Privacy Policy for bkkd — How We Protect Your Data

bkkd ("bkkd", "we", "us", "our") operates an online casino and sports betting platform accessible at bkkd.io, offering services to players based in Bangladesh and elsewhere. We are committed to protecting the privacy and personal data of everyone who interacts with our platform, whether as a registered player, a visitor browsing our pages, or a person contacting our support team.

This Privacy Policy ("Policy") sets out in plain, clear English exactly what personal data bkkd collects from you, the purposes for which we process it, the legal bases upon which that processing rests, how long we retain it, who we may share it with, and the rights you have in relation to your own data. This Policy also explains our use of cookies and similar tracking technologies on the bkkd platform.

This Policy forms part of our overall user agreement and should be read alongside our Terms & Conditions and our Responsible Gaming Policy. If you have any questions about how bkkd handles personal data that are not addressed in this document, please contact us at [email protected].

This Policy was last updated on 1 January 2026. We will publish a revised version on this page whenever material changes are made, and we will notify registered players by email in such cases.

bkkd collects personal data in several categories depending on the nature of your interaction with the platform. The categories of data we may hold about you are as follows:

2.1 Identity and Registration Data. When you create a bkkd account, we collect your full legal name, date of birth, nationality, residential address (including city — for example, Dhaka, Chittagong, Sylhet, or Khulna), and a username of your choosing. This data is required to establish your identity, verify your age (21+ policy), and maintain your account record.

2.2 Contact Data. We collect your email address and, where provided, a mobile phone number. These are used for account communications, support responses, and where you have consented, promotional messaging.

2.3 Financial and Payment Data. To facilitate deposits and withdrawals, bkkd collects transaction references and payment method identifiers associated with your use of bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard. We do not store full card numbers or mobile banking PINs — these are handled directly by the respective payment providers under their own security protocols.

2.4 Identity Verification (KYC) Data. As part of our Know Your Customer process, we may collect and retain copies of government-issued photo identification (such as your National ID card or passport), proof of address documents (such as a utility bill or bank statement), and proof of payment method ownership. These documents are stored securely and are used solely for verification purposes.

2.5 Gameplay and Betting Data. We record your betting and gaming activity on the platform, including game sessions, wager amounts, game outcomes, bonus usage, and account balance history. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

2.6 Technical and Device Data. When you access bkkd, our systems automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and time zone (Bangladesh Standard Time, UTC+6). This data is used for security, fraud prevention, and improving the user experience.

2.7 Communications Data. When you contact bkkd via live chat, email, or any other channel, we retain records of that correspondence including the content of messages, timestamps, and the support agent involved. These records are kept for quality assurance, training, and dispute resolution purposes.

2.8 Responsible Gaming Data. If you make use of responsible gaming tools — such as deposit limits, loss limits, cool-off periods, or self-exclusion — we record the nature and parameters of these restrictions. This data is processed to enforce the restrictions you have set and to protect your wellbeing on the platform.

bkkd collects your personal data through several distinct channels:

• Directly from you: Information you actively provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or participate in promotions and surveys.
• Automatically through your use of the platform: Technical and device data collected passively through cookies, log files, and similar tracking technologies whenever you browse or interact with bkkd.io. See Section 7 for a full explanation of our cookie practices.
• From payment service providers: Transaction status confirmations and payment reference data received from bKash, Nagad, Rocket, Upay, and card payment processors in connection with your deposit and withdrawal activity.
• From identity verification services: Where bkkd uses third-party KYC or age-verification tools to cross-reference the identity documents you provide, those services may return confirmation data to us regarding the validity of your documents.
• From fraud prevention and security partners: We may receive data from third-party services that help us identify patterns of suspicious behaviour, account takeover attempts, or fraudulent activity on the platform.

bkkd processes personal data only where a valid legal basis exists for doing so. The legal bases we rely on are:

• Contractual necessity: The majority of data processing on bkkd is necessary to perform our contract with you — that is, to operate your account, process transactions, provide access to games and betting markets, and deliver the services described in our Terms & Conditions.
• Legal obligation: Some processing is required in order to comply with applicable legal obligations, including anti-money laundering (AML) requirements, age verification obligations, and obligations to retain financial transaction records for a defined period.
• Legitimate interests: Where processing is not strictly required by contract or law, bkkd may process data on the basis of its legitimate business interests, provided those interests are not overridden by your rights. This includes fraud detection, platform security, responsible gaming monitoring, and platform analytics.
• Consent: Where bkkd sends you direct marketing communications (such as promotional emails or bonus offers), we do so on the basis of your consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

The personal data collected by bkkd is used for the following specific purposes:

• Creating, maintaining, and managing your registered bkkd account.
• Verifying your identity and age (21+) to comply with our eligibility requirements.
• Processing deposit and withdrawal transactions via your chosen payment method.
• Delivering the games, betting markets, and platform features you access during your sessions.
• Administering bonuses, promotions, tournaments, and loyalty rewards associated with your account.
• Sending transactional communications such as account confirmations, deposit receipts, withdrawal notifications, and security alerts.
• Sending promotional communications, where you have consented to receive them, about new games, special offers, and seasonal events relevant to Bangladeshi players such as Eid promotions or BPL tournament specials.
• Detecting, investigating, and preventing fraud, money laundering, prohibited conduct, and other activities that violate our Terms & Conditions.
• Enforcing responsible gaming tools and restrictions that you have set, and proactively monitoring for signs of problem gambling behaviour.
• Improving the performance, functionality, and user experience of the bkkd platform through analysis of aggregated usage data.
• Responding to your support enquiries, complaints, and data rights requests.
• Complying with any legal obligations or lawful requests from competent authorities.

bkkd does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except where explicitly required by our fraud prevention or AML compliance processes, in which case you have the right to request human review of any decision that adversely affects you.

bkkd does not sell, rent, or commercially trade your personal data. We share personal data only in the following limited and controlled circumstances:

6.1 Service Providers and Technology Partners. bkkd works with carefully selected third-party service providers who assist in the delivery of the platform's services. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa/Mastercard processors), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), KYC and identity verification services, cloud hosting and infrastructure providers, customer support platform operators, and email delivery services. All such providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than providing the specific service for which they have been engaged.

6.2 Legal and Regulatory Disclosure. bkkd may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where we are required to do so by law, or where disclosure is necessary to protect the safety and rights of bkkd, its players, or the public. We will notify affected players of such disclosures where legally permitted to do so.

6.3 Fraud Prevention and Security Networks. Where bkkd participates in shared fraud prevention networks or uses third-party fraud detection services, certain data points (such as device fingerprints or IP addresses associated with confirmed fraudulent accounts) may be shared with those services to protect the integrity of our platform and the broader online gaming ecosystem.

6.4 Business Transfers. In the event that bkkd undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change in data practices that results from it.

6.5 Aggregated and Anonymised Data. bkkd may share aggregated, anonymised data sets (from which individual identities cannot be inferred) with business partners, analytics providers, or for industry research purposes. This type of sharing does not constitute disclosure of personal data and is not subject to the restrictions described above.

bkkd uses cookies and similar tracking technologies (including web beacons and local storage objects) on the bkkd.io platform. These technologies serve the following purposes:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies that keep you logged in during a session, security tokens that protect against cross-site request forgery, and load balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences and settings such as your chosen language (English), game display preferences, and responsible gaming limit settings. Disabling these cookies means your preferences will not be saved between sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the bkkd platform — for example, which game categories are most visited, how long sessions last, and which pages are accessed most frequently. This data helps us improve the platform. Analytics cookies do not identify you as an individual.
• Performance Cookies: Used to monitor platform performance, identify technical errors, and measure page load times. This data is used exclusively for technical improvement purposes.

bkkd does not use third-party advertising cookies or behavioural retargeting cookies that track your activity across other websites. The cookies used on bkkd.io are limited to those necessary for platform operation, personalisation, and internal analytics.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the platform. Disabling other categories of cookies will not prevent you from accessing bkkd but may reduce the quality of your experience.

bkkd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in order to comply with legal and regulatory obligations relating to record-keeping and anti-money laundering requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the completion of the verification process, whichever is later.
• Gameplay and betting history: Retained for a minimum of 3 years following account closure, for the purpose of dispute resolution and regulatory compliance.
• Support communications: Retained for 2 years from the date of the last communication in a given support thread, for quality assurance and dispute resolution purposes.
• Responsible gaming records: Retained for 5 years from the date the relevant restriction was set or lifted, to enable enforcement and to support any future re-registration review process.
• Technical and device data (logs): Typically retained for 12 months, unless a specific security investigation requires longer retention of particular log entries.
• Marketing consent records: Retained for the duration of your marketing subscription and for 2 years following unsubscription, as evidence of your consent preferences.

At the end of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification. If you request deletion of your data under Section 10, we will action that request subject to any overriding legal retention obligations that prevent immediate deletion.

bkkd implements a multi-layered approach to data security, applying appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your browser or device and bkkd's servers is encrypted using TLS (Transport Layer Security). You can verify this by checking that the bkkd.io URL begins with "https://".
• Encryption at rest: Sensitive personal data stored in bkkd's databases, including identity and payment information, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within bkkd's systems is restricted on a strictly need-to-know basis. Employees and contractors who handle personal data are bound by confidentiality obligations and receive data protection training.
• Two-factor authentication: bkkd supports and encourages the use of two-factor authentication (2FA) on player accounts as an additional layer of protection against unauthorised access.
• Regular security reviews: bkkd conducts periodic reviews of its data security practices, including vulnerability assessments, to identify and address potential weaknesses before they can be exploited.
• Incident response: bkkd maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify affected players as promptly as possible and take immediate steps to contain the incident.

While bkkd takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for using strong, unique passwords. If you suspect your account has been compromised, contact [email protected] immediately.

As a user of the bkkd platform, you have a number of rights in relation to your personal data. bkkd respects and upholds these rights and provides a clear process for exercising them:

• Right of Access: You have the right to request a copy of the personal data bkkd holds about you, along with information about how it is being processed. We will provide this information within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly through your account settings, or contact [email protected] for corrections that require manual processing.
• Right to Erasure ("Right to Be Forgotten"): You may request that bkkd delete your personal data. We will honour such requests subject to any legal retention obligations that require us to keep certain data for a defined period (see Section 8). Note that requesting erasure of your account will result in permanent account closure.
• Right to Restriction of Processing: In certain circumstances — for example, while a dispute is being investigated — you may request that bkkd restrict the processing of your data to storage only, without further active use.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of bkkd's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We will verify your identity before processing the request to ensure your data is not disclosed to an unauthorised party. We aim to respond to all data rights requests within 30 days.

bkkd strictly prohibits the use of its platform by any person under the age of 21. This is an absolute rule and is enforced through our account registration process and KYC verification procedures. bkkd does not knowingly collect or process personal data belonging to individuals under the age of 21.

If bkkd becomes aware, through any means, that an account belongs to a person under the age of 21, we will immediately suspend that account, initiate identity verification, and if the age restriction is confirmed to have been breached, permanently close the account. Any funds in the account at the time of closure may be subject to forfeiture in accordance with our Terms & Conditions.

If you believe that a minor has created an account on bkkd, or that your child has accessed the platform, please contact us immediately at [email protected]. We take all such reports seriously and will investigate promptly. We also encourage parents and guardians to use parental control tools and internet filtering software to help prevent minors from accessing online gambling services.

The bkkd platform does not contain links to external third-party websites for commercial or affiliate purposes. However, where third-party game providers (such as Pragmatic Play, Evolution Gaming, Spribe, or Ezugi) deliver games directly within the bkkd interface through embedded technology, those providers operate under their own privacy practices in relation to game-specific data they may process on their end.

bkkd is not responsible for the privacy practices of third-party game providers or payment processors. We select these partners carefully and require them to operate to appropriate data protection standards as a condition of their engagement with bkkd. However, we recommend that you review the privacy policies of any service providers whose technology you interact with directly if you have specific concerns about how they handle data on their own systems.

Where you follow any link that takes you away from the bkkd.io domain entirely, the privacy policy of that external site will apply to your activity there, and bkkd accepts no responsibility for data collected by third-party websites.

bkkd reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, or changes to the services we offer. When material changes are made to this Policy, we will:

• Update the "Last Reviewed" date at the top of this page.
• Notify all registered players by email to the address associated with their account, summarising the key changes in plain language.
• Where required by applicable law, seek fresh consent for any new processing activities that require it.

We encourage you to review this Privacy Policy periodically so that you are always aware of the current version governing your use of bkkd. The most recent version of this Policy is always available at bkkd.io/privacy-policy. Your continued use of the platform after the effective date of a revised Policy constitutes your acknowledgement of the updated terms.

Minor changes that do not materially affect your rights or our data processing practices (such as typographical corrections or clarifications of existing language) may be made without a formal notification, though the "Last Reviewed" date will be updated to reflect any revision.

If you have any questions, concerns, or requests in relation to this Privacy Policy or bkkd's data processing practices, please reach out to our support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 directly through the bkkd platform. Average response time under 5 minutes.
• Response Time: Email responses within 2 hours. Data rights requests actioned within 30 days.

bkkd is committed to resolving all privacy-related enquiries fairly, promptly, and transparently. If you are not satisfied with our response to a privacy concern, you may seek further recourse through applicable consumer protection or data protection channels in your jurisdiction.

We take every privacy enquiry seriously. Our support team is trained to handle data rights requests with appropriate care, and all such requests are logged and tracked to ensure timely resolution. Your trust in bkkd depends on our ability to handle your data responsibly — and that responsibility is one we do not take lightly.