Data Protection & Privacy

Your Privacy Is Our Responsibility

At exbat, every user's personal information is extremely important to us. This policy explains how we collect, use, and protect your data.

Introduction & Scope

exbat is a trusted online betting and casino platform built for players in Bangladesh. This Privacy Policy ("Policy") describes how exbat collects, processes, stores, and protects the personal information of users of our website, applications, and related services ("Services").

By creating an account on this platform, browsing it, or using any of its services, you are considered to have accepted the terms of this Policy. If you do not agree with any part of this Policy, please stop using our services and contact us.

exbat believes that transparency and user trust go hand in hand. That is why we have presented this Policy in simple, clear, and easy-to-understand language so you can enjoy our services fully informed.

Secured by SSL Encryption

All your information is kept secure using industry-standard SSL encryption technology, both during transmission and while in storage.

What Information We Collect

exbat only collects information that is necessary to provide our services, manage accounts, and ensure security. The information is divided into the categories described below:

2.1 Identity Information

  • Full name and date of birth (for age verification)
  • National ID number or details of other government-approved identity documents
  • Email address and phone number
  • Address and country information

2.2 Financial Information

  • bKash, Nagad, Rocket, and Upay account numbers (for processing transactions)
  • Bank account details (for bank transfers)
  • Deposit and withdrawal transaction history

2.3 Technical Information

  • IP address and device identifiers
  • Browser type and operating system information
  • Logs of browsing and gaming activity on the platform
  • Cookie and session data

2.4 Gaming Activity Information

  • Betting history and preferred games
  • Bonus claims and wagering activity
  • Session duration and frequency on the account

Purpose of Data Use

exbat uses the information collected for the following legitimate purposes:

3.1 Account & Service Management

Your information is used to create, verify, and maintain your account; to process deposits and withdrawals; to provide bonuses and promotional offers; and to personalise your gaming experience.

3.2 Security & Fraud Prevention

Your technical information is used to ensure platform security, detect unauthorised access, and prevent potentially fraudulent activity. This is also essential for protecting your own account.

3.3 Age & Identity Verification

exbat strictly prevents anyone under 21 from gaming. To that end, age and identity verification is carried out at the time of account registration and wherever else required.

3.4 Responsible Gaming Support

By analysing patterns in gaming behaviour, we can identify risks of problem play and offer support where needed. This is part of our responsible gaming commitment.

3.5 Communication & Support

Your email address and phone number are used for important account-related notifications, transaction confirmations, and customer service communications.

3.6 Service Improvement

Activity-related analytical data is used to make technical improvements to the platform, add new features, and further enhance the user experience.

Data Sharing & Third Parties

exbat does not sell your personal information to third parties. However, information may be shared in the following limited circumstances:

4.1 Payment Processors

Only the information necessary to complete a transaction is shared with the relevant payment service provider to process bKash, Nagad, Rocket, Upay, and bank transfers. These organisations operate under their own privacy policies.

4.2 Technology Service Providers

Our approved service providers are given limited access to information for technical work such as server hosting, data analysis, and security testing. Confidentiality agreements are in place with them.

4.3 Legal Obligations

Legally required information may be provided in response to a valid court order, government directive, or lawful request from a law enforcement agency.

4.4 Corporate Changes

User information may be transferred in the event of a business merger, acquisition, or restructuring. However, the standards of this Policy will remain applicable in such cases.

Your Data Is Never Sold

exbat never sells or rents personal information to advertisers or any other third party. Data sharing takes place only for legitimate service delivery needs.

Cookies & Tracking Technologies

The exbat platform uses cookies and similar tracking technologies to improve your browsing experience. These are small text files stored on your device.

5.1 Essential Cookies

These cookies are essential for keeping your login session active, saving language preferences, and carrying out security-related functions. Without them, the platform will not work properly.

5.2 Analytical Cookies

These cookies are used to understand how many users are using which games or sections, and to monitor platform performance. The data collected is aggregated and anonymised.

5.3 Preference Cookies

Used to save your preferred display settings, play history, and personalised recommendations. These can be disabled, though doing so may affect some features.

You have the right to control or delete cookies at any time through your browser settings. Keep in mind that disabling essential cookies may make it difficult to access your account.

Data Retention Period

exbat retains your information only for as long as necessary. Retention periods are determined according to the following guidelines:

  • Active account information: Retained for the entire duration that the account remains active.
  • Financial transaction records: Retained for the period required by legal and regulatory obligations.
  • Closed account information: Some information is kept for a limited period after account closure for fraud prevention and legal purposes.
  • Marketing communication data: Deleted as soon as you withdraw your consent.

After the designated period, information is securely deleted or anonymised in a way that makes it impossible to identify the individual.

Your Rights & Controls

exbat believes every user should have full control over their own information. You have the following rights:

7.1 Right of Access & Review

You have the right to know what information exbat holds about you and to request a copy of it.

7.2 Right to Rectification

If any information stored in your account is incorrect or incomplete, you can request that it be corrected.

7.3 Right to Erasure

In certain circumstances you can request that your personal information be deleted, though legal retention obligations may create exceptions.

7.4 Right to Withdraw from Marketing Communications

You have the right to opt out of promotional emails or messages at any time. This request can be made through our support team.

7.5 Right to Data Portability

You can request your provided information in a structured, machine-readable format.

To exercise any of the above rights, contact our support team at [email protected] — we generally respond within a reasonable time.

Protection of Minors

exbat strictly does not provide services to minors. This platform is for users aged 21 and above only. We do not knowingly collect information from anyone under the age of 21.

If we become aware of an account belonging to a minor, we will immediately close that account and delete all related information. We urge parents and guardians to monitor their children's online activity.

Data Security Measures

exbat has put in place industry-standard technical and organisational measures to protect your information:

End-to-End Encryption

All data transmissions are encrypted using TLS/SSL technology. Your password and payment information are never stored in plain text.

Firewall & Access Controls

Strict firewall and role-based access control systems ensure that only authorised staff can access limited information.

Continuous Monitoring

System activity is monitored 24/7. When unusual activity is automatically detected, immediate action is taken.

Secure Backups

Regular encrypted backups are stored in secure locations, protecting against accidental data loss.

Please note that no method of transmitting or storing information over the internet can be guaranteed 100% secure. You also bear partial responsibility for keeping your password confidential and using the platform on a secure network.

Policy Changes & Updates

exbat may update this Privacy Policy from time to time. If there are any significant changes to the Policy, we will:

  • publish a notice on the platform;
  • notify registered users by email;
  • display the date of the most recent change on this page.

Continuing to use the platform after any changes means you are considered to have accepted the updated Policy. We therefore recommend reviewing this page regularly.

If you have any questions or concerns about this Privacy Policy, contact us at [email protected] — our support team is available 24/7 in both Bengali and English.

Have a question about your privacy?

Our support team is here for you seven days a week, around the clock.

Contact Us via Live Chat