exbat Privacy Policy — How We Protect Your Data

1. Introduction

exbat ("we", "us", "our") is committed to protecting the privacy and personal data of all users of the exbat platform at exbat.pro ("the Platform"). This Privacy Policy describes how we collect, use, store, share, and protect personal information in connection with your use of the Platform, including account registration, deposits, withdrawals, gameplay, and customer support interactions.

By registering an account on exbat or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not use the Platform.

2. Information We Collect

exbat collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect include the following:

We may also collect information you voluntarily provide when contacting our support team via live chat, including the content of your messages and any supporting documents you submit. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless you choose to disclose this in a support interaction.

3. How We Use Your Information

exbat uses your personal data for specific, legitimate purposes. We do not use your data for purposes beyond those listed below unless we obtain your explicit consent to do so. The primary purposes for which we process your personal data are:

• To create and manage your account, verify your identity, and process your registration in accordance with our KYC obligations.
• To process deposits, withdrawals, and all financial transactions on the Platform, including fraud detection and prevention.
• To provide customer support, respond to your enquiries, handle complaints, and communicate important account-related updates.
• To fulfil our responsible gaming obligations, including monitoring betting patterns for signs of problem gambling, and applying any self-exclusion or deposit limits you have set.
• To send you promotional communications, bonus offers, and personalised recommendations — only where you have opted in to receive such communications. You may opt out at any time by contacting support.
• To improve the Platform through aggregated analytics, bug tracking, performance optimisation, and product development — using data that is anonymised or pseudonymised wherever possible.

4. Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. The legal bases on which exbat relies include:

• Contractual necessity: processing that is necessary to perform our contract with you, including account operation, transaction processing, and support services.
• Legal obligation: processing required by applicable law, including anti-money laundering obligations, age verification requirements, and fraud prevention duties.
• Legitimate interests: processing necessary for our legitimate business interests, such as improving the Platform, securing our systems, and managing operational risk — provided those interests are not overridden by your rights and interests.
• Consent: for marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of any prior processing.

5. Sharing Your Information

exbat does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and our banking partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Identity verification providers: third-party KYC and age verification services receive the identity documents and data you submit during verification. These services are bound by strict confidentiality and data security obligations.
• Game content providers: game providers such as Evolution Gaming and Pragmatic Play may receive session-level data necessary to deliver and audit game rounds. No personally identifiable information beyond a session token is shared with game providers.
• Law enforcement and regulatory bodies: where required by law, court order, or binding regulatory direction, exbat may disclose personal data to competent authorities. We will notify you of any such disclosure to the extent permitted by law.

6. Data Security

exbat applies industry-standard security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform, secure server infrastructure with access controls and intrusion detection, encrypted storage for sensitive data fields including financial records and identity documents, and regular security audits and vulnerability assessments.

While we take all reasonable precautions, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, exbat will notify affected users without undue delay. Players are also responsible for maintaining the security of their own account credentials and should contact support immediately if they suspect any unauthorised access to their account.

7. Cookies and Tracking Technologies

exbat uses cookies and similar tracking technologies to operate core Platform functionality and to improve your experience. The categories of cookies we use are:

• Essential cookies: required for the Platform to function, including session management, login state, and security tokens. These cannot be disabled without breaking core functionality.
• Analytics cookies: anonymised data used to understand how users interact with the Platform, which pages are most visited, and where performance can be improved. This data is aggregated and does not identify individual users.
• Preference cookies: store your language, display settings, and other personalisation choices so the Platform remembers your preferences between sessions.

You may adjust your browser settings to block or delete cookies at any time. Note that disabling essential cookies will affect your ability to use the Platform. exbat does not use third-party advertising cookies or cross-site tracking technologies.

8. Data Retention

exbat retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. As a general principle, account data and transaction records are retained for a minimum of five (5) years following account closure, in line with standard anti-money laundering record-keeping requirements. Gaming activity logs are retained for a minimum of three (3) years.

Where personal data is no longer required for any lawful purpose, exbat will securely delete or anonymise it. If you request deletion of your account, we will process the request in accordance with our retention obligations — meaning some data will be retained for the legally required minimum period even after your account is closed.

9. Your Data Rights

As a user of the exbat Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all verified requests within thirty (30) calendar days.

To exercise any of your rights, please contact us via live chat on the Platform or by email at [email protected]. We may need to verify your identity before processing any request. There is no charge for submitting a data rights request; however, if requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee.

10. Children's Privacy

The exbat Platform is strictly for adults aged 21 and above. exbat does not knowingly collect, process, or retain any personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 without verifiable parental consent, we will take immediate steps to delete that information and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected] so that we can investigate and act without delay.

11. Third-Party Links

The exbat Platform may contain references to game providers and payment partners whose services are integrated into the Platform. While we take care to work only with reputable partners, exbat is not responsible for the privacy practices of third-party services. Each third-party provider operates under its own privacy policy. We encourage you to review the privacy policies of any third-party services you interact with, particularly your mobile money provider (bKash, Nagad, Rocket) when making deposits or withdrawals.

12. Changes to This Privacy Policy

exbat reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered users via their registered mobile number or email address at least seven (7) days before the changes take effect. The updated Privacy Policy will always be available at exbat.pro/privacy-policy. Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you should close your account and cease using the Platform.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way exbat handles your personal data, our support team is available 24 hours a day, 7 days a week via live chat on the Platform. We aim to acknowledge all privacy-related enquiries within one business day and to resolve them within thirty (30) calendar days.

You may also contact us by email at [email protected]