e2bat Privacy Policy

1. Introduction and Data Controller

This Privacy Policy ("Policy") describes how e2bat ("e2bat", "we", "us", "our") — the operator of the online betting and casino platform accessible at https://e2bat.biz ("Platform") — collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who register accounts, access, or otherwise interact with the Platform ("Users", "you").

e2bat acts as the data controller in respect of personal data collected directly through the Platform. Where e2bat engages third-party processors to handle data on its behalf — for instance KYC verification providers, payment processors, or game studios — such processors are contractually obligated to process data solely on e2bat's documented instructions and in compliance with applicable data protection standards.

Questions, requests, and concerns regarding this Policy or e2bat's data practices should be directed to [email protected].

2. Personal Data We Collect

e2bat collects personal data through several channels. The categories of data collected, and the context in which each is collected, are set out below.

2.1 Registration Data

When you create an e2bat account, we collect: full legal name, date of birth, email address, and Pakistani mobile number. This information is required to create and operate your account, enforce the 18+ age eligibility requirement, and communicate with you about your account.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and our responsible gaming commitments, e2bat may collect: copy of government-issued identity document (e.g., Pakistani CNIC / NICOP / passport), proof of address, and supporting financial documents where applicable. KYC data is processed by e2bat and its authorised KYC verification partner(s).

2.3 Financial Data

To process deposits and withdrawals, e2bat collects details of your selected payment method. For JazzCash and Easypaisa transactions, this includes your registered mobile wallet number. For bank transfers, this includes account name and account number. For card payments, card processing is handled by a PCI-DSS compliant payment processor — e2bat does not store full card numbers on its own systems.

2.4 Transactional and Betting Data

e2bat automatically records all transactions on your account — including deposits, withdrawals, bets placed, bets settled, casino game sessions, bonus issuances, and balance movements. This data is necessary to operate your wallet, settle bets, administer bonuses, and provide account history.

2.5 Technical and Usage Data

When you access the Platform, e2bat's systems automatically collect: IP address, browser type and version, operating system, device type, session timestamps, pages visited, features used, and referring URL. This data is used for fraud prevention, security monitoring, and Platform analytics.

2.6 Communication Data

When you contact e2bat customer support — whether by email, live chat, or other channels — we retain records of those communications including the content of messages and any attachments, for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Personal Data

e2bat uses the personal data it collects for the following purposes:

• To create, verify, and operate your e2bat account and associated PKR wallet.
• To process deposits and withdrawals via JazzCash, Easypaisa, bank transfer, USDT, and card payment.
• To settle sports bets — including PSL cricket and other markets — and casino game outcomes.
• To conduct identity verification (KYC) and comply with applicable anti-money laundering regulations.
• To administer bonuses, promotions, free spins, and loyalty rewards, and to verify eligibility for same.
• To enforce the 18+ age restriction and other eligibility requirements set out in the e2bat Terms & Conditions.
• To operate and improve responsible gaming controls — including deposit limits, self-exclusion, and session reminders.
• To detect, investigate, and prevent fraud, abuse, money laundering, and other prohibited conduct.
• To provide customer support and respond to enquiries, complaints, and disputes.
• To send transactional and account communications — including deposit confirmations, withdrawal notifications, and security alerts.
• To send promotional communications where you have opted in to receive marketing from e2bat. You may withdraw consent to marketing at any time by contacting [email protected].
• To comply with legal obligations and respond to lawful requests from competent authorities.
• To operate, maintain, test, and improve the Platform's technical infrastructure and user experience.

4. Legal Bases for Processing

e2bat processes your personal data on the following legal bases:

• Contractual necessity — Processing your registration data, KYC data, financial data, and transactional data is necessary to enter into and perform the contract between you and e2bat (the Terms & Conditions). Without this processing, e2bat cannot operate your account.
• Legal obligation — Processing for KYC, AML compliance, and cooperation with competent authorities is required by applicable law. e2bat cannot waive or opt out of these obligations.
• Legitimate interests — Processing for fraud prevention, security monitoring, responsible gaming oversight, Platform analytics, and improvement of services is carried out on the basis of e2bat's legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent — Processing for marketing communications is carried out only where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your account.

5. Data Sharing and Disclosure

e2bat does not sell, rent, or trade your personal data to or with any third party for their own commercial purposes. Personal data is shared in the following limited circumstances only:

• KYC and identity verification providers — to verify your identity and age as required by e2bat's responsible gaming and AML policies.
• Payment processors — to process PKR deposits and withdrawals via JazzCash, Easypaisa, bank transfers, USDT, and card payments. Each processor receives only the data necessary to complete the specific transaction.
• Game studio providers — to deliver slot games, live casino content, and other game products. Game providers receive a session token and staking data; they do not receive your full registration profile or financial details.
• Fraud prevention and security services — to detect and prevent fraudulent activity, money laundering, and account takeover attempts.
• Customer support platforms — to operate e2bat's live chat and email support infrastructure.
• Legal and regulatory authorities — where e2bat is required by applicable law, court order, or competent regulatory authority to disclose personal data. e2bat will notify you of any such disclosure to the extent permitted by law.
• Business transfers — in the event of a merger, acquisition, or sale of all or part of e2bat's business assets, personal data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer in advance where practicable.

All third-party processors engaged by e2bat are subject to data processing agreements that require them to process personal data solely on e2bat's documented instructions, implement appropriate technical and organisational security measures, and not engage sub-processors without prior written authorisation from e2bat.

6. Cookies and Tracking Technologies

e2bat uses cookies and similar tracking technologies on the Platform. The categories of cookies used are as follows:

• Strictly necessary cookies — required for the Platform to function. These include session authentication cookies that keep you logged in to your e2bat account during a session. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies — used to remember your preferences such as display settings and language preferences. These improve your experience but are not strictly required.
• Analytics cookies — used to collect aggregated, anonymised data about how Users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data helps e2bat improve the Platform. Analytics data is not linked to individual user identities.
• Security cookies — used to detect and prevent fraudulent login attempts and bot activity.

You can manage or delete cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to remain logged in to your e2bat account. Please note that disabling cookies does not delete data already collected — submit a data deletion request to [email protected] if you wish to request deletion of previously collected data.

7. Data Retention

e2bat retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Active account data — retained for the duration of your account's active status and for a period of five (5) years after account closure, to comply with anti-money laundering record-keeping requirements.
• KYC and identity documents — retained for a minimum of five (5) years from the date of the last transaction on the account, in accordance with applicable AML obligations.
• Transactional records (bets, deposits, withdrawals) — retained for five (5) years from the date of each transaction.
• Customer support communications — retained for three (3) years from the date of the last communication, for dispute resolution and quality assurance purposes.
• Marketing consent records — retained for the duration of your account plus three (3) years, to evidence consent and respond to any regulatory queries.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

8. Data Security

e2bat implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and e2bat servers.
• Encryption at rest for sensitive data fields including passwords (bcrypt hashing), payment identifiers, and identity document images.
• Role-based access controls ensuring that internal access to personal data is restricted to employees and contractors with a demonstrated operational need.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Incident response procedures to identify, contain, and notify affected parties in the event of a data security incident, in accordance with applicable legal requirements.

Notwithstanding the above, no method of electronic transmission or storage is 100% secure. e2bat cannot guarantee absolute security of your personal data but commits to maintaining industry-standard protections and notifying you promptly in the event of a confirmed breach affecting your personal data.

9. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by e2bat:

• Right of access — you may request a copy of the personal data e2bat holds about you.
• Right of rectification — you may request correction of inaccurate or incomplete personal data.
• Right of erasure ("right to be forgotten") — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations (see Section 7).
• Right to restrict processing — you may request that e2bat restrict processing of your personal data in certain circumstances, for example where you contest the accuracy of the data.
• Right to data portability — you may request an export of your personal data in a structured, machine-readable format.
• Right to object — you may object to processing carried out on the basis of legitimate interests. e2bat will assess whether its legitimate interests override your rights in the specific circumstances.
• Right to withdraw consent — where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. e2bat will respond within 30 calendar days of receiving a valid, verified request. e2bat may need to verify your identity before processing a data rights request.

10. Children's Privacy

The e2bat Platform is strictly for users aged 18 and above. e2bat does not knowingly collect personal data from individuals under the age of 18. Registration requires confirmation of date of birth, and KYC identity verification enforces the 18+ age restriction before withdrawals are processed.

If e2bat becomes aware that it has inadvertently collected personal data from a person under the age of 18, e2bat will immediately suspend the associated account, delete the personal data, and return any deposited funds to the payment source, subject to applicable legal requirements.

If you are a parent or guardian and believe that your child has registered an account on e2bat, please contact [email protected] immediately with supporting information so that the matter can be investigated and resolved promptly.

11. International Data Transfers

e2bat operates a globally distributed technical infrastructure. As a result, your personal data may be processed by e2bat or its authorised processors in countries outside of Pakistan. Where personal data is transferred internationally, e2bat takes steps to ensure that appropriate safeguards are in place — including contractual data protection clauses with receiving processors — to ensure that your data receives a level of protection equivalent to that required under applicable data protection law.

By using the e2bat Platform, you acknowledge and consent to the transfer and processing of your personal data in accordance with this Policy, including international transfers where necessary for the operation of the Platform and its services.

12. Third-Party Links and Services

The e2bat Platform may contain references to or integrations with third-party services — such as game studio interfaces or payment gateway screens. e2bat is not responsible for the privacy practices of third-party services. Where you interact directly with a third-party service — for example, a payment processor's interface — that third party's own privacy policy governs the data collected during that interaction.

e2bat recommends that you review the privacy policies of any third-party service you interact with in connection with your e2bat account. e2bat maintains contractual data processing agreements with all of its authorised processors, but cannot guarantee the practices of services outside its operational control.

13. Changes to This Privacy Policy

e2bat reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where e2bat collects a new category of personal data or uses existing data for a new purpose — registered Users will be notified by email to their registered address at least 14 days prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the e2bat Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using the Platform and request account closure.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or e2bat's data practices — including data subject access requests, rectification requests, or complaints — please contact e2bat's data team at:

e2bat aims to respond to all privacy-related enquiries within 5 business days of receipt and to resolve all data subject requests within 30 calendar days. Complex requests may require additional time, in which case e2bat will notify you of the expected timeline within the initial 30-day window.