bk223 Privacy Policy — How We Protect Your Personal Data

1Introduction

This Privacy Policy ("Policy") sets out the basis on which bk223 ("the Company", "we", "us", "our") collects, processes, stores, and shares personal data relating to individuals who visit, register on, or otherwise interact with the bk223 online gaming platform, accessible at bk223.io ("the Platform"). This Policy applies to all registered players, prospective players who browse the Platform without registering, and any other natural person whose personal data is processed by bk223 in connection with the operation of the Platform.

bk223 operates an online casino and sports betting service primarily serving players in Bangladesh. Our Platform offers cricket betting, live casino games, slot games, Teen Patti 20-20, and promotional offers, all transacted in Bangladeshi Taka (BDT ৳) via payment methods including bKash, Nagad, Rocket, and Upay. The nature of our service means we necessarily process certain categories of personal and financial data, and we are committed to doing so transparently, fairly, and securely.

By accessing the Platform, registering an account, or using any feature of the bk223 service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

2Data Controller

For the purposes of this Policy, bk223 acts as the data controller in respect of all personal data collected through the Platform. As data controller, bk223 determines the purposes for which, and the means by which, personal data is processed. Any questions, requests, or complaints relating to data processing should be directed to the bk223 data protection contact at: [email protected] (plain text — not a clickable link).

3Data We Collect

bk223 collects personal data across the following categories, depending on how you interact with the Platform:

3.1 Identity Data

Full legal name, date of birth, gender, nationality, and copies of government-issued identity documents (such as a National Identity Card or passport) provided during the KYC (Know Your Customer) verification process.

3.2 Contact Data

Mobile phone number (required for account registration and two-factor authentication), email address, and residential address (where provided for verification purposes).

3.3 Account Data

Username, account ID, registration date, login history (date, time, and IP address of each session), account preferences, notification settings, and responsible gaming tool configurations (deposit limits, session time limits, loss limits, and self-exclusion status).

3.4 Transaction & Financial Data

Deposit and withdrawal history, transaction amounts in BDT ৳, transaction timestamps, the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), and the masked reference identifiers associated with your payment accounts. bk223 does not store full payment card numbers or full mobile wallet PINs.

3.5 Gaming Activity Data

Records of games played, bets placed, outcomes, wager amounts, bonus claims, wagering progress against applicable requirements, win/loss totals, and session durations. This data is used for account statement generation, responsible gaming monitoring, and fraud detection.

3.6 Technical & Device Data

IP address, device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network operator information collected automatically when you access the Platform. This information is used for security, fraud prevention, and platform optimisation purposes.

3.7 Communications Data

Records of any communications between you and the bk223 support team, including live chat transcripts, email correspondence, and any feedback, complaint, or dispute submissions. These records are retained for quality assurance, dispute resolution, and legal compliance purposes.

3.8 Voluntary Data

Any additional personal data you choose to provide voluntarily — for example, in response to a player survey, a promotional competition entry, or a written feedback submission. Participation in optional data collection activities is always at your discretion.

4How We Collect Data

bk223 collects personal data through the following channels:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and device data collected automatically via server logs, cookies, and session tracking technologies when you access or browse the Platform.
• Payment Providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and bank partners when a payment is initiated or completed. bk223 receives only the data necessary to confirm and record the transaction; full wallet PINs and card numbers are handled exclusively by the payment provider.
• Identity Verification Partners: Where bk223 uses a third-party KYC verification service to validate identity documents, that service may return a verification result (pass / fail / refer) and a risk score to bk223. The third party does not retain copies of your documents beyond the period required to complete verification.
• Game Content Providers: Game studios including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and NetEnt may transmit session data (game round identifiers, bet amounts, outcomes) to bk223 in real time for the purposes of account crediting, game history records, and dispute resolution.

5Legal Basis for Processing

bk223 processes personal data only where there is a valid legal basis for doing so. The legal bases we rely upon are as follows:

Processing Purpose	Legal Basis
Account registration and management	Performance of a contract with the player
KYC / identity verification	Legal obligation; legitimate interest (fraud prevention)
Payment processing and transaction records	Performance of a contract; legal obligation
Responsible gaming monitoring and tools	Legal obligation; legitimate interest (player protection)
Fraud detection and security monitoring	Legitimate interest; legal obligation
Customer support and dispute resolution	Performance of a contract; legitimate interest
Marketing communications (email / SMS)	Consent (opt-in required; withdrawable at any time)
Platform analytics and optimisation	Legitimate interest
Legal compliance and regulatory reporting	Legal obligation

6How We Use Your Data

The personal data bk223 collects is used for the following specific purposes:

• Account Creation and Management: To register your account, maintain your player profile, process logins, and manage account settings and preferences.
• Identity Verification (KYC): To confirm that you meet the minimum age requirement of 21 years, that you are the genuine owner of the payment methods linked to your account, and to comply with anti-money-laundering obligations.
• Payment Processing: To credit deposits to your bk223 wallet, process withdrawal requests to your registered payment method, and maintain accurate transaction records in BDT ৳.
• Game Operations: To enable real-money play across all game categories, record game history, process bonus awards, and track wagering requirement progress.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, enforce deposit limits, loss limits, session time limits, and self-exclusion restrictions that you or the platform have applied to your account.
• Fraud Prevention and Security: To detect and investigate suspicious login attempts, duplicate account activity, payment fraud, bonus abuse, use of VPNs or proxies, and any other activity that may constitute a breach of the bk223 Terms and Conditions.
• Customer Support: To respond to queries, complaints, and disputes submitted via live chat or email, and to maintain records of those communications for quality assurance purposes.
• Legal Compliance: To meet any legal, regulatory, or law-enforcement obligations that require us to retain, disclose, or report certain data.
• Platform Improvement: To analyse aggregated, anonymised usage patterns and improve the performance, reliability, and user experience of the bk223 Platform.
• Marketing (with consent): Where you have opted in to marketing communications, to send you relevant promotional offers, bonus notifications, and platform updates via SMS or email. You may opt out at any time.

7Data Sharing & Disclosure

bk223 does not sell, rent, or trade personal data. We share personal data only in the following limited and controlled circumstances:

7.1 Payment Service Providers

When you initiate a deposit or withdrawal, bk223 shares the minimum necessary transaction data with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, Mastercard) solely to facilitate the transaction.

7.2 Identity Verification Partners

During KYC, your identity document images and personal details may be shared with a third-party verification service for automated or manual review. This partner is contractually bound to process the data solely for verification purposes and to apply equivalent security standards to those maintained by bk223.

7.3 Game Content Providers

Game studios integrated into the bk223 Platform (including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and NetEnt) receive player session identifiers and wager data to operate game rounds. These studios operate under data processing agreements with bk223 and are not permitted to use session data for any purpose other than delivering the game service.

7.4 Legal and Regulatory Disclosure

bk223 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or in connection with the investigation of a suspected offence involving the Platform.

7.5 Business Transfers

In the event that bk223 undergoes a merger, acquisition, or sale of all or part of its assets, player data may be transferred to the acquiring entity as part of that transaction. In such a case, bk223 will notify affected players and ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.

8Payment Data

bk223 treats financial data with the highest level of care. The following specific rules apply to the handling of payment-related personal data:

• bk223 does not store full mobile wallet PINs, full credit or debit card numbers, or full bank account numbers. Payment credentials are handled directly by the relevant payment provider via their own secure interface.
• bk223 retains a masked version of payment account references (for example, the first and last two digits of a mobile number used for bKash) solely to allow the finance team to match withdrawal requests to verified payment methods.
• All deposit and withdrawal transactions are recorded with a timestamp, BDT ৳ amount, payment method label, and a transaction reference number. These records are retained for a minimum of five years for financial audit and anti-money-laundering compliance purposes.
• bk223 will never contact you via phone, SMS, or email to ask for your full payment card number, bKash PIN, Nagad PIN, or any other payment credential. Any such communication purporting to be from bk223 should be treated as fraudulent and reported to the bk223 support team immediately.

9Cookies & Tracking Technologies

bk223 uses cookies and similar tracking technologies to operate, secure, and improve the Platform. The following categories of cookies are in use:

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, fraud prevention, CSRF protection	Session / up to 24 hours
Functional	Remembering account preferences, language settings, responsible gaming display options	Up to 12 months
Analytical	Aggregated, anonymised usage statistics used to improve Platform performance and content	Up to 24 months
Security	Device fingerprinting for duplicate account detection, bot detection, and suspicious login monitoring	Up to 12 months

Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform. Functional and analytical cookies may be managed via your browser settings. Disabling functional cookies may impair certain Platform features. bk223 does not use third-party advertising or retargeting cookies.

10Data Retention

bk223 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory obligations that require longer retention. The following retention periods apply as a general guide:

• Active Account Data (identity, contact, gaming activity, account preferences): Retained for the duration of the account's active status, plus a minimum of five years following account closure.
• Transaction Records (deposits, withdrawals, wager history): Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documents (identity document copies, verification results): Retained for a minimum of five years from the date of verification, or longer if required by applicable law.
• Customer Support Records (live chat transcripts, email correspondence): Retained for a minimum of three years from the date of the relevant interaction.
• Responsible Gaming Records (self-exclusion history, deposit limit history): Retained for a minimum of five years from the date the relevant measure was applied or removed, to support any future re-registration review.
• Technical and Device Data (IP address logs, session logs): Retained for a minimum of 12 months for security and fraud investigation purposes.
• Marketing Consent Records: Retained for three years from the date consent was given or withdrawn, as evidence of the player's marketing preferences.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

11Data Security

bk223 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and bk223 servers.
• Encrypted storage of sensitive data fields (including hashed passwords) at rest.
• Role-based access controls limiting data access to authorised personnel with a legitimate need.
• Regular internal security audits and vulnerability assessments.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Real-time monitoring for anomalous login activity, including alerts for logins from unrecognised devices or IP addresses.
• Formal incident response procedures for investigating and reporting any data security breach within a commercially reasonable timeframe.

While bk223 takes reasonable steps to protect player data, no internet transmission or electronic storage system is completely immune to security risk. Players are encouraged to use a strong, unique password for their bk223 account and to enable two-factor authentication where available. If you believe your account has been accessed without your authorisation, contact the bk223 support team via live chat immediately.

12Your Rights as a Data Subject

As a player whose personal data is processed by bk223, you have the following rights, exercisable by contacting our support team via live chat or at [email protected]:

• Right of Access: You have the right to request a copy of the personal data bk223 holds about you, together with information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your account.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bk223's legal obligations to retain certain data. Where a legal retention obligation applies, bk223 will retain the minimum data required and suppress its use for any other purpose.
• Right to Restriction of Processing: You may request that bk223 restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data pending verification.
• Right to Data Portability: You may request a copy of personal data you have provided to bk223 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data on grounds of legitimate interest, including any profiling based on legitimate interest. bk223 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bk223 will respond to all data subject rights requests within 30 days of receipt. Where a request is complex or there are multiple requests, the response period may be extended by a further 60 days, in which case bk223 will notify you of the extension within the initial 30-day period.

13Children & Minors

The bk223 Platform is strictly for adults aged 21 years and above. bk223 does not knowingly collect personal data from individuals under the age of 21. If bk223 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all data associated with it will be deleted as soon as legally permissible, and any deposits made will be returned to the originating payment method after investigation.

If you are a parent or guardian and believe that a minor in your care has registered or attempted to register a bk223 account, please contact the support team via live chat immediately. bk223 takes underage gambling extremely seriously and employs a combination of age verification checks, KYC document review, and payment method name-matching to detect and prevent underage access to the Platform.

14Marketing Communications

bk223 sends promotional communications — including bonus offers, reload promotions, seasonal campaign notifications (such as Eid and Pohela Boishakh specials), and platform update announcements — only to players who have explicitly opted in to receive such communications at the point of registration or via the account notification settings.

Marketing messages are sent via SMS to the registered mobile number and/or via email to the registered email address, depending on the player's communication preferences. bk223 does not send unsolicited marketing communications to individuals who have not opted in, nor does it send marketing to players who have activated a self-exclusion or requested removal from marketing lists.

To opt out of marketing communications at any time, you may:

• Update your notification preferences in the bk223 account settings dashboard.
• Click the unsubscribe link included in any marketing email.
• Contact the bk223 support team via live chat and request immediate removal from all marketing communications.

Opting out of marketing will not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, and KYC verification requests), which are sent as a necessary part of operating your account.

15Third-Party Links

The bk223 Platform may contain references or links to third-party services — for example, payment gateway interfaces operated by bKash, Nagad, or Rocket that open in a separate browser window or redirect during a transaction. bk223 is not responsible for the privacy practices of third-party services and cannot control how those services collect, use, or store your data. Players are advised to review the privacy policies of any third-party service they interact with in connection with a bk223 transaction.

16Policy Amendments

bk223 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Material changes to this Policy will be communicated to registered players by displaying a notice on the Platform or by sending a notification to the player's registered email address or mobile number at least 7 days before the change takes effect, except where an immediate change is required for security or legal compliance reasons.

The effective date of the current version of this Policy is displayed at the top of this page and in the legal-updated badge above the policy body. Continued use of the bk223 Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the Platform and contact the support team to request account closure.

17Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a complaint about how bk223 has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat icon on any page of the bk223 Platform. Average response time is under 3 minutes.
• Email: [email protected] (plain text — not a clickable link). Responses to written enquiries are provided within 2 business days.

bk223 is committed to resolving all privacy-related complaints promptly and fairly. If you are not satisfied with our response to a complaint, you have the right to escalate the matter to an appropriate supervisory authority or seek independent legal advice.