bk32 Privacy Policy
At bk32, protecting your personal data is a core responsibility — not an afterthought. This Privacy Policy explains precisely what information we collect when you use our platform, how we use and store that data, who we share it with, and what rights you hold as a data subject. We are committed to full transparency in every aspect of our data handling practices.
How bk32 Approaches Privacy
These six principles underpin every data-handling decision we make at bk32. They summarise the full Privacy Policy below — but all players should read the complete document.
Data Minimisation
bk32 collects only the personal data that is strictly necessary to operate your account, process your transactions, and comply with our legal obligations. We do not harvest data for its own sake. If a piece of information is not required for a legitimate operational purpose, we do not collect it.
Purpose Limitation
Every item of data we collect is collected for a specific, defined purpose — account management, payment processing, fraud prevention, KYC compliance, or customer support. Your data will not be used for any purpose that is incompatible with the reason it was originally collected, without your explicit prior consent.
Storage Security
All personal data held by bk32 is stored on encrypted servers protected by 256-bit SSL technology. Access to personal data is restricted to bk32 personnel with a legitimate operational need. We apply role-based access controls, audit logging, and regular security reviews to our data infrastructure.
No Data Selling
bk32 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Full stop. Data is shared with operational partners only to the minimum extent required to deliver the services you have requested — for example, with payment processors to handle your bKash or Nagad transactions.
Full Transparency
This Privacy Policy is written in plain, accessible English so you know exactly what data we hold, why we hold it, and how long we keep it. There are no hidden data practices at bk32. If our data handling changes in a material way, we will notify all registered players at their registered email address before those changes take effect.
Your Rights Respected
You have meaningful rights over your personal data — the right to access it, correct it, request its deletion, object to certain processing, and withdraw consent. bk32 will action any valid data rights request within 30 days of receipt. See Section 9 of this policy for full details on exercising your rights.
Who We Are
bk32 (referred to in this Privacy Policy as "bk32", "we", "us", or "our") operates the online betting and gaming platform accessible at https://bk32.io. We are the data controller responsible for the personal information collected through the bk32 platform, including all account registration data, transaction records, and communications submitted by players in Bangladesh and other eligible markets.
This Privacy Policy applies to all users of the bk32 website, mobile-optimised interface, and any related services or communications channels — including customer support interactions conducted via email. It does not apply to third-party websites that may be linked to or from the bk32 platform, each of which operates under its own privacy framework.
By creating a bk32 account, making a deposit, placing a wager, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
Personal Data We Collect
bk32 collects two broad categories of personal data: information you provide directly to us, and information we collect automatically when you use the platform. The table below summarises the specific data types we collect, and the primary purpose for which each is used.
| Data Category | Specific Data Points | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID or Passport number, photograph | Account registration, KYC verification, age verification |
| Contact Data | Mobile number, email address, residential address | Account communications, support, withdrawal processing |
| Financial Data | bKash / Nagad / Rocket / Upay mobile number, Visa / Mastercard last four digits, transaction amounts | Payment processing, withdrawal verification, fraud prevention |
| Transaction Data | Deposit history, withdrawal history, wager records, bonus usage, account balance history | Account management, dispute resolution, regulatory compliance |
| Technical Data | IP address, browser type and version, device type, operating system, session duration, pages visited | Security monitoring, fraud detection, platform optimisation |
| Communications Data | Support ticket content, email correspondence, chat transcripts | Customer support, complaint handling, service improvement |
| Marketing Preferences | Promotional opt-in status, preferred communication channel | Delivering promotional offers to consenting players only |
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data (beyond identity document photographs required for KYC), or health information unless you voluntarily disclose health-related context when using our responsible gaming tools.
How We Collect Your Data
3.1 Direct Collection
The majority of your personal data is collected directly from you when you interact with the bk32 platform. This includes data you provide when you:
- Register a bk32 account by completing the sign-up form
- Complete the KYC identity verification process by submitting identity documents
- Make a deposit or request a withdrawal
- Contact the bk32 support team via email at [email protected]
- Opt in to promotional communications or claim a bonus offer
- Use the responsible gaming tools within your account settings
- Submit feedback, a complaint, or a formal dispute
3.2 Automated Collection
When you browse or use the bk32 platform, we automatically collect certain technical data about your device and session using cookies, web beacons, server logs, and similar tracking technologies. This data is used primarily for platform security, fraud detection, and performance optimisation. See Section 7 for full details of our cookies policy.
3.3 Third-Party Sources
In limited circumstances, bk32 may receive personal data about you from third-party sources, including identity verification service providers used to support our KYC process, and payment processors who confirm transaction outcomes. Data received from third parties is handled with the same level of care as data collected directly from you.
How We Use Your Personal Data
bk32 uses personal data collected from players for the following purposes:
- Account Administration: Creating and maintaining your bk32 account, processing login authentication, managing account settings, and handling account closure requests.
- Transaction Processing: Processing your deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and processing your withdrawal requests to your nominated payment method.
- Identity & Age Verification: Conducting KYC checks to confirm your identity, verify that you meet the minimum age requirement of 21 years, and ensure your account is in your own name.
- Fraud Prevention & Security: Monitoring account and transaction activity to detect and prevent fraud, money laundering, account takeover, and other prohibited conduct as defined in the bk32 Terms and Conditions.
- Customer Support: Responding to your support enquiries, processing complaints, and resolving disputes relating to your account or wagers.
- Responsible Gaming: Monitoring gaming behaviour to identify potential signs of problem gambling, administering responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests.
- Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].
- Legal Compliance: Meeting our obligations under applicable anti-money laundering legislation, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records as required by law.
- Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the bk32 platform and to improve the user experience, game selection, and support services.
Legal Basis for Processing
bk32 processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:
- Contractual Necessity: Processing required to perform the contract between you and bk32 — for example, processing your deposits and withdrawals, managing your account, and settling your wagers.
- Legal Obligation: Processing required to comply with applicable laws — for example, conducting KYC verification, maintaining transaction records, and responding to lawful regulatory or law enforcement requests.
- Legitimate Interests: Processing carried out in bk32's legitimate business interests, provided those interests are not overridden by your rights — for example, fraud detection, security monitoring, and platform analytics. We conduct a legitimate interests assessment for each such processing activity.
- Consent: Processing based on your freely given, specific, informed consent — for example, sending you promotional emails or SMS messages. You may withdraw your consent for marketing communications at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Disclosure
bk32 does not sell your personal data to any third party. We share your data only in the following limited circumstances and only to the minimum extent necessary:
6.1 Payment Processors
To process your deposits and withdrawals, we share relevant financial and identity data with our payment processing partners including bKash, Nagad, Rocket, Upay, and card payment gateways. These partners are contractually bound to handle your data securely and only for the purpose of processing your transactions.
6.2 Identity Verification Providers
To conduct KYC verification, we may share identity document data with certified third-party identity verification service providers. These providers process your data solely for the purpose of verification and are subject to strict data processing agreements.
6.3 Technology & Infrastructure Partners
bk32 uses third-party technology providers for hosting, data storage, security monitoring, and customer support platform management. These providers act as data processors on our behalf and are prohibited from using your data for any purpose other than providing their services to bk32.
6.4 Game Content Providers
Game providers such as Pragmatic Play, Evolution Gaming, Ezugi, and NetEnt may receive anonymised session data necessary to deliver their game content to your device. No personally identifiable information is shared with game content providers beyond what is technically necessary for game delivery.
6.5 Legal & Regulatory Disclosure
bk32 may disclose your personal data to relevant law enforcement authorities, regulators, or government bodies where required to do so by applicable law, court order, or regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so.
bk32 will never sell, rent, exchange, or otherwise transfer your personal data to advertisers, data brokers, or any other commercial third party for their own use.
Cookies & Tracking Technologies
bk32 uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device by your web browser when you visit a website. We use the following categories of cookies:
- Strictly Necessary Cookies: Essential to the operation of the bk32 platform. These cookies enable core functions such as login session management, security token validation, and account preferences. They cannot be disabled without impairing platform functionality.
- Performance & Analytics Cookies: Used to collect anonymised data about how visitors navigate the bk32 platform — for example, which pages are visited most frequently and whether any technical errors are encountered. This data helps us improve the platform experience.
- Functionality Cookies: Used to remember your preferences such as language settings, display preferences, and previously visited game categories, so that you do not need to re-enter these preferences on each visit.
- Security Cookies: Used by our fraud detection systems to identify unusual session behaviour, detect automated access attempts, and protect your account from unauthorised access.
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may affect your ability to log in and use the bk32 platform. We do not use cookies to serve third-party advertising on the bk32 platform.
Data Retention
bk32 retains personal data for as long as necessary to fulfil the purpose for which it was collected, and in compliance with applicable legal retention obligations. The following retention periods apply:
- Account & Identity Data: Retained for the duration of your active account, plus a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations.
- Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping requirements.
- KYC Documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
- Support Communications: Retained for a minimum of 2 years from the date of the last communication in a support thread, or longer where the communication relates to an unresolved dispute.
- Marketing Preferences: Retained until you withdraw your consent for marketing communications, at which point your marketing opt-in record is updated immediately.
- Technical & Session Data: Retained for up to 12 months from the date of collection, after which it is anonymised or deleted.
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity.
Your Data Rights
As a bk32 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and action it within 30 days.
- Right of Access: You have the right to request a copy of all personal data bk32 holds about you, along with information on how that data is being used.
- Right to Rectification: You have the right to request the correction of any personal data that is inaccurate, incomplete, or out of date.
- Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
- Right to Restriction: You have the right to request that bk32 restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data while we investigate your correction request.
- Right to Object: You have the right to object to processing based on our legitimate interests at any time. You also have an unconditional right to object to processing for direct marketing purposes.
- Right to Data Portability: You have the right to receive a copy of the personal data you have provided to bk32 in a structured, machine-readable format, and to request that we transmit that data to another service provider where technically feasible.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Please note that certain data rights are subject to exemptions where retention is required by law — for example, transaction records required for anti-money laundering compliance cannot be erased on request during the mandatory retention period.
Data Security
bk32 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the bk32 platform
- Encrypted storage of all personal data and financial records on secure servers
- Role-based access controls ensuring that only authorised bk32 personnel with a legitimate operational need can access personal data
- Multi-factor authentication requirements for internal system access by bk32 staff
- Regular penetration testing and vulnerability assessments conducted by independent security specialists
- Comprehensive audit logging of all access to personal data systems
- Data processing agreements with all third-party service providers requiring them to maintain equivalent security standards
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bk32 will notify you without undue delay and take all reasonable steps to contain and remediate the breach. bk32 will also fulfil any applicable notification obligations to relevant regulatory authorities.
While bk32 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised account access.
Children & Minors
The bk32 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals below the age of 21. If you are under 21 years of age, you must not create a bk32 account, make a deposit, or place any wager on our platform.
If bk32 becomes aware that personal data has been collected from an individual below the age of 21, we will take immediate steps to close the relevant account, void any associated wagers, and securely delete the personal data concerned. If you believe that a person under 21 has registered a bk32 account, please report this to us immediately by emailing [email protected].
We strongly encourage parents and guardians to make use of parental control software to prevent underage individuals from accessing online gambling platforms. Information on parental control tools is available through your internet service provider or via dedicated online safety resources.
Updates to This Privacy Policy
bk32 reserves the right to update, amend, or replace this Privacy Policy at any time. We will notify all registered players of material changes via the email address registered to their bk32 account at least 14 days before those changes take effect. The effective date displayed at the top of this page will be updated to reflect the date of the most recent revision.
We encourage you to review this Privacy Policy periodically to stay informed about how bk32 protects your personal data. Continued use of the bk32 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.
Where a change to this Privacy Policy requires your fresh consent — for example, a new marketing data use that was not previously disclosed — we will seek that consent separately and will not assume consent from your continued use of the platform alone.
Contact Us & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bk32 handles your personal data, please contact us through the following channels. All data-related enquiries are handled by our dedicated data protection team.
- General Data Enquiries: [email protected] — subject line: "Privacy Enquiry"
- Data Rights Requests: [email protected] — subject line: "Data Rights Request"
- Data Breach Reports: [email protected] — subject line: "Security Report"
- Response Time: Acknowledgement within 5 business days; full resolution within 30 days
- Support Hours: 24 hours a day, 7 days a week, 365 days a year
This Privacy Policy, together with the bk32 Terms & Conditions and Responsible Gaming Policy, forms the complete framework governing your relationship with bk32. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall take precedence.
Your Rights at a Glance
As a bk32 player, you hold these rights over your personal data. Contact [email protected] to exercise any of them — we will respond within 30 days.
Right of Access
Request a full copy of all personal data bk32 holds about you, including how and why it is being processed.
Right to Rectification
Request corrections to any personal data that is inaccurate, outdated, or incomplete in our records.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to mandatory legal retention obligations.
Right to Restriction
Request that bk32 temporarily restrict processing of your data while a rectification or objection request is being investigated.
Right to Portability
Receive your personal data in a structured, machine-readable format and request transfer to another service provider.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes — including withdrawing marketing consent at any time.
Explore bk32 with Confidence
Now that you understand how bk32 protects your data, dive into the full platform experience. Bet on cricket, spin the slots, or visit the live casino — all secured with 256-bit SSL encryption and instant bKash deposits. 21+ only.