bk24 Privacy Policy — How We Handle Your Data

1. Introduction

This Privacy Policy ("Policy") applies to all personal data collected by bk24 in connection with the bk24.ws website and the associated online casino and sports betting platform (the "Platform"). References to "bk24", "we", "us" or "our" in this Policy refer to the bk24 platform operator. References to "you" or "your" refer to any individual who accesses, registers on or uses the Platform, including visitors who have not yet registered.

bk24 is committed to handling your personal data with care, transparency and respect. We collect only the data that is necessary to provide you with a safe, functional and legally compliant gaming service. This Policy is intended to help you understand exactly what data we hold about you and how it is used. If you have any questions about this Policy or about how bk24 handles your data, please contact us at [email protected].

2. Information We Collect

bk24 collects personal data through three main channels: information you provide directly when registering or using the Platform; information generated automatically through your use of the Platform; and information received from third-party service providers where this is necessary to operate the Platform or comply with legal obligations. The specific categories of data collected are set out below.

Registration and Account Information

• Mobile phone number (used as primary account identifier and for account verification).
• Date of birth (collected to verify that you meet the minimum age requirement of 21 years).
• Password (stored in hashed form; bk24 cannot read your actual password and will never ask you to share it).
• Full legal name and government-issued identification details (collected during KYC verification as required before withdrawals).
• Address or location details (may be requested as part of KYC verification to confirm your identity and country of residence).

Transaction and Payment Information

• Details of all deposits and withdrawals made through your bk24 account, including the payment method used (e.g. bKash, Nagad, Rocket), transaction amounts in BDT, transaction dates and reference identifiers.
• Partial payment method identifiers (such as the last four digits of a mobile wallet number) retained for KYC and anti-money laundering compliance purposes. Full payment credentials are never stored by bk24.
• Gaming activity records including bets placed, game rounds played, wager amounts, outcomes and bonus usage — retained for regulatory compliance, dispute resolution and responsible gaming monitoring purposes.

Technical and Usage Data

• IP address and approximate geolocation data (used to detect suspicious access patterns, enforce geographic restrictions where applicable, and maintain Platform security).
• Device information including device type, operating system version, mobile browser type and screen resolution (used to optimise Platform rendering and troubleshoot technical issues).
• Session and interaction logs including pages visited, features used, time spent on the Platform and navigation patterns (used in aggregate to improve Platform design and user experience).

3. How We Use Your Information

bk24 uses the personal data we collect for the following purposes. We process your data only where we have a lawful basis to do so — see Section 4 of this Policy for details of the legal bases we rely on.

• Account creation and management: to register your account, verify your identity, maintain your account balance and process your login sessions securely.
• Payment processing: to receive and process deposits via bKash, Nagad, Rocket, Upay and other supported methods, and to execute withdrawal requests to your registered payment method.
• KYC and anti-fraud compliance: to conduct Know Your Customer verification, verify your age and identity, detect and prevent fraudulent activity, and meet our anti-money laundering obligations.
• Customer support: to respond to your queries, handle complaints, resolve disputes and provide assistance with account or Platform issues via the bk24 support team.
• Responsible gaming: to monitor gaming patterns that may indicate problem gambling behaviour, to apply responsible gaming tools at your request, and to enforce self-exclusion arrangements where applicable.
• Platform improvement: to analyse aggregated, anonymised usage data to improve the Platform's design, performance, game selection and overall user experience for Bangladesh players.

4. Legal Basis for Processing

bk24 processes your personal data on one or more of the following legal bases, depending on the specific processing activity.

• Contractual necessity: processing that is required to perform our contract with you — including account registration, payment processing, KYC verification and the provision of gaming services. Without this processing, bk24 cannot provide you with a functional account.
• Legal obligation: processing required to comply with applicable laws — including anti-money laundering obligations, age verification requirements, financial record-keeping obligations and law enforcement requests made under valid legal authority.
• Legitimate interests: processing carried out in pursuit of bk24's legitimate business interests — including fraud prevention, Platform security, responsible gaming monitoring, and aggregated analytics to improve our service — where those interests are not overridden by your data protection rights.
• Consent: where bk24 relies on your consent for a specific processing activity (such as sending promotional messages), you may withdraw that consent at any time by contacting support. Withdrawal of consent will not affect any processing carried out lawfully prior to withdrawal.

5. Sharing Your Information

bk24 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Payment service providers: bk24 shares the minimum necessary transaction data with bKash, Nagad, Rocket, Upay and other payment processors to execute your deposit and withdrawal requests. These providers handle payment data under their own privacy and security obligations.
• Game technology providers: game data (such as bet amounts and round outcomes) is transmitted to the relevant game studio or provider platform (e.g. Pragmatic Play, Evolution Gaming, Ezugi) to run the game and validate results. These providers do not receive your personal identity data.
• KYC and identity verification services: where bk24 uses a third-party identity verification service to assist with KYC checks, the minimum necessary identity data is shared with that provider under strict confidentiality obligations.
• Law enforcement and regulatory authorities: bk24 will disclose personal data to competent law enforcement or regulatory authorities where required to do so by applicable law, court order or valid legal process. bk24 will, where legally permitted, notify affected players of such disclosures.

6. Payment Data and Financial Information

bk24 takes particular care with financial information. Full payment credentials — including complete bKash or Nagad wallet numbers, bank account numbers or card numbers — are never stored on bk24 servers. When you initiate a deposit or withdrawal, your payment is processed directly through the relevant payment provider's secure infrastructure. bk24 retains only the minimum transaction metadata necessary for account records, dispute resolution and anti-money laundering compliance: this typically includes the payment method type, a partial identifier, the transaction amount in BDT and the date and status of the transaction.

All financial data retained by bk24 is stored in encrypted form and access is restricted to authorised personnel only. Transaction records are retained for the period required to meet our legal record-keeping obligations under applicable law, after which they are securely deleted or anonymised. If you have a question about a specific transaction on your account, please contact bk24 support with the relevant date and amount and our team will investigate promptly.

7. Cookies and Tracking Technologies

bk24 uses cookies and similar lightweight tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the Platform to recognise your device across sessions, maintain your login state, remember your preferences and collect anonymised usage data for analytics purposes. bk24 does not use cookies to build advertising profiles or to track your activity on third-party websites.

Types of Cookies Used

• Strictly necessary cookies: these are essential for the Platform to function correctly. They enable session management, login state persistence and basic security features. They cannot be disabled without breaking core Platform functionality.
• Functional cookies: these remember your preferences (such as language setting) across sessions so you do not need to re-enter them each time you visit the Platform.
• Analytics cookies: these collect anonymised, aggregated data about how players use the Platform — such as which pages are visited most frequently and where users navigate from — to help bk24 improve the Platform experience over time.

Most mobile browsers allow you to control cookies through the browser settings menu. Disabling strictly necessary cookies will prevent the Platform from functioning correctly and may result in your inability to log in or complete transactions. Disabling analytics or functional cookies will not prevent you from using the Platform but may affect your experience. For more information about managing cookies on your Android or iOS device, refer to your mobile browser's help documentation.

8. Data Retention

bk24 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods we apply are as follows: account registration data and identity documents are retained for the duration of your account relationship with bk24 and for a minimum of five years after account closure to meet anti-money laundering and legal record-keeping requirements; transaction records are retained for a minimum of five years from the date of the transaction; gaming activity logs are retained for a minimum of three years for dispute resolution and responsible gaming purposes; technical and usage data is retained in anonymised or aggregated form and is not linked to your identity after thirty days.

When your data is no longer required for any retention purpose, bk24 will securely delete or irreversibly anonymise it. If you request deletion of your account and personal data, bk24 will process your request and delete data that is not subject to a mandatory retention period. Data subject to a legal retention obligation will be held for the required period and then deleted. You will be informed of any data that cannot be immediately deleted and the reason why.

9. Your Rights Over Your Data

As a bk24 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact bk24 support at [email protected] with a clear description of your request. bk24 will acknowledge your request within 5 business days and aim to fulfil it within 30 days, subject to any legal limitations.

• Right of access: you may request a copy of the personal data bk24 holds about you, together with information about how it is used and with whom it is shared.
• Right of rectification: if you believe that personal data bk24 holds about you is inaccurate or incomplete, you may request that it be corrected or completed.
• Right of erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been processed unlawfully.
• Right to restrict processing: in certain circumstances you may request that bk24 restrict the processing of your personal data — for example, while a rectification request is under review.
• Right to object: where bk24 processes your data on the basis of legitimate interests, you may object to that processing. bk24 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

bk24 will not discriminate against you for exercising any of the rights listed above. Exercising your data rights will not affect your ability to use the Platform unless the right exercised (such as erasure) requires account closure as a consequence of the data being necessary for account operation.

10. Security Measures

bk24 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and bk24 servers; encrypted storage of sensitive account data including hashed passwords and identity documents; access controls that restrict internal access to personal data on a need-to-know basis; regular security reviews of Platform infrastructure; and monitoring systems designed to detect unusual access patterns or potential intrusions.

While bk24 takes security seriously and maintains appropriate safeguards, no online platform can guarantee absolute security against all threats. You also have a role to play in keeping your account secure: use a strong, unique password for your bk24 account; do not share your password with anyone; log out of your account when using a shared or public device; and contact bk24 support immediately if you suspect your account has been accessed without your authorisation.

11. Children and Minors

The bk24 Platform is strictly intended for adults aged 21 years and above. bk24 does not knowingly collect personal data from any individual under the age of 21. If bk24 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately, the account will be closed and any associated funds will be handled in accordance with bk24's underage access policy as described in the Terms and Conditions. If you are a parent or guardian and believe that a person under your care has registered on bk24, please contact [email protected] immediately so that the account can be closed without delay.

12. Changes to This Privacy Policy

bk24 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or Platform features. When we make a material change to this Policy, we will post the updated version on the Platform with a revised effective date and, where practical, notify registered players via in-platform notification or SMS. Your continued use of the Platform after a Policy update constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically. The current version of this Policy is always accessible at bk24.ws/privacy-policy.

13. Contact and Privacy Queries

If you have any questions, concerns or requests relating to this Privacy Policy or to the way bk24 processes your personal data, please contact the bk24 support team. We aim to acknowledge all privacy-related contacts within 5 business days and to resolve substantive queries within 30 days. For subject access requests or requests to exercise any of your data rights as described in Section 9, please include your registered mobile number and a clear description of your request to help us handle it efficiently.