bk23 Privacy
Policy

1. Information We Collect

bk23 collects personal information from you in several ways throughout your relationship with the platform. The categories of data we collect, and the circumstances under which each category is gathered, are described below in full.

1.1 Registration Data

When you create a bk23 account, we collect the personal details you provide during the registration form. This includes your full legal name, date of birth, email address, mobile phone number, and your chosen account credentials (username and password, stored in hashed form — we never store plaintext passwords). You may also be asked to provide your city or district of residence within Bangladesh (for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi) to assist with account localisation and responsible gaming checks.

1.2 Identity Verification Data (KYC)

To comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations, bk23 may request government-issued identity documents at various stages of your account lifecycle — typically before your first withdrawal or when your cumulative deposit activity crosses certain thresholds. Documents we may request include:

• National Identity Card (NID)
• Valid passport (photo page)
• Driving licence
• Proof of current address (utility bill, bank statement, or official correspondence dated within the last 90 days)
• Proof of payment method ownership (screenshot or statement showing your bKash, Nagad, Rocket, or Upay account registered in your name)

All KYC documents are handled with strict confidentiality and are used solely for identity verification purposes. They are not shared with any commercial third party and are not used for marketing profiling.

1.3 Transaction Data

bk23 records the full history of financial transactions associated with your account. This includes deposit amounts, deposit timestamps, payment channels used (bKash, Nagad, Rocket, Upay, bank transfer, or card), withdrawal requests, withdrawal amounts, processing times, and any payment reversals or chargebacks. Transaction records are retained for a minimum period as required by applicable financial regulations and our internal compliance policies.

1.4 Betting and Gaming Activity Data

We maintain a complete record of all bets, wagers, game sessions, and outcomes associated with your account. This includes sports markets bet on (cricket, football, kabaddi, and others), stake amounts, odds accepted, game titles played in the casino, session durations, and real-time in-play betting activity. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement purposes.

1.5 Technical and Device Data

When you access bk23 through a web browser or mobile application, we automatically collect certain technical data about your device and connection. This includes your IP address, browser type and version, operating system, device model, screen resolution, time zone setting, language preferences, and referring URL. We also collect session data such as pages visited, click paths, time spent on each section of the platform, and error logs. This data is collected via server logs and analytics tools and is used to maintain platform stability, detect fraud, and improve the user experience.

1.6 Communications Data

If you contact bk23 support via live chat, email, or any other channel, we retain records of that correspondence. This includes chat transcripts, email content, support ticket details, and any documentation you share during a support interaction. Communications data helps us resolve disputes, improve service quality, and maintain a record of commitments made to you by our support team.

2. How We Use Your Data

bk23 processes your personal data for specific, defined purposes. We do not process personal data in ways that are incompatible with the original purpose for which it was collected. The primary purposes for which we use your data are as follows:

• Account Management: To create, maintain, verify, and administer your bk23 account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Payment Processing: To process deposits and withdrawals via your chosen payment method, verify that payment accounts are registered in your name, and maintain accurate financial records for your account.
• Service Delivery: To provide you with access to the full range of bk23 sports betting, live casino, and slot games, and to personalise your platform experience based on your stated preferences and historical activity.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, KYC, and responsible gaming regulations. This includes screening accounts against sanctions lists and reporting obligations where legally required.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, bonus abuse, money laundering, and any other activity that poses a risk to the integrity of the platform or to other players.
• Responsible Gaming: To monitor betting and gaming patterns that may indicate problem gambling behaviour, to enforce self-exclusion requests, to apply deposit and wagering limits, and to proactively contact players who show signs of gambling harm in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the design, performance, content, and feature set of the bk23 platform.
• Legal Proceedings: To establish, exercise, or defend legal claims, or to respond to valid regulatory or law enforcement requests.

3. Data Sharing & Third Parties

bk23 does not sell your personal data to third parties. We do not share your information with advertisers, data brokers, or any external commercial entity for marketing or profiling purposes without your explicit consent. However, in order to operate the platform and meet our legal obligations, we do share certain categories of data with carefully selected third-party service providers and regulatory bodies, as described below.

3.1 Service Providers

bk23 works with a number of specialist third-party vendors who assist in delivering the platform. These include:

• Identity Verification Providers: Third-party KYC and age verification services that process your identity documents on our behalf to confirm eligibility and comply with AML obligations.
• Payment Processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay), banking partners, and international card processors who facilitate your deposits and withdrawals. These providers receive only the transaction data necessary to process your specific payment.
• Game Suppliers: Certified third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and wagering data necessary to run the games you play. These providers are contractually bound to use your data solely for game-delivery purposes.
• Customer Support Infrastructure: Live chat and helpdesk platform providers who process communication data to enable our support team to respond to your queries.
• Analytics and Security Tools: Platform analytics, fraud detection, and cybersecurity vendors who process technical and behavioural data in anonymised or pseudonymised form to help us maintain platform integrity.

All third-party service providers are subject to written data processing agreements that restrict their use of your data strictly to the purposes for which it was shared. bk23 conducts due diligence on all third-party vendors before onboarding them.

3.2 Regulatory and Legal Disclosure

bk23 may be required by law, court order, or regulatory direction to disclose certain personal data to government authorities, financial intelligence units, or law enforcement agencies. In all such cases, bk23 will comply with valid legal obligations and will notify the affected account holder where legally permitted to do so. We will not disclose data beyond the scope of the specific legal requirement.

3.3 Business Transfers

In the event that bk23 undergoes a merger, acquisition, corporate restructuring, or transfer of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bk23 will notify registered players via email or prominent site notice before any data transfer takes effect and will ensure that the receiving entity is bound by privacy obligations that are at least equivalent to those in this policy.

4. Cookies & Tracking

bk23 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the platform, remember your preferences, maintain your login session, and analyse usage patterns. This section explains the types of cookies we use and your options for managing them.

4.1 Essential Cookies

These cookies are strictly necessary for the bk23 platform to function. They manage your login session, maintain your account security tokens, store your currency and language preferences, and ensure that the platform displays correctly on your device. Essential cookies cannot be disabled without significantly impairing your ability to use the platform. No consent is required for essential cookies as they are technically necessary for the service you have requested.

4.2 Analytics Cookies

Analytics cookies help bk23 understand how players interact with the platform. They collect information such as which pages are most frequently visited, how long users spend on each section, which game categories generate the most engagement, and where in the registration or deposit flow users encounter friction. This data is processed in aggregated, anonymised form and is used solely to improve the platform experience. Analytics cookies are deployed only where consent has been obtained.

4.3 Fraud Prevention and Security Cookies

bk23 uses session fingerprinting and device recognition cookies as part of our fraud prevention infrastructure. These cookies help identify suspicious login attempts, detect account sharing, and flag activity that is inconsistent with a player's established behavioural patterns. These cookies are classed as legitimate-interest processing and operate alongside our security infrastructure to protect both the platform and individual players.

4.4 Managing Your Cookie Preferences

You can manage non-essential cookie preferences at any time through your browser settings or through the cookie preference centre available within the bk23 platform settings panel. Please note that disabling certain analytics or personalisation cookies may result in a less tailored experience but will not affect your ability to place bets, access games, or process payments. Disabling essential or security cookies is not recommended and may result in account access issues.

5. Data Security & Retention

5.1 Security Measures

bk23 applies a layered approach to data security. The technical and organisational measures we maintain include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and bk23 servers is encrypted using TLS 1.3, the current industry standard for secure web communication.
• Database Encryption: Sensitive data fields including identity documents, payment method references, and account credentials are encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plaintext. They are hashed using a modern cryptographic algorithm with per-user salting to protect against credential compromise in the event of a data breach.
• Access Controls: Access to personal data within bk23's internal systems is restricted on a strict need-to-know basis. Staff access to player data is logged, audited, and subject to role-based permissions.
• Two-Factor Authentication (2FA): bk23 offers 2FA for player accounts and mandates it for all internal staff who access production systems containing personal data.
• Regular Security Audits: bk23's security infrastructure is subject to regular internal reviews and periodic third-party penetration testing to identify and remediate vulnerabilities.

5.2 Data Retention

bk23 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods are as follows:

• Account and registration data: Retained for the lifetime of your active account, and for a minimum of 5 years following account closure, to satisfy AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• KYC and identity documents: Retained for the period required by financial compliance obligations, typically 5 years after account closure.
• Support communications: Retained for 3 years from the date of the interaction, unless associated with an unresolved dispute or legal proceeding in which case records are kept until final resolution.
• Technical and device data: Log files are typically retained for 12 months and then deleted or anonymised, unless required for an active investigation.
• Marketing consent records: Retained for as long as your consent is active, plus 3 years following withdrawal of consent as evidence of compliance.

When data is no longer required, bk23 deletes or irreversibly anonymises it using secure data destruction procedures. We do not retain personal data beyond the periods described above unless we are subject to a specific legal or regulatory obligation to do so.

6. Your Privacy Rights

As a registered player on bk23, you hold a number of rights with respect to your personal data. bk23 is committed to honouring these rights promptly and transparently. Your rights include the following:

• Right of Access: You have the right to request a copy of all personal data that bk23 holds about you. This is commonly referred to as a Subject Access Request (SAR). bk23 will respond to valid SARs within 30 days of receipt. The first SAR per 12-month period is provided free of charge.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as your email address or phone number) directly from your account settings panel. For changes to identity-critical data (such as your legal name or date of birth), you must contact support and provide supporting documentation.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that this right is not absolute: bk23 may be required to retain certain data to comply with legal obligations (such as AML record-keeping requirements), and erasure requests that conflict with these obligations will be partially fulfilled to the extent permitted by law.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute is being investigated — you may request that bk23 restricts its processing of your personal data to storage only. We will honour valid restriction requests and notify you before lifting any restriction.
• Right to Data Portability: Where bk23 processes your data based on your consent or the performance of a contract, you have the right to receive a copy of your data in a structured, machine-readable format (such as CSV) for transfer to another service provider.
• Right to Object: You have the right to object to bk23's processing of your personal data where that processing is based on our legitimate interests. bk23 will cease processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the rights listed above, please contact bk23's data privacy team by emailing [email protected] (plain text — not a clickable link) with the subject line "Privacy Rights Request". Please include your registered account username and a description of the specific right you wish to exercise. bk23 may request identity verification before processing a rights request to ensure that data is not disclosed to an unauthorised party.

7. Marketing Communications

bk23 may send you promotional communications about new features, special offers, seasonal promotions (such as those tied to Eid, Pohela Boishakh, or major sporting tournaments like the BPL, IPL, or T20 World Cup), and platform updates. The channels through which we may send marketing communications include email and in-app notifications.

7.1 Consent for Marketing

Marketing communications are sent only where you have provided explicit consent during registration or subsequently opted in via your account notification settings. We do not send unsolicited marketing messages. You will never receive a marketing communication from bk23 if you have not affirmatively indicated your preference to receive them.

7.2 Opting Out

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email sent by bk23.
• Updating your notification preferences in your bk23 account settings panel under "Communication Preferences".
• Contacting bk23 support via live chat and requesting to be removed from all marketing lists.

Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, or KYC-related correspondence — these are sent on the basis of contract performance and legitimate interest, not marketing consent.

7.3 Responsible Gaming Communications

bk23 may send communications relating to responsible gaming regardless of your marketing preference settings. These include notifications about deposit limit thresholds, session duration alerts, self-exclusion reminders, and welfare check messages. These communications are classed as service communications and are processed on the basis of our legitimate interest in protecting player welfare.

8. Policy Updates & Contact

bk23 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the platforms we use, applicable legal requirements, or guidance from relevant regulatory authorities. The "Last Updated" date at the top of this page reflects the date on which the current version of the policy came into effect.

Where we make material changes to this Privacy Policy — for example, changes that affect how we share your data with third parties, new purposes for which we process your data, or changes to your rights — we will notify registered players by email using the address associated with their bk23 account before the updated policy takes effect. For non-material clarifications and corrections, we will update the policy without individual notification, though the "Last Updated" date will always reflect the most recent revision.

Continued use of the bk23 platform following a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should discontinue use of the platform and contact support to request account closure before the effective date of the updated policy.