bk322 Privacy Policy

bk322 collects personal data from you in three principal ways: information you provide directly during registration and account use, information generated automatically through your interaction with the platform, and information received from trusted third-party service providers where necessary to deliver our services.

1.1 Information You Provide Directly

When you create an account on bk322, you are required to provide the following personal information:

• Full name — as it appears on your government-issued identity document
• Date of birth — used to verify that you meet the minimum age requirement of 18 years
• Email address — used for account communications, verification, and support correspondence
• Mobile number — used for account security, two-factor authentication, and mobile payment processing via bKash, Nagad, Rocket, or Upay
• Residential address — collected as part of Know Your Customer (KYC) compliance requirements
• National ID or passport number — collected during identity verification upon withdrawal or as part of routine compliance review

Additionally, when you contact bk322 support, participate in promotions, or complete surveys, you may provide supplementary information such as correspondence history, feedback, and preferences.

1.2 Information Collected Automatically

When you access the bk322 platform, certain technical data is collected automatically by our systems. This includes:

• IP address — used for security monitoring, fraud detection, and geolocation verification
• Device type and operating system — used to optimise platform performance and compatibility
• Browser type and version — used for technical diagnostics and interface rendering
• Session timestamps — all activity timestamps are recorded in Bangladesh Standard Time (BST, UTC+6)
• Pages visited and features used — used for platform improvement, responsible gaming monitoring, and fraud detection
• Referring URL — the web address from which you navigated to bk322

1.3 Information from Third Parties

bk322 may receive personal data about you from third-party service providers in the following circumstances:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — transaction reference data confirming deposit and withdrawal events
• Identity verification services — confirmation of identity document authenticity where bk322 uses a third-party KYC provider
• Fraud prevention databases — alerts regarding accounts or payment methods flagged for suspicious activity across the industry
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — game session data, round IDs, and stake/outcome records to support dispute resolution

1.4 Sensitive Data

bk322 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where explicitly required by law or where you voluntarily provide such information in a support context. Where sensitive data is incidentally received, it is handled with the highest standard of care and is not used for any commercial purpose.

bk322 uses personal data only for specific, clearly defined purposes. We do not process your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which bk322 processes personal data are as follows.

2.1 Account Management and Service Delivery

The most fundamental use of your personal data is to create and maintain your bk322 account, to authenticate you when you log in, to process your deposits and withdrawals, and to make games and betting markets available to you. Without this processing, the core bk322 service cannot be delivered.

2.2 Identity Verification and Fraud Prevention

bk322 is required to verify the identity of players to prevent fraud, money laundering, and underage gambling. Your name, date of birth, national ID data, and payment method details are processed for this purpose. We may cross-reference this information against third-party identity and fraud databases. Where suspicious activity is detected, we may suspend account activity pending further investigation and, where legally required, report the matter to the relevant authorities.

2.3 Transaction Processing

Your mobile number, bKash/Nagad account reference, and transaction history are processed to facilitate deposits, withdrawals, and any associated refunds or reversals. Transaction data is retained as part of our financial record-keeping obligations.

2.4 Responsible Gaming

bk322 uses behavioural data — including session frequency, deposit patterns, wagering volumes, and time-on-platform metrics — to identify players who may be exhibiting signs of problem gambling. This data is processed in the interest of player welfare and may be used to trigger responsible gaming interventions such as cool-down suggestions, limit reduction recommendations, or support outreach from our team.

2.5 Platform Improvement and Analytics

Aggregated and anonymised usage data is processed to understand how players interact with the bk322 platform — which game categories are most popular, where players experience friction in the interface, and how promotional campaigns perform. This analysis helps bk322 improve the platform for all players. Where analytics data is aggregated and cannot be linked back to an individual, it falls outside the scope of personal data protection obligations.

2.6 Marketing Communications

Where you have given explicit consent at registration or subsequently through your account settings, bk322 may send you promotional communications by email or SMS. These may include details of new games, cricket season promotions, bonus offers tied to BPL and T20 events, and Eid and Pohela Boishakh seasonal promotions. You may withdraw your consent to marketing communications at any time without affecting your ability to use the platform.

2.7 Legal and Regulatory Compliance

bk322 processes personal data as required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and any reporting obligations imposed by financial regulators or law enforcement agencies. Where bk322 is required by law to disclose personal data to a government body, we will do so in accordance with that legal obligation and, where legally permissible, notify the affected player.

bk322 does not share your personal data with third parties except in the limited and specific circumstances described in this section. In every case where data is shared, we require the recipient to maintain appropriate data security standards.

3.1 Payment Service Providers

To process your deposits and withdrawals, bk322 shares relevant transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. This data is limited to the information needed to complete the transaction (amount, reference, account identifier). These providers operate under their own privacy policies and are independently responsible for data they hold.

3.2 Game Technology Providers

bk322 integrates games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, a game session identifier and stake/outcome data is shared with the relevant provider for the purposes of game operation, fairness certification, and dispute resolution. bk322 does not share your full personal profile with game providers.

3.3 Identity Verification and KYC Partners

Where bk322 uses a third-party identity verification service to validate documents submitted during KYC, your identity document data is shared with that provider solely for verification purposes. These providers are contractually bound to process your data exclusively for this purpose and to maintain appropriate security standards.

3.4 Legal and Regulatory Bodies

bk322 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by law, by court order, or as part of a lawful investigation into fraud, money laundering, or other criminal activity. Where legally permissible, bk322 will inform the affected account holder of such disclosure.

3.5 Business Transfers

In the event that bk322 undergoes a merger, acquisition, or transfer of all or a portion of its business assets, player data held by bk322 may form part of the transferred assets. In such an event, affected players will be notified in advance and the new data controller will be required to honour the terms of this Privacy Policy or obtain fresh consent for any material changes to data processing.

3.6 What We Do Not Share

bk322 does not share your personal data with advertising networks for targeted advertising purposes, with data brokers, with social media platforms for profiling, or with any party for purposes beyond those described in this section. We do not sell your data under any circumstances.

bk322 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data held by bk322.

5.1 Account Data

Your core account data — including name, date of birth, email address, mobile number, and residential address — is retained for the duration of your active account plus a minimum of five years following account closure. This extended retention period is required for anti-money-laundering (AML) compliance and to support any post-closure dispute resolution or regulatory audit.

5.2 Transaction Records

All deposit, withdrawal, bet, and payout records are retained for a minimum of five years from the date of the transaction. This period is required to comply with financial record-keeping obligations and to support any audit, investigation, or dispute that may arise after the transaction date. Transaction records include BST timestamps, amounts in Bangladeshi Taka, payment method references, and game or bet identifiers.

5.3 KYC and Identity Documents

Identity documents submitted as part of the KYC process — including copies of national ID cards, passports, and proof-of-address documents — are retained for five years following account closure. Where an account is closed due to suspected fraud or money laundering, the relevant documents and associated investigation records may be retained for a longer period as required by law or regulatory guidance.

5.4 Communication Records

Records of support communications — including live chat transcripts, email correspondence, and complaint records — are retained for three years from the date of the last communication. This allows bk322 to reference prior interactions when handling escalations and to demonstrate compliance with its complaints handling obligations.

5.5 Marketing Consent Records

Records of your marketing consent — including the date and method of consent, and any subsequent withdrawals of consent — are retained for the duration of your account plus three years following account closure. These records are necessary to demonstrate compliance with direct marketing consent requirements.

5.6 Deletion After Retention Period

When a personal data retention period expires, bk322 will securely delete or irreversibly anonymise the relevant data in accordance with its internal data deletion procedures. Where data cannot be fully deleted due to its integration within shared system logs or backup archives, it will be isolated from active processing and access will be restricted until the next scheduled purge cycle.

bk322 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, bk322 maintains security standards consistent with industry best practices for online gaming and financial services.

7.1 Encryption

All data transmitted between your device and the bk322 platform is encrypted using SSL/TLS protocols. Sensitive data stored in our systems — including identity document references and payment method identifiers — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect and are rotated on a scheduled basis.

7.2 Access Controls

Access to personal data within bk322's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific job function. All internal access is logged and subject to periodic review. Administrative access to systems containing personal data requires multi-factor authentication.

7.3 Payment Data Handling

bk322 does not store full bKash or Nagad account credentials, full card numbers, or CVV codes on its own servers. Payment transactions are processed via the secure APIs of the respective payment providers. bk322 retains only transaction reference identifiers and amounts necessary for financial reconciliation and dispute resolution.

7.4 Security Incident Response

bk322 maintains an internal security incident response procedure. In the event of a data breach that poses a risk to the rights and freedoms of affected players, bk322 will take immediate containment action, conduct a root-cause investigation, and notify affected players as soon as reasonably practicable. Where a breach is of a nature that requires regulatory notification, this will be carried out in accordance with applicable legal obligations.

7.5 Your Responsibility

The security of your bk322 account also depends on the steps you take to protect your login credentials. You are responsible for keeping your username and password confidential and for ensuring that you log out of your account after each session, particularly when using a shared or public device. If you suspect that your account has been accessed without your authorisation, contact bk322 support immediately via live chat so that your account can be secured without delay.

7.6 Third-Party Security Standards

bk322 requires all third-party service providers who process personal data on our behalf — including KYC partners, payment processors, and game providers — to maintain security standards that are at least equivalent to those described in this section. These requirements are incorporated into the contractual agreements bk322 holds with each provider.

8.1 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bk322 handles your personal data, please contact our support team in the first instance. Our support team is available 24 hours a day, seven days a week via live chat on the bk322 platform and responds to all email enquiries within five business days (Bangladesh Standard Time, UTC+6).

For written privacy enquiries, our contact address is: [email protected]. Please note that this address is displayed as plain text and is not a clickable link.

8.2 Privacy Complaints

If you believe that bk322 has not handled your personal data in accordance with this Privacy Policy, you are entitled to raise a formal complaint. Complaints should be submitted in writing to the email address above with the subject line "Privacy Complaint" and a clear description of your concern. bk322 will acknowledge your complaint within five business days and will provide a substantive written response within 30 days.

8.3 Policy Updates

bk322 reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, changes in applicable law, and improvements to our privacy practices. The effective date of the current version is displayed in the hero section at the top of this page. Where a material change is made to this policy — meaning a change that affects how your data is processed in a way that may not be to your advantage — bk322 will notify registered players by email prior to the change taking effect. Continued use of the bk322 platform following notification of a policy update constitutes acceptance of the revised policy.

8.4 Children and Minors

bk322 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If bk322 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. Parents or guardians who believe a minor may have registered on bk322 are urged to contact our support team immediately so that the matter can be investigated and resolved without delay.