bk67 Privacy Policy — How We Handle Your Personal Data

Personal Data You Provide Directly

When you register for a bk67 account, make deposits or withdrawals, contact support, or use any feature of the Platform, you may provide us with the following categories of personal data:

• Identity data: full name, date of birth, nationality, and government-issued identification document details (national ID, passport).
• Contact data: mobile phone number (used as your primary login identifier), email address (if provided).
• Financial data: mobile wallet account details (bKash, Nagad, Rocket, Upay), transaction amounts, deposit and withdrawal history.
• Account data: username, password (stored in hashed form only — we cannot read your password), account preferences, and responsible gaming settings.
• Communications data: support ticket content, chat transcripts, and email correspondence between you and bk67.

Data Collected Automatically

When you use the Platform, certain technical data is collected automatically by our systems to ensure the Platform operates correctly and securely:

• Device and technical data: IP address, device type and model, operating system version, browser type and version, screen resolution.
• Usage data: pages visited, features used, time spent on the Platform, betting and gaming activity logs, session timestamps.
• Cookie data: session cookies, analytics cookies, and preference cookies as further described in the Cookies section below.

bk67 processes your personal data only for specific, legitimate purposes. We do not process your data for any purpose that is incompatible with the purposes listed below. The primary purposes for which bk67 uses your data are:

• Account creation and management: to register your account, verify your identity (KYC), manage your account settings, and process your login sessions.
• Transaction processing: to process deposits and withdrawals via bKash, Nagad, Rocket, and other approved Bangladesh payment channels; to maintain accurate financial records.
• Service delivery: to provide access to cricket betting markets, casino games, live dealer tables, crash games, slots, and all other Platform features.
• Customer support: to respond to your queries, resolve account issues, handle complaints, and communicate important account notices.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other conduct that violates our Terms & Conditions.
• Responsible gaming: to monitor player activity for signs of problem gambling, enforce deposit limits and self-exclusion settings, and fulfil our duty of care obligations to players.

bk67 may also use aggregated, anonymised usage data (data from which all identifying information has been removed) to improve Platform performance, identify popular features, and develop new products and services. This anonymised data cannot be used to identify any individual player.

bk67 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: processing is necessary to provide the services you have requested, including account management, transaction processing, and game access.
• Legal obligation: processing is required to comply with applicable laws, including anti-money laundering (AML) regulations, KYC verification requirements, and financial record-keeping obligations.
• Legitimate interests: processing is necessary for bk67's legitimate business interests, including fraud detection, security monitoring, and Platform improvement, provided those interests do not override your fundamental privacy rights.
• Consent: where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time by contacting support or updating your account preferences.

We Do Not Sell Your Data

bk67 does not sell, rent, or otherwise transfer your personal data to any third party for that party's own marketing or commercial purposes. Your data is yours. We share it only in the limited circumstances described below.

When We Share Data

bk67 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, and partnered banking institutions receive only the transaction data necessary to process your deposit or withdrawal request.
• Game and technology providers: third-party game studios (such as Pragmatic Play, Evolution Gaming, Spribe) may receive a session token and minimal technical data required to load and authenticate your game session. These providers do not receive your financial or identity data.
• Legal and regulatory authorities: bk67 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required to do so by applicable law, court order, or lawful authority.

Business Transfers

In the event that bk67 undergoes a merger, acquisition, or transfer of all or part of its business assets, your personal data may form part of the transferred assets. In such circumstances, bk67 will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy, and will notify you of any material change to data handling practices before such a transfer takes effect.

bk67 processes payment data solely for the purpose of facilitating deposits and withdrawals on behalf of registered players. We do not store full mobile wallet credentials on our servers. When you initiate a deposit via bKash, Nagad, Rocket, or Upay, the payment is routed through the respective provider's own secure gateway. bk67 retains only a transaction reference, the amount, the timestamp, and a masked version of the account identifier (e.g. the last four digits of your bKash number) for reconciliation and dispute resolution purposes.

bk67 does not facilitate credit card or debit card payments directly. All financial transactions on the Platform are processed in Bangladeshi Taka (৳) through locally recognised mobile financial services and banking partners. This ensures that your financial data remains within the Bangladesh payment ecosystem and is not transmitted to overseas payment processors unnecessarily.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, to improve performance, and to provide analytics information to site operators. bk67 uses cookies strictly for operational and analytical purposes — we do not use cookies to serve behavioural advertising or to track you across other websites.

Types of Cookies We Use

bk67 uses the following categories of cookies on the Platform:

• Essential cookies: strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in during a browsing session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: used to collect anonymised, aggregated data about how visitors interact with the Platform, including which pages are visited most frequently and where users encounter errors. This data helps us improve Platform performance and usability.
• Preference cookies: used to remember your Platform settings, such as your chosen language version (English or Bengali) and responsible gaming preferences, so you do not need to re-enter them on each visit.

You can control or delete cookies at any time through your browser settings. Note that disabling essential cookies will impair or prevent access to certain Platform features. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

bk67 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account's activity and for a reasonable period thereafter to handle any post-closure queries, disputes, or legal matters. Specifically: account and identity data is retained for a minimum of five (5) years following account closure to comply with anti-money laundering record-keeping obligations; financial transaction records are retained for a minimum of seven (7) years in line with standard financial recordkeeping requirements; support communications are retained for up to three (3) years from the date of the last interaction.

When your data is no longer required for any purpose for which retention is justified, bk67 will securely delete or anonymise it. Where full deletion is not technically feasible (for example, where data is stored in backup archives), bk67 will isolate the data from further processing until deletion becomes possible.

As a user of the bk67 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact bk67 support at [email protected] with a clear description of your request. bk67 will respond within a reasonable timeframe, typically within 30 days of receiving a valid request:

• Right of access: you may request a copy of all personal data bk67 holds about you, together with information about how that data is being used.
• Right to rectification: if any personal data bk67 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bk67's legal retention obligations.
• Right to restrict processing: you may request that bk67 restrict the processing of your personal data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: you may request that bk67 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

bk67 will not charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive. Where a fee is charged, bk67 will notify you of the applicable amount before proceeding with the request.

bk67 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, bcrypt or equivalent hashing for all stored passwords, access controls that restrict internal system access to authorised personnel on a need-to-know basis, regular security assessments and vulnerability testing of Platform infrastructure, and secure, redundant data storage with automated backup procedures.

Despite these measures, no method of internet transmission or electronic data storage is completely secure. bk67 cannot guarantee absolute security of your personal data. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bk67 will notify affected users without undue delay and will take immediate remedial action to contain and mitigate the breach.

The bk67 Platform is strictly intended for individuals aged 21 years and above. bk67 does not knowingly collect personal data from persons under the age of 21. If bk67 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. Any winnings accrued by a minor account will be forfeited in full. If you believe that a minor may have registered an account on bk67, please contact [email protected] immediately so that we can investigate and take appropriate action.

bk67 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered users via a platform notice or by message to your registered contact details.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically so that you remain informed about how bk67 handles your personal data.