bk23 Privacy Policy

1 Who We Are

bk23 is an online sports betting and casino platform operating at bk23.io, built specifically for players in Bangladesh. The platform offers cricket betting markets covering BPL, IPL, T20 World Cup, and Bangladesh Tigers international fixtures, as well as a full suite of casino and slot games powered by providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

For the purposes of this Privacy Policy, "bk23", "we", "us", and "our" refer to the operator of the bk23.io platform. "You" and "your" refer to any individual who accesses the platform, registers an account, or otherwise interacts with bk23 services.

If you have any questions about how bk23 handles your personal data, you may contact our data support team at [email protected] at any time. All data-related inquiries are handled in English and responded to within 30 days of receipt.

2 Personal Data We Collect

bk23 collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarises the categories of data we collect and the primary reason for collection:

bk23 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless this is specifically required for a responsible gaming assessment and you have provided explicit written consent.

3 How We Collect Your Data

bk23 collects your personal data through the following channels:

3.1 Direct Collection

You provide data directly to bk23 when you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact customer support via live chat or email, or respond to a promotional offer. This is the primary source of identity, contact, and financial data.

3.2 Automated Collection

When you browse or use the bk23 platform, our systems automatically collect technical and usage data including your IP address, device identifiers, browser characteristics, and in-platform activity logs. This data is collected through server logs, session tracking, and first-party cookies.

3.3 Third-Party Sources

bk23 may receive data about you from third-party sources where this is permitted and necessary. For example, our KYC verification partners may confirm identity document validity, and payment providers such as bKash and Nagad may confirm transaction statuses. Any data received from third parties is handled in accordance with this Privacy Policy.

4 How We Use Your Personal Data

bk23 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your bk23 account, including processing logins, updating account settings, and managing your wallet balance.
• Identity Verification: To carry out KYC verification as required by our internal anti-fraud and anti-money laundering procedures, confirming that you are who you claim to be and that you meet the 21+ age requirement.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, and Upay, and to execute withdrawal requests to your registered payment method. Financial data is used solely for this transactional purpose.
• Platform Security and Fraud Prevention: To detect and prevent fraudulent activity, account takeovers, bot usage, collusion, bonus abuse, and other prohibited conduct as defined in the bk23 Terms & Conditions.
• Customer Support: To respond to your support inquiries, resolve disputes, and maintain a record of support interactions for quality assurance purposes.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour and to administer self-exclusion, deposit limits, cooling-off periods, and other responsible gaming tools you have activated on your account.
• Legal and Regulatory Compliance: To retain transaction and identity records as required by applicable anti-money laundering and record-keeping obligations.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the platform interface, game selection, and performance across devices commonly used by players in Dhaka, Chittagong, Sylhet, Khulna, and other regions of Bangladesh.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal offers (such as BPL cricket promotions, Eid offers, and Pohela Boishakh campaigns) where you have opted in to receive such communications. See Section 13 for details on opting out.

5 Legal Basis for Processing

bk23 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bk23 — including account operation, payment processing, bet settlement, and customer support — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal obligations — including KYC identity verification, AML transaction monitoring, and record retention — is carried out on the basis of legal obligation.
• Legitimate Interest: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of bk23's legitimate interest in operating a safe, secure, and compliant betting platform. bk23 has assessed that these legitimate interests do not override your fundamental privacy rights in the context of the processing activities involved.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Third-Party Disclosure

bk23 does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

6.1 Payment Providers

To process deposits and withdrawals, bk23 shares necessary financial and identity data with mobile financial service providers including bKash, Nagad, Rocket, and Upay. These providers operate under their own privacy policies and data security standards. bk23 shares only the minimum data required to complete each transaction.

6.2 KYC and Identity Verification Partners

bk23 uses third-party KYC verification services to confirm the validity of identity documents submitted by players. These services receive your identity data solely for the purpose of document verification and are contractually prohibited from using it for any other purpose.

6.3 Game Providers

When you play casino or slot games powered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your account session token and gameplay data are passed to the relevant provider's game servers to render the game. These providers do not receive your full identity or financial data — only the technical session information necessary to run the game.

6.4 Legal and Regulatory Disclosure

bk23 may disclose your personal data to competent authorities where required by law, court order, or the lawful request of a regulatory body. In cases involving suspected money laundering or fraud, bk23 may be legally required to file a suspicious activity report and disclose associated account information without prior notice to you.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of bk23's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via the email address associated with your account.

7 Cookies and Tracking Technologies

bk23 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help the platform function correctly and improve your user experience.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will prevent the bk23 platform from functioning correctly, including preventing you from logging in to your account. bk23 does not use third-party advertising cookies or cross-site tracking cookies.

8 Data Security

bk23 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following measures:

• Encryption in Transit: All data transmitted between your device and the bk23 servers is protected by 256-bit SSL/TLS encryption. The platform enforces HTTPS on all pages without exception.
• Encryption at Rest: Sensitive personal and financial data stored in bk23 databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within bk23's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need are granted access to specific categories of player data.
• Intrusion Detection: bk23 maintains continuous server monitoring and intrusion detection systems to identify and respond to suspicious access patterns or potential security incidents.
• Password Security: Player account passwords are stored as salted cryptographic hashes. bk23 employees and support staff cannot view your plaintext password. If you forget your password, a secure reset process is used — bk23 will never send your existing password via email.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights, bk23 will notify affected players via the email address associated with their account as soon as practicable following the confirmation of the incident.

9 Data Retention

bk23 retains your personal data for the periods described below. Once a retention period has elapsed, data is securely deleted or irreversibly anonymised.

Where a legal investigation, regulatory inquiry, or active dispute requires data to be retained beyond the standard retention period, bk23 will retain the relevant data until the matter is resolved, after which normal deletion procedures will apply.

10 Your Data Rights

As a bk23 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact bk23 at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

Please note that some rights may be limited where bk23 is required to retain or process your data to comply with a legal obligation — for example, AML record-keeping requirements. In such cases, bk23 will explain the applicable limitation clearly in our response to your request.

11 Children's Privacy

The bk23 platform is strictly for adults aged 21 and above. bk23 does not knowingly collect personal data from any person under 21 years of age. If we become aware that an account has been registered by a person under the age of 21, the account will be closed immediately, all pending withdrawals will be held pending a review, and any identity data associated with the account will be securely deleted upon completion of any legally required investigations.

If you are a parent or guardian and believe that a minor has registered an account on bk23, please contact us immediately at [email protected] with the subject line "Under Age Account Report". bk23 will investigate the matter as a priority.

12 International Data Transfers

bk23's core platform infrastructure is operated in data centres with appropriate physical and technical security controls. Some third-party service providers used by bk23 — including game content providers such as Pragmatic Play, Evolution Gaming, and Ezugi — may process data outside of Bangladesh as part of their own global infrastructure.

Where personal data is transferred to third-party processors operating outside Bangladesh, bk23 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to this Privacy Policy. These safeguards include standard contractual clauses and data processing agreements with each third-party processor.

bk23 does not transfer your full identity or financial data outside of the region without a legitimate operational necessity and appropriate contractual protections in place.

13 Marketing Communications

With your consent, bk23 may send you promotional communications about bonus offers, new game releases, cricket betting promotions tied to the BPL and IPL seasons, and seasonal campaigns for events such as Eid, Pohela Boishakh, and the T20 World Cup. These communications may be delivered via email or SMS to the contact details registered on your account.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email sent by bk23.
• Updating your communication preferences from within your bk23 account settings.
• Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications will not affect the delivery of transactional messages that are essential to the operation of your account, such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification requests. These operational communications will continue to be sent regardless of your marketing preference settings.

14 Changes to This Privacy Policy

bk23 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform functionality. When a material change is made to this Policy, bk23 will notify registered players by posting a notice on the platform and, where practicable, by sending an email notification to the address registered on your account.

The "Effective Date" shown at the top of this Policy indicates when the current version came into force. We encourage you to review this Privacy Policy periodically to remain informed about how bk23 protects your data. Your continued use of the bk23 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

If a proposed change materially reduces your privacy rights, bk23 will provide at least 14 days' advance notice before the change takes effect, giving you the opportunity to close your account if you do not wish to accept the revised Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bk23 handles your personal data, please contact our data support team using the details below. All correspondence must be in English. We aim to respond to all data-related inquiries within 30 days of receipt.

bk23 takes all privacy inquiries seriously. If you are not satisfied with our response to your inquiry, you may seek further guidance from an appropriate data protection authority in your jurisdiction.