bktk Privacy Policy

1. Introduction

bktk ("the Platform", "we", "us", "our") operates the online sports betting and casino platform accessible at https://bktk.io, providing services to eligible members in Bangladesh. This Privacy Policy ("Policy") sets out in full how bktk collects, uses, stores, shares, and protects the personal information of individuals who interact with the platform, whether as registered members, prospective members, or casual visitors.

This Policy should be read alongside the bktk Terms and Conditions and the bktk Responsible Gaming Policy. Together, these three documents govern the complete relationship between bktk and its members. In the event of any conflict between this Policy and the Terms and Conditions with respect to data handling matters, this Policy takes precedence.

bktk is committed to maintaining the trust of its members. Every data practice described in this Policy is implemented with the goal of protecting member privacy while enabling bktk to deliver a secure, reliable, and compliant betting and casino platform in Bangladesh.

2. Data We Collect

bktk collects personal data through several channels: directly from members during registration and account management; automatically through platform usage and session activity; and from third-party service providers involved in payment processing and identity verification. The categories of data collected are described below.

2.1 Registration and Identity Data

When you create a bktk account, we collect the following information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (required to verify you meet the 21+ age requirement)
• Mobile telephone number registered with your bKash, Nagad, Rocket, or Upay account
• Username and encrypted password credentials
• City or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna)

2.2 Identity Verification (KYC) Data

To satisfy Know Your Customer ("KYC") requirements, bktk may request copies of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport (biographical data page)
• Other government-issued photo identification where the above are unavailable
• Proof of payment method ownership (screenshot of bKash or Nagad account registered in your name)

2.3 Transaction and Financial Data

bktk records all financial transactions conducted on the platform, including but not limited to:

• Deposit amounts, timestamps, and originating mobile financial service account references
• Withdrawal amounts, timestamps, and destination payment account references
• Bet placement records, including stake amounts, markets selected, odds accepted, and outcomes
• Casino and slots game session records, including credits wagered and results
• Bonus credits issued, wagering progress, and bonus redemption records

All financial figures are recorded in Bangladeshi Taka (৳). bktk does not store full payment account credentials such as bKash PINs or Nagad passwords at any point.

2.4 Technical and Usage Data

When you access the bktk platform, our systems automatically record certain technical information:

• IP address and approximate geographic location derived from IP data
• Device type, operating system, and browser type and version
• Pages visited, features used, and session duration
• Referring URL and exit page
• Date and time of access

2.5 Communications Data

When you contact bktk customer support or respond to platform communications, we retain records of those interactions, including the content of messages exchanged via our support channels, the date and time of contact, and the resolution outcome.

Data Category	Source	Mandatory
Registration and identity data	Provided directly by member	Yes — required to open account
KYC verification documents	Provided directly by member	Yes — required for withdrawals
Transaction and financial records	Generated by platform activity	Yes — recorded automatically
Technical and usage data	Collected automatically via platform	Yes — collected automatically
Communications data	Provided during support interactions	Only when contacting support

3. How We Use Your Data

bktk uses the personal data it collects for the following purposes:

• Account creation and management: To register your bktk account, verify your identity, and maintain your account in good standing throughout the membership lifecycle.
• Age verification: To confirm that all members meet the mandatory 21+ age requirement before accessing any betting or casino service.
• Payment processing: To facilitate deposit and withdrawal transactions via bKash, Nagad, Rocket, and Upay in Bangladeshi Taka, and to maintain accurate financial records for each account.
• Platform operation and personalisation: To deliver the sports betting markets, live casino games, slots, and other features of the bktk platform, and to present content relevant to your activity history and preferences.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, bonus abuse, and other prohibited activities described in the bktk Terms and Conditions.
• Customer support: To respond to queries, process complaints, and manage account-related requests submitted via our support channels.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour and, where appropriate, to initiate responsible gaming interventions in accordance with our Responsible Gaming Policy.
• Platform improvement: To analyse aggregated usage data for the purpose of improving platform performance, fixing technical issues, and developing new features.
• Communications: To send transactional notifications, account alerts, and — where you have provided consent — promotional communications relating to bktk offers and events.

4. Legal Basis for Processing

bktk processes personal data on the following legal bases:

• Contractual necessity: Processing that is required to fulfil the member agreement set out in the bktk Terms and Conditions, including account registration, payment processing, and bet settlement.
• Compliance obligations: Processing required to meet applicable policy obligations, including KYC identity verification, age verification, and financial record-keeping.
• Legitimate interests: Processing conducted for fraud prevention, platform security, and responsible gaming monitoring, where bktk's legitimate business interests are balanced against the privacy rights of members.
• Consent: Processing for optional purposes such as promotional communications, where bktk has obtained your explicit consent prior to processing. You may withdraw consent at any time by contacting support at [email protected].

5. Sharing Your Data

bktk does not sell, rent, or otherwise transfer member personal data to third parties for their own commercial purposes. Personal data may be shared with the following categories of third party, strictly for the purposes described:

5.1 Payment Service Providers

bktk shares relevant transaction data with mobile financial service providers — including bKash, Nagad, Rocket, and Upay — to the extent required to process deposit and withdrawal transactions. These providers process data in accordance with their own privacy policies and applicable financial service regulations in Bangladesh.

5.2 Identity Verification Providers

Where bktk uses third-party KYC service providers to assist with identity document verification, member identity data is shared with those providers under strict data processing agreements that prohibit the use of the data for any purpose other than identity verification on behalf of bktk.

5.3 Game Content Providers

The bktk Casino and Slots platform incorporates games from third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive session identifiers and game result data as part of the technical integration required to deliver their games. They do not receive full member identity data.

5.4 Legal and Regulatory Disclosures

bktk may disclose member data to relevant authorities or legal representatives where required by a valid legal process, court order, or formal investigation into suspected criminal activity including fraud, money laundering, or underage gambling. Such disclosures are made only to the extent required and are logged internally.

6. Cookies and Tracking Technologies

bktk uses cookies and similar tracking technologies to enable platform functionality, maintain your login session, and analyse platform usage patterns. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled.
• Functional cookies: Remember your preferences and settings, such as language selection and display preferences, to improve your experience on return visits.
• Analytical cookies: Collect anonymised data about how members navigate the platform. This data is used in aggregate to identify performance issues and improve the platform experience. Individual members are not identified by analytical cookie data.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your bktk account and using core platform features.

7. Data Security

bktk applies a layered approach to data security. The following technical and organisational measures are in place to protect member personal data:

• 256-bit SSL/TLS encryption on all data transmissions between member devices and bktk servers
• Encrypted storage of member passwords using industry-standard one-way hashing algorithms — bktk staff cannot view member passwords in plaintext
• Access controls restricting internal access to personal data to only those staff members with a specific operational need
• Regular security assessments of the platform infrastructure
• Documented incident response procedures for data security events

While bktk takes data security seriously and implements the measures described above, no online platform can guarantee absolute immunity from all security threats. Members are encouraged to use strong, unique passwords for their bktk accounts and to contact support immediately at [email protected] if they suspect unauthorised access to their account.

8. Data Retention

bktk retains personal data for the periods described in the table below. After the applicable retention period, data is either deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Data Type	Retention Period	Reason
Account registration data	Duration of account + 2 years after closure	Dispute resolution and fraud prevention
KYC identity documents	Duration of account + 5 years after closure	Regulatory compliance obligations
Transaction and financial records	5 years from transaction date	Audit, dispute resolution, compliance
Betting and game history	3 years from activity date	Dispute resolution and responsible gaming review
Support communications	2 years from last interaction	Quality assurance and dispute records
Technical and usage logs	12 months from generation	Security monitoring and platform improvement

9. Your Rights

As a bktk member, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the bktk support team at [email protected] with your registered contact details and a clear description of your request.

• Right of access: You may request a copy of the personal data bktk holds about you. bktk will provide this information within a reasonable timeframe following identity verification.
• Right to rectification: If any personal data bktk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data fields (such as your registered name) may require supporting documentation before amendments are made.
• Right to erasure: You may request deletion of personal data that bktk no longer has a legitimate reason to retain. Please note that certain data categories are subject to mandatory minimum retention periods as described in Section 8 and cannot be deleted before those periods expire.
• Right to restrict processing: You may request that bktk restricts its use of your personal data in specific circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to withdraw consent: Where bktk processes your data on the basis of your consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.
• Right to object: You may object to bktk processing your personal data for purposes based on legitimate interests. bktk will review such objections and cease processing where no compelling legitimate grounds exist to continue.

bktk will acknowledge all data rights requests promptly and aim to resolve them within 30 calendar days. In cases of complexity or high volume, this period may be extended by an additional 30 days, of which you will be notified.

10. Children and Minors

The bktk platform is strictly for adults aged 21 years and above. bktk does not knowingly collect personal data from any individual under the age of 21. If a parent or guardian becomes aware that a minor has accessed the bktk platform or provided personal data without their knowledge, they should contact the bktk support team immediately at [email protected].

Upon receiving a credible report that a registered account belongs to an individual under the age of 21, bktk will suspend the account, investigate the matter, delete the personal data collected from the minor, and return any deposits made (less any amounts already wagered) to the originating payment method where technically possible.

bktk does not direct any marketing or promotional content towards individuals under the age of 21 and does not process personal data from minors for any purpose.

11. Amendments to This Policy

bktk reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — bktk will notify registered members via their registered contact details and will display a prominent notice on the platform no less than 7 days before the changes take effect.

The current version of this Privacy Policy, with its effective date clearly stated, is always accessible at https://bktk.io/privacy-policy. Continued use of the bktk platform following the effective date of any amendment constitutes acknowledgement of the revised Policy.

12. Contact Us

For all privacy-related enquiries, data access requests, consent withdrawals, or concerns about how bktk handles your personal information, please contact the bktk support team using the details below:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Language: English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

Please include your registered username or contact number in all correspondence so that your request can be identified and handled promptly.