877bat Privacy Policy

This Privacy Policy ("Policy") is issued by 877bat ("877bat", "we", "us", "our") and applies to all personal data collected, processed and stored in connection with your use of the 877bat website at https://877bat.cam and any associated services, features and functionality (collectively, the "Platform").

We understand that privacy is important to our users — particularly in the context of a gambling platform where sensitive financial and identity information is processed. This Policy sets out clearly and in plain English: what personal data we collect; why we collect it; the legal basis on which we process it; who we may share it with; how long we keep it; the security measures we employ; and the rights you have over your own data.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform and incorporate this Policy by reference.

For the purposes of this Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, date of birth, CNIC number, IP address, device identifiers, payment information and account activity data.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure and destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, the Data Controller is the Operator of the 877bat Platform.
• "Data Processor" — a third party that Processes Personal Data on behalf of the Data Controller, such as payment processors, KYC verification providers and IT infrastructure partners.
• "Consent" — a freely given, specific, informed and unambiguous indication of the User's agreement to the Processing of their Personal Data for a specified purpose.
• "Cookies" — small text files placed on a User's device by the Platform to store session information, preferences and usage analytics.
• "Special Category Data" — Personal Data revealing racial or ethnic origin, political opinions, health, biometric data or other sensitive categories that attract heightened protection under applicable law.

The Data Controller responsible for your Personal Data collected through the 877bat Platform is the Operator, as identified in the Platform's applicable licensing documentation. The Operator determines the purposes for which your Personal Data is collected and how it is used.

877bat does not claim to be licensed, regulated or endorsed by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, any provincial authority, or any Pakistani financial institution. Data Processing by 877bat is governed by the laws of the jurisdiction in which the Operator holds its applicable licence.

For all data protection queries, requests or complaints, please contact our Data Protection support team using the contact details provided in Section 16 of this Policy.

We collect Personal Data through several channels: directly from you during registration and account use; automatically through your device and browser; and in some cases from third-party verification and data enrichment providers. The categories of data collected are described below.

We process your Personal Data only for specified, explicit and legitimate purposes. The primary purposes for which we process your data, together with the legal basis for each, are set out below:

5.1 Account Registration & Management

We process Identity Data, Contact Data and Technical Data to create and manage your Account, authenticate your identity on login, maintain account security and enable you to access Platform features. Legal basis: Performance of a contract (your use of the Platform is the relevant contract).

5.2 Identity Verification (KYC) & Anti-Money Laundering

We process Verification Data, Identity Data and Financial Data to comply with Know Your Customer (KYC) obligations, verify minimum age requirements, prevent fraud and satisfy anti-money laundering (AML) controls applicable under our licence framework. Legal basis: Legal obligation and legitimate interests.

5.3 Payment Processing

We process Financial Data to facilitate deposits, process withdrawal requests, perform currency conversions and maintain transaction records. Payment method references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are cited for Pakistani user context — processing is conducted through the operator's licensed payment infrastructure. Legal basis: Performance of a contract.

5.4 Responsible Gambling Monitoring

We process Usage Data and Financial Data to identify patterns consistent with problem gambling behaviour, to enforce self-exclusion requests, to apply deposit and loss limits, and to fulfil our responsible gambling obligations. Legal basis: Legitimate interests and legal obligation.

5.5 Platform Analytics & Improvement

We process Technical Data and Usage Data in aggregated and pseudonymised form to understand how the Platform is used, diagnose technical issues, improve user experience and develop new features. Legal basis: Legitimate interests.

5.6 Marketing Communications

Where you have provided explicit consent, we process Contact Data and Marketing Preferences to send you information about promotions, bonuses and Platform updates. You may withdraw this consent at any time. See Section 14 for further details. Legal basis: Consent.

5.7 Customer Support

We process Communication Data, Identity Data and Account Data to respond to your support queries, resolve disputes and improve the quality of our support services. Legal basis: Performance of a contract and legitimate interests.

877bat does not sell, rent or otherwise commercially exploit your Personal Data to third parties. We may, however, share your data with the following categories of recipients in the circumstances described:

• Payment Processors: To facilitate deposit and withdrawal transactions, we share necessary Financial Data and Identity Data with payment processing providers. These providers act as Data Processors under appropriate contractual terms;
• KYC & Identity Verification Providers: We engage specialist third-party providers to perform identity verification, document authentication, liveness checks and AML screening on our behalf;
• IT Infrastructure & Cloud Providers: Our Platform operates on third-party cloud and hosting infrastructure. Data stored on these systems is subject to appropriate data processing agreements;
• Regulatory & Law Enforcement Authorities: We may be legally required to disclose Personal Data to regulators, law enforcement agencies, courts or government bodies where required by applicable law, court order or regulatory instruction. We do not make such disclosures voluntarily or without proper legal basis;
• Fraud Prevention & Security Services: To protect the Platform and its users from fraud, we may share data with fraud detection and information security services operating under appropriate agreements;
• Professional Advisers: Lawyers, auditors and consultants who are subject to binding confidentiality obligations may receive Personal Data where strictly necessary for professional advice.

Given that 877bat operates an international platform serving users across multiple regions, including Pakistani users (PKT, UTC+5), your Personal Data may be transferred to and processed in jurisdictions outside your country of residence. Where such transfers occur, we ensure that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by a relevant data protection authority;
• Data processing agreements that impose equivalent data protection obligations on recipients;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.

For Pakistani users, transfers may be made to jurisdictions where the Platform's infrastructure and Data Processors are located. By using the Platform, you acknowledge that your data may be processed outside Pakistan. We take appropriate steps to ensure that such transfers are conducted with reasonable security safeguards.

We retain Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law, regulatory obligation or the defence of legal claims. The general retention principles we apply are as follows:

• Account Data: Retained for the duration of your active Account relationship with 877bat, plus such additional period as is required by our licence obligations following account closure (typically a minimum of five years, subject to regulatory requirements);
• KYC & Verification Data: Retained for the period required under applicable AML legislation and gambling licence conditions. This is typically five (5) years from the date of account closure or the last transaction;
• Financial Transaction Records: Retained for a minimum of five (5) years to comply with AML obligations and financial recordkeeping requirements;
• Communication Data: Support chat and email records retained for as long as reasonably necessary to resolve disputes and maintain service quality records, typically up to three (3) years;
• Marketing Data: Retained until you withdraw consent for marketing communications or until the data is no longer relevant for the purposes for which it was collected.

When Personal Data is no longer required, it is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

877bat implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Platform is encrypted using industry-standard TLS protocols;
• Access Controls: Access to personal data systems is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and multi-factor authentication where applicable;
• Secure KYC Flows: Identity documents are submitted exclusively via the Platform's official HTTPS verification portal. We do not accept identity documents via unencrypted email, social media or unsecured messaging applications;
• Data Encryption at Rest: Sensitive data categories, including identity documents and financial records, are encrypted in storage;
• Incident Response: We maintain procedures for detecting, assessing and responding to personal data breaches, including notification obligations where required by applicable law.

The Platform uses cookies and similar tracking technologies to enable core functionality, improve user experience and understand how the Platform is used. The categories of cookies we use are described below:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They manage session authentication, security tokens, language preferences and shopping-cart-equivalent functions (e.g., maintaining your active betting slip). These cookies cannot be disabled without impairing core Platform functionality.

10.2 Analytical / Performance Cookies

We use analytics cookies to collect information about how users interact with the Platform — pages visited, time spent on pages, error reports and navigation paths. This data is processed in aggregated or pseudonymised form and used to improve Platform performance. These cookies do not identify you personally.

10.3 Functional Cookies

Functional cookies remember your preferences — such as your selected currency display (PKR / Rs), language settings and notification preferences — to provide a more personalised experience on repeat visits.

10.4 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse, delete or be notified about cookies. However, disabling certain categories of cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled through browser settings without impairing core features.

Subject to applicable law and the limitations described below, you have the following rights in relation to your Personal Data held by 877bat:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is being processed ("Subject Access Request");
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations. Note that AML and gambling licence requirements may require us to retain certain data even following account closure;
• Right to Restriction of Processing: You may request that we limit the processing of your data in certain circumstances, for example while a disputed accuracy claim is resolved;
• Right to Data Portability: Where processing is based on consent or a contract and is carried out by automated means, you may request a copy of your data in a structured, commonly used and machine-readable format;
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team using the details in Section 16. We aim to respond to verifiable requests within thirty (30) calendar days. We may require proof of your identity before processing a rights request to prevent unauthorised access to your data.

877bat is strictly an adults-only platform. We do not knowingly collect or process Personal Data from individuals under the age of eighteen (18), or such higher minimum age as is required by the applicable operator licence jurisdiction. The Platform is not designed for, directed at or intended to be used by minors.

Where we have reason to believe that an Account has been registered by a minor, or that Personal Data of a minor has been submitted without authorisation, we will take immediate steps to close the Account, void any associated activity and securely delete the data in question. If you believe that a minor has registered an Account on the Platform, please notify our support team immediately.

Identity documents — including CNIC images, passport scans, proof-of-address documents and selfie/liveness data — are categorised as sensitive Verification Data and are handled with heightened security and care:

• Documents must be submitted exclusively through the Platform's official, secure HTTPS verification portal;
• We do not accept identity documents via email, social media, messaging applications or any unsecured channel;
• Verification Data is processed by our authorised KYC providers under strict contractual data processing agreements;
• Access to Verification Data is restricted to authorised compliance and fraud-prevention personnel only;
• You must never alter, obscure, falsify or digitally manipulate any document submitted for verification. Doing so may constitute a criminal offence;
• Verification Data is retained for the period required under applicable AML regulations and gambling licence conditions, as described in Section 8.

We will only send you direct marketing communications — including promotional emails, bonus notifications and Platform updates — where you have given your explicit consent to receive them. You may withdraw this consent at any time by:

• Updating your communication preferences in your Account settings;
• Clicking the unsubscribe link included in any marketing email;
• Contacting our support team directly and requesting removal from marketing communications.

Withdrawing marketing consent will not affect your ability to use the Platform or receive transactional communications relating to your Account (such as deposit confirmations, withdrawal notifications, security alerts or KYC status updates). These operational communications are sent on the basis of contract or legitimate interest and are not subject to marketing opt-out.

877bat reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, applicable laws or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Effective Date" shown at the top of this page;
• Post a notice on the Platform alerting users to the update, where the change is material;
• Where required by applicable law, seek renewed consent for any processing that relies on consent as its legal basis.

Your continued use of the Platform after a revised Policy has been posted constitutes your acceptance of the updated terms. We recommend that you review this Policy periodically to stay informed of how we handle your data.

If you have any questions, concerns or requests in relation to this Privacy Policy, wish to exercise your data protection rights, or want to raise a privacy-related complaint, please contact the 877bat Privacy Team using the details below. Our support team is available 24/7 and can assist in English, with Urdu-language support available upon request.

• Live Chat: Available 24/7 directly on the Platform — fastest response channel
• Help Center: Privacy & Data Protection section in the support portal
• Email (plain text — not a link): [email protected]
• Response Time: We aim to respond to all privacy-related requests within 30 calendar days of receipt

All support channels are staffed on Pakistan Standard Time (PKT, UTC+5). For Subject Access Requests or formal data erasure requests, please mark your enquiry clearly as a "Data Subject Request" to ensure it is routed to the appropriate team promptly.