bk98 Privacy Policy

2. Information We Collect

bk98 collects personal data across several categories, depending on how you interact with the Platform. The following data types and their respective purposes are set out below.

3. How We Use Your Information

bk98 uses the personal data it collects for the following purposes only. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent.

• Account creation and management — verifying your identity at registration, maintaining your account record, and enabling you to log in and use the Platform.
• Transaction processing — handling deposits and withdrawal requests, reconciling payment records, and resolving payment disputes with mobile money providers including bKash, Nagad, Rocket, and Upay.
• Regulatory compliance — conducting KYC checks, anti-money laundering screening, and age verification as required by applicable law and best-practice compliance frameworks.
• Fraud prevention and security — detecting and investigating suspicious activity, enforcing account security policies, and protecting the Platform and its users from fraud, cheating, and abuse.
• Customer support — responding to your queries, resolving disputes, handling complaints, and providing guidance on responsible gaming tools.
• Platform improvement — analysing aggregated, anonymised usage data to understand how the Platform is used, identify technical issues, and improve navigation, game selection, and the overall user experience.
• Responsible gaming — monitoring account activity for indicators of problem gambling behaviour and enabling the delivery of responsible gaming tools including deposit limits, session reminders, and self-exclusion.

bk98 does not use your personal data for targeted advertising, profiling for commercial gain, or any purpose other than those listed above. Where we wish to use your data for a new purpose not covered by this Policy, we will notify you and seek your explicit consent before doing so.

4. Legal Basis for Processing

bk98 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved.

• Contractual necessity — processing your registration data, transaction records, and account activity is necessary to perform the contract between you and bk98 (i.e., to provide you with access to the Platform and its services).
• Legal obligation — conducting KYC checks, retaining transaction records, and cooperating with law enforcement is required by applicable anti-money laundering, counter-terrorism financing, and data protection laws.
• Legitimate interests — fraud prevention, Platform security monitoring, and responsible gaming enforcement are carried out on the basis of bk98's legitimate interest in maintaining a safe and fair gaming environment.
• Consent — where bk98 sends you optional promotional communications or uses non-essential cookies, it does so on the basis of your consent. You may withdraw consent at any time by contacting [email protected] or by adjusting your browser cookie settings.

5. Sharing Your Information

bk98 does not sell or rent your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

• Payment processors — bk98 shares transaction data with mobile financial service providers (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard) solely to process your deposit and withdrawal requests. These providers are contractually bound to use your data only for payment processing.
• Game providers — limited session and account-state data is shared with game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to enable you to participate in their games through the Platform. Game providers are not permitted to use this data for any purpose other than game delivery.
• Technology service providers — bk98 uses trusted third-party providers for hosting infrastructure, fraud detection systems, and customer support tooling. These providers act as data processors under contractual terms that restrict their use of your data to the services they provide to bk98.
• Legal and regulatory authorities — bk98 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, by a court order, or where disclosure is necessary to protect the rights or safety of bk98, its users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of all or part of bk98's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

6. Payment Data and Financial Privacy

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the payment transaction is processed directly by the relevant payment provider using their own secure infrastructure. bk98 does not store your full mobile banking PIN, card number, or CVV. bk98 receives only a transaction reference, the amount, and a status confirmation from the payment provider.

bk98 retains a record of the transaction amount, date, time (Bangladesh Standard Time, UTC+6), transaction reference number, and the payment method used. This information is necessary for account reconciliation, dispute resolution, and compliance with applicable financial record-keeping requirements. Payment transaction records are retained for a minimum of five years from the date of the transaction.

7. Cookies and Tracking Technologies

bk98 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help us recognise you, maintain your session, and understand how the Platform is used. The following categories of cookies are used.

You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Platform. bk98 does not use third-party advertising cookies or retargeting pixels.

8. Data Retention

bk98 retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply.

• Active account data (registration details, account balance, transaction history) is retained for the full duration of your account's active status plus a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC verification documents are retained for a minimum of five years following the date of submission, in compliance with applicable anti-money laundering requirements.
• Customer support communications are retained for two years from the date of the most recent interaction, after which they are permanently deleted unless they are relevant to an unresolved dispute or ongoing legal proceeding.

Following the expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised so that it can no longer be associated with any individual. You may request early deletion of certain categories of personal data by contacting [email protected], subject to our legal obligation to retain specific records.

9. Your Data Rights

As a User of the bk98 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered mobile number and a description of your request.

• Right of access — you may request a copy of all personal data bk98 holds about you, including the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right of rectification — if any personal data bk98 holds about you is inaccurate or incomplete, you may request that it be corrected or completed. Certain data (such as your registered name and date of birth) may require supporting documentation before correction is made.
• Right of erasure — you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. This right is subject to our legal obligation to retain certain records.
• Right to restrict processing — you may request that bk98 temporarily suspend the processing of your personal data in certain circumstances, such as while a rectification request is being assessed or while you contest the lawfulness of processing.
• Right to data portability — you may request that bk98 provide you with a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object — you may object to the processing of your personal data where bk98 is processing it on the basis of legitimate interests. bk98 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.

bk98 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

10. Data Security

bk98 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls that restrict staff access to personal data on a need-to-know basis, regular security audits and penetration testing, and automated fraud and anomaly detection systems that monitor the Platform in real time.

While bk98 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bk98 will notify you as soon as reasonably practicable. We strongly recommend that you protect your bk98 account by using a strong, unique password and by never sharing your login credentials or OTP with anyone.

11. Minors and Age Verification

The bk98 Platform is strictly intended for adults aged 21 years and above. bk98 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration process, and enhanced KYC checks may be conducted at any time to confirm that a User meets the minimum age requirement.

12. Third-Party Links and Services

The bk98 Platform may contain references to third-party game providers and payment processors. While bk98 carefully selects its partners, we are not responsible for the privacy practices or the content of third-party services. Each third-party provider operates under its own privacy policy, and we encourage you to review those policies before providing any personal information directly to a third party. This Privacy Policy applies only to data collected and processed by bk98 through the bk98.ws Platform.

13. Changes to This Privacy Policy

bk98 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will take reasonable steps to notify registered Users directly — for example, by sending a notification to the mobile number associated with their account.

Your continued use of the bk98 Platform following the publication of any amendment to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes to this Policy, you must stop using the Platform and may request account closure by contacting [email protected]. We recommend that you review this Privacy Policy periodically to stay informed of how bk98 handles your personal data.

14. Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about how bk98 has handled your personal data, please contact our customer support team. We aim to respond to all privacy-related queries within 48 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

Privacy and data contact: [email protected] (plain text — not a clickable link). Please include your full registered name, your registered mobile number, and a clear description of your query or request. bk98 does not charge any fee for processing data rights requests.