o9bat Privacy Policy — How We Handle Your Data

When you register an account on o9bat, we collect the personal information you provide during the registration process. This includes your chosen username, mobile number or email address, date of birth (for age verification purposes), and any other information required to complete the registration form. We may also collect information provided during KYC verification, which may include a copy of a government-issued photo identification document and proof of residential address. This information is collected to verify your identity, confirm that you meet the age requirement of 21 years or older, and comply with our obligations under applicable anti-money laundering and responsible gaming requirements.

We collect records of all financial transactions carried out through your o9bat account, including deposit amounts and timestamps, withdrawal requests and outcomes, bonus credits and wagering activity, and the payment methods used (bKash, Nagad, Rocket, or bank transfer). We do not store full mobile wallet PINs or bank account passwords. Payment processing is handled by certified third-party processors, and only transaction reference numbers and status data are retained on our systems for audit and dispute resolution purposes.

When you access o9bat, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, pages visited and actions taken within the platform, session duration and login timestamps, and approximate geographic location derived from your IP address. This data is used to maintain platform security, detect and investigate suspicious activity, improve the player experience, and generate anonymised usage analytics. It is not used to identify you personally in isolation, but may be combined with account data for fraud detection purposes.

Transaction data is shared with our payment processing partners — including bKash, Nagad, Rocket, and bank transfer processors — solely to facilitate deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for how they handle data transmitted to them. o9bat shares only the minimum information required to complete each transaction.

Where required by law, court order, or a lawful request from a regulatory or law enforcement authority, o9bat will disclose personal data to the relevant authority. This may include account information, transaction records, and communication logs. o9bat will comply with lawful disclosure requests and will notify the affected player where legally permissible to do so.

o9bat works with third-party technology providers to deliver game content (including Pragmatic Play, Evolution Gaming, NetEnt, and Spribe), platform infrastructure, analytics, and customer support tools. These providers may process limited personal data as part of delivering their services. All such providers are required to handle data in a manner consistent with this Privacy Policy and are prohibited from using player data for any purpose other than the specific service they provide to o9bat.

o9bat implements industry-standard security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include SSL encryption for all data transmissions, secure server infrastructure, restricted access controls for staff, regular security assessments, and encrypted storage of sensitive account data. While no security system is impenetrable, o9bat is committed to maintaining robust protections and will act promptly to address any security incidents that may arise.

In the event of a data breach that poses a risk to player rights or freedoms, o9bat will notify affected players without undue delay and will take immediate steps to contain and remediate the breach. Notification will be provided via the email address or mobile number registered to the affected account. o9bat will also report the breach to the relevant authorities where required by applicable law.

You have the right to request a copy of the personal data that o9bat holds about you. Upon receiving a valid access request, we will provide you with a summary of the data held, the purposes for which it is processed, and the categories of recipients with whom it may have been shared. We will respond to access requests within 30 days.

If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. Please contact our support team with details of the data you believe is incorrect and the correction you are requesting. We will act on valid rectification requests promptly.

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where processing is based on consent), or where the data has been unlawfully processed. This right is subject to our legal obligations to retain certain data. We will inform you of any data we are required by law to retain at the time of responding to your erasure request.

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling for personalisation purposes. Where you object, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests or where the processing is necessary for the establishment, exercise, or defence of legal claims.