Privacy Policy

evobat operates the online casino and sports betting platform accessible at evobat.club (the "Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by evobat. Please read this policy carefully to understand our approach to your personal information and how we will treat it.

By registering an Account on the evobat Platform, making a deposit, placing a Bet, or otherwise interacting with any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

This policy applies to all players registered on the Platform, visitors who browse the Platform without registering, and any individual who contacts evobat through any channel including live chat and email. It covers all personal data collected through the Platform, its mobile-compatible interface, and any associated communications sent by evobat.

evobat collects personal data that is necessary to provide the Platform's services safely, securely, and in compliance with applicable anti-money laundering and responsible gaming obligations. The categories of personal data we may collect include:

We do not intentionally collect any sensitive special category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) through the Platform. If such data is incidentally disclosed to us, for example through support communications, it will not be stored beyond what is strictly necessary to resolve the relevant matter.

evobat collects personal data through the following channels and methods:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, initiating a deposit or withdrawal, contacting customer support, or responding to promotional surveys.
• Automated technologies: Technical and usage data collected automatically when you visit or interact with the Platform, including through cookies, server logs, and session tracking tools. See Section 7 for full details on our cookies policy.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate payments through their respective gateways.
• Game providers: Game session and outcome data transmitted to evobat by our certified third-party game suppliers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe.
• Identity verification services: Data returned by third-party KYC and document verification tools used to confirm your identity and age in accordance with our AML obligations.
• Fraud prevention services: Risk and fraud signals shared by industry-standard fraud detection platforms to protect the Platform's integrity.

evobat uses the personal data we collect for the following purposes:

• Account registration and management: To create, maintain, and administer your Player Account, including processing login credentials and managing your profile settings.
• Identity and age verification: To verify that you meet the minimum age requirement of 18 years and to confirm your identity in accordance with our Know Your Customer (KYC) and AML obligations.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method, and to maintain accurate records of all financial transactions associated with your Account.
• Service delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other features available on the evobat Platform.
• Customer support: To respond to your queries, complaints, and formal dispute submissions, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to apply any responsible gaming tools you request (such as deposit limits or self-exclusion), and to contact you proactively if we identify patterns associated with at-risk behaviour.
• Fraud and security: To detect, prevent, and investigate fraudulent activity, money laundering, collusion, account sharing, and any other prohibited activities as defined in our Terms and Conditions.
• Platform improvement: To analyse usage patterns and player behaviour in aggregate to improve the Platform's features, content, and performance.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time.
• Legal compliance: To fulfil any legal, regulatory, or law enforcement obligations applicable to our operations.

evobat processes your personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered Player, including Account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and any lawful requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of evobat's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities for which you have given your explicit, freely given, and informed consent — in particular, the sending of marketing and promotional communications. You may withdraw your consent at any time by contacting [email protected] or using the opt-out mechanism within any marketing message.

6.1 No Sale of Data. evobat does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data sharing is limited strictly to what is necessary to operate the Platform and fulfil the purposes described in this Privacy Policy.

6.2 Authorised Third-Party Processors. evobat may share your personal data with the following categories of trusted service providers acting as data processors on our behalf:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard, solely for the purpose of processing your deposits and withdrawals.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and other certified game suppliers, to deliver game content and record session outcomes.
• Identity verification providers: Third-party KYC and AML compliance platforms used to verify your identity, age, and payment credentials.
• Fraud detection services: Industry-standard risk management platforms used to identify and prevent fraudulent activity on the Platform.
• IT and hosting infrastructure: Secure cloud hosting and content delivery providers that store and transmit Platform data on evobat's behalf.
• Customer support tools: Live chat and helpdesk software providers that facilitate communication between Players and the evobat support team.

6.3 Legal Disclosure. evobat may disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or lawful authority. In such cases, evobat will disclose only the minimum data necessary to satisfy the legal requirement.

evobat uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytical data to improve our services. A cookie is a small text file placed on your device by a website you visit. The cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences and settings, such as your last selected game category, notification preferences, and responsible gaming configuration.
• Analytical cookies: Used to collect aggregated, anonymised data about how visitors use the Platform, including most-visited pages and session durations. This data helps evobat identify areas for improvement.
• Security cookies: Used to detect and respond to fraudulent behaviour, bot activity, and unauthorised access attempts.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to log in or use certain features of the Platform. evobat does not use third-party advertising or cross-site tracking cookies.

evobat retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The general retention principles we apply are as follows:

• Active Account data: Retained for the full duration of your Account's active status on the Platform.
• Post-closure Account data: Following Account closure, personal data including identity verification records, transaction history, and communication logs are retained for a minimum period of five (5) years to meet AML and legal compliance obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction to comply with financial record-keeping requirements.
• Support communications: Retained for up to three (3) years from the date of the last interaction, except where they form part of a formal dispute record, in which case they are retained for five (5) years.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications plus one (1) year following any opt-out, to demonstrate compliance with consent obligations.
• Technical and usage logs: Typically retained for twelve (12) months for analytical and security purposes, after which they are deleted or anonymised.

When personal data is no longer required, evobat ensures that it is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

The security of your personal data is a top priority at evobat. We implement a comprehensive set of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the evobat Platform is encrypted using industry-standard SSL/TLS protocols. This applies to all account interactions, payment transactions, and support communications.
• Encrypted data storage: Sensitive data fields including passwords and payment account references are stored using strong cryptographic hashing and encryption algorithms. Plain-text storage of sensitive data is strictly prohibited within evobat's infrastructure.
• Access controls: Access to personal data within evobat's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific role, and all access is logged and audited.
• Intrusion detection and monitoring: evobat's infrastructure is monitored continuously for unusual activity, potential intrusions, and security anomalies. Automated alerts are in place to flag and respond to suspicious events in real time.
• Secure payment processing: Payment transactions are processed through PCI-DSS compliant payment channels. evobat does not store full card numbers or mobile banking PINs on its servers.
• Staff training: All evobat personnel with access to personal data receive training on data protection obligations and the secure handling of sensitive information.

evobat respects your rights in relation to the personal data we hold about you. Subject to applicable law and certain legitimate exceptions (such as our legal obligations to retain financial records), you may exercise the following rights at any time by contacting [email protected]:

• Right of access: You have the right to request a copy of the personal data we hold about you, together with information about how and why it is being processed.
• Right to rectification: You have the right to request that any inaccurate or incomplete personal data we hold about you be corrected or updated. You may update certain profile information directly within your Account dashboard.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where evobat is required by law to retain the data (for example, AML record-keeping obligations).
• Right to restrict processing: You have the right to request that evobat restricts the processing of your data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to evobat demonstrating compelling grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

evobat will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

The evobat Platform integrates services and content from third-party providers to deliver game content, process payments, and support platform operations. When you interact with these third-party services — for example, by launching a live dealer game powered by Evolution Gaming or initiating a deposit via bKash — you may also be subject to the privacy policies of those third-party providers.

evobat is not responsible for the privacy practices of third-party game providers, payment processors, or any other external services. We encourage you to review the privacy policies of any third-party service you interact with through the Platform. All third-party processors engaged by evobat are required by contract to handle your data securely and solely for the purposes specified by evobat.

The evobat Platform does not include third-party advertising networks, social media tracking pixels, or affiliate tracking technologies that would share your browsing data with unrelated commercial parties.

The evobat Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, store, or process personal data from any individual under the age of 18. Registration on the Platform requires confirmation that you meet the minimum age requirement, and all Account registrations are subject to age verification as part of our KYC process.

If evobat becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and terminate the associated Account. If you believe that a minor has registered on the Platform using your details or any other means, please contact us immediately at [email protected].

evobat reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The effective date at the top of this policy will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — evobat will take reasonable steps to notify you. This may include displaying a prominent notice on the Platform at login or sending a notification to the email address registered on your Account.

Your continued use of the evobat Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and may request Account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way evobat handles your personal data, please contact our team using the details below. All contact information is provided as plain text only and is not intended as a clickable link.

This Privacy Policy, together with the Terms and Conditions and Responsible Gaming Policy, constitutes the full framework governing your relationship with evobat and your use of the Platform. We are committed to maintaining the highest standards of data protection and to earning your trust as Bangladesh's most player-focused online casino and sports betting platform.