hazy bat Privacy
Policy

hazy bat collects personal data through several channels: at the point of account registration, during the KYC verification process, through your ongoing use of the platform, and via automated technical means such as cookies and server logs. The categories of personal data we collect are described below.

1.1 Registration Data

When you create a hazy bat account, we collect the following information directly from you:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used for age verification — you must be 18 or older)
• Residential address, including city, district, and postal code
• Email address (used for account communications and verification)
• Mobile phone number (used for SMS authentication and account notifications)
• Username and password (password is stored in hashed form only — we never store plain-text passwords)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) programme, we may request copies of identity documents to verify the information provided at registration. Documents typically collected include:

• National Identity Card (NID) — front and back
• Passport biographical data page
• Birth certificate issued by a Bangladeshi authority
• Proof of address (utility bill, bank statement, or similar document dated within the last three months)
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account confirming the registered mobile number matches your account)

1.3 Financial Transaction Data

When you make a deposit or withdrawal, hazy bat records transaction details including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction reference number issued by the payment provider, the amount in Bangladeshi Taka (৳), the date and time of the transaction, and the resulting account balance movement. Full payment credentials — such as full mobile wallet PINs or bank account passwords — are never transmitted to or stored by hazy bat. All payment processing is handled by the respective payment providers under their own security standards.

1.4 Gameplay and Betting Data

hazy bat records a log of all betting and gaming activity associated with your account. This includes sports bets placed (including market, selection, stake, odds, and outcome), casino game sessions (game title, provider, session duration, wagers placed, and results), bonus activations, wagering progress, and any in-play betting activity. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection.

1.5 Technical and Device Data

When you access hazy bat via a web browser or mobile device, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type (desktop, smartphone, or tablet), referring URL, pages visited, time spent on each page, and session timestamps. This data is collected to ensure platform security, optimise performance, and detect unusual access patterns that may indicate fraudulent activity.

hazy bat processes your personal data on the basis of one or more of the following lawful grounds: performance of a contract (providing you with the betting and casino services you have signed up for), compliance with a legal obligation (such as age verification and anti-money-laundering requirements), our legitimate interests as a platform operator (fraud prevention, platform security, and improving our services), and — where applicable — your explicit consent (such as consent to receive marketing communications).

The table below summarises the primary purposes for which hazy bat uses your personal data and the lawful basis for each:

2.1 Marketing Communications

hazy bat will only send promotional emails or SMS messages to players who have explicitly opted in to receive marketing communications during registration or via their account preferences. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the platform or receive essential transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.

2.2 Automated Decision-Making

hazy bat uses automated systems to assess certain account activities, including fraud risk scoring, responsible gaming behavioural flags, and bonus abuse detection. Where an automated assessment results in a material action against your account — such as a withdrawal hold or account suspension — you have the right to request a manual review by a member of the hazy bat compliance or support team. Contact [email protected] to initiate a review.

hazy bat does not sell, rent, or otherwise commercially transfer your personal data to any third party. Personal data is shared with third parties only in the specific, limited circumstances described in this section.

3.1 Payment Service Providers

To process deposits and withdrawals, hazy bat shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each of these providers operates under its own privacy policy and data security standards. hazy bat does not receive or store full payment credentials from these providers — only transaction confirmation references and status updates.

3.2 Game Content Providers

Casino and live casino games on the hazy bat platform are supplied by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate game sessions, a session token and anonymised player identifier are passed to the relevant game provider. Full personal data (name, address, NID details) is not transmitted to game providers. Game providers may independently collect technical data such as IP address and device type for their own platform integrity purposes, governed by their own privacy policies.

3.3 Identity Verification Services

Where hazy bat uses a third-party identity verification service to assist with KYC document checks, only the data strictly required for the verification task is shared. Such providers are contractually prohibited from using your data for any purpose other than the specific verification task.

3.4 Legal and Regulatory Disclosure

hazy bat may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally obliged to do so — for example, in connection with an anti-money-laundering investigation, a court order, or a regulatory inquiry. Such disclosures are made only to the extent required by the applicable legal demand and are logged internally.

hazy bat uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform, ensure security, and analyse performance. This section explains each category of cookie in use on hazy-bat.com.

4.1 Managing Cookies

You can manage or disable non-essential cookies through your browser's privacy settings. Most modern browsers — including Chrome, Firefox, Edge, and Safari on both Android and iOS devices — provide controls to view, block, or delete cookies on a per-site or global basis. Please note that disabling essential or security cookies will prevent you from logging in to your hazy bat account and will impair the security of your session. Detailed instructions for managing cookies in your specific browser are available in that browser's help documentation.

4.2 Do-Not-Track Signals

Some browsers transmit a "Do Not Track" (DNT) signal to websites. hazy bat acknowledges DNT signals for analytics cookies and will suppress non-essential tracking where a DNT signal is detected. Essential and security cookies are not affected by DNT signals as they are required to operate the platform safely.

hazy bat retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:

• Account registration data: Retained for the lifetime of your account and for a period of five years following permanent account closure, to fulfil anti-money-laundering record-keeping obligations.
• KYC identity documents: Retained for five years from the date of submission, in accordance with financial record-keeping best practice. Documents are stored in encrypted form with access restricted to authorised compliance personnel.
• Transaction records: Retained for five years from the date of each transaction. Individual transaction records may be retained for longer where they are the subject of an ongoing dispute, investigation, or legal proceeding.
• Gameplay and betting logs: Retained for three years from the date of the relevant session or bet. Aggregated anonymised data derived from gameplay logs may be retained indefinitely for platform analytics and responsible gaming research.
• Customer support communications: Retained for two years from the date of the most recent communication in a support thread, except where the thread relates to an unresolved dispute or formal complaint, in which case it is retained until final resolution plus one year.
• Marketing consent records: Retained for the duration of the marketing relationship and for one year following withdrawal of consent, to demonstrate that communications were lawfully sent.
• Technical and server logs: Retained for 12 months on a rolling basis, after which they are automatically deleted or anonymised.

5.1 Data Storage Location

hazy bat stores player data on secure servers. All stored data is encrypted at rest using industry-standard encryption protocols. Access to production data systems is restricted to authorised personnel on a need-to-know basis and is subject to multi-factor authentication and access logging.

5.2 Data Deletion Following Account Closure

Following the expiry of the applicable retention period after account closure, hazy bat will securely delete or anonymise your personal data such that it can no longer be associated with you as an identifiable individual. Anonymised aggregated data derived from your account — such as anonymised betting patterns used in responsible gaming research — may be retained indefinitely as it no longer constitutes personal data.

As a player on the hazy bat platform, you hold a number of rights with respect to the personal data we hold about you. hazy bat is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.

6.1 Right of Access

You have the right to request a copy of all personal data that hazy bat holds about you. Upon verification of your identity, we will provide a structured summary of your personal data within 30 days of receiving your request. Standard access requests are fulfilled at no charge. Where requests are manifestly excessive or repetitive, a reasonable administrative fee may be applied.

6.2 Right to Rectification

If you believe that any personal data hazy bat holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many data fields — including email address, phone number, and communication preferences — can be updated directly within your account settings without needing to contact support.

6.3 Right to Erasure

You may request that hazy bat delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for continued processing. Please note that erasure requests cannot be fulfilled where hazy bat is required to retain the data to comply with a legal obligation (such as the five-year financial record-keeping requirement described in Section 5). In such cases, we will explain which data must be retained and for how long.

6.4 Right to Object

You have the right to object to the processing of your personal data where hazy bat relies on legitimate interests as the lawful basis. Upon receiving an objection, hazy bat will review whether our legitimate interests in processing the data override your interests and rights. You also have an unconditional right to object to the use of your data for direct marketing at any time, without the need to provide a justification.

6.5 Right to Data Portability

Where hazy bat processes your personal data on the basis of your consent or in performance of a contract, and where that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service provider.

hazy bat takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. The principal security measures in place are described below.

7.1 Encryption in Transit and at Rest

All data transmitted between your device and hazy bat is encrypted using TLS 1.2 or higher. Sensitive data stored in our databases — including identity document images, hashed passwords, and financial records — is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.

7.2 Access Controls

Access to hazy bat's production data systems is granted on a strictly need-to-know basis. All staff with access to personal data undergo background screening and receive regular data protection training. Administrative access requires multi-factor authentication and all access events are logged and audited on a continuous basis.

7.3 Network Security

The hazy bat platform is protected by a web application firewall (WAF), intrusion detection systems (IDS), and DDoS mitigation infrastructure. Network traffic is monitored around the clock for anomalous patterns. Regular penetration testing and vulnerability assessments are conducted by qualified security professionals to identify and remediate weaknesses before they can be exploited.

7.4 Incident Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, hazy bat will notify affected individuals promptly. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures hazy bat has taken or intends to take to address the breach and mitigate its effects.

7.5 Player-Side Security

While hazy bat implements robust server-side security measures, the security of your account also depends on actions you take on your side. You are strongly advised to: choose a unique, strong password for your hazy bat account; enable SMS-based two-factor authentication; never share your login credentials; use a secure and private network when accessing your account; and log out of your account when using a shared device. hazy bat bears no liability for breaches attributable to a player's failure to take reasonable personal security precautions.

hazy bat reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Where an amendment is material — meaning it substantively affects your rights or how your data is used — we will notify you in advance via your registered email address and by displaying a prominent notice on the platform for a minimum of 14 days before the change takes effect.

Minor or administrative updates — such as clarifications of existing practices that do not change their substance, or corrections of typographical errors — may be made without advance notice. The "Effective" date displayed at the top of this page will be updated whenever any revision is published.

8.1 Continued Use as Acceptance

Your continued use of the hazy bat platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

8.2 Contact for Privacy Matters

All privacy-related inquiries, data rights requests, concerns about our data processing practices, or questions about this Privacy Policy should be directed to the hazy bat support team. Our preferred contact channel for privacy matters is email:

Email (plain text — not a clickable link):
[email protected]

Please include "Privacy Policy Inquiry" or "Data Rights Request" in the subject line of your email, along with your registered username and a clear description of your inquiry or request. We aim to acknowledge all privacy-related emails within two business days (Bangladesh Standard Time, UTC+6).