batjall Privacy Policy

When you create a batjall account, use our gaming platform, or contact our support team, we may collect and process the following categories of personal information:

Registration & Account Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify that you meet the 18+ age requirement);
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh);
• Email address used to create your account;
• Mobile number, particularly the number registered to your bKash, Nagad, Rocket, or Upay account;
• Username and hashed password (passwords are never stored in plain text).

Identity Verification (KYC) Data

• Scanned or photographed copy of your National Identity Card (NID), passport, or driving licence;
• Proof of address document (utility bill or bank statement dated within three months);
• Proof of payment method (screenshot of bKash/Nagad account showing name and number);
• Selfie or live video capture where required by our compliance team for identity confirmation.

Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts (in BDT), timestamps, and payment method used;
• bKash/Nagad transaction IDs associated with deposits and withdrawals;
• Bonus credits, wagering activity, and balance history;
• Chargeback or payment dispute records, where applicable.

Technical & Device Data

• IP address at the time of registration and each login;
• Device type, operating system, and browser type;
• Session duration and pages visited within the batjall platform;
• Cookies and similar tracking identifiers (see Section 5).

Customer Support Data

• The content of live chat transcripts, emails sent to [email protected], and WhatsApp messages exchanged with our team;
• Complaint records and dispute resolution correspondence.

The table below summarises the primary purposes for which batjall processes your personal data, along with the category of data used for each purpose.

batjall will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or where required by law. We do not use your data for automated decision-making that produces significant legal effects without human oversight.

Marketing Communications

With your consent, batjall may send you promotional emails or SMS messages about new games, seasonal offers (such as BPL season promotions, Eid bonuses, or Pohela Boishakh specials), and platform updates. You may withdraw consent for marketing communications at any time by contacting our support team or clicking the unsubscribe link in any marketing email. Withdrawal of consent for marketing does not affect the lawfulness of processing carried out before that withdrawal.

For each category of processing activity, batjall identifies and relies on an appropriate legal basis. The primary grounds we rely on are:

• Contractual necessity: Processing your registration data, KYC documents, and financial transaction records is necessary to perform the contract between you and batjall (i.e., to provide you with a functional player account, process your deposits, and pay out your winnings).
• Legal obligation: Processing for AML monitoring, fraud prevention, age verification, and regulatory reporting is required by applicable law. batjall cannot waive these obligations at a player's request.
• Legitimate interests: Processing technical and device data for platform security, fraud detection, and service improvement is carried out on the basis of batjall's legitimate interests in operating a safe and functional platform, provided those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications is carried out only with your explicit consent, obtained during the registration process or subsequently. You have the right to withdraw this consent at any time.

batjall does not sell your personal data. We may share your information with the following categories of third parties only to the extent necessary to deliver our services:

Payment Processing Partners

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, we share the minimum necessary transaction data with those providers to initiate and confirm the payment. Each payment partner operates under its own privacy policy and data security standards. batjall selects payment partners that maintain adequate data protection practices.

Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming operate game servers that your device connects to during gameplay. These providers may receive your IP address and session-level technical data as part of the game delivery infrastructure. They do not receive your name, payment details, or KYC documents.

Identity Verification Services

batjall may use third-party KYC and identity verification platforms to assist in processing document checks and age verification. These providers act as data processors under contractual agreements that bind them to handle your data only for the purposes of identity verification and to maintain equivalent security standards to batjall's own.

Legal and Regulatory Authorities

batjall may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons. We will notify you of any such disclosure where legally permissible to do so.

Service Providers & Infrastructure

batjall uses third-party providers for hosting, cloud infrastructure, email delivery, and customer support tooling. These providers process data on batjall's behalf under data processing agreements and are not permitted to use your data for their own purposes.

A cookie is a small text file placed on your device by a website when you visit it. batjall uses first-party cookies and limited third-party cookies for the purposes described below.

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage functional, performance, and marketing cookies through your browser settings. Disabling functional cookies may affect your experience — for example, your preferred game lobby settings may not be saved between sessions.

Local Storage & Fingerprinting

In addition to cookies, batjall uses browser local storage for temporary game state data and employs a privacy-respecting device fingerprinting mechanism solely for fraud detection and duplicate account identification purposes. This fingerprint data is not used for advertising profiling and is not shared with third parties outside of our fraud prevention processes.

Our data retention periods are guided by legal retention requirements, operational necessity, and responsible data minimisation practices. The key retention periods applied at batjall are as follows:

• Active account data: Retained for the lifetime of your account plus a minimum of five (5) years after permanent account closure, to satisfy AML record-keeping and financial audit requirements.
• KYC documents: Retained for five (5) years from the date of the most recent verification event, in compliance with applicable anti-money laundering regulations.
• Financial transaction records: Retained for five (5) years from the date of each transaction.
• Customer support correspondence: Retained for three (3) years from the date of the last interaction in a support thread.
• Marketing consent records: Retained for the duration of your consent plus two (2) years to evidence the consent history.
• Technical/device logs: Retained for ninety (90) days, except where a specific log event is flagged for fraud investigation, in which case it may be retained for the duration of that investigation.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be attributed to an individual. Anonymised aggregate data (e.g., platform-wide gameplay statistics) may be retained indefinitely for analytical purposes without affecting your privacy rights.

You have the following rights in relation to the personal data that batjall holds about you:

• Right of access: You may request a copy of the personal data batjall holds about you, along with information about how it is being used. We will provide this within 30 days of a verified request.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you may ask us to correct it. Account details such as your registered mobile number or address can be updated via the account settings panel or by contacting support.
• Right to erasure: In certain circumstances, you may ask batjall to delete your personal data. This right is subject to legal retention obligations — for example, we cannot delete KYC or financial records that we are legally required to retain for a minimum period.
• Right to restriction: You may ask us to restrict the processing of your data while a dispute about accuracy or lawfulness is pending. During a restriction, we will continue to store the data but will not actively process it for other purposes.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of batjall's legitimate interests. We will assess whether our interests are overridden by your rights and inform you of the outcome.
• Right to withdraw consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, contact our support team via live chat (available 24/7) or by email at [email protected] (plain text — not a clickable link). We will ask you to verify your identity before processing your request to ensure that personal data is not disclosed to unauthorised parties.

Protecting your personal data from unauthorised access, alteration, disclosure, or destruction is a core operational priority at batjall. Our security programme includes the following controls:

• Transport Layer Security (TLS): All data transmitted between your browser or mobile device and batjall servers is encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS.
• Password hashing: Account passwords are hashed using a modern cryptographic algorithm (bcrypt or equivalent) before storage. Plain-text passwords are never written to disk or logs.
• Two-factor authentication (2FA): batjall offers optional 2FA for account login. We strongly encourage all players to enable this feature to reduce the risk of unauthorised account access.
• Access controls: Access to production systems and player data is restricted to authorised personnel with a demonstrated need. Access is controlled via role-based permissions and reviewed periodically.
• Intrusion detection: batjall's infrastructure is monitored continuously for anomalous activity. Automated alerts are triggered for suspicious login patterns, unusual transaction volumes, or signs of data exfiltration.
• Penetration testing: batjall commissions periodic third-party penetration tests to identify and remediate security vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data breach affecting player data, batjall will notify affected players and relevant authorities within the timeframes required by applicable data protection obligations.

This Privacy Policy was last updated on 1 January 2026. batjall reviews this policy at least annually and whenever material changes to our data processing activities occur. Material changes — those that affect what data we collect, how we use it, or your rights in relation to it — will be communicated to registered players via email to their registered address and/or via an in-platform notification, no fewer than seven (7) days before the changes take effect.

Minor updates, such as clarifications of existing language, formatting improvements, or additions of new sub-processors that do not change the overall processing scope, may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the most recent revision date, whether the change was major or minor.

Your continued use of the batjall platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you may close your account before the effective date and request the return of any real-money balance in your wallet.

Contact Our Data Team

For any questions, concerns, or requests relating to this Privacy Policy or the way batjall handles your personal data, please contact us through one of the following channels:

• Live chat: Available 24/7 directly within the batjall platform — the fastest route to a response.
• Email: [email protected] (plain text — not a clickable link). Include "Privacy Request" in the subject line for routing to our data team.
• WhatsApp support: Available 09:00–22:00 Bangladesh Standard Time (BST, UTC+6) daily.

We aim to acknowledge all privacy-related enquiries within 24 hours and to resolve them within 30 calendar days. For formal data subject access requests, we will confirm receipt in writing and communicate the expected response timeline.