bkk3 Privacy Policy — How We Handle Your Personal Data

1 Who We Are

bkk3 operates the online casino and sports betting platform accessible at https://bkk3.io (the "Platform"). In the context of this Privacy Policy, "bkk3", "we", "us", and "our" refer to the entity responsible for operating the Platform and, accordingly, for the processing of personal data collected through it.

bkk3 acts as the data controller in respect of the personal data you provide when registering for an account, using our Services, or communicating with our support team. As data controller, bkk3 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws.

Our primary point of contact for all privacy-related matters is our support team, reachable at: [email protected] (plain text — not a clickable link). We aim to respond to all privacy-related enquiries within 5 business days.

2 Data We Collect

bkk3 collects personal data in three principal ways: data you provide directly, data collected automatically during your use of the Platform, and data obtained from third-party verification partners. The categories and examples are summarised in the data table above. Additional detail is provided here:

2.1 Data You Provide Directly. When you register a bkk3 account, you provide identity and contact information including your full legal name, date of birth, residential address in Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), email address, and mobile number. During identity verification (KYC), you may also be asked to submit a copy of your National ID Card (NID) or passport, and a photograph for facial verification purposes.

2.2 Financial Information. To process deposits and withdrawals, bkk3 collects payment method identifiers such as your bKash or Nagad mobile wallet number, your Rocket account reference, or the last four digits of a Visa or Mastercard. Full card numbers are never stored by bkk3; card processing is handled by PCI-DSS compliant payment processors.

2.3 Automatically Collected Data. When you access the Platform, our servers automatically record technical data including your IP address, device identifier, browser type, operating system version, and session timestamps recorded in Bangladesh Standard Time (UTC+6). This data is used for security monitoring, fraud detection, and platform performance analysis.

2.4 Third-Party Data. bkk3 may receive information about you from identity verification partners, payment processors, and fraud prevention services. We use this information solely to complete the purposes for which it was shared and do not use it for unrelated processing activities.

3 How We Use Your Data

bkk3 uses the personal data we collect for the following purposes:

• Account Management: Creating and maintaining your bkk3 account, verifying your identity, and enabling secure login.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported Bangladeshi bank transfers.
• Regulatory Compliance: Meeting our legal obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, including reporting obligations where mandated by law.
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the Platform.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of our communications with you.
• Platform Improvement: Analysing how players interact with the Platform to improve game offerings, user experience, and feature performance.
• Responsible Gaming: Monitoring for indicators of problem gambling behaviour and proactively reaching out where our responsible gaming obligations require us to do so.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign messages — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.

4 Legal Basis for Processing

bkk3 processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing is necessary to enter into or perform the contract between you and bkk3 (i.e., to operate your account and deliver the Services you have requested).
• Legal Obligation: Processing is required to comply with a legal obligation applicable to bkk3, such as KYC identity verification, AML transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing is necessary for the purposes of bkk3's legitimate interests (such as fraud prevention, platform security, and service improvement), where those interests are not overridden by your rights and freedoms.
• Consent: For processing activities that are not strictly necessary for the performance of our contract with you — particularly direct marketing communications — we will obtain your explicit consent before processing. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Cookies & Tracking Technologies

5.1 What We Use. bkk3 uses cookies and similar tracking technologies (including local storage and session tokens) to operate core Platform functions, maintain your authenticated session, remember your preferences, and collect anonymised analytics data about Platform usage patterns.

5.2 Types of Cookies. We deploy the following cookie categories:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby filter states, and display options.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform, which features are most used, and where errors occur. This data is used to improve the Platform and is not linked to your identity.
• Marketing Cookies: Used only where you have consented to receive personalised promotional content. These cookies help ensure you see relevant offers rather than generic ones.

5.3 Managing Cookies. You may configure your browser to refuse cookies or to alert you when cookies are being set. Disabling strictly necessary cookies will impair your ability to use the Platform, including logging in. Disabling analytics or marketing cookies will not affect core functionality.

6 Data Sharing & Third Parties

bkk3 does not sell or rent your personal data. We share data only in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card network processors receive the minimum financial data required to complete your deposit or withdrawal. All payment partners are contractually obligated to handle your data securely and in compliance with applicable regulations.
• Identity Verification Partners: Third-party KYC/AML service providers process your identity documents to verify your eligibility to use the Platform. These partners operate under strict data processing agreements and may not use your data for any other purpose.
• Technology Infrastructure Providers: Cloud hosting, content delivery network (CDN), and server management providers may process technical data in the course of maintaining Platform infrastructure. These providers act as data processors under our instruction.
• Legal & Regulatory Authorities: bkk3 may disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or to protect the rights and safety of bkk3, its players, or third parties.
• Game Providers: When you launch a game supplied by Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, Microgaming, or another studio, minimal technical session data (such as a session token) may be passed to that provider to initialise the game. No unnecessary personal data is shared with game studios.

7 International Data Transfers

bkk3's primary data processing infrastructure is located in secure data centres serving the Asian region. However, some of our technology providers and game studios operate globally, which may result in your data being processed in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, bkk3 takes steps to ensure that appropriate safeguards are in place, including contractual protections requiring the recipient to handle your data to a standard consistent with applicable data protection principles. By using the Platform, you acknowledge that your data may be transferred to and processed in countries other than Bangladesh.

8 Data Security

bkk3 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 128-bit SSL/TLS encryption for all data transmitted between your device and bkk3 servers.
• Password hashing using industry-standard algorithms; plain-text passwords are never stored.
• Access controls restricting personal data access to authorised personnel on a need-to-know basis.
• Regular security audits and vulnerability assessments of Platform infrastructure.
• Intrusion detection systems monitoring for anomalous access patterns in real time.
• Secure, encrypted backup procedures with defined recovery time objectives.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights or freedoms, bkk3 will notify you without undue delay and in accordance with applicable law.

9 Data Retention

bkk3 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The specific retention periods applicable to each data category are set out in the Personal Data Categories table above.

After the applicable retention period expires, your personal data will be securely deleted or anonymised. Anonymised data (which can no longer be linked to your identity) may be retained indefinitely for statistical analysis and Platform improvement purposes.

If you close your bkk3 account, we will retain your identity and financial data for a minimum of five years following account closure in order to comply with our AML and KYC legal obligations. This data will not be used for any marketing or operational purpose after account closure.

10 Your Privacy Rights

As a bkk3 account holder, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] (plain text — not a link). We will respond within 30 days of receiving a valid request.

11 Children's Privacy

The bkk3 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not use the Platform or submit any personal data to bkk3.

If bkk3 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any winnings accrued by an underage account holder will be forfeited.

12 Marketing Communications

bkk3 may send you promotional emails, SMS messages, or push notifications about bonuses, seasonal promotions (such as Eid, Pohela Boishakh, BPL season offers, and T20 World Cup campaigns), new game releases, and platform updates. We will only send such communications if you have explicitly opted in during registration or via your account preferences.

You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawal of consent will not affect any processing that occurred prior to withdrawal, and will not affect service-related communications (such as account security alerts, transaction confirmations, and support responses), which we may continue to send as they are necessary for the operation of your account.

13 Updates to This Privacy Policy

bkk3 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, legal requirements, or Platform features. When we make material changes, we will publish the updated policy on this page with a revised effective date and, where the changes significantly affect your rights, notify you via email or a prominent notice on the Platform.

Your continued use of the bkk3 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page regularly to stay informed about how bkk3 protects your personal data.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or would like to raise a concern about the way bkk3 processes your personal data, please contact our support team:

Email: [email protected] (plain text — not a clickable link)

We will acknowledge your enquiry within 48 hours (Bangladesh Standard Time, UTC+6) and aim to provide a substantive response within 30 calendar days. For complex requests, we may require additional time, in which case we will notify you of the expected response timeline.

If you are not satisfied with bkk3's response to your privacy complaint, you may have the right to escalate your concern to the relevant data protection authority or supervisory body in your jurisdiction.