bk9901 Privacy Policy

Personal Data We Collect

bk9901 collects personal data through several channels: directly from you when you register or use the Platform, automatically through your device and browser, and occasionally from trusted third-party verification partners. The categories of data we collect include:

1.1 Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the minimum age requirement of 21 years).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar) and postal code.
• Mobile phone number registered to your bKash, Nagad, or Rocket wallet, or your primary contact number.
• Email address (if provided during registration).
• Username and hashed password. We never store passwords in plain text.

1.2 Identity Verification (KYC) Data

• Scanned or photographed copy of a government-issued photo ID (National Identity Card, passport, or driving licence).
• Selfie or live photograph used to match against the submitted ID document.
• Proof of address document (utility bill, bank statement, or similar) dated within 90 days.
• Source of funds declaration for accounts exceeding the enhanced due-diligence threshold.

1.3 Financial Transaction Data

• Deposit amounts, deposit timestamps, and the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer).
• Withdrawal requests, withdrawal amounts, and destination wallet or bank account details.
• Transaction reference numbers issued by your mobile wallet provider or bank.
• Bonus credits received and wagering progress associated with each bonus.

1.4 Gameplay and Betting Data

• Game session logs including game title, provider (e.g., Pragmatic Play, Evolution Gaming, Spribe), stake amount, outcome, and session duration.
• Sports bet records including market, selection, odds, stake, and settlement outcome for cricket (BPL, IPL, T20, Bangladesh Tigers), football, kabaddi, and other sports.
• Cumulative win/loss data used for responsible gaming monitoring.

1.5 Technical and Device Data

• IP address and approximate geolocation (country and city level) derived from the IP address.
• Device type, operating system, and browser version.
• Session identifiers, cookies, and local storage tokens used to maintain your logged-in state.
• Platform navigation data — pages viewed, time on page, and click-path — used for Platform improvement.

1.6 Communications Data

• Records of live chat, email, and support ticket conversations between you and the bk9901 support team.
• Survey responses or feedback submitted voluntarily through the Platform.

How We Use Your Personal Data

bk9901 processes personal data only for the lawful purposes set out below. For each purpose, the applicable legal basis is stated in parentheses.

• Account creation and management: To register your Account, authenticate your identity at login, and maintain your Account settings. (Performance of contract.)
• Age and identity verification: To confirm that you meet the 21+ age requirement and to verify your identity as part of KYC compliance. (Legal obligation; performance of contract.) 21+
• Payment processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, and to process withdrawal requests to your nominated account. (Performance of contract.)
• Game and bet settlement: To operate games, settle bets, apply bonus credits, enforce wagering requirements, and calculate your Account Balance. (Performance of contract.)
• Anti-fraud and anti-money-laundering (AML) monitoring: To detect and investigate suspicious transaction patterns, multi-accounting, bonus abuse, and other prohibited conduct. (Legal obligation; legitimate interests.)
• Responsible gaming: To monitor cumulative play patterns and intervene where indicators of problem gambling are identified, and to enforce self-exclusion periods and deposit limits set by the Player. (Legal obligation; legitimate interests.)
• Customer support: To respond to your support queries, complaints, and dispute submissions. (Performance of contract; legitimate interests.)
• Platform improvement: To analyse anonymised usage data for the purpose of improving Platform performance, navigation, and game selection. (Legitimate interests.)
• Promotional communications: To send you relevant bonus offers, seasonal promotions (e.g., BPL season, Eid, Pohela Boishakh), and Platform updates — but only where you have not opted out. (Consent; legitimate interests.)
• Legal compliance: To comply with applicable laws, respond to lawful regulatory requests, and maintain records required under financial regulations. (Legal obligation.)

How We Share Your Personal Data

bk9901 does not sell, rent, or trade your personal data to unaffiliated third parties for marketing purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary:

• KYC and identity verification providers: Your registration data and ID documents are shared with certified third-party KYC service providers for the sole purpose of verifying your identity. These providers are contractually bound to process data only as instructed and to maintain equivalent security standards.
• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank as required to process your deposits and withdrawals. Each payment partner operates under its own privacy policy and applicable financial regulations.
• Game providers: Gameplay session data including your Account identifier and stake amount is shared with game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to deliver game content and settle results. Game providers receive pseudonymised identifiers wherever technically feasible.
• Fraud prevention and AML services: Transaction metadata and device fingerprints may be shared with specialist anti-fraud and AML screening services for the purpose of detecting financial crime. These services operate under strict data processing agreements.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial regulators, or courts where required to do so by applicable law or by a valid legal order. We will notify you of such disclosure where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of the Company's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer via a Platform announcement prior to it taking effect.

Cookies and Tracking Technologies

bk9901 uses cookies and similar technologies (local storage, session tokens, and pixel tags) to operate the Platform and improve your experience. The categories of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancer routing cookies. These cannot be disabled without breaking Platform functionality.
• Functional cookies: Remember your preferences such as language settings, last-visited game category, and responsible gaming limit configurations. Disabling these cookies may reduce Platform convenience.
• Analytics cookies: Collect anonymised data about how Players navigate the Platform — pages visited, session duration, and error events — for the purpose of improving Platform performance. We use first-party analytics only; no third-party advertising trackers are deployed.
• Security cookies: Used to detect and flag suspicious login behaviour, unusual geographic access patterns, and rapid-fire request anomalies consistent with automated bot activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your Account. For detailed cookie management instructions for Chrome, Firefox, and Samsung Internet on Android, refer to your browser's help documentation.

Data Retention

bk9901 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Active Account data: Retained for the lifetime of your Account and for 5 years following Account closure, in compliance with applicable financial record-keeping requirements.
• KYC documents: Retained for 5 years from the date of submission or from the date of Account closure, whichever is later, as required under standard AML regulations.
• Financial transaction records: Retained for 5 years from the date of each transaction.
• Gameplay and bet history: Retained for 3 years from the date of each session, then anonymised for statistical purposes.
• Support communications: Retained for 2 years from the date of the last message in a support thread.
• Technical and device logs: Retained for 12 months on a rolling basis for security and fraud investigation purposes.
• Marketing opt-in records: Retained until you withdraw consent, plus 1 year thereafter as evidence of the original consent.

Data Security

bk9901 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, and unlawful destruction. Key security measures include:

• Encryption in transit: All data transmitted between your device and our servers is protected by TLS 1.3. Pages are served exclusively over HTTPS; any HTTP request is automatically redirected to HTTPS.
• Encryption at rest: Sensitive database fields (including payment method identifiers, KYC document references, and password hashes) are encrypted at rest using AES-256.
• Password hashing: User passwords are hashed using a memory-hard algorithm (bcrypt with a work factor of 12 or higher) before storage. We never store or transmit plaintext passwords.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff access is logged and reviewed quarterly by the Company's security team.
• Infrastructure security: Our servers are hosted in ISO 27001-certified data centres with physical access controls, redundant power supplies, and 24/7 monitoring.
• Penetration testing: The Platform undergoes independent penetration testing at least once per calendar year. Critical vulnerabilities identified during testing are remediated within 72 hours.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bk9901 will notify affected Players within 72 hours of becoming aware of the breach and will take all reasonable steps to mitigate the impact.

Your Data Rights

As a bk9901 Player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team via the Platform's 24/7 support channel. We will respond within 72 hours and complete all actionable requests within 30 calendar days.

Minors and Age Restriction

The bk9901 Platform is strictly intended for adults aged 21 years and older. 21+ We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a person under 21, that Account will be immediately suspended, all data associated with the Account will be deleted, and any Balance will be returned to the registered payment method minus any bonus funds.

If you are a parent or guardian and believe that a minor has registered an Account on the Platform, please contact the support team immediately so that we can take prompt action. We encourage parents to use parental control software to restrict access to gambling websites for minors in their household.

International Data Transfers

bk9901 operates globally and some of our third-party service providers (including KYC verification partners and game providers such as Pragmatic Play, Evolution Gaming, and Microgaming) may process your data outside Bangladesh. Where personal data is transferred internationally, bk9901 ensures that appropriate safeguards are in place, including:

• Contractual clauses that impose equivalent privacy and security obligations on the receiving party.
• Processing restricted to jurisdictions that maintain an adequate level of data protection as assessed by the Company's legal team.
• Data minimisation — only the minimum data necessary for the specific service is transferred cross-border.

By using the Platform, you acknowledge that your data may be processed in these international locations and consent to such transfers subject to the safeguards described above.

Updates to This Policy

bk9901 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. Material changes will be communicated to registered Players via an in-platform notification or by message to the mobile number registered on your Account, at least 7 calendar days before the change takes effect.

The effective date at the top of this page will be updated whenever the Policy changes. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically to stay informed of how bk9901 protects your data.