2bat Privacy Policy – How We Protect Your Data

1What This Policy Covers

This Privacy Policy applies to all personal information collected by 2bat through the website at https://2bat.win, the 2bat mobile app, and any other service or feature operated under the 2bat brand. It covers data collected when you register an account, log in, place bets, play games in the Game Lobby, make deposits or withdrawals in PKR, contact support, or simply browse the platform.

By using 2bat, you agree to the collection and use of your personal information as described in this policy. If you do not agree, please discontinue use of the platform. This Privacy Policy should be read alongside our Terms and Conditions, which govern your use of 2bat as a whole.

This policy does not cover third-party websites or services that may be linked to or integrated with the platform, such as payment processors. Those services have their own privacy policies which you should review separately.

2Information We Collect

We collect personal data in two main ways — information you give us directly, and information that is collected automatically when you use the platform.

Information you provide directly:

• When you register: your full name, date of birth, email address, mobile number and any identity documents required for verification.
• When you make a deposit or withdrawal: your payment method details such as your JazzCash or Easypaisa number, bank account details or card information.
• When you contact support: the content of your messages, attachments and any additional information you choose to share.
• When you update your account settings: preferences, responsible gaming limits and communication choices.

Information collected automatically:

• Technical data such as your IP address, device type, operating system version, browser type and screen resolution.
• Log data including the pages you visit on 2bat, the features you interact with, the time and duration of your sessions, and error reports.
• Cookies and similar tracking technologies — see Section 6 for full details on how cookies are used.
• Gaming and betting activity: every bet placed, every game round, stake amounts, results and session durations. This data is retained as part of your account history.

3How We Use Your Data

2bat uses your personal data for the following purposes:

• Account operation: Creating and managing your account, processing logins, enabling access to sports betting, bingo, the Game Lobby and other features.
• Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years.
• Transaction processing: Handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets.
• Customer support: Responding to your questions, resolving disputes and investigating complaints.
• Security and fraud prevention: Detecting suspicious activity, preventing account takeovers, identifying patterns associated with fraud or money laundering.
• Responsible gaming: Monitoring gaming patterns to support responsible gambling tools such as deposit limits, session reminders and self-exclusion — all of which are managed in your account settings.
• Platform improvement: Analysing how users navigate and use 2bat so we can fix issues, improve features and make the experience better for Pakistani users.
• Promotional communications: Sending you relevant bonus offers, promotions and platform updates — only if you have opted in to receive these.

We only use your data for the purposes listed above. We do not use your data for automated decision-making that has a significant legal or financial impact on you without a human review process in place.

5Data Sharing & Third Parties

2bat does not sell, rent or trade your personal data. We share your information only in the following limited circumstances and only to the extent necessary:

• Payment processors: JazzCash, Easypaisa, Raast, bank partners and card processing networks receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC (Know Your Customer) services that help us verify your identity and age. These providers process only the specific documents or data points required for verification.
• Fraud prevention and security services: Specialist providers that help 2bat detect and prevent fraudulent activity, account takeovers and money laundering. Sharing in this context is limited to technical and behavioural data.
• IT and infrastructure providers: Cloud hosting and platform infrastructure services that store and process data on our behalf, operating under strict data processing agreements.
• Legal requirements: If required by law, a court order or a legitimate regulatory request, 2bat may be required to disclose personal data. We will only do so to the extent legally required and will not disclose more than necessary.

All third parties who receive data from 2bat are bound by contractual obligations to use that data only for the agreed purpose and to maintain appropriate security standards. We do not share your data with advertising networks, social media platforms or data brokers.

7Data Security

Protecting your personal data is something we take seriously at 2bat. The following security measures are in place across the platform:

• TLS encryption: All data transmitted between your device and 2bat is encrypted using Transport Layer Security (TLS). This applies to your login, all transactions, and all account data exchanges.
• Secure data storage: Personal data is stored in secured server environments. Access is restricted to authorised staff only, and access logs are maintained and reviewed regularly.
• Two-factor authentication (2FA): Available as an optional security layer for your 2bat account. We strongly recommend enabling it to protect against unauthorised access.
• Password security: Passwords are stored in hashed form — even internal staff cannot see your password in plain text. Use a strong, unique password for your 2bat account.
• Fraud monitoring: Automated systems monitor for unusual login patterns, suspicious transaction behaviour and other signals that may indicate fraud or account compromise.
• Regular reviews: Our data handling and security practices are reviewed periodically to ensure they remain fit for purpose and in line with industry standards.

9Data Retention

2bat retains personal data only for as long as it is needed for the purpose it was collected, or as required to meet legal and operational obligations. The following guidelines apply:

• Active accounts: All personal data associated with an active account is retained for as long as the account remains open.
• Closed accounts: Following account closure, personal data is retained for a minimum of five years. This is to support fraud prevention, dispute resolution and any legal obligations that may arise after account closure.
• Transaction records: Financial transaction records in PKR — including deposits, withdrawals and bet history — are retained for a minimum of five years to meet financial record-keeping obligations.
• Support communications: Customer support chat logs and email correspondence are retained for up to three years, depending on the nature of the query.
• Analytics data: Aggregated, anonymised usage data collected via analytics cookies is retained indefinitely as it cannot be attributed to any individual user.
• Marketing opt-in records: If you have opted in to marketing, a record of that consent is retained for as long as you remain opted in, plus a reasonable period after opt-out to demonstrate compliance.

When data is no longer required and the retention period has passed, it is securely deleted or anonymised in a way that means it can no longer be associated with you.