Privacy Policy
Last updated: 27 September 2026
This policy explains what personal data the BatakSportPro mobile app and the bataksport.org website collect, why we collect it, who it is shared with, how long we keep it, and what you can do about it.
BatakSportPro ("we", "us") is the data controller for the data described below. You can reach us at batakdev66@gmail.com.
In short. BatakSportPro is played for real money, so alongside the details you give us when you register and the record of the games you play, we keep a record of your balance and of every movement of money on your account. Deposits and withdrawals are in cryptocurrency, through the payment provider PassimPay. We do not run advertising, we do not use analytics or tracking software, and we do not sell your data to anyone. You can delete your account from inside the app; your personal details are then erased, but the financial record is kept for as long as the law requires.
1. What we collect
| Data | When | Why |
|---|---|---|
| First and last name | You give it at registration | To identify the account holder, to match you to an identity check before a withdrawal, and to support you about your account |
| Nickname | You choose it at registration | It is the name other players see at a table and in tournament brackets. It is unique and cannot be changed afterwards |
| Email address | You give it at registration | It is how you sign in, and how we contact you about your account |
| Phone number | You give it at registration | So we can reach you about your account and your money when email is not enough |
| Password | You choose it at registration | Stored only as a cryptographic hash. We cannot read it and cannot tell you what it is |
| Profile photo | Optional, if you upload one | Shown on your profile |
| Game activity | While you play | Tables joined, hands played, scores, places, and tournament entries and results. This is the game itself, and the record you and we rely on if a result is disputed |
| Balance and transaction record | Whenever money moves on your account | Your balance, and every movement of it: deposits, withdrawals, buy-ins, rake, payouts, refunds, tournament entries, house fees and tournament prizes. It is your money, and it is a financial record we are required to keep |
| Deposit details | When you make a deposit | The amount, the order reference that ties the payment to your account, and the confirmation PassimPay sends us for it — so the right balance is credited |
| Withdrawal details | When you ask for a withdrawal | The destination wallet address, the network, the amount and the transaction hash of the payment — so we can send it, and show that it was sent |
| Identity documents | Only if we ask you to verify your identity | To prevent fraud and money laundering before a withdrawal is paid. See section 4 |
| Push notification token | After you sign in, if you allow notifications | So we can tell you it is your turn when the app is closed. It identifies a device installation, not you |
| IP address and server logs | Every request | Security, fraud and abuse prevention, and rate limiting. Kept briefly and never used to build a profile of you |
2. What we do not collect
This list is as much a part of the policy as the one above, and it is true of the app as shipped:
- No advertising, and no advertising identifiers. The app contains no ad network.
- No analytics or tracking. There is no analytics SDK, no crash reporting service and no third-party tracker in the app. We do not track you across other apps or websites, and we have nothing to share with data brokers.
- No bank card or bank account numbers. Deposits and withdrawals are made in cryptocurrency, so the app never asks for them.
- No private keys or recovery phrases. We will never ask for your wallet's private key or recovery (seed) phrase. Anyone who does is not us.
- No location data. The app never asks for your location and cannot read it.
- No contacts, calendar, microphone or photo library scanning. If you set a profile picture, the app receives only the single image you pick.
- No biometric data. If you turn on Face ID or fingerprint unlock, your phone performs the check and answers yes or no. No biometric information is sent to us, and we never receive or store any.
3. Deposits, withdrawals and cryptocurrency
Deposits and withdrawals are being introduced to the app. This section describes how they work once they are available to you.
- PassimPay processes them. Deposits and withdrawals are made in cryptocurrency through PassimPay, a cryptocurrency payment provider. For a deposit, PassimPay receives the amount and an order reference that lets us credit the right account.
- What PassimPay sees. When you pay, PassimPay sees the blockchain wallet addresses and transaction hashes involved. Anything you give PassimPay directly is handled under PassimPay's own privacy policy, not this one.
- Withdrawals. We store the destination wallet address, the network, the amount and the transaction hash, and we pass the address, network and amount to PassimPay so it can make the payment.
Blockchain transactions are public and permanent. Anyone can look up a transaction's addresses, amount and time on the public ledger of the network it was made on. Nobody — including us — can change or erase a transaction once it is made, and deleting your account does not remove it. We do not publish which account a wallet address belongs to.
4. Identity verification
Before a withdrawal is paid we may ask you to verify your identity — for example, with a photo of an identity document — to prevent fraud and money laundering. If we ask and you provide documents, we process them for that check and for the legal obligations that come with it, keep them for as long as the law requires, and never show them to other players.
5. Who we share it with
We do not sell your personal data. We share it only as follows:
- Other players. Your nickname and your profile picture are visible to other players, along with your play during a hand and your scores at a table or in a tournament bracket. Your real name, email, phone number and balance are never shown to other players.
- PassimPay, to process deposits and withdrawals, as described in section 3.
- Google (Firebase Cloud Messaging). Push notifications are delivered through Google's messaging service, which receives the device token and the message.
- Authorities, where we are legally required to disclose information — including in connection with the prevention or investigation of fraud or money laundering.
6. How long we keep it
- While your account is open, we keep the data described in section 1.
- When you delete your account, we erase your personal details: your first and last name, email address, phone number, profile photo and password hash. Your nickname is replaced with an anonymous one.
- What stays after deletion is your game results and your transaction record — including withdrawal addresses and transaction hashes — held against an anonymous account number. Financial records have to be kept for as long as the law requires, even after the account they belong to is closed. Identity documents, if you supplied any, are kept for as long as the law requires too.
- Server logs are kept briefly.
- Blockchain transactions are outside our control and permanent (see section 3).
7. Your rights
You can:
- See and correct your details. Profile → Profile Details. Your first name, last name and phone number are editable in the app. Your nickname is permanent, because it is the identity other players know you by.
- Delete your account. Profile → Profile Details → Delete account (it is also under Profile → Settings). You confirm with your password. This closes your account for good and signs you out; it cannot be undone. Withdraw your balance first — the User Agreement explains what happens to a balance left on a closed account.
- Turn off notifications at any time, in your phone's settings or by signing out.
- Ask us for a copy of your data, or ask us to restrict or object to how we use it, by writing to batakdev66@gmail.com.
Some of these rights are limited where the law requires us to keep a record — the financial record in particular. Depending on where you live, you may also have the right to complain to a data protection authority.
8. Children
BatakSportPro is for adults. You must be 18 or older to create an account. We do not knowingly collect data from anyone under 18; if we learn that we have, we close the account and delete its personal data, keeping only the financial record the law requires. If you believe a child has registered, write to batakdev66@gmail.com.
9. Security
Traffic between the app and our servers is encrypted with TLS. Passwords are stored only as hashes. Sign-in tokens are held in the operating system's secure storage — the iOS Keychain or the Android Keystore — rather than in ordinary app storage. No system is perfect, and we do not claim otherwise, but we treat account, balance and payment data as the sensitive information it is.
10. This website
bataksport.org sets no cookies, runs no scripts, and loads nothing — no fonts, no images, no trackers — from anyone else. Like any web server, ours records requests (the IP address, the time and the page asked for) for security, and keeps those logs briefly.
11. Changes to this policy
If we change this policy we will update the date at the top of this page, and where the change is significant we will tell you in the app before it takes effect.
12. Contact
Questions about this policy, or about your data: batakdev66@gmail.com.