bk22 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bk22 ("bk22", "we", "us", "our") collects, processes, stores, uses, and protects the personal information of visitors and registered players who access the bk22 platform at bk22.lat. This Policy applies to all bk22 services, including sports betting, live casino, slot games, crash games, promotional features, customer support interactions, and all related digital touchpoints.

By creating an account on bk22, depositing funds, placing a bet, or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must cease using the bk22 platform immediately.

This Policy should be read in conjunction with the bk22 Terms & Conditions, which form the overarching legal framework governing your use of the platform. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall take precedence.

Who We Are

bk22 is an online betting and casino platform operating at bk22.lat, serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Rangpur, Barisal, and Mymensingh. As the operator of this platform, bk22 acts as the data controller in respect of all personal data collected from players and visitors through the bk22 website and associated services.

As data controller, bk22 is responsible for determining the purposes and means by which your personal data is processed. We take this responsibility seriously and are committed to transparent, lawful, and fair data processing practices. If you have any questions about how your data is handled, you may contact our Data Protection team directly — see Section 14 for contact details.

Data We Collect

bk22 collects personal data across several categories, depending on how you interact with the platform. The table below summarises the categories of data we collect and examples of specific data points within each category:

bk22 does not intentionally collect any special categories of sensitive personal data, including racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in the standard identity document verification process.

How We Collect Your Data

bk22 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Data you provide directly to bk22 when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, respond to a survey or promotional offer, or update your account profile settings. This includes all information entered into bk22 forms and submitted via live chat or email.

4.2 Automated Collection

Data collected automatically through your interaction with the bk22 platform, including browser cookies, session tokens, server logs, and analytics tracking. Technical data such as your IP address, device fingerprint, and geolocation metadata (at city or district level, consistent with Bangladesh Standard Time UTC+6) is collected automatically whenever you access the platform.

4.3 Third-Party Sources

In certain circumstances, bk22 may receive or verify data about you from trusted third-party sources, including:

• Identity verification and KYC service providers who validate the authenticity of your identity documents
• Payment processors and mobile banking partners — bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to verify transaction status and detect fraudulent payment activity
• Fraud prevention and anti-money-laundering (AML) screening services that cross-reference your details against sanctions lists and watchlists
• Analytics and platform performance providers who aggregate anonymised behavioural data to help bk22 improve service quality

How We Use Your Data

bk22 uses your personal data only for legitimate, specified purposes that are directly related to operating the platform and serving you as a player. The following table outlines how we use each category of data and the lawful basis for each use:

5.1 Core Platform Operations

• Account creation and management: Creating and maintaining your bk22 account, authenticating your identity at login, and managing your account settings and preferences.
• Payment processing: Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Verifying that payment methods are registered in your own name. Maintaining an accurate transaction ledger for your account.
• KYC and age verification: Verifying that you are at least 21 years of age and that the identity information you have provided is accurate. Meeting our obligations to prevent underage gambling and fraudulent account creation.
• Providing betting and gaming services: Enabling you to place bets on cricket (BPL, IPL, T20 World Cup), access live casino games from Evolution Gaming and Ezugi, play slots from Pragmatic Play, NetEnt, Microgaming, and Spribe, and participate in crash games and other platform features.
• Customer support: Responding to your support queries, resolving disputes, processing complaints, and maintaining a record of your interactions with the bk22 support team.

5.2 Security and Compliance

• Fraud detection and prevention: Monitoring account activity for unusual patterns that may indicate fraudulent behaviour, bonus abuse, money laundering, or multi-accounting.
• AML screening: Cross-referencing player data against applicable sanctions and politically exposed persons (PEP) watchlists as part of our anti-money-laundering compliance programme.
• Security monitoring: Detecting, investigating, and responding to cybersecurity threats, unauthorised access attempts, and technical vulnerabilities affecting the bk22 platform.

5.3 Responsible Gaming

• Monitoring your gambling activity to identify potential indicators of problem gambling behaviour, such as rapidly increasing bet sizes, frequent large deposits, or attempts to circumvent self-exclusion restrictions.
• Enforcing deposit limits, loss limits, session time limits, and self-exclusion periods that you have set through your responsible gaming settings.
• Contacting you proactively if our responsible gaming monitoring systems identify patterns that warrant a wellbeing check.

5.4 Marketing Communications (Consent-Based Only)

With your explicit prior consent, bk22 may use your contact data and platform activity data to send you personalised promotional offers, bonus notifications, and information about seasonal campaigns relevant to Bangladesh players — such as Eid promotions, Pohela Boishakh specials, BPL season offers, and IPL betting bonuses. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by emailing [email protected].

Legal Basis for Processing

bk22 processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely on are as follows:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered player — including account management, payment processing, and delivery of betting and gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, age verification, AML screening, and fraud prevention obligations.
• Legitimate interests: Processing carried out for bk22's legitimate business interests where those interests are not overridden by your rights and freedoms — including platform security monitoring, fraud detection, responsible gaming monitoring, and internal analytics used to improve service quality.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications and optional data collection beyond what is strictly required for platform operation. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third Parties

bk22 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

7.1 Service Providers

bk22 engages trusted third-party service providers who process data on our behalf as data processors. These include: payment processing partners (bKash, Nagad, Rocket, Upay, Visa network, Mastercard network); identity and KYC verification providers; fraud detection and AML screening services; cloud hosting and infrastructure providers; customer support platform providers; and game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. All third-party processors are contractually bound to process your data only on bk22's documented instructions and to apply appropriate technical and organisational security measures.

7.2 Legal and Regulatory Disclosure

bk22 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where required to do so by applicable law, valid legal process, or where disclosure is necessary to prevent or detect crime, protect national security, or protect the vital interests of individuals. bk22 will, where legally permissible, notify affected players of any such disclosure request.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bk22's business or assets, player data may be transferred to the acquiring entity as part of that transaction. bk22 will notify affected players via their registered email address prior to any such transfer taking effect and will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.

Data Retention

bk22 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or legitimate business necessity. The following retention periods apply:

• Active account data: Retained for the duration of your active account relationship with bk22 plus a period of 5 years following account closure, to satisfy legal and regulatory obligations.
• Financial transaction records: Retained for a minimum of 7 years from the date of the transaction, in accordance with standard financial record-keeping requirements applicable to payment service operations.
• KYC documentation: Retained for the duration of the account relationship plus 5 years following account closure. Original document images are stored with full encryption and access controls.
• Customer support communications: Retained for 3 years from the date of the last interaction, unless the communication relates to an unresolved dispute or legal matter, in which case it is retained until resolution plus 2 years.
• Technical and access logs: Retained for a rolling 12-month period for security monitoring purposes, after which they are securely deleted or anonymised.
• Marketing preference records: Retained for the duration of your account plus 2 years, to maintain an auditable record of consent and opt-out history.

Upon expiry of the applicable retention period, bk22 will securely delete or irreversibly anonymise your personal data. If you request early deletion of your data and no legal retention obligation prevents it, bk22 will fulfil the deletion request within 30 days — see Section 11 for your data rights.

Data Security

bk22 applies a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security controls include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the bk22 platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols. Unencrypted connections are rejected.
• Encryption at rest: Sensitive personal data — including KYC documents, financial data, and identity records — is stored using AES-256 encryption at rest on secure, access-controlled servers.
• Access controls: Access to personal data within bk22's systems is restricted on a strict need-to-know basis. All internal access to player data is logged, audited, and subject to role-based authorisation controls.
• Two-factor authentication: bk22 strongly recommends enabling 2FA on your player account. Internal bk22 systems that handle personal data require mandatory 2FA for all staff access.
• Penetration testing and vulnerability assessments: bk22 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities proactively.
• Incident response: In the event of a data security incident that affects your personal data, bk22 will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — providing clear information about the nature of the incident and the steps taken to address it.

While bk22 takes all reasonable steps to safeguard your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your account has been compromised, contact bk22 support immediately via live chat.

Cookies & Tracking Technologies

bk22 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit the bk22 website. Cookies allow bk22 to recognise your device across sessions, maintain your login state, personalise your experience, and gather analytics data about how the platform is used.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the platform. These cookies enable core functionality such as session management, login state preservation, account security checks, and fraud detection. They cannot be disabled without breaking core platform functions.
• Functional Cookies: Used to remember your preferences and personalise your experience — such as your preferred language display, responsible gaming settings, and last-used payment method. Disabling these may reduce personalisation quality.
• Analytics Cookies: Used to collect anonymised data about how players navigate and interact with the bk22 platform — including page views, session duration, feature usage, and error events. This data helps bk22 identify usability issues and prioritise platform improvements.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and multiple-account creation. These cookies help bk22 identify suspicious patterns across sessions and devices.

10.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies may prevent you from logging into your bk22 account or using core platform features. For detailed guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

Your Data Rights

As a bk22 player, you hold specific rights in relation to the personal data we hold about you. bk22 is committed to honouring these rights promptly and without unnecessary barriers. Your rights include:

• Right of Access: You have the right to request a copy of all personal data bk22 holds about you (commonly referred to as a Subject Access Request or SAR). bk22 will respond to verified SAR requests within 30 calendar days.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by bk22 be corrected. Basic account information can be updated directly from your account profile settings; other corrections may require identity verification.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to legal retention obligations — bk22 cannot delete transaction records within mandatory retention periods.
• Right to Restriction of Processing: You have the right to request that bk22 restricts processing of your data in certain circumstances — for example, where you contest the accuracy of the data pending verification, or where you have objected to processing pending the outcome of a legitimate interests assessment.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to bk22 in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling. You also have the right to object to processing for direct marketing purposes at any time, with no requirement to provide a reason.
• Rights Related to Automated Decision-Making: bk22 may use automated systems to flag accounts for fraud or responsible gaming review. You have the right to request human review of any automated decision that significantly affects you, to express your point of view, and to contest the decision.

To exercise any of the above rights, please contact our Data Protection team by emailing [email protected] with the subject line "Data Rights Request" and your registered account details. We may need to verify your identity before processing your request. All requests will be acknowledged within 5 business days and fulfilled within 30 calendar days, unless the request is complex or we need to notify you of an extension.

Minors &amp ; Protection of Young People

bk22 operates a strict 21+ only policy. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Our registration process includes mandatory age verification, and all accounts are subject to KYC review before real-money features are activated. If bk22 discovers that an account has been created by or on behalf of a person under 21 years of age, the account will be suspended immediately, all funds will be returned to the originating payment method, and all personal data associated with the account will be deleted without undue delay.

Parents and guardians who believe that a minor has registered an account on bk22 are encouraged to contact our support team immediately at [email protected]. We will investigate all such reports as a matter of priority and take appropriate action within 24 hours of receiving a verified report.

Changes to This Privacy Policy

bk22 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, new platform features, or improvements to how we protect your data. The "Last Updated" date at the top of this Policy and in the version badge will always reflect when the most recent revision was made.

Where a change to this Policy is material — meaning it significantly affects your rights or how we use your data — bk22 will notify registered players via their registered email address and/or via a prominent notice on the bk22 platform at least 14 days before the change takes effect. Continued use of the bk22 platform following the effective date of an updated Policy constitutes your acceptance of the revised terms.

If you do not agree with any material change to this Privacy Policy, you must stop using the bk22 platform and may request account closure by contacting support. bk22 will process your account closure and any associated data deletion requests in accordance with the retention periods described in Section 8.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bk22 processes your personal data, please reach out to our Data Protection team through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for data protection matters
• Live Chat: Available 24/7 directly from the bk22 platform — select "Privacy & Data" from the support topic menu
• WhatsApp Support: Available 8:00 AM – 11:00 PM Bangladesh Standard Time (UTC+6)
• Response Time: All privacy-related enquiries will be acknowledged within 2 business days and fully resolved within 30 calendar days

bk22 is committed to handling all data protection enquiries with the seriousness and respect they deserve. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to our senior compliance team by requesting a formal review via email. All formal escalations will receive a written response within 10 business days.