Privacy Policy – How 2bat Handles Your Personal Data

1. Overview

2bat is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, share and protect the personal data you provide when you register an account, make deposits or withdrawals, place bets or otherwise interact with the 2bat platform.

We operate in PKR for players in Pakistan and process payments through JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets. Each of these payment channels has its own data handling standards, and we work only with reputable providers that maintain adequate security practices.

By using 2bat, you consent to the collection and processing of your personal data as described in this policy. If you do not agree with any aspect of this policy, you should stop using the platform and contact support to close your account.

2. Personal Data We Collect

We collect personal data in several ways: directly from you when you register or interact with the platform, automatically as you use the site, and occasionally from third-party verification services.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health information. The identity documents you submit for verification are stored securely and accessed only by authorised verification personnel.

3. How We Use Your Data

Your personal data is used for specific, legitimate purposes related to operating the 2bat platform. We do not use your data for anything beyond what is listed here without obtaining separate consent.

• Account management: Creating and maintaining your account, verifying your identity, resetting passwords and communicating account-related updates.
• Transaction processing: Processing deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets. Your payment reference data is used solely to process and reconcile transactions.
• Fraud prevention and security: Monitoring for suspicious activity, identifying multiple accounts, detecting bonus abuse and protecting the platform from money laundering or other financial crimes.
• Legal compliance: Verifying your age and identity as required for operating an online entertainment platform, and maintaining transaction records for audit purposes.
• Platform improvement: Analysing how the platform is used to improve performance, fix issues and develop new features that players actually want.
• Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviour and to enforce deposit limits, self-exclusions and other protective measures you have set.
• Communications: Sending you account notifications, transaction confirmations and, where you have opted in, promotional emails about new games, bonuses and offers.

You can opt out of marketing communications at any time by contacting support or updating your notification preferences in the account settings. Opting out of marketing does not affect account-related communications which are necessary for operating your account.

4. Who We Share Your Data With

We do not sell, rent or trade your personal data. We share your information only with the following categories of third parties, and only to the extent necessary for the purpose stated:

• Payment processors: JazzCash, Easypaisa, Raast, banks and card networks receive the minimum data required to process your transactions. These providers operate under their own privacy and security frameworks.
• Identity verification services: Third-party KYC providers receive identity documents to verify age and identity. They process this data under strict confidentiality obligations.
• Game software providers: Platform providers such as Evolution, Pragmatic Play and others may receive anonymised session data to ensure game integrity. They do not receive your personal identity information.
• Fraud detection services: Technical security providers may receive IP addresses and device fingerprints to help identify fraudulent activity and protect player accounts.
• Legal and regulatory bodies: We may be required to disclose your data to law enforcement or regulatory authorities if required by applicable law or a court order.

All third-party service providers who handle your personal data on our behalf are required to maintain appropriate security standards and to use your data only for the purposes for which it was shared.

5. Payment Data & Financial Information

When you make a deposit or withdrawal on 2bat using JazzCash, Easypaisa, Raast, bank transfer or card, the transaction is processed by the relevant payment provider. We do not store full card numbers, JazzCash PINs, Easypaisa passwords or any sensitive payment credentials on our servers.

What we do retain is the transaction reference, amount, timestamp and the anonymised payment method identifier (e.g., last 4 digits of a card, mobile number with central digits masked). This information is retained for financial reconciliation, dispute resolution and fraud prevention purposes.

All PKR transactions are processed through encrypted, secure channels. If you notice any unauthorised transactions on your account, contact support immediately via live chat and we will investigate and freeze the account if necessary.

6. Cookies & Tracking Technologies

2bat uses cookies and similar technologies to keep the platform functioning correctly and to understand how it is being used. Here is what each type of cookie does:

• Essential cookies: Required for the platform to work. These handle login sessions, maintain your basket in the cashier and keep you authenticated between pages. Without these, the platform cannot function. You cannot opt out of essential cookies.
• Preference cookies: Remember your settings such as language preferences, interface customisations and notification settings. These persist between sessions so you do not have to reconfigure things each time.
• Analytics cookies: Help us understand which pages are most visited, where users encounter problems and how features are being used. This data is aggregated and anonymised — we cannot identify individual users from analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns and protect accounts from unauthorised access.

You can clear all cookies at any time through your browser settings. Note that clearing essential cookies will log you out of your account. Most browsers also allow you to block third-party cookies — this will not affect the core functionality of the 2bat platform.

7. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years after account closure, for audit and legal compliance purposes.
• Transaction records: Deposit and withdrawal records are retained for a minimum of 5 years from the date of each transaction.
• Identity documents: Copies of CNIC, passport and proof of address submitted during KYC are retained for the duration of your account and for 5 years after closure.
• Communications: Support chat logs and email correspondence are retained for up to 3 years from the date of each interaction.
• Technical and behavioural data: Anonymised analytics data may be retained indefinitely as it cannot identify individual users.

After the applicable retention period, your personal data is securely deleted or anonymised. If you request account closure, we will process the deletion of your personal data within the timeframes required by law, after completing any required retention periods.

8. Your Rights Over Your Personal Data

You have a number of rights with respect to your personal data held by 2bat. To exercise any of these rights, contact our support team via live chat with your request. We aim to respond within 30 days.

• Access: Request a copy of all personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete personal data.
• Deletion: Request that we delete your personal data, subject to our legal retention obligations. Data required for financial compliance cannot be deleted before the retention period expires.
• Portability: Receive your personal data in a commonly used, machine-readable format.
• Restriction: Ask us to restrict how we use your data while a dispute or correction request is being processed.
• Objection: Object to processing of your data for marketing purposes. This is always honoured immediately.

Please note that some requests may affect your ability to use the platform. For example, requesting deletion of your identity data may result in your account being closed as we cannot operate accounts without verified identity information.

9. Security Measures

Protecting your personal data is a technical and operational priority at 2bat. We employ the following security measures:

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS protocols. You will see the padlock icon in your browser when connected to 2bat.
• Data encryption at rest: Sensitive personal data stored on our servers is encrypted. Database credentials and encryption keys are stored separately from the data they protect.
• Access controls: Personal data is accessible only to authorised staff with a legitimate operational need. Access is logged and reviewed regularly.
• Payment tokenisation: Financial data passed through payment processors is tokenised. We work only with payment partners that comply with applicable financial security standards.
• Regular security audits: Our infrastructure and code are subject to periodic security reviews to identify and address vulnerabilities before they can be exploited.

While we take every reasonable precaution, no online system is completely immune to security risks. We encourage you to use a strong, unique password for your 2bat account and to log out of your account when using shared devices.

10. Minors & Age Restriction

2bat is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account or use the platform in any way.

During registration, you are required to confirm your date of birth. We reserve the right to request proof of age at any time. Any account found to belong to a person under 18 will be closed immediately and all data associated with the account will be deleted, with any balance forfeited.

If you believe a minor has registered an account on 2bat, please contact support immediately via live chat.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform functionality. When we make material changes, we will post the updated policy on this page with a revised "Last updated" date.

For significant changes that materially affect how we use your personal data, we will notify you by email to your registered address or through an account notification. Continued use of the 2bat platform after changes are posted constitutes your acceptance of the updated policy.

We encourage you to review this page periodically so you are always aware of the current terms under which your data is being processed.

12. Contact Us About Privacy

If you have any questions, concerns or requests relating to your personal data or this Privacy Policy, please get in touch through one of the following channels:

• Live Chat: Available 24/7 from your account dashboard — fastest response
• Email: [email protected] (for formal data requests, please include your registered email address and the nature of your request)

For formal requests to exercise your data rights (access, deletion, correction, portability), please use the email channel and include the subject line "Data Privacy Request" so your message is routed to the correct team.

We take all privacy inquiries seriously and will respond within 30 calendar days of receiving your request. Complex requests may take longer, in which case we will notify you of the expected timeline.