bk3 Privacy Policy

Introduction

bk3 ("we", "us", "our") operates the online casino and sports betting platform accessible at bk3.today (the "Platform"). We are committed to protecting the privacy of every player who registers and uses our services. This Privacy Policy sets out, in plain and formal terms, the types of personal data we collect from you, the purposes for which that data is processed, the legal bases on which we rely to process it, the circumstances under which it may be disclosed to third parties, and the rights you hold as a data subject.

This Policy applies to all personal data collected through the bk3 Platform, including data submitted during account registration, data gathered automatically during your use of the Platform, and data provided through your interactions with bk3 customer support. It applies to all users of the Platform regardless of location, with particular relevance to players based in Bangladesh.

We encourage you to read this Policy carefully alongside the Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into this document.

Data Controller

For the purposes of this Privacy Policy, bk3 acts as the data controller in respect of all personal data collected through the Platform. As data controller, bk3 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.

If you have any questions regarding this Privacy Policy or wish to exercise your data rights, you may contact the bk3 Data Protection contact point using the details provided in Section 15 (Contact Us) of this Policy.

Personal Data We Collect

bk3 collects personal data that is necessary to provide you with a functional, secure, and compliant gaming experience. The categories of personal data we collect are described below:

When you create a bk3 account, we collect the information you provide during the registration process, including your full legal name, date of birth, mobile phone number, and your preferred payment method details (such as your registered bKash or Nagad mobile number).

In fulfilment of our Know Your Customer (KYC) obligations, bk3 may request and collect copies of government-issued identity documents (National ID card, passport, or driving licence), proof of residential address, and confirmation of ownership of your registered payment method. These documents are collected and retained solely for identity verification and fraud prevention purposes.

bk3 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method references, transaction timestamps, and transaction statuses. This data is retained for financial audit, fraud detection, and regulatory compliance purposes.

We collect records of your gaming and betting activity on the Platform, including game titles played, bet amounts, wagering history, session start and end times, and promotional bonus usage. This data is used to manage your account, fulfil responsible gaming obligations, and detect unusual patterns that may indicate problem gambling or fraudulent activity.

When you access the bk3 Platform, we automatically collect certain technical information from your device and browser, including your IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and pages visited within the Platform. This data is used for platform security, fraud prevention, and service optimisation.

When you contact bk3 customer support — whether via email, WhatsApp, or the Platform's support interface — we collect and retain records of those communications, including message content, timestamps, and the subject matter of any enquiry or complaint. This data is retained to ensure continuity of support and for quality assurance purposes.

How We Collect Your Data

bk3 collects your personal data through the following channels:

• Directly from you — when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, or contact customer support.
• Automatically during Platform use — through server logs, session cookies, and technical tracking mechanisms that record device and behavioural data each time you access the Platform.
• From payment service providers — bKash, Nagad, Rocket, Upay, and other payment partners may transmit transaction confirmation data to bk3 when you initiate a deposit or withdrawal. bk3 receives only the data necessary to confirm and reconcile the transaction.
• From identity verification services — where bk3 engages third-party KYC verification tools to cross-check identity document authenticity, data returned by such services is retained as part of your account verification record.

Legal Basis for Processing

bk3 processes your personal data on the following legal bases, depending on the type of data and the purpose of processing:

• Contractual necessity: Processing that is necessary to perform the contract between you and bk3 — including account management, payment processing, and delivery of gaming services — is carried out on the basis that it is required to fulfil our contractual obligations to you.
• Legitimate interests: Certain processing activities — including fraud prevention, Platform security, service improvement, and responsible gaming monitoring — are carried out on the basis of bk3's legitimate interest in operating a safe, fair, and commercially viable platform, provided such interests do not override your fundamental rights and freedoms.
• Legal obligation: Where applicable law requires bk3 to collect, retain, or disclose certain data — for example, for anti-money laundering (AML) compliance, KYC verification, or in response to a lawful request from a competent authority — processing is carried out to fulfil that legal obligation.
• Consent: Where bk3 relies on your consent as the legal basis for processing (for example, in relation to optional communications preferences), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Personal Data

bk3 uses the personal data it collects for the following specific purposes:

• To create, manage, and maintain your bk3 account, including processing account verification and any account modifications you request.
• To process your deposits and withdrawals via supported payment methods including bKash, Nagad, Rocket, and Upay, and to reconcile financial records associated with your account.
• To conduct identity and age verification in accordance with our KYC policy, ensuring that all active account holders meet the minimum age requirement of 18 years.
• To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and any other conduct prohibited under the bk3 Terms & Conditions.
• To monitor your gaming activity for indicators of problem gambling and to deploy responsible gaming interventions — such as deposit limit prompts or self-exclusion notices — where appropriate.
• To respond to your enquiries, complaints, and support requests, and to maintain a record of communications for quality assurance purposes.
• To send you account-related communications, such as transaction confirmations, KYC status updates, and important policy change notifications.
• To analyse aggregate, anonymised Platform usage data for the purpose of improving bk3's products, performance, and user experience. Such analysis does not involve the processing of individually identifiable personal data.
• To comply with any applicable legal, regulatory, or law enforcement obligations that require the collection, retention, or disclosure of personal data.

Data Sharing & Third Parties

bk3 does not sell, rent, or trade your personal data to any third party. Personal data may be shared only in the following limited and controlled circumstances:

To process deposits and withdrawals, bk3 must share transaction-relevant data with the applicable payment service provider (bKash, Nagad, Rocket, Upay, or partner banks). The data shared is limited to what is strictly necessary to execute and confirm the payment. Each payment partner operates under its own privacy policy and security standards.

Where bk3 engages a third-party KYC verification service to authenticate identity documents, the relevant document data is transmitted to and processed by that service provider under a data processing agreement that requires them to handle the data securely and use it solely for verification purposes.

Licensed game studios integrated into the bk3 Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised session identifiers and bet data necessary to operate the game experience. These providers do not receive your full registration or financial data and are contractually prohibited from using any data shared with them for purposes beyond game delivery.

bk3 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction if required to do so by applicable law, valid legal process, or in connection with the investigation or prosecution of illegal activity involving the bk3 Platform. bk3 will, where legally permitted, notify you of such disclosure.

In the event of a merger, acquisition, asset sale, or corporate restructuring involving bk3, personal data held by bk3 may be transferred to the successor entity as part of that transaction, subject to the acquirer honouring this Privacy Policy or providing equivalent protections.

Cookies & Similar Technologies

bk3 uses cookies and similar client-side storage technologies to operate the Platform securely and efficiently. A cookie is a small text file stored on your device by your browser when you visit a website. The following categories of cookies are used on the bk3 Platform:

These cookies are strictly necessary for the Platform to function. They maintain your login session, ensure secure authenticated access to your account, store your language and display preferences, and protect the Platform against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without breaking core Platform functionality.

bk3 may use analytical cookies to collect aggregate, anonymised data about how users interact with the Platform — such as which pages are most visited, average session duration, and common navigation paths. This data is used exclusively to identify areas for Platform improvement and is not linked to any individual user's identity.

Security cookies are used to detect and prevent suspicious or anomalous activity on the Platform, including automated login attempts, account takeover attacks, and fraudulent payment activity. These cookies may record your IP address, device fingerprint, and session behaviour for fraud analysis purposes.

You may control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications before cookies are set. Please note that disabling essential cookies will impair or prevent your ability to use core Platform features, including account login and payment processing.

Data Retention

bk3 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised — such that it can no longer be linked to any identifiable individual — may be retained indefinitely for aggregate statistical analysis.

Your Data Rights

As a data subject, you hold the following rights in relation to the personal data bk3 holds about you. To exercise any of these rights, please contact bk3 support at [email protected]. bk3 will respond to valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data bk3 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to Rectification: If any personal data bk3 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent was the processing basis), or where you object to processing and there are no overriding legitimate grounds. This right is subject to bk3's legal retention obligations — we may be required to retain certain data even after an erasure request.
• Right to Restriction of Processing: You may request that bk3 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified, or where you have objected to processing pending determination of whether bk3's legitimate grounds override your rights.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on bk3's legitimate interests. bk3 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where bk3 processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Data Security

bk3 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and bk3 servers is encrypted in transit using industry-standard SSL/TLS protocols, preventing interception by unauthorised third parties.
• Password Hashing: Account passwords are never stored in plain text. They are processed using strong cryptographic hashing algorithms with individual salts, ensuring that passwords cannot be recovered even in the event of a data breach.
• Access Controls: Access to personal data within bk3's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific role, and all internal data access is logged and audited.
• Two-Factor Authentication: bk3 supports two-factor authentication (2FA) for player accounts as an additional layer of account security. Players are encouraged to enable 2FA from their account security settings.
• Regular Security Reviews: bk3 conducts regular internal and, where appropriate, independent security assessments to identify and address potential vulnerabilities in the Platform's infrastructure and data handling processes.

Notwithstanding the above measures, no method of data transmission over the internet or electronic data storage is completely secure. While bk3 endeavours to protect your personal data using commercially reasonable means, we cannot guarantee absolute security. You are encouraged to maintain the security of your own account credentials and to notify bk3 support immediately if you suspect any unauthorised access to your account.

Children & Minors

The bk3 Platform is strictly intended for use by adults aged 18 years and above. bk3 does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor under your care has registered an account with bk3 or submitted personal data to the Platform, please contact us immediately at [email protected].

Upon receiving a verified report of underage registration, bk3 will immediately suspend the relevant account, delete all associated personal data to the extent permissible by applicable law, and refund any real money balance held in that account to the registered payment method. Any promotional or bonus funds credited to the account will be forfeited.

Third-Party Links

The bk3 Platform may contain references to third-party services — such as game studio providers or payment platforms — in an informational context. This Privacy Policy applies solely to data collected and processed by bk3 through the bk3 Platform. It does not apply to any third-party website, application, or service that may be referenced within the Platform's content.

bk3 has no control over the privacy practices of third-party entities and accepts no responsibility or liability for their data handling. We encourage you to review the privacy policies of any third-party service you interact with independently of the bk3 Platform.

Changes to This Privacy Policy

bk3 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, bk3 will notify registered players via the email address associated with their account and/or via a prominent notice on the bk3.today homepage, no fewer than seven (7) days before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this document reflects the date on which the most recent revision was made. We encourage you to review this Policy periodically to remain informed of how bk3 protects your personal data. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

All previous versions of this Privacy Policy are superseded by the current version. If you have questions about a specific change, please contact bk3 support at the details provided in Section 15 below.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bk3 holds about you, please contact the bk3 support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000000
• Support Hours: Available daily — Bangladesh Standard Time (BST, UTC+6)

Data rights requests (access, rectification, erasure, portability, objection) should be submitted via email to [email protected] with the subject line "Data Rights Request" and a brief description of the right you wish to exercise. bk3 will acknowledge receipt of your request within two (2) BST business days and respond substantively within thirty (30) days.