bk334 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction & Scope

This Privacy Policy ("Policy") describes how bk334 ("bk334", "we", "us", "our") collects, uses, stores, shares, and protects personal data obtained from individuals ("you", "your") who register an account, visit the website at https://bk334.io, use any feature of the bk334 platform, or otherwise interact with bk334 in connection with our online betting and casino services targeting the Bangladesh market.

This Policy applies to all personal data processed by bk334 regardless of the channel through which it was collected — including the website, mobile-optimised browser interface, live chat support, email correspondence, and phone or WhatsApp communications with our support team. By creating or continuing to use a bk334 account, or by continuing to browse the bk334 website, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside bk334's Terms and Conditions and Responsible Gaming Policy, both of which are published on the Platform and incorporated by reference. In the event of a conflict between this Policy and the Terms and Conditions on a data-related matter, this Policy governs.

2 Data Controller Identity

For the purposes of applicable data protection law, bk334 acts as the data controller in respect of the personal data it processes about account holders and site visitors. As data controller, bk334 determines the purposes and means by which your personal data is processed.

Where bk334 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or customer support software vendors — those parties act as data processors operating under bk334's instructions and are contractually bound to process data only for the specific, agreed purpose and to maintain appropriate security standards.

3 Personal Data We Collect

The table below summarises the categories of personal data bk334 collects, the specific data points within each category, and the primary reason for collection.

bk334 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond document photographs used solely for identity matching), or health data, except where you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request.

4 How We Collect Your Data

bk334 collects personal data through the following channels:

• Direct provision: Data you supply when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or filling in any on-platform form.
• Automated technical collection: Data collected automatically when you visit the bk334 website or use the platform, including via cookies, server logs, and similar tracking technologies. See Section 6 for full details on our use of cookies.
• Third-party payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment partners when you initiate a deposit or withdrawal. This data is limited to transaction reference numbers, amounts, and confirmation status.
• Third-party game providers: Game outcome and session data received from our licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used solely for bet settlement, bonus tracking, and responsible gaming monitoring purposes.
• Identity verification services: Where bk334 uses a third-party KYC verification provider to validate identity documents, that provider may return a verified status and a confidence score to bk334 without retaining a copy of your document on its own systems beyond the verification event.

5 Purposes & Legal Basis for Processing

bk334 processes personal data only where a valid legal basis exists. The principal purposes for which we process your data, together with the corresponding legal basis, are set out below:

• Contract performance: Processing your registration data, managing your account, processing deposits and withdrawals in BDT, settling bets and casino game outcomes, and issuing bonus credits. This processing is necessary to perform the contract between you and bk334.
• Legal obligation: Conducting KYC and age verification (mandatory for all players — 21+ only), retaining transaction records for anti-money-laundering compliance, and responding to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Detecting and preventing fraud, protecting platform security, monitoring for responsible gaming indicators, maintaining support records for quality assurance, and analysing platform usage data to improve the service we offer to players across Bangladesh.
• Consent: Sending you promotional communications about bk334 bonuses, new games, cricket betting markets, and seasonal offers where you have opted in to receive such communications. You may withdraw this consent at any time by contacting support or adjusting your account notification settings.

6 Cookies & Tracking Technologies

bk334 uses cookies and similar browser-based tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. bk334 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, previously selected payment method, and responsible gaming dashboard configuration. Disabling these cookies will mean your preferences are not saved between sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players interact with the bk334 platform — such as which game categories are most visited and how long sessions last. This data is used solely for internal product improvement and is not sold to advertisers.
• Security cookies: Used to detect unusual login patterns, multiple account indicators, and potential fraud signals. These are essential to our obligation to protect the integrity of the platform and the safety of all players' accounts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your bk334 account. bk334 does not use third-party advertising or retargeting cookies that track your activity across other websites.

7 Sharing Your Data with Third Parties

bk334 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: Transaction data (mobile number, amount in BDT, reference number) is shared with bKash, Nagad, Rocket, Upay, and partner banks solely to process deposits and withdrawals. These parties act as independent data controllers for their own transaction records under their respective privacy policies.
• Game providers: Your account identifier, bet stakes, and game session data are shared with third-party game providers (Pragmatic Play, Evolution, NetEnt, Microgaming, Spribe, Ezugi) solely for the purpose of game operation and bet settlement. Game providers do not receive your KYC documents or full identity data.
• KYC verification providers: Identity documents submitted for age and identity verification may be processed by a contracted third-party verification service that returns a verified/unverified status to bk334. Providers are contractually prohibited from using your data for any purpose other than this specific verification function.
• Customer support platforms: Support chat transcripts and ticket data are processed by our support software provider solely to deliver and manage customer service. These providers operate under data processing agreements with bk334.
• Legal and regulatory authorities: bk334 will disclose personal data to law enforcement, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.

All third parties with whom bk334 shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specified, agreed purpose.

8 International Data Transfers

Some of bk334's third-party service providers — including game providers and cloud infrastructure partners — may process personal data in countries outside Bangladesh. Where personal data is transferred internationally, bk334 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Policy.

Safeguards used for international transfers include contractual data protection clauses incorporated into our agreements with third-party processors, and selection of vendors who operate under recognised international data protection frameworks. bk334 does not transfer personal data to parties that cannot demonstrate adequate data protection standards.

9 Data Retention Periods

bk334 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and financial record-keeping obligations. The principal retention periods applied by bk334 are as follows:

• Active account data: Retained for the full duration of your active account relationship with bk334.
• Post-closure account data: Following account closure, core account and transaction records are retained for a minimum of five (5) years to satisfy anti-money-laundering and financial audit requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date of submission, in line with standard financial compliance requirements.
• Support communications: Live chat transcripts, emails, and support tickets are retained for two (2) years from the date of the interaction for quality assurance and dispute resolution purposes, after which they are securely deleted.
• Analytics and usage data: Aggregated, anonymised analytics data may be retained indefinitely for platform improvement purposes. This data cannot be used to identify individual players once anonymised.
• Marketing consent records: Records of your marketing opt-in or opt-out preferences are retained for the duration of the account relationship and for one (1) year after account closure to provide evidence of consent status if required.

When personal data is no longer required and its retention period has expired, bk334 deletes or irreversibly anonymises it using secure data destruction methods.

10 Security Measures

bk334 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bk334 platform.
• Encryption at rest for stored personal data, KYC documents, and financial records held in bk334's data environment.
• Role-based access controls ensuring that bk334 staff can access personal data only to the extent necessary for their specific job function.
• Multi-factor authentication requirements for administrative access to systems that hold personal data.
• Regular internal security reviews and vulnerability assessments of the bk334 platform infrastructure.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity, including login attempts from unrecognised IP addresses or devices.
• A documented data breach response procedure that includes notifying affected account holders without undue delay in the event of a breach that poses a risk to their personal data.

While bk334 takes all reasonable steps to protect your personal data, no system is completely immune from security risk. You can help protect your account by following the account security guidance in bk334's Terms and Conditions, in particular by using a strong unique password and enabling two-step verification.

11 Your Data Rights

As a bk334 account holder or site visitor whose personal data we process, you have the following rights in relation to that data:

• Right of access: You may request a copy of the personal data bk334 holds about you. We will provide this within a reasonable period following identity verification.
• Right to rectification: If personal data we hold about you is inaccurate or incomplete, you may request that we correct it. For account details such as your email address or mobile number, you can update these directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we cannot delete data we are legally required to retain (e.g., KYC records and transaction history for AML compliance).
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests, including for direct marketing purposes.

To exercise any of the above rights, please contact bk334 via the live chat function on the Platform or by writing to the support address listed in Section 15. bk334 will respond to all data rights requests within thirty (30) days of receipt. Where a request is complex or where bk334 receives a high volume of requests simultaneously, the response period may be extended by up to a further sixty (60) days, and you will be notified of the extension and the reason for it.

12 Children & Minors

The bk334 Platform is strictly for adults aged 21 years and above. bk334 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and bk334 reserves the right to close any account where the holder is found to be under 21 years of age and to forfeit any associated balance.

If bk334 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take prompt steps to delete that data and close the associated account. If you have reason to believe that a person under 21 has registered an account with bk334, please contact our support team immediately using the contact details in Section 15.

13 Third-Party Links & Services

The bk334 platform may contain references to or integrations with third-party services — for example, the game interfaces provided by Pragmatic Play, Evolution Gaming, or other licensed providers, which are delivered within the bk334 platform environment. bk334's Privacy Policy applies to the bk334 platform as a whole. However, bk334 is not responsible for the privacy practices of independent third-party game providers, payment processors, or any external websites that may be referenced in non-clickable informational content on the Platform.

bk334 does not embed external social media tracking pixels, advertising network scripts, or affiliate tracking codes from third parties that would allow those parties to collect personal data about you without your knowledge while you use the bk334 Platform.

14 Changes to This Policy

bk334 reserves the right to update or amend this Privacy Policy at any time to reflect changes in how we operate, changes in applicable law, or improvements to our data protection practices. When material changes are made, bk334 will notify registered account holders by email or via an on-platform notification at least seven (7) days before the updated Policy takes effect, except where immediate changes are required by law or by an urgent security matter.

The effective date at the top of this Policy will be updated each time the Policy is revised. The most current version of this Policy is always accessible at https://bk334.io/privacy-policy. Your continued use of the bk334 Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should stop using the Platform and contact support to discuss account closure.

15 Contact & Data Requests

For any questions, concerns, or formal requests relating to this Privacy Policy or bk334's handling of your personal data, please contact us through any of the following channels:

• Email: support at bk334.io (plain text — not a clickable link). Please include "Privacy Request" in your subject line for data rights enquiries.
• Live Chat: Available 24 hours a day, 7 days a week, directly on the bk334 Platform. Select "Privacy & Data" from the support topic menu when starting your chat.
• WhatsApp: Available to verified account holders — contact details provided in the Help section of your account after login.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

bk334 aims to acknowledge all privacy-related communications within one (1) business day and to resolve or formally respond to data rights requests within thirty (30) days as described in Section 11.