Privacy Policy — bk999com

When you register for a bk999com account, interact with the platform, or contact our support team, we collect personal data necessary to provide our services. The categories of personal data collected by bk999com are described below.

bk999com does not collect payment card numbers directly. All payment card transactions are processed through PCI-DSS compliant payment gateways. bk999com receives only a tokenised reference to your card, never the full card number, CVV, or expiry date.

Where you provide data about another individual (for example, when naming a beneficiary), you confirm that you have that person's consent to share their information with bk999com and that they have been made aware of this Privacy Policy.

bk999com processes your personal data only for legitimate, clearly defined purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which bk999com processes personal data are as follows:

• Account management: Creating, maintaining, and securing your bk999com player account, including processing your bk999com Login credentials and session management.
• Transaction processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks, and maintaining accurate financial records of all account activity.
• Identity verification: Conducting Know Your Customer (KYC) checks to confirm your identity, verify your age (18+), and meet our anti-money laundering obligations.
• Platform personalisation: Remembering your game preferences, language settings, and display configurations to improve your experience on bk999com.
• Fraud prevention and security: Monitoring account activity for signs of unauthorised access, unusual transaction patterns, bonus abuse, or any other behaviour that may indicate fraud or a breach of our Terms & Conditions.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and providing technical assistance related to your bk999com account.
• Legal compliance: Meeting our obligations under applicable laws and regulations, including retaining records as required by anti-money laundering frameworks.
• Platform improvement: Analysing aggregated, anonymised usage data to identify performance bottlenecks, improve game loading speeds, and optimise the player journey on bk999com.

bk999com does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, to operate the platform effectively and meet legal obligations, we share limited data with carefully selected categories of third-party service providers, each of whom is bound by strict confidentiality and data protection obligations.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the minimum data necessary to process your deposit or withdrawal transaction.
• Game providers: Licensed studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data for game performance analytics. They do not receive your name, contact details, or payment information.
• Identity verification services: Third-party KYC providers may process identity documents you submit for age and identity verification. These providers are contractually prohibited from using your data for any purpose other than verification.
• IT infrastructure providers: Cloud hosting and database service providers who store platform data on secure servers. These providers have no independent right to access or use your personal data.
• Legal and regulatory authorities: Where required by law, court order, or regulatory instruction, bk999com may disclose personal data to competent authorities. We will notify you of such disclosures where legally permitted to do so.

In the event that bk999com undergoes a business restructuring, merger, or acquisition, your personal data may be transferred to the successor entity. You will be notified of any such transfer via the email address registered to your account, and the successor entity will be required to honour the terms of this Privacy Policy.

bk999com uses cookies and similar tracking technologies (including local storage and session storage) to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the player experience.

A cookie is a small text file placed on your device when you visit bk999com. Cookies do not contain executable code and cannot be used to access other files on your device. The types of cookies used by bk999com are described below:

bk999com does not use third-party advertising cookies or cross-site behavioural tracking cookies. You will not be tracked across other websites based on your activity on bk999com.

bk999com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security programme includes the following controls:

• Encryption in transit: All data exchanged between your browser or app and bk999com's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption. The padlock icon in your browser confirms that your connection to bk999com is secure.
• Encryption at rest: Sensitive data stored in bk999com's databases — including identity documents submitted for KYC — is encrypted at rest using industry-standard algorithms. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data is restricted to bk999com staff who require it to perform their job functions. Access is governed by role-based permissions and is logged for audit purposes. Staff with access to personal data are subject to confidentiality obligations.
• Regular security audits: bk999com commissions independent third-party security assessments on a periodic basis. Penetration testing, vulnerability scanning, and code reviews are conducted to identify and remediate security weaknesses before they can be exploited.
• Incident response: bk999com maintains a documented data breach response plan. In the event of a security incident that is likely to result in a risk to your rights, bk999com will notify affected players promptly via registered email and take immediate steps to contain and remediate the breach.

bk999com retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following retention periods apply:

• Active account data: Retained for the full duration of your bk999com account. If your account becomes inactive (no login for 24 consecutive months), bk999com will contact you before initiating any data minimisation process.
• Post-closure account data: Following the closure of your account, core identity and transaction records are retained for a minimum of five (5) years to satisfy anti-money laundering record-keeping obligations.
• KYC documents: Identity and address verification documents are retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Full transaction histories (deposits, withdrawals, bets, wins, bonuses) are retained for seven (7) years in line with standard financial record-keeping requirements.
• Support correspondence: Email and chat records related to support interactions are retained for three (3) years from the date of the interaction.
• Analytics data: Anonymised platform usage data collected via analytics cookies is retained for up to twenty-four (24) months, after which it is permanently deleted.

Once the applicable retention period expires, bk999com will securely delete or irreversibly anonymise your personal data. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and platform improvement purposes.

As a bk999com player, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team at [email protected]. bk999com will respond to all verified rights requests within 30 calendar days. In complex cases, a response may take up to 60 days; you will be notified of any extension within the initial 30-day window.

• Right of Access: You have the right to request a copy of the personal data bk999com holds about you. We will provide this in a clear, structured format at no charge for the first request in any 12-month period.
• Right to Rectification: If any personal data bk999com holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data directly from within your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bk999com's legal retention obligations. Data that must be retained for anti-money laundering or other legal purposes cannot be erased upon request.
• Right to Restriction: You may request that bk999com restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being considered.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) to enable transfer to another service provider, where this is technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though such objections will be balanced against bk999com's operational requirements.
• Right to Withdraw Consent: Where bk999com processes your data on the basis of your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

bk999com reviews this Privacy Policy on a regular basis and reserves the right to update it at any time to reflect changes in platform operations, applicable laws, or industry best practices. The effective date at the top of this page will be updated whenever a substantive change is made.

Where a material change is made to this Privacy Policy — one that significantly affects how your data is collected or used — bk999com will notify registered players via the email address on file at least fourteen (14) days before the change takes effect. Continued use of the bk999com platform after a policy update constitutes acceptance of the revised Privacy Policy.

Minor updates that do not materially affect player rights (such as grammatical corrections, clarifications of existing practices, or formatting changes) may be made without prior notice. We encourage you to review this page periodically to stay informed of how bk999com handles your personal data.

bk999com is committed to resolving privacy concerns fairly and efficiently. If you are not satisfied with the response you receive, you have the right to escalate the matter through any applicable dispute resolution mechanism available under the laws of your jurisdiction.