266bat Privacy Policy

1.1 For the purposes of this Privacy Policy, 266bat (operating at the domain 266bat.vip) acts as the data controller in respect of all personal data collected from Players who register and use the Platform.

1.2 If you have any questions, concerns, or requests regarding the processing of your personal data, you may contact the 266bat data team using the support email address displayed in the footer of this page. All data-related enquiries will be acknowledged within 48 hours of receipt (Bangladesh Standard Time, UTC+6).

266bat processes personal data on the following lawful bases:

• Contractual necessity: Processing required to create and manage your account, verify your identity, accept deposits, and pay out winnings is necessary to fulfil the contract between you and 266bat.
• Legal obligation: Certain data processing activities — including age verification, identity checks, and retention of financial transaction records — are carried out to comply with applicable legal and regulatory requirements.
• Legitimate interests: 266bat processes technical and gameplay data to detect fraud, prevent money laundering, protect other Players, and maintain the security and integrity of the Platform.
• Consent: Where you have opted in to receive promotional communications from 266bat (for example, updates about bonuses, seasonal promotions, or new game releases), we process your contact details on the basis of your consent. You may withdraw this consent at any time by contacting the support team.

3.1 Directly from you: When you complete the registration form, submit identity verification documents, make a deposit or withdrawal, contact the support team, or respond to a promotional communication.

3.2 Automatically: When you access the Platform, our servers automatically record technical data including your IP address, device fingerprint, browser type, operating system, session duration, pages visited, and in-game actions. This data is collected via server logs, cookies, and similar tracking technologies.

3.3 From third parties: 266bat may receive data from payment processors (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard) and identity verification providers in order to confirm the validity of transactions and the authenticity of identity documents you have submitted.

4.1 266bat uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform, maintain your login session, remember your preferences, and collect aggregated analytics data about how the Platform is used.

4.2 The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without preventing you from using core features such as logging in, maintaining a session, or placing wagers.
• Functional cookies: Used to remember your preferences (for example, preferred language or display settings) between visits.
• Analytics cookies: Used to collect anonymised, aggregated data about how Players navigate the Platform. This data helps 266bat improve the user experience but is never used to identify individual Players.

4.3 You may manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

266bat uses the personal data it collects for the following purposes:

• Creating, verifying, and managing your player account.
• Processing deposits and withdrawals in Bangladeshi Taka (৳ BDT) via your chosen payment method.
• Verifying that you meet the minimum age requirement of 21 years.
• Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited conduct.
• Administering bonuses, promotions, and loyalty rewards, including seasonal offers during Eid, Pohela Boishakh, and other events.
• Providing customer support and resolving account or payment disputes.
• Monitoring gameplay activity to support responsible gaming obligations, including identifying patterns that may indicate problem gambling.
• Sending you service-related communications (e.g., security alerts, account updates). Promotional communications will only be sent where you have provided consent.
• Improving Platform performance, game offerings, and user experience based on aggregated analytics data.

6.1 266bat does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Full stop.

6.2 We may share your personal data with the following categories of third-party service providers, strictly to the extent necessary for them to deliver their services to 266bat:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposits and withdrawals.
• Identity verification providers: To confirm that you meet the 21+ age requirement and to validate the identity documents you submit.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed providers — who may receive aggregated, anonymised gameplay data to support platform integrity.
• Fraud prevention and security services: To detect and investigate suspicious account activity, unauthorised access, and potential money laundering.
• IT infrastructure and hosting providers: Who store and process platform data on secure servers under strict confidentiality obligations.

6.3 All third-party service providers engaged by 266bat are contractually required to handle your data securely, use it only for the specified purpose, and comply with applicable data protection standards.

7.1 266bat retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal obligations.

7.2 As a general guide:

• Account data (identity, contact, and login records) is retained for the lifetime of your active account and for a minimum of five years following account closure.
• Financial transaction records (deposit and withdrawal history) are retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• Gameplay records (wager history, session data, win/loss records) are retained for a minimum of three years from the date of each recorded session.
• Support communications (chat transcripts and email correspondence) are retained for a minimum of two years from the date of each interaction.
• Technical logs (IP addresses, session tokens) are retained for up to 12 months, after which they are anonymised or deleted.

7.3 Where you request account closure on responsible gaming grounds (self-exclusion), your data will be retained for the minimum period required to enforce the exclusion and to comply with legal obligations. It will not be used for marketing purposes during this period.

8.1 266bat implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and 266bat servers.
• One-way hashing of passwords and security credentials — your password is never stored in readable form.
• Access controls that restrict internal access to personal data to employees and contractors who have a genuine operational need.
• Regular security reviews of the Platform's infrastructure and data handling practices.
• Automated monitoring for suspicious login activity, including alerts for unrecognised devices or locations.

8.2 In the event of a data breach that is likely to result in a risk to the rights or interests of affected Players, 266bat will notify affected individuals without undue delay and will take immediate remedial action.

8.3 While 266bat takes data security seriously, no digital platform can guarantee absolute security. You also have a responsibility to protect your own account by using a strong, unique password and keeping your login credentials confidential.

9.1 You have the following rights in relation to your personal data held by 266bat:

• Right of access: You may request a copy of the personal data 266bat holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where 266bat no longer has a lawful basis for retaining it. Note that this right is subject to legal retention obligations described in Clause 7.
• Right to restriction: You may request that 266bat restrict the processing of your personal data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. 266bat will honour such objections unless it can demonstrate compelling legitimate grounds that override your interests.

9.2 To exercise any of the rights listed above, please contact the 266bat support team via the email address shown in the footer of this page. Requests will be responded to within 30 calendar days of receipt.

10.1 The 266bat Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and believe that a minor has provided personal data to 266bat, please contact the support team immediately. We will investigate and delete any such data promptly upon confirmation.

10.2 As part of our age verification process, 266bat checks submitted identity documents to confirm that all registered Players meet the minimum age requirement before allowing them to deposit or wager.

11.1 266bat primarily processes data on servers within its operational infrastructure. Where data is transferred to or accessed by third-party service providers located outside Bangladesh (for example, international game software providers such as Pragmatic Play, Evolution Gaming, or NetEnt), 266bat ensures that appropriate contractual safeguards are in place to protect the security and confidentiality of your data during such transfers.

11.2 By using the 266bat Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh, subject to the safeguards described in this clause.

12.1 266bat reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the Platform's services. The "Last updated" date at the top of this page will be revised whenever a material change is made.

12.2 Where changes are material, 266bat will notify active Players via a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

12.3 We encourage you to review this Privacy Policy periodically to stay informed about how 266bat protects your personal information.