements, referral programme updates — only to players who have opted in to receive them.
- Marketing opt-in is offered (not pre-ticked) during registration and can be updated in your account settings at any time.
- You can unsubscribe from bat999 marketing emails at any time using the unsubscribe link at the bottom of any marketing email.
- Unsubscribing from marketing does not affect transactional communications — bat999 will continue to send you important account notifications such as deposit confirmations, withdrawal processed alerts and security notifications regardless of marketing preference.
- bat999 does not share your contact details with third parties for marketing purposes.
11. International Data Transfers
bat999 is designed for Pakistani players and processes transactions in PKR. However, some of the technical infrastructure and third-party service providers bat999 uses — including certain payment processors and security services — may be based outside Pakistan or operate data centres in multiple countries.
Where bat999 transfers your personal data outside Pakistan, we ensure that appropriate safeguards are in place — such as contractual data protection clauses — to protect your data to a standard equivalent to what applies within Pakistan. bat999 does not transfer player data to jurisdictions without adequate data protection standards without first implementing such safeguards.
12. Contact — Privacy Questions and Requests
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to report a privacy concern, contact bat999 directly:
- Email: support@bat999.wine
- Live Chat: Available 24/7 on bat999.wine when logged in
- Response time: bat999 will acknowledge privacy-related requests within 24 hours and aim to resolve them within 30 days.
This Policy is subject to the bat999 Terms and Conditions. In case of conflict between this Policy and the Terms, the Terms prevail.
