bbkk Privacy Policy — How We Protect Your Personal Data
At bbkk, the privacy and security of every player's personal information is a core commitment — not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and protected, and what rights you hold as a registered player in Bangladesh.
Privacy at a Glance
Six Core Commitments We Make to Every bbkk Player
These six principles capture what matters most in the bbkk approach to data privacy. The full legal text is set out in the sections below.
All data transmitted between your device and the bbkk platform is protected by industry-standard SSL/TLS encryption. Stored data is held on secured servers with access controls and routine security audits to guard against unauthorised access.
bbkk does not sell, rent, or trade your personal information to advertisers, data brokers, or unrelated third parties. Data sharing with partners is limited strictly to what is necessary to operate the platform, process payments, and comply with legal obligations.
Every registered bbkk player has the right to access, correct, or request deletion of their personal data at any time. Submit a request to our support team at [email protected] and we will respond within 30 days in accordance with applicable data protection principles.
bbkk does not store full payment credentials for bKash, Nagad, Rocket, or bank transfer accounts. Transaction references are retained solely for fraud prevention, dispute resolution, and anti-money laundering compliance — never for marketing or profiling purposes.
Promotional communications from bbkk are sent only where you have given consent or where they are directly related to your active account. You may withdraw marketing consent at any time via your account settings or by contacting support — with no effect on your ability to continue using the platform.
This Privacy Policy is written in plain English so that every player — regardless of legal background — can understand how their information is handled. We do not hide obligations in ambiguous language. If anything in this Policy is unclear, our support team is available 24/7 to explain it.
This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data by bbkk ("the Company", "we", "us", "our") in connection with the operation of the bbkk platform at https://bbkk.io. It applies to all registered players, visitors, and prospective users who interact with the bbkk website in any capacity. By registering a player account or continuing to use the bbkk platform after this Policy has been published, you acknowledge that you have read and understood its contents. This Policy should be read alongside the bbkk Terms and Conditions and Responsible Gaming Policy.
Introduction
bbkk is Bangladesh's trusted online betting and gaming platform, providing sports betting on cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers internationals), live casino games, slots, and fishing games to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and the wider Bangladesh region.
In delivering these services, bbkk necessarily collects and processes certain personal information about the players who use the platform. We take this responsibility seriously. The purpose of this Privacy Policy is to be fully transparent about what information we collect, how it is used, with whom it is shared, how long it is kept, and what controls you have over your own data.
bbkk is committed to fair information practices. We collect only the personal data we genuinely need to operate a safe, compliant, and enjoyable platform. We do not collect data speculatively or retain it beyond the period for which it serves a legitimate purpose.
Data Controller
For the purposes of this Privacy Policy, bbkk acts as the data controller in respect of personal data collected through the bbkk platform. As data controller, bbkk determines the purposes and means by which personal data is processed.
All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the bbkk support team using the contact details set out in Section 15 of this Policy. We aim to respond to all data-related requests within 30 calendar days of receipt.
Data We Collect
bbkk collects the following categories of personal data, depending on how you interact with the platform:
| Category | Examples | When Collected |
|---|---|---|
| Registration Data | Full name, date of birth, mobile number, username, password (hashed) | At account registration |
| Identity Verification (KYC) | National Identity Card (NID) number and scan, address proof, date of birth confirmation | When KYC is triggered (e.g., before first withdrawal) |
| Payment Data | Mobile banking number (bKash, Nagad, Rocket, Upay), bank account name and number, transaction reference IDs | When depositing or withdrawing funds |
| Transaction Records | Deposit amounts, withdrawal amounts, bet history, game session records, bonus usage | Throughout platform use |
| Device & Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone | Automatically on platform access |
| Usage Data | Pages visited, features used, session duration, game titles played, click paths | Automatically during platform use |
| Communications Data | Live chat transcripts, support emails, complaint records | When you contact our support team |
| Responsible Gaming Data | Deposit limit settings, cooling-off periods, self-exclusion requests | When responsible gaming tools are activated |
bbkk does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is inadvertently provided by a player (for example, in a free-text support message), it will be treated with the highest level of confidentiality and will not be used for any profiling or decision-making purpose.
How We Collect Data
bbkk collects personal data through the following means:
- Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or activate responsible gaming tools, you provide data directly to bbkk.
- Automatically: When you visit or use the bbkk platform, technical data including your IP address, device identifiers, and browsing behaviour is collected automatically through cookies, server logs, and analytics tools. See Section 8 for full details on cookies.
- From payment processors: When you make a transaction via bKash, Nagad, Rocket, Upay, or a participating bank, our payment processing partners share transaction confirmation data with bbkk to credit your account and maintain financial records.
- From game providers: Third-party game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) may share game session data with bbkk for the purpose of settling bets, resolving disputes, and maintaining audit trails.
- From fraud and security services: bbkk uses specialist third-party services to detect fraudulent activity, duplicate accounts, and prohibited conduct. These services may provide risk-scoring data based on behavioural and technical signals.
Purposes of Processing
bbkk processes personal data for the following purposes:
- Account management: Creating, maintaining, and securing your player account, including password management and account preferences.
- Service delivery: Processing deposits and withdrawals, settling sports bets, operating casino and slot games, and delivering all platform features to registered players.
- Identity and age verification (KYC): Confirming that players are aged 21 or above and are who they claim to be, in accordance with the bbkk Terms and Conditions. This is a non-negotiable requirement for all withdrawal requests.
- Fraud prevention and security: Detecting and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other forms of prohibited conduct as defined in the bbkk Terms and Conditions.
- Responsible gaming compliance: Monitoring player activity to identify signs of problem gambling, applying responsible gaming tools requested by players, and reaching out to players where welfare concerns are identified.
- Customer support: Responding to enquiries, resolving complaints, and providing account assistance via live chat and email.
- Platform improvement: Analysing aggregated usage data to improve site performance, game selection, payment options, and the overall player experience.
- Legal and regulatory compliance: Retaining financial and identity records as required by applicable legal obligations, including anti-money laundering record-keeping requirements.
- Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. See Section 13 for opt-out details.
Legal Basis for Processing
bbkk processes personal data on the following legal bases, depending on the purpose:
- Contractual necessity: Processing that is necessary to perform the contract between bbkk and the player — i.e., to operate your account, process transactions, and deliver the betting and gaming services you have signed up for.
- Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering record-keeping, age verification, and responding to lawful requests from law enforcement or regulatory authorities.
- Legitimate interests: Processing undertaken to protect the security and integrity of the platform, prevent fraud and prohibited conduct, improve service quality, and carry out responsible gaming monitoring. bbkk ensures that these legitimate interests do not override the fundamental privacy rights of players.
- Consent: Processing of personal data for marketing communications where you have given explicit consent. You may withdraw this consent at any time without affecting other aspects of your account or the platform services available to you.
Data Sharing & Third Parties
bbkk does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other participating payment partners receive the minimum data necessary to authenticate and process financial transactions on your account.
- Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other game studios receive player session identifiers and game outcome data necessary to operate their certified game systems within the bbkk platform environment.
- Fraud detection and security services: Specialist third-party providers contracted by bbkk receive technical and behavioural data to identify and prevent fraudulent account activity, bonus abuse, and prohibited conduct.
- Identity verification services: KYC and identity document verification may be processed with the assistance of a regulated third-party verification provider. Such providers are bound by strict data confidentiality obligations.
- Legal and regulatory authorities: bbkk may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law or where we reasonably believe disclosure is necessary to prevent crime, protect player safety, or comply with a lawful order.
- Business transfers: In the event of a merger, acquisition, or transfer of all or part of the bbkk business, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance where required by applicable law.
All third parties with whom bbkk shares personal data are required, through contractual obligations, to maintain the confidentiality and security of that data and to use it only for the specified purpose for which it was shared.
Cookies & Tracking Technologies
bbkk uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. bbkk uses the following types of cookies:
- Essential cookies: Required for the platform to function correctly. These include session authentication tokens that keep you logged in, security cookies that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without impairing your ability to use the platform.
- Functional cookies: Store your platform preferences such as preferred language, display settings, and responsible gaming notification settings, so they persist between sessions.
- Analytics cookies: Used to collect aggregated, anonymised data on how players navigate the bbkk platform — which pages are visited most frequently, where users enter and exit the site, and how long sessions last. This data helps bbkk improve site performance and user experience. bbkk uses analytics tools that do not share this data with external advertising platforms.
- Security and fraud-detection cookies: Used to identify suspicious behaviour, detect bot traffic, and protect the integrity of the platform against automated attacks.
bbkk does not use third-party advertising cookies or tracking pixels that follow players across other websites for advertising retargeting purposes.
You may control cookie settings through your browser preferences. Note that disabling essential cookies will prevent you from logging into your bbkk account and using core platform features. For full instructions on managing cookies in your browser, refer to your browser's help documentation.
Data Retention
bbkk retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention guidelines apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Contractual obligation; fraud prevention |
| KYC / identity verification documents | Duration of account + 5 years after closure | Anti-money laundering legal obligation |
| Transaction and financial records | 7 years from transaction date | Financial record-keeping legal obligation |
| Bet and game history | 5 years from the date of each bet/session | Dispute resolution; responsible gaming monitoring |
| Support communications | 3 years from the date of last communication | Quality assurance; complaint management |
| Device and technical data (logs) | 12 months on a rolling basis | Security monitoring; fraud detection |
| Marketing preferences and consent records | Until consent is withdrawn + 3 years | Evidence of lawful processing basis |
| Responsible gaming records (exclusions, limits) | Duration of exclusion/limit + 5 years | Player protection; compliance obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and research purposes.
Data Security
bbkk implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- SSL/TLS encryption: All data transmitted between your browser or mobile device and the bbkk platform is encrypted using industry-standard TLS 1.2 or higher protocols. This protects your login credentials, payment data, and personal information in transit.
- Password hashing: Player passwords are never stored in plain text. bbkk uses strong, industry-accepted hashing algorithms with salting to store password credentials. Even in the event of a data breach, passwords cannot be retrieved from stored hashes.
- Access controls: Access to player personal data within the bbkk organisation is restricted to staff with a legitimate operational need. Role-based access controls and audit logging are in place across all internal systems that hold personal data.
- Server security: bbkk's servers are hosted in secured data centre environments with physical access controls, network firewalls, intrusion detection systems, and regular vulnerability patching.
- Routine security audits: bbkk conducts periodic internal and third-party security reviews to identify and address vulnerabilities before they can be exploited.
- Two-factor authentication: bbkk supports and encourages players to enable two-factor authentication (2FA) on their accounts, providing an additional layer of protection against unauthorised login.
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to player rights, bbkk will notify affected players promptly and take all reasonable steps to contain and remediate the breach.
Your Data Rights
As a bbkk player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the bbkk support team using the details in Section 15. All requests will be responded to within 30 calendar days.
- Right of Access: You may request a copy of all personal data that bbkk holds about you. We will provide this in a structured, commonly used format.
- Right to Rectification: If any personal data held by bbkk is inaccurate or incomplete, you have the right to request that it be corrected. For account-level details, you may be able to update certain fields directly within your account settings.
- Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data. Note that this right is subject to exceptions where bbkk is required by law to retain certain records (for example, financial transaction records under anti-money laundering obligations). Where deletion is not possible in full, bbkk will delete all data it is legally permitted to delete and explain which data must be retained and why.
- Right to Restriction of Processing: In certain circumstances (for example, where you contest the accuracy of data or object to processing based on legitimate interests), you may request that bbkk restrict the processing of your data while the matter is under review.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that bbkk provide your personal data in a portable, machine-readable format so that it can be transferred to another service provider.
- Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
Children & Minors
The bbkk platform is strictly for adults aged 21 and above. bbkk does not knowingly collect or process personal data belonging to individuals under the age of 21. The age verification measures applied during registration and KYC processes are specifically designed to prevent underage access to the platform.
If bb kk becomes aware that personal data belonging to an individual under the age of 21 has been collected, we will take immediate steps to delete that data, close the associated account, and reverse any transactions processed through it. If you believe that a minor has registered a bbkk account, please contact our support team immediately at [email protected] so that we can investigate and act without delay.
Marketing Communications
bbkk may send you promotional communications including bonus offers, seasonal promotions (such as BPL and IPL betting promotions, Eid special offers, and Pohela Boishakh bonuses), platform news, and game launch announcements. These communications are sent only where you have consented to receive them or where they relate directly to activity on your active account.
You may opt out of marketing communications at any time through any of the following methods:
- Updating your communication preferences in your bbkk account settings.
- Clicking the unsubscribe link included in any marketing email sent by bbkk.
- Contacting the bbkk support team at [email protected] and requesting removal from marketing communications.
Opting out of marketing communications will not affect your ability to receive essential account-related communications such as deposit confirmations, withdrawal notifications, security alerts, and important policy updates. These transactional and security messages are sent regardless of marketing preferences because they are necessary for the proper operation of your account.
Changes to This Privacy Policy
bbkk reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in platform operations, the introduction of new products or payment methods, or improvements in our data protection practices.
Where changes are material — meaning they significantly affect how your personal data is used or the rights you hold — bbkk will notify registered players by email or via an in-platform notification at least 14 days before the updated Policy takes effect. For minor or administrative changes, the updated Policy will be published on this page with the revised "Last Updated" date at the top.
Your continued use of the bbkk platform after any updated Privacy Policy has taken effect constitutes your acknowledgment of the updated terms. If you do not agree with a material change to this Policy, you should contact support to discuss your options, including the option to close your account.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bbkk handles your personal data, please contact our support team through any of the following channels:
- Email: [email protected] — use the subject line "Privacy Enquiry" for data-related questions, or "Data Rights Request — [Your Username]" for formal access, correction, or deletion requests.
- Live Chat: Available 24 hours a day, 7 days a week via the bbkk platform. Average response time is 2–5 minutes. Our support agents can handle general privacy questions and route formal requests to the appropriate team.
- Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6).
bbkk is committed to resolving all privacy-related enquiries promptly and fairly. If you submit a formal data rights request, we will acknowledge receipt within 5 business days and provide a full response within 30 calendar days. In complex cases where additional time is required, we will notify you of the reason for the delay and provide an expected resolution date.
Explore bbkk
Your Data Is Protected — Now Enjoy the Platform
With your privacy safeguarded by industry-standard security and a transparent data policy, you can focus on what matters: cricket betting on BPL and IPL, live casino tables, hundreds of slots, and fishing games — all with instant bKash and Nagad deposits in BDT. For players aged 21 and above only.