bk992 Privacy Policy — How We Handle Your Personal Data
At bk992, your privacy is a foundational commitment — not an afterthought. This Privacy Policy explains precisely what personal information we collect from players in Bangladesh, how we use it, who we share it with, and what rights you have over your own data. We encourage you to read this document in full before registering an account or using any bk992 service.
Information We Collect
bk992 collects personal information from you through a variety of interactions — when you register an account, make a deposit, place a wager, contact customer support, or simply browse the platform. We only collect information that is necessary for the lawful, legitimate operation of our services and our compliance obligations. The categories of data we collect are set out in the table below.
| Data Category | Specific Examples | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport number | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Registration & account updates |
| Financial Data | bKash / Nagad / Rocket wallet numbers, Visa/Mastercard last four digits, transaction amounts in BDT | Deposits, withdrawals, payment processing |
| Gaming Activity Data | Game history, wager amounts, win/loss records, session durations, betting patterns | Platform activity (continuous) |
| Technical Data | IP address, device type, browser version, operating system, screen resolution | Automatic collection on site visit |
| Usage Data | Pages visited, click paths, feature interactions, time on site, referral source | Cookies & analytics tools |
| Communication Data | Support ticket content, live chat transcripts, email correspondence | Support interactions |
bk992 does not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been collected from a minor, we will delete that information immediately and close the associated account. Parents or guardians who believe a minor has registered on bk992 should contact [email protected] without delay.
No Sale of Personal Data: bk992 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely for the purposes described in this Privacy Policy and for our legal compliance obligations.
Where you choose to provide additional voluntary information — such as preferred game categories, communication preferences, or self-imposed responsible gaming limits — we record this data to personalise your experience and to fulfil our duty of care obligations toward players showing signs of problem gambling. Providing this optional information is entirely at your discretion and does not affect your ability to use the core bk992 platform.
How We Use Your Data
bk992 processes your personal data for the following lawful purposes. For each purpose, we identify the legal basis on which processing is carried out:
- Account creation and authentication — We use your identity and contact data to create and secure your bk992 account, verify your identity during login, and recover access when credentials are lost. Legal basis: contract performance.
- Payment processing and fraud prevention — We use your financial data to process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to detect and prevent fraudulent transactions. Legal basis: contract performance and legitimate interest.
- KYC and regulatory compliance — We use your identity and financial data to conduct Know Your Customer verification, anti-money laundering (AML) checks, and to meet any reporting obligations required under applicable financial crime regulations. Legal basis: legal obligation.
- Responsible gaming monitoring — We analyse your gaming activity data to identify patterns that may indicate problem gambling behaviour and to enforce self-exclusion, deposit limits, or time-out restrictions you have voluntarily set. Legal basis: legitimate interest and legal obligation.
- Platform personalisation — We use your usage and gaming activity data to recommend games, tailor promotional offers, and improve the overall bk992 user experience. Legal basis: legitimate interest (with opt-out available).
- Marketing communications — Where you have given explicit consent, we may send you promotional emails or SMS messages about bk992 bonuses, new game launches, and VIP programme updates. You may withdraw this consent at any time by updating your communication preferences in your account settings or by emailing [email protected]. Legal basis: consent.
- Customer support — We use your contact and communication data to respond to support requests, resolve disputes, and maintain a record of your interactions with the bk992 support team. Legal basis: contract performance.
- Security and platform integrity — We use your technical and usage data to detect bot activity, prevent multi-accounting, identify collusion, and protect the integrity of our games and payment systems. Legal basis: legitimate interest.
Marketing Opt-Out: If you previously consented to receive marketing communications from bk992 and wish to stop receiving them, you can unsubscribe at any time via the link in any marketing email, by updating your notification preferences in your account dashboard, or by writing to [email protected]. Opt-out requests are processed within five business days.
Data Sharing & Third Parties
bk992 does not share your personal data with third parties except where it is necessary to deliver our services, fulfil a legal obligation, or protect the security of the platform. The categories of third parties with whom we may share your data are described below, along with the purpose and safeguards applied.
- Payment service providers — bKash, Nagad, Rocket, Upay, and card processing networks receive the minimum financial data necessary to authorise and settle your transactions in BDT. These providers operate under their own privacy frameworks and are bound by applicable financial data security standards.
- Identity verification and KYC partners — bk992 may use third-party identity verification services to validate documents you submit during the KYC process. These partners process your identity data strictly for verification purposes and are prohibited from using it for any other purpose.
- Game content providers — Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the games hosted within the bk992 lobby. They may receive a session token and anonymised player identifier to deliver game content and record game outcomes, but they do not receive your full identity or payment details.
- Analytics and platform technology providers — We use reputable analytics platforms to analyse usage patterns and improve platform performance. Data shared with these providers is aggregated or pseudonymised where possible.
- Law enforcement and regulatory bodies — bk992 may disclose personal data to government agencies, financial intelligence units, or law enforcement authorities where we are legally required to do so, including in connection with AML reporting obligations or court orders.
All third-party service providers engaged by bk992 are required to process personal data solely for the contracted purpose, to implement appropriate technical and organisational security measures, and to delete or return data once the contracted purpose has been fulfilled. bk992 does not permit its third-party processors to sub-contract data processing without prior written approval.
International Data Transfers: Some of our third-party technology and game content partners may process data outside of Bangladesh. Where such international transfers occur, bk992 takes reasonable steps to ensure that equivalent levels of data protection apply, including through contractual data protection clauses with the relevant service provider.
Six Ways bk992 Protects Your Privacy
Beyond legal compliance, these are the operational standards bk992 upholds every day to keep your personal information safe and under your control.
All data transmitted between your device and bk992 servers is protected with 256-bit TLS/SSL encryption. Sensitive fields such as payment details and identity documents use additional at-rest encryption layers.
bk992 collects only the data that is strictly necessary for each purpose. We do not collect your full card numbers, and payment method details are tokenised rather than stored in plaintext on our systems.
Access to player personal data within bk992 is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged, audited, and subject to regular review by our compliance team.
Subject to our legal retention obligations, you may request that bk992 delete your personal data at any time. Erasure requests are reviewed and actioned within 30 days of receipt by our data team.
You are always in control of whether bk992 contacts you for promotional purposes. Consent can be withdrawn at any time through your account settings or by emailing [email protected], with no impact on your platform access.
bk992 undergoes periodic independent security assessments to identify and address vulnerabilities in our data handling infrastructure. Findings from these assessments inform continuous improvements to our privacy programme.
Data Retention & Storage
bk992 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal retention requirements. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Identity & KYC Data | 5 years after account closure | AML regulatory requirements |
| Financial Transaction Records | 5 years after account closure | Financial audit and AML compliance |
| Gaming Activity Data | 3 years after last session | Dispute resolution, responsible gaming monitoring |
| Support Communications | 2 years after ticket closure | Quality assurance and dispute reference |
| Marketing Consent Records | Duration of consent + 1 year | Demonstrating lawful basis for marketing |
| Technical & Analytics Data | 12 months on a rolling basis | Platform performance and security monitoring |
On expiry of the applicable retention period, bk992 will securely delete or anonymise your personal data so that it can no longer be associated with your identity. Where anonymisation is applied, the resulting aggregated data may be retained indefinitely for statistical and business analysis purposes without restriction.
Player data is stored on secure servers. Where data is held by third-party processors on behalf of bk992, those processors are contractually required to apply equivalent retention and deletion standards. bk992 conducts periodic reviews of data holdings to ensure that records are not retained beyond their lawful retention period.
Your Privacy Rights
As a registered player on bk992, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the bk992 data team at [email protected] with a clear description of your request and sufficient identity information to allow us to locate your account securely.
- Right of Access — You may request a copy of all personal data bk992 holds about you, along with information about how it is being used. We will respond within 30 days of receiving a valid request.
- Right to Rectification — If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Minor corrections (such as updating a mobile number) can be made directly within your account settings.
- Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for processing. Erasure requests are subject to our legal retention obligations — data we are required to retain for AML or financial audit purposes cannot be deleted ahead of the applicable retention deadline.
- Right to Restrict Processing — You may request that we pause the processing of your personal data in certain circumstances, such as while you contest the accuracy of data we hold or while a complaint is under review.
- Right to Data Portability — Where processing is based on your consent or on a contract, you may request a machine-readable copy of the personal data you have provided to us so that it can be transferred to another service.
- Right to Object — You may object to processing based on our legitimate interests, including profiling for personalisation purposes. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent — Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
Response Timeframe: bk992 aims to respond to all privacy rights requests within 30 calendar days of receipt. In complex cases, this may be extended by a further 60 days, in which case we will notify you of the extension and the reason for the delay within the initial 30-day period.
Data Security Measures
bk992 takes the security of your personal data seriously and implements a layered set of technical and organisational controls designed to protect against unauthorised access, accidental loss, destruction, or disclosure. Our core security measures include:
- Transport Layer Security (TLS 1.3) — All data in transit between your device and bk992 servers is encrypted using current industry-standard TLS protocols, preventing interception by third parties.
- At-rest data encryption — Sensitive data fields, including identity documents and financial record references, are encrypted at rest using AES-256 encryption.
- Multi-factor authentication (MFA) — bk992 supports and recommends the use of two-step verification for all player accounts. Players in Bangladesh can use mobile OTP (one-time password) delivered via SMS to their registered number as a second authentication factor.
- Role-based access control — Internal access to player data is governed by role-based permissions, with all access events logged and regularly audited. No single employee has unrestricted access to the complete player dataset.
- Penetration testing — bk992 commissions periodic third-party penetration tests to identify and remediate vulnerabilities in our platform infrastructure before they can be exploited.
- Incident response procedures — In the event of a data security incident affecting your personal data, bk992 has a documented incident response procedure that includes timely notification to affected players and, where legally required, to relevant authorities.
While bk992 applies robust security measures, no online platform can guarantee absolute security against all possible threats. You also have a role to play in protecting your own account: choose a strong and unique password, do not share your login credentials with anyone, and log out of your bk992 account when using shared or public devices. If you suspect your account has been compromised, contact [email protected] immediately.
Policy Updates & Contact
bk992 reviews this Privacy Policy periodically to reflect changes in our data processing practices, technology infrastructure, legal requirements, or regulatory guidance applicable to the Bangladesh market. The effective date shown at the top of this page is updated each time a substantive revision is made.
Where a revision materially affects your rights or our use of your personal data, bk992 will notify registered players by email to the address held on their account and by displaying a prominent notice on the platform for a minimum of 14 days following the update. Continued use of the bk992 platform after the stated effective date of a revised Privacy Policy constitutes your acceptance of the changes.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bk992 holds about you, please contact us using the details below. All privacy-related communications should be submitted in English to ensure timely and accurate handling by our data team, which operates on Bangladesh Standard Time (UTC+6).
Data Enquiries: Email [email protected] with the subject line "Privacy Request — [Your Account Username]". Our team will acknowledge your message within one business day and provide a substantive response within 30 calendar days. Please do not include full payment card numbers or passwords in any correspondence.
This Privacy Policy forms part of the overall legal framework governing your use of the bk992 platform and should be read alongside the bk992 Terms & Conditions and Responsible Gaming policy. Together, these three documents constitute the complete agreement between you and bk992 regarding your rights and obligations as a registered player.
Questions About Your Data or Platform Rules?
Explore our FAQ for quick answers, review our Terms & Conditions, or head to the bk992 Casino to start playing with confidence.
Read the FAQ Terms & Conditions Explore bk992 Casino Responsible Gaming