bk43 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how bk43 ("bk43", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your") who visit, register on, or otherwise interact with the bk43 platform at https://bk43.io and any associated subdomains, mobile interfaces, or communication channels (collectively, "the Platform").

This Policy applies to all users of the bk43 Platform, including registered account holders, prospective players who have commenced but not completed registration, and visitors who browse the Platform without creating an account. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to your use of the bk43 Platform.

2 Data Controller

bk43 acts as the data controller in respect of personal data collected and processed through the Platform. As data controller, bk43 is responsible for determining the purposes for which and the means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the personal data bk43 holds about you, please contact our data protection team using the contact details provided in Section 15 of this Policy. We will acknowledge all data-related enquiries within 5 business days and provide a substantive response within 30 days of receipt.

3 Data We Collect

bk43 collects the following categories of personal data, depending on how you interact with the Platform:

bk43 does not intentionally collect special-category personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data beyond identity document photographs required for KYC). If you disclose any such data voluntarily through support communications, it will be handled with additional care and not used for profiling or automated decision-making.

4 How We Collect Your Data

bk43 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, placing a bet, contacting customer support, or updating your account settings.
• Automated technologies: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies when you visit and interact with the Platform. See Section 7 for full details on cookies.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and bank transfer partners when processing deposits and withdrawals.
• KYC verification providers: Verification outcomes and identity confidence scores received from our third-party identity verification partner when processing your KYC submission.
• Fraud prevention services: Risk signals and device fingerprinting data from fraud detection partners used to protect the integrity of the Platform and your account.
• Game data providers: Game session and result data from our licensed game studio partners (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) required for accurate bet settlement and dispute resolution.

5 Legal Basis for Processing

bk43 processes your personal data under the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and manage your bk43 account, accept and settle bets, process deposits and withdrawals, and provide customer support. Without this processing, bk43 cannot deliver the services you have requested.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, financial record-keeping requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for purposes including fraud prevention, platform security, responsible gaming monitoring, service improvement, and internal analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications (email, SMS, and in-platform promotions), use of non-essential cookies, and any other processing activity where bk43 has requested and received your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

bk43 uses the personal data we collect for the following purposes:

• To create, verify, and manage your bk43 account and ensure it meets our eligibility and KYC requirements.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer channels in Bangladeshi Taka (৳).
• To accept, record, and settle bets across sports betting markets (including BPL, IPL, T20 World Cup, and international cricket) and casino games.
• To fulfil responsible gaming obligations, including applying deposit limits, processing self-exclusion requests, sending session time reminders, and identifying accounts that may require additional support.
• To detect and prevent fraud, account compromise, money laundering, and other prohibited activities, including by sharing data with fraud prevention services where necessary.
• To provide customer support and resolve disputes, complaints, and technical issues raised through live chat or email.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, bet settlement results, and account security alerts. These communications are not optional and are sent regardless of marketing preferences.
• To send marketing communications about bk43 promotions, bonuses, and new game releases — only where you have opted in and only through the channels you have authorised.
• To analyse Platform usage and improve the user experience, game selection, and technical performance of the bk43 Platform.
• To comply with legal obligations, including maintaining financial transaction records and responding to lawful data requests from regulatory or law enforcement bodies.

7 Cookies & Tracking

bk43 uses cookies and similar technologies (including local storage objects and session tokens) on the Platform. Cookies are small text files stored on your device that allow the Platform to recognise your browser, maintain your session, and remember your preferences.

bk43 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method, and display configurations. Disabling these cookies may affect your experience but will not prevent access to the Platform.
• Analytics cookies: Used to collect anonymised or pseudonymised data about how users interact with the Platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve Platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent login attempts, identify unusual account activity, and support device fingerprinting for fraud prevention purposes.

bk43 does not use third-party advertising cookies or behavioural targeting cookies that share your browsing data with external advertising networks. You may manage your cookie preferences via your browser settings, noting that disabling strictly necessary cookies will affect your ability to use the Platform.

8 Third-Party Data Sharing

bk43 does not sell, rent, or trade your personal data. We share personal data with third parties only to the extent necessary to deliver our services, meet legal obligations, or protect the security of the Platform. The categories of third parties with whom bk43 may share data are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive transaction data necessary to process your deposits and withdrawals. These partners are subject to their own privacy policies and regulatory obligations.
• KYC & identity verification providers: Your identity documents and verification data are shared with our third-party KYC partner solely for the purpose of confirming your identity and age. Verification providers are bound by strict data processing agreements.
• Fraud prevention & security services: Anonymised or pseudonymised device and behavioural data may be shared with fraud detection partners to protect the Platform and your account from unauthorised access and financial crime.
• Game studio partners: Game session data is shared with licensed studios (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) to the extent required for game delivery, result certification, and dispute resolution. Studios do not receive your financial or identity data.
• IT infrastructure providers: Cloud hosting, database, and content delivery network (CDN) providers who process data on bk43's behalf under data processing agreements that require them to maintain confidentiality and security standards consistent with this Policy.
• Legal and regulatory authorities: bk43 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law or in response to a lawful court order or official request.

All third parties that process personal data on behalf of bk43 are required to enter into data processing agreements that impose obligations consistent with the data protection standards described in this Policy.

9 International Data Transfers

To deliver our services, some of the personal data bk43 collects may be processed on servers or systems located outside Bangladesh. Where such transfers occur, bk43 takes steps to ensure that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses and data processing agreements with receiving parties.

In particular, data shared with game studio partners (who may operate data centres in Europe, Asia, or other regions) is transferred under contractual arrangements that require equivalent data protection standards to those described in this Policy. bk43 does not transfer personal data to jurisdictions that do not provide adequate protections without appropriate contractual safeguards in place.

10 Data Retention

bk43 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data (identity, contact, financial records): Retained for the duration of your active account relationship with bk43, plus a minimum of 5 years following account closure to meet AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of account closure or the date of the most recent transaction, whichever is later.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of each transaction.
• Support communications (live chat, email): Retained for a minimum of 3 years from the date of each communication for quality assurance and dispute resolution purposes.
• Technical and usage data: Retained for up to 24 months in identifiable form, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your account relationship to provide evidence of your consent and opt-in preferences.

Where data is no longer required for its original purpose and no legal retention obligation applies, bk43 will securely delete or anonymise that data. Data subject to an active legal hold (for example, in connection with ongoing legal proceedings or a regulatory investigation) will be retained until the hold is lifted.

11 Your Privacy Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bk43:

• Right of access: You may request a copy of the personal data bk43 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may update basic account information (email address, mobile number, city) directly via your account settings. For corrections to identity data, please contact support.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to legal retention obligations — bk43 may be required to retain certain data (such as AML records) for the periods described in Section 10, even following a deletion request.
• Right to restrict processing: You may request that bk43 restrict the processing of your data while the accuracy of that data is contested, while a legitimate interest objection is under consideration, or where you need data to be preserved for a legal claim rather than deleted.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your data in a portable format so that you can transfer it to another service provider.
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring, at any time. bk43 will consider your objection and cease the processing unless compelling legitimate grounds that override your interests can be demonstrated.
• Right to withdraw consent: Where processing is based on your consent (such as direct marketing), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact the bk43 data protection team at the address set out in Section 15. We may need to verify your identity before processing your request. There is no charge for exercising your rights unless requests are manifestly unfounded or repetitive, in which case a reasonable administrative fee may apply.

12 Children & Minors

The bk43 Platform is strictly intended for adults aged 21 years and above. bk43 does not knowingly collect personal data from any person under the age of 21, and the Platform is not directed at minors in any way.

If bk43 becomes aware that personal data has been collected from an individual under the age of 21 — whether through an age misrepresentation during registration or any other means — that account will be immediately suspended, all associated data will be reviewed, and any deposits held in the account will be handled in accordance with our Terms & Conditions and applicable law.

If you are a parent or guardian and believe that a person under your care may have created a bk43 account, please contact our support team immediately at the details provided in Section 15 so that we can investigate and take appropriate action without delay.

13 Data Security

bk43 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bk43 servers.
• Encryption at rest for sensitive stored data, including identity documents, financial records, and account credentials.
• Two-factor authentication (2FA) via SMS OTP for account logins and withdrawal requests.
• Role-based access controls that limit access to personal data to bk43 staff with a genuine operational need.
• Regular security audits and penetration testing of the Platform and its underlying infrastructure.
• Intrusion detection systems that monitor for unusual access patterns and potential data breach attempts in real time.
• Incident response procedures that ensure bk43 can identify, contain, and respond to data security incidents promptly. In the event of a breach likely to result in risk to your rights and freedoms, bk43 will notify affected individuals without undue delay.

While bk43 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying bk43 immediately if you suspect that your account has been compromised.

14 Changes to This Policy

bk43 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal obligations, or improvements to our services. When we make material changes to this Policy, we will:

• Publish the updated Policy on the bk43 website with a revised "Effective Date" displayed at the top of the document.
• Where practicable and where the change is material, notify registered account holders via email or in-platform notification at least 7 days before the changes take effect.

Your continued use of the bk43 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you may request account closure by contacting bk43 support before the change takes effect.

We recommend reviewing this Policy periodically to stay informed about how bk43 protects your personal data. The current version will always be accessible at https://bk43.io/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by bk43, please contact our data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the bk43 Platform
• Response time: We acknowledge all data-related enquiries within 5 business days and provide a substantive response within 30 days.

When contacting us regarding a data rights request, please include your registered account username, the email address associated with your account, and a clear description of your request. We may need to verify your identity before processing the request to ensure that personal data is not disclosed to an unauthorised third party.

Last Updated: 1 January 2026  |  Version: 2.0  |  Contact: [email protected] (plain text — not a link)