663bat Privacy Policy

1. Introduction

663bat ("663bat", "we", "us", "our") operates the online sports betting and casino gaming platform accessible at https://663bat.net (the "Platform"). This Privacy Policy ("Policy") describes how 663bat collects, processes, stores, shares, and protects personal data obtained from registered players and visitors to the Platform ("you", "your").

By registering a 663bat account or accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein. This Policy should be read alongside the 663bat Terms and Conditions. Where this Policy conflicts with the Terms and Conditions on matters of data privacy, this Policy shall prevail.

This Policy was last reviewed and updated in June 2026. We may update this Policy periodically. Where material changes are made, notice will be provided through the Platform. Continued use of the Platform following such notice constitutes acceptance of the revised Policy.

2. Data We Collect

663bat collects personal data through the following means:

Data you provide directly:

• Registration data: full name, date of birth, residential address, email address, mobile phone number, and username;
• Identity and address verification documents submitted during KYC (e.g., CNIC, passport, utility bills);
• Payment information: bank account details, mobile wallet identifiers (JazzCash, Easypaisa), card details (transmitted to our payment processors — not stored by 663bat), and transaction records;
• Communications you send to 663bat support, including live chat transcripts and email correspondence.

Data collected automatically:

• Device and browser information: IP address, browser type and version, operating system, device identifiers;
• Usage data: pages visited, features used, betting and gaming activity, session duration, and navigation patterns;
• Cookie and similar tracking data (see Section 8 — Cookies).

Data from third parties:

• Fraud prevention and identity verification agencies may provide data to support our KYC obligations;
• Payment processors may provide transaction status and verification information;
• Responsible gaming databases may provide self-exclusion status where applicable.

3. How We Use Your Data

663bat processes personal data for the following purposes:

• Account Management: To create, maintain, and administer your 663bat account, including login authentication, password resets, and profile updates;
• Service Delivery: To process deposits and withdrawals, settle bets, credit winnings, and provide full access to the Platform's betting and casino services;
• KYC and Compliance: To verify your identity and age (18+ requirement), comply with anti-money laundering obligations, and meet other applicable regulatory requirements;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and prohibited conduct under the Terms and Conditions;
• Responsible Gaming: To monitor gaming patterns, apply player-requested limits and self-exclusion tools, and proactively identify accounts that may require responsible gaming intervention;
• Customer Support: To respond to your queries, resolve disputes, and provide assistance through live chat and email channels;
• Platform Improvement: To analyse usage patterns and improve the Platform's features, performance, and user experience;
• Marketing: To send promotional communications about 663bat offers and features where you have opted in to receive such communications. You may withdraw this consent at any time through your account settings.

4. Legal Basis for Processing

663bat processes personal data on the following legal bases:

• Contractual necessity: Processing required to provide the Services under the Terms and Conditions (account creation, payment processing, bet settlement);
• Legal obligation: Processing required to comply with applicable anti-money laundering, age verification, and data retention laws;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where consent has been given and can be withdrawn at any time.

5. Data Sharing and Disclosure

663bat does not sell your personal data to any third party for independent marketing or commercial purposes. We may share your personal data with the following categories of recipient, strictly for the purposes outlined in this Policy:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, card schemes, Skrill, Neteller, and crypto payment processors, to facilitate deposits and withdrawals;
• Identity verification providers: Third-party KYC and fraud prevention services that assist with identity and age verification;
• Game providers: Casino game studios whose titles are integrated into the 663bat Platform may receive session identifiers and gameplay data necessary to operate their games;
• IT and infrastructure providers: Cloud hosting, CDN, security, and analytics service providers operating under data processing agreements with 663bat;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory demand.

All third parties with whom 663bat shares personal data are required to process that data only for the purposes specified, and to apply security standards consistent with their contractual obligations to 663bat.

6. Data Retention

663bat retains personal data for as long as your account remains active and for a period thereafter as required by applicable law. In general:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in line with standard anti-money laundering retention obligations;
• KYC documentation is retained for the period required by applicable verification and compliance regulations;
• Support communications are retained for a minimum of two (2) years;
• Marketing consent records are retained for the duration of the consent plus a reasonable evidence period thereafter.

Where personal data is no longer required, 663bat will delete or anonymise it in a secure manner.

7. Your Data Rights

Subject to applicable law and regulatory retention requirements, you have the following rights in relation to your personal data held by 663bat:

• Right of access: You may request a copy of the personal data 663bat holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to legal retention obligations;
• Right to restrict processing: You may request that processing of your data be restricted in certain circumstances;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the 663bat support team by email at [email protected] or via live chat. We will respond to verified requests within a reasonable timeframe.

8. Cookies and Tracking Technologies

The 663bat Platform uses cookies and similar tracking technologies to operate core Platform functions and to improve the user experience. The categories of cookies used include:

• Essential cookies: Required for session management, authentication, and security. These cannot be disabled without affecting Platform functionality;
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limit configurations;
• Analytics cookies: Used to measure Platform performance and user interaction patterns. Data collected is aggregated and does not identify individual users;
• Fraud prevention cookies: Used to detect suspicious activity and protect against fraudulent access attempts.

You can manage and delete cookies through your browser's settings. Disabling essential cookies may impair your ability to log in to and use the 663bat platform.

9. Data Security

663bat employs a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and the 663bat Platform;
• Encrypted storage for sensitive data including KYC documents and payment records;
• Access controls limiting internal access to personal data on a need-to-know basis;
• Regular security assessments and monitoring of Platform infrastructure.

No system is entirely immune to security risks. In the event of a data breach that is likely to result in significant risk to affected individuals, 663bat will notify affected players and relevant authorities as required by applicable law.

10. International Data Transfers

663bat operates infrastructure that may involve the transfer of personal data to third-party service providers located in jurisdictions outside Pakistan. Where such transfers occur, 663bat takes steps to ensure that adequate data protection safeguards are in place, including contractual protections with receiving parties.

11. Children's Privacy

The 663bat platform is strictly restricted to individuals who are 18 years of age or older. We do not knowingly collect personal data from persons under 18. If we become aware that an account has been registered by a person under 18, we will suspend that account and delete the associated data as promptly as practicable. If you believe a minor may have accessed the Platform, please contact us immediately at [email protected].

12. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or the personal data 663bat holds about you, please contact the 663bat data privacy team via email at [email protected] or through the live chat function available on the Platform. We aim to respond to all data-related enquiries within a reasonable timeframe, and no later than thirty (30) days of receipt.