877bat Privacy Policy — How We Protect Your Personal Information

This Privacy Policy ("Policy") is issued by 877bat ("we", "us", "our", "the Company") and describes how we collect, use, store, protect, and disclose personal data relating to individuals ("you", "the User", "the Player") who access or use the 877bat online gaming platform at 877bat.one and any associated domains, mobile-optimised sites, or applications operated by 877bat.

877bat is an internationally licensed online gaming operator serving Pakistani players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, and all other cities and regions of Pakistan. This Policy applies to all personal data collected in connection with your use of 877bat's services, including cricket betting, live casino, slot and instant games, promotional participation, customer support interactions, and any other service made available through the 877bat platform.

This Policy should be read together with 877bat's Terms & Conditions, which govern your general use of the platform and are available at /terms-conditions. In the event of any inconsistency between this Policy and the Terms & Conditions on data-related matters, this Privacy Policy shall prevail.

877bat is committed to handling personal data responsibly, transparently, and in accordance with applicable international data protection standards recognised by its licensing authority. We review and update this Policy periodically to reflect changes in our data practices, regulatory requirements, and industry standards.

For the purposes of applicable data protection law, 877bat acts as the data controller in respect of all personal data collected through the 877bat platform. As the data controller, 877bat determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations.

877bat operates under an international gaming licence that imposes data protection obligations on the Company as a condition of licence maintenance. 877bat's data protection practices are subject to review by its licensing authority as part of the standard ongoing compliance framework.

If you have any questions about 877bat's role as a data controller, the legal basis on which we process your data, or any other aspect of this Privacy Policy, please contact us using the details provided in Section 15 below.

877bat collects personal data in the following categories, subject to the principle that only data strictly necessary for the identified purpose is collected:

877bat does not intentionally collect special categories of personal data (such as data about health, religion, ethnicity, or political opinions) unless you voluntarily disclose such information in the context of a customer support interaction or a responsible gaming assessment.

877bat collects personal data through the following channels and methods:

4.1 Directly From You

The majority of personal data 877bat holds about you is provided by you directly, at the following stages:

• Account Registration: Name, date of birth, Pakistani mobile number, email address, and city of residence are collected when you create your 877bat account.
• KYC Verification: CNIC scan and selfie/liveness photograph are submitted by you as part of the mandatory identity verification process required before your first withdrawal.
• Payment Transactions: Payment method details are collected when you make a deposit or withdrawal — for example, your JazzCash mobile number or the last four digits of your HBL account number.
• Customer Support: Any personal information you share during live chat conversations, emails, or other support interactions is collected and stored as part of your support history.
• Promotions & Surveys: If you participate in a 877bat promotional campaign, competition, or feedback survey, any information you provide in that context is collected and associated with your account.

4.2 Automatically

When you access and use the 877bat platform, certain technical data is collected automatically by our servers and analytics systems, including:

• Your IP address and approximate geolocation (used to verify you are accessing 877bat from a permitted location and to comply with licensing requirements)
• Your device type, operating system, and browser information (used for technical support and platform optimisation)
• Session timestamps, page visits, and game session logs (used for fraud detection, responsible gaming monitoring, and dispute resolution)
• Cookie identifiers and similar tracking technologies (see Section 10 — Cookies & Tracking for full details)

4.3 From Third Parties

In limited circumstances, 877bat may receive personal data about you from third parties, including:

• Identity Verification Providers: KYC and age verification service providers may return data to 877bat confirming the result of an identity check (e.g., confirmation that your CNIC is valid and matches your stated date of birth).
• Payment Processors: Payment partners including JazzCash, EasyPaisa, and Pakistani bank IBFT networks may share transaction confirmation data with 877bat to facilitate deposit and withdrawal processing.
• Fraud Prevention Services: Anti-fraud and anti-money-laundering screening services may share data with 877bat where a transaction or account raises a flag under their monitoring systems.

877bat processes your personal data for the following purposes, each underpinned by a clearly identified legal basis:

877bat shares personal data with third parties only in the following circumstances, and only to the minimum extent necessary for the relevant purpose:

• Identity Verification Providers: Your CNIC scan and biographical data are shared with our licensed KYC verification partner to confirm your identity and age as required by our licensing conditions. Our KYC partner processes this data solely on behalf of 877bat and under a binding data processing agreement.
• Payment Processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processing partners as necessary to execute your deposit and withdrawal requests. Each payment partner is subject to its own data protection obligations under Pakistani financial regulations.
• Game Technology Providers: Where 877bat uses third-party game software providers (for slots, live casino, and other game types), limited technical session data may be shared with the provider to ensure game integrity and fair outcome certification. Game providers operate under binding data security agreements with 877bat.
• Fraud Prevention & AML Services: Transaction and account data may be shared with anti-fraud and anti-money-laundering screening services as part of 877bat's compliance with its international licensing obligations.
• Legal & Regulatory Authorities: 877bat will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where it is legally required to do so, or where 877bat reasonably believes that such disclosure is necessary to protect the rights, property, or safety of 877bat, its players, or third parties.
• Business Successors: In the event of a merger, acquisition, asset sale, or restructuring involving 877bat, personal data held about you may be transferred to the successor entity. You will be notified of any such transfer and the applicable Privacy Policy at the time.

877bat does not sell, rent, lease, or otherwise commercially disclose your personal data to any third party for that third party's own marketing or commercial purposes.

877bat's primary data processing infrastructure is located in jurisdictions with established data protection frameworks recognised by our international licensing authority. In the course of providing our services to Pakistani players, your personal data may be transferred to and processed in countries outside of Pakistan, including for the purpose of KYC verification, game provision, and technical platform operations.

Where personal data is transferred internationally, 877bat ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that applied within Pakistan. Such safeguards include binding data processing agreements with all third-party recipients, standard contractual clauses, and technical security measures including encrypted data transmission and at-rest encryption.

By using the 877bat platform, you consent to the international transfer of your personal data in the circumstances described in this section, subject always to the safeguards outlined above.

877bat retains personal data for no longer than is necessary for the purpose for which it was collected, taking into account applicable legal, regulatory, and contractual retention obligations. The following general retention periods apply:

• Account Data (active accounts): Retained for the full duration of your account's active status on the 877bat platform.
• Account Data (closed accounts): Retained for a minimum of five (5) years following account closure, to meet anti-money-laundering record-keeping requirements and licensing authority obligations.
• KYC / Identity Verification Data: Retained for a minimum of five (5) years following the completion of the verification process, in accordance with standard AML record-keeping requirements.
• Financial Transaction Records: All deposit, withdrawal, and bet settlement records are retained for a minimum of five (5) years following the date of the transaction, for AML compliance and dispute resolution purposes.
• Customer Support Records: Retained for three (3) years from the date of the most recent support interaction, to enable effective handling of follow-up queries and complaints.
• Marketing & Communication Preferences: Retained until you withdraw consent or request deletion, and for one (1) year thereafter as a record of your consent status.
• Technical & Log Data: Retained for twelve (12) months from the date of collection for fraud detection, security monitoring, and platform diagnostics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted from 877bat's systems or, where deletion is not technically feasible, anonymised such that it can no longer be associated with any identifiable individual.

877bat employs comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and 877bat's servers is encrypted using TLS 1.2 or higher (256-bit SSL), preventing interception during transmission over public networks including Pakistani mobile data networks.
• Encryption at Rest: Personal data stored on 877bat's servers is encrypted at rest using AES-256 encryption. Database access is restricted to authenticated, authorised 877bat system accounts only.
• Access Controls: Access to personal data within 877bat is granted on a strict need-to-know basis. All internal access to player data is logged, monitored, and subject to periodic access review.
• Two-Factor Authentication: Internal administrative access to systems holding personal data requires multi-factor authentication. Players are also encouraged to enable 2FA on their 877bat accounts for additional protection.
• Penetration Testing: 877bat's platform undergoes regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: 877bat maintains a documented data breach incident response plan. In the event of a data breach that poses a risk to affected players, 877bat will notify affected individuals and the applicable licensing authority within the timeframe required by applicable law.

While 877bat employs industry-standard security measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your 877bat Login credentials and for notifying 877bat immediately if you suspect unauthorised access to your account.

877bat uses cookies and similar tracking technologies on the 877bat platform. Cookies are small text files stored on your device when you visit a website. They enable the website to recognise your device on subsequent visits and to deliver a personalised, functional experience.

10.1 Types of Cookies Used by 877bat

• Strictly Necessary Cookies: Required for the operation of the 877bat platform. These include session cookies that maintain your login state, security cookies that prevent cross-site request forgery, and load balancing cookies. These cannot be disabled without preventing the platform from functioning correctly.
• Functional Cookies: Enable 877bat to remember your preferences — such as your preferred language (English or Urdu), your default game lobby view, and your responsible gaming tool settings. These are not strictly necessary but significantly improve your experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the 877bat platform. This data helps 877bat identify areas for improvement, optimise page load performance, and prioritise development resources.
• Fraud Prevention Cookies: Used to detect unusual activity patterns that may indicate fraudulent account use, bot access, or other security threats. These are necessary for maintaining the integrity and security of the 877bat platform.

10.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for cookies from specific websites. Please note that disabling certain categories of cookies may affect the functionality of the 877bat platform — for example, disabling strictly necessary cookies will prevent you from logging in or maintaining a game session.

The 877bat platform is strictly restricted to individuals who are 21 years of age or older. 877bat does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the 877bat registration and KYC process, and 877bat will immediately close any account found to belong to a person under the age of 21.

If you believe that 877bat may have inadvertently collected personal data from a person under the age of 21, please contact us immediately at [email protected] so that we can investigate and, where confirmed, delete the relevant data and close the associated account without delay.

877bat takes its responsibility to prevent underage gambling extremely seriously and invests in ongoing technical controls to detect and prevent account registration by individuals who misrepresent their age.

877bat respects your rights in relation to the personal data we hold about you. Subject to applicable law and legitimate overriding interests (such as AML retention obligations), you have the following rights:

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request" and sufficient information to verify your identity as the account holder. 877bat will respond to all data subject requests within thirty (30) calendar days of receipt of a verifiable request.

877bat will not charge a fee for processing data subject requests unless the request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable fee commensurate with the administrative cost of responding.

If you believe that 877bat has processed your personal data in a manner inconsistent with this Privacy Policy or applicable data protection law, you have the right to raise a complaint. 877bat encourages you to raise any data privacy concerns directly with our team in the first instance, as most concerns can be resolved promptly through direct engagement.

To raise a formal privacy complaint, please submit a written complaint to [email protected] with the subject line "Privacy Complaint", including a clear description of the processing you are concerned about, the personal data involved, and the outcome you are seeking. 877bat will acknowledge all formal privacy complaints within three (3) business days and provide a substantive response within twenty-one (21) calendar days.

If you are not satisfied with 877bat's response to your privacy complaint, you may escalate your complaint to the data protection or privacy supervisory authority designated under 877bat's applicable licensing framework. Details of the relevant supervisory authority are available from 877bat's support team on request.

877bat reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data processing practices, regulatory requirements, or the services we offer to Pakistani players. Material changes — meaning changes that significantly affect the rights of players or the nature of data processing — will be communicated to registered account holders by email or via an in-platform notification at least seven (7) calendar days before the changes take effect.

Minor changes — such as typographical corrections or clarifications that do not affect the substance of the Policy — may be made without prior notification. The "Effective Date" at the top of this Policy indicates the date from which the current version applies. We recommend that you review this Policy periodically to remain informed of how 877bat handles your personal data.

Continued use of the 877bat platform following the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, please cease using the platform and contact support to arrange appropriate account closure.

For all data protection, privacy, and personal data queries — including requests to exercise your data subject rights, questions about this Privacy Policy, or formal privacy complaints — please contact the 877bat team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Subject Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Live Chat: Available 24/7 via the 877bat platform after logging in to your 877bat account
• Languages: English and Urdu support available at all times
• Response Time: Acknowledgement within 3 business days; substantive response within 30 calendar days for data subject requests and 21 calendar days for privacy complaints

877bat's support team is staffed around the clock to assist Pakistani players with any question or concern relating to privacy or personal data. We take all privacy queries seriously and are committed to responding with the care and diligence that your personal data deserves.