bk89 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bk89 ("bk89", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("Member", "User", "you") who access or use the bk89 platform at https://bk89.io ("Platform"), including all associated services, betting markets, casino games, and payment facilities.

bk89 is committed to handling personal data responsibly, transparently, and in a manner consistent with recognised data protection principles. We recognise the trust our members — particularly those based in Bangladesh — place in us when they share their personal information, and we take that responsibility seriously.

By accessing or using the bk89 Platform, creating a member account, making a deposit, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

2 Data Controller

For the purposes of this Privacy Policy, bk89 acts as the data controller in respect of the personal data of its members. As data controller, bk89 determines the purposes and means of processing your personal data.

All enquiries, requests, or concerns relating to data privacy and the exercise of your data rights should be directed to the bk89 Data Protection contact at: [email protected]. Please include "Privacy Request" in the subject line of your communication to ensure it is directed to the appropriate team.

3 Personal Data We Collect

bk89 collects the following categories of personal data from its members. The specific data collected may vary depending on the services you use and the stage of your relationship with bk89:

bk89 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data. If any such data is incidentally disclosed during communications with our support team, it will not be processed for any purpose beyond resolving the immediate query.

4 How We Collect Your Data

bk89 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering an account, completing identity verification (KYC), making a deposit or withdrawal request, submitting a support query, or updating your account profile.
• Automated Technologies: Data collected automatically when you access the bk89 Platform, including cookies, server logs, pixel tags, and similar tracking technologies that record your IP address, device information, session duration, and browsing behaviour within the Platform.
• Payment Providers: Limited transaction confirmation data received from payment providers such as bKash, Nagad, Rocket, Upay, and partner banks when you initiate a deposit or withdrawal transaction.
• Identity Verification Services: Where bk89 uses third-party identity verification services to confirm the authenticity of documents submitted during KYC, we receive a verification outcome and a confidence score — we do not receive copies of raw biometric data from these providers.
• Fraud Prevention Services: Technical and behavioural data from fraud detection and risk management systems that monitor Platform activity to identify suspicious patterns.

5 Purposes of Processing

bk89 processes your personal data for the following defined purposes:

1. Account Creation and Management: To register your bk89 account, verify your identity, manage your account settings, and maintain the account throughout its lifecycle.
2. Service Delivery: To provide access to the bk89 betting markets, casino games, live dealer tables, and all other platform features to which you are entitled as a member.
3. Payment Processing: To process deposits and withdrawals via your chosen BDT payment methods, including bKash, Nagad, Rocket, Upay, and linked bank accounts.
4. Identity Verification (KYC): To comply with know-your-customer obligations and verify that you are who you say you are, that you meet the minimum age requirement of 21, and that your payment accounts are registered in your own name.
5. Fraud Prevention and Security: To detect, prevent, investigate, and respond to fraud, money laundering, account takeover attempts, bonus abuse, and other security threats to the Platform or its members.
6. Customer Support: To respond to your support queries, resolve disputes, and maintain records of communications for quality assurance purposes.
7. Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour, to apply self-exclusion and deposit limit settings, and to comply with responsible gaming obligations.
8. Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from competent authorities, and maintain records as required by law.
9. Platform Improvement: To analyse usage patterns, improve the bk89 platform experience, conduct internal research, and develop new features — using aggregated or anonymised data wherever possible.
10. Marketing Communications: To send you promotional offers, bonus notifications, and news about bk89 products and events — but only where you have provided consent or where such communications are permitted under applicable law. You may opt out of marketing communications at any time.

6 Legal Basis for Processing

bk89 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your bk89 account, process your transactions, and deliver the platform services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements and responses to lawful authority requests.
• Legitimate Interests: Processing carried out on the basis of bk89's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of direct marketing communications. You may withdraw consent at any time by contacting bk89 support.

7 Data Sharing & Disclosure

bk89 does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other payment partners — to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and document verification services — to confirm your identity and age in compliance with our verification obligations.
• Fraud and Risk Management Providers: Services that analyse transaction and behavioural data to detect and prevent fraudulent activity on the Platform.
• Game Technology Providers: Casino and sportsbook technology providers (including Evolution Gaming, Ezugi, Pragmatic Play, Microgaming, NetEnt, Spribe) — who may receive session-level data necessary to deliver their games within the bk89 platform environment.
• IT and Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who maintain the technical infrastructure of the bk89 Platform.
• Legal and Regulatory Authorities: Law enforcement agencies, regulatory bodies, courts, or other competent authorities — where bk89 is required to disclose data by law or in response to a valid legal request.

All third-party service providers engaged by bk89 are required to process personal data only on bk89's documented instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection standards.

8 Payment Data

bk89 treats financial and payment data with the highest level of care. When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a linked bank account, the transaction is processed directly through the relevant payment provider's secure infrastructure.

bk89 does not store full payment account credentials on its own servers. We retain only the payment reference information necessary to reconcile transactions, verify payment source consistency (for AML purposes), and support dispute resolution. Full mobile wallet PINs, bank card numbers, and online banking passwords are never requested or stored by bk89.

All financial data associated with your bk89 account is encrypted at rest and in transit. Access to financial data within bk89 is restricted to authorised personnel with a documented need-to-know basis.

9 Cookies & Tracking Technologies

bk89 uses cookies and similar tracking technologies (including local storage objects and session identifiers) to operate the Platform, enhance your user experience, and gather analytical data about Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred game views, and responsible gaming tool configurations, so these do not need to be re-entered on each visit.
• Analytical Cookies: Collect anonymised or pseudonymised data about how members use the Platform — including which pages are most visited, how long sessions last, and where errors occur. This data is used to improve Platform performance and user experience.
• Security and Fraud Prevention Cookies: Help bk89 detect and prevent fraudulent activity, account takeover attempts, and automated bot traffic on the Platform.

bk89 does not use third-party advertising or behavioural targeting cookies. Your browsing behaviour on the bk89 Platform is not shared with advertising networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the Platform. For full details on how to manage cookies, please refer to the help documentation of your browser.

10 Data Security

bk89 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bk89 Platform.
• Encryption of sensitive personal and financial data stored in bk89 databases.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular independent security assessments and penetration testing of the bk89 Platform infrastructure.
• Real-time intrusion detection and monitoring systems to identify and respond to security incidents promptly.
• Secure, geographically redundant data storage with regular encrypted backups.
• Staff training and internal data protection policies governing the handling of member data by bk89 personnel.

While bk89 maintains robust security measures, no online platform can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights, bk89 will notify affected members and relevant authorities in accordance with applicable legal requirements.

11 Data Retention

bk89 retains personal data for the periods necessary to fulfil the purposes outlined in this Policy, subject to any longer retention periods required by applicable legal, regulatory, or audit obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your membership with bk89, plus a standard post-closure retention period to allow for dispute resolution, regulatory audits, and legal claims.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years following each transaction, for financial audit and AML compliance purposes.
• Support Communications: Retained for a period of two (2) years following the resolution of the relevant support case, unless a longer period is required for dispute or legal purposes.
• Technical and Usage Data: Retained in aggregated or anonymised form for analytical purposes. Non-anonymised technical logs are retained for no longer than twelve (12) months.
• Marketing Consent Records: Retained for as long as you hold an active bk89 account or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data subject to an ongoing legal hold or regulatory investigation will be retained until the matter is fully resolved.

12 Your Data Rights

As a bk89 member, you have the following rights in respect of your personal data. To exercise any of these rights, please contact bk89 support at [email protected] with the subject line "Privacy Request":

• Right of Access: You have the right to request a copy of the personal data bk89 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held about you. You may also update certain account details directly within your bk89 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where no overriding legal basis for retention exists. Note that certain data must be retained to comply with legal obligations and cannot be deleted on request.
• Right to Restrict Processing: You have the right to request that bk89 restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a structured, commonly used, machine-readable copy of your personal data.
• Right to Object: You have the right to object to the processing of your personal data where it is carried out on the basis of bk89's legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bk89 will respond to all valid data subject requests within a reasonable timeframe. We may need to verify your identity before processing a request. bk89 will not charge a fee for reasonable requests but may decline requests that are manifestly unfounded or excessive.

13 Children's Privacy

The bk89 Platform is strictly intended for adults aged 21 and above. bk89 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If bk89 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, that account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned via the original payment method subject to verification.

If you believe that a minor has registered a bk89 account, please notify us immediately at [email protected] so we can take prompt action.

14 Third-Party Links

The bk89 Platform may contain references to game providers, payment services, and other third-party services. While bk89 exercises care in selecting its service partners, this Privacy Policy applies solely to data processed by bk89 in connection with the bk89 Platform. bk89 is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any third-party services you access in connection with your bk89 membership.

15 Amendments to This Policy

bk89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. When material changes are made, bk89 will notify members via email notification or a prominent notice displayed on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how bk89 protects your data. Your continued use of the bk89 Platform following the publication of any amendment constitutes your acceptance of the revised Policy.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bk89, please contact our data protection team using the details below. We are committed to addressing your enquiry promptly and transparently.

Email: [email protected] (please include "Privacy Request" in the subject line)

bk89 aims to respond to all privacy-related enquiries within five (5) business days. For formal data subject rights requests, bk89 will confirm receipt within three (3) business days and provide a substantive response within thirty (30) days, subject to the complexity of the request.