bk39 Privacy Policy

1. Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, email address, phone number, device identifiers, and payment details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, bk39.
• "Data Processor" means any third party that processes Personal Data on behalf of bk39 under a written data processing agreement.
• "Cookies" means small text files stored on your device by the bk39 platform to enable certain functionality and analytics.
• "KYC" means Know Your Customer, the identity verification process required to confirm a player's identity before certain account actions (such as withdrawals) are permitted.
• "Platform" means the bk39 website at bk39.io and all associated services, games, and content.
• "Player" means any individual who has registered an account on the bk39 Platform.

2. Data Controller

2.1 bk39 acts as the Data Controller for all Personal Data collected through the bk39 Platform. As Data Controller, bk39 is responsible for determining the lawful basis for processing, ensuring data security, and upholding players' data rights as described in this Policy.

2.2 If you have any questions about this Privacy Policy or wish to exercise any of the rights described in Section 9, you may contact the bk39 data team by email at [email protected]. Please include "Privacy Request" in the subject line so your message is directed to the correct team promptly.

3. What Data We Collect

3.1 bk39 collects the following categories of Personal Data in the course of providing the Platform:

3.2 bk39 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond what is strictly necessary for identity verification purposes.

4. How We Collect Your Data

4.1 Directly from you. The majority of Personal Data bk39 holds is provided directly by players during account registration, KYC submission, deposit or withdrawal requests, communications with support, and participation in promotions.

4.2 Automatically through platform use. When you access the bk39 Platform, certain Technical Data and Usage Data is collected automatically via cookies, server logs, and analytics tools. This includes your IP address, device identifiers, browser configuration, and details of the pages and games you interact with during each session.

4.3 From payment processors. Where a deposit or withdrawal is made via a third-party payment provider such as bKash, Nagad, or Rocket, bk39 may receive confirmation data from the provider, including transaction reference numbers and payment method identifiers, to reconcile transactions in your account.

4.4 From identity verification partners. During the KYC process, bk39 may use accredited third-party identity verification services. These partners process the documents you submit and return a verification result to bk39. The documents themselves are handled in accordance with the verification partner's own security protocols and data processing agreements with bk39.

5. How We Use Your Data

5.1 bk39 uses the Personal Data it collects for the following purposes:

• Account management: Creating and maintaining your bk39 player account, verifying your identity, and providing access to Platform features.
• Transaction processing: Facilitating deposits, withdrawals, and balance management through your chosen payment method.
• Legal and regulatory compliance: Meeting KYC, anti-money-laundering (AML), and fraud prevention obligations applicable to online gaming platforms.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance via email or live chat.
• Platform improvement: Analysing aggregate usage patterns to identify bugs, optimise performance, and develop new features that better serve the Bangladesh market.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour and enabling the responsible gaming tools described in the bk39 Responsible Gaming Policy.
• Marketing communications: Sending promotional emails or SMS messages about bk39 offers — only where you have given explicit consent to receive such communications. You may withdraw consent at any time.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, account takeovers, and other prohibited activity on the Platform.

5.2 bk39 does not use Personal Data to make fully automated decisions that produce legal or similarly significant effects on players without human review. Where automated tools are used to flag accounts for review (e.g., fraud screening), a member of the bk39 team will review the case before any account action is taken.

6. Legal Basis for Processing

6.1 bk39 processes Personal Data under the following legal bases:

• Contractual necessity: Processing required to perform the agreement with you, including account creation, transaction processing, and support services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC verification and AML reporting requirements.
• Legitimate interests: Processing carried out for bk39's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing and Disclosure

7.1 bk39 does not sell your Personal Data. We share it only in the following limited circumstances:

• Payment providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your transactions securely.
• Identity verification partners: Accredited KYC service providers receive document data solely for the purpose of verifying your identity. These partners are bound by data processing agreements with bk39.
• Game technology providers: Software providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Spribe may receive anonymised session data for game performance monitoring. No personally identifiable data is shared with game providers beyond what is technically required.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, bk39 may disclose Personal Data to the relevant authority. bk39 will notify you of such disclosure where legally permitted to do so.
• Fraud prevention and security services: Where there is a reasonable suspicion of fraudulent activity, data may be shared with specialist fraud prevention partners to investigate and mitigate the risk.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the bk39 business, Personal Data held by bk39 may be transferred to the successor entity. Players will be notified in advance of any such transfer.

7.2 All third parties that receive Personal Data from bk39 are required to handle it in accordance with applicable data protection principles and are prohibited from using it for any purpose beyond what is strictly specified in their agreement with bk39.

8. Data Retention

8.1 bk39 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a period of 5 years following account closure, to comply with AML and regulatory record-keeping obligations.
• Transaction and financial data: Retained for 7 years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC documents: Retained for 5 years following account closure or the date of the most recent KYC review, whichever is later.
• Support and communications data: Retained for 3 years from the date of the communication, or until the matter is fully resolved if longer.
• Technical and usage data: Retained in identifiable form for up to 24 months, after which it is anonymised for aggregate analytics purposes.
• Marketing consent records: Retained for 3 years from the date of consent or until consent is withdrawn, whichever is earlier.

8.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to technical or legal constraints, the data is isolated from active processing until deletion can be completed.

9. Your Rights

9.1 As a player whose Personal Data is processed by bk39, you hold the following rights. To exercise any of these rights, please contact [email protected] with "Privacy Request" in the subject line. bk39 will acknowledge your request within 48 hours and respond substantively within 30 days.

10. Cookies and Tracking

10.1 The bk39 Platform uses cookies and similar tracking technologies to deliver core functionality, remember your preferences, maintain session security, and gather aggregate analytics data that helps us improve the platform.

10.2 The following categories of cookies are used on the bk39 Platform:

• Strictly necessary cookies: Essential for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings and game display options across sessions.
• Analytics cookies: Used to collect anonymised information about how players interact with the Platform, which pages are most visited, and where technical errors occur. This data is used in aggregate only.
• Marketing cookies: Used only where you have given explicit consent, to display relevant promotional content based on your Platform activity.

10.3 You may control cookie preferences through your browser settings. Disabling certain categories of cookies may limit some Platform functionality. Strictly necessary cookies cannot be disabled without preventing the Platform from operating correctly.

11. Security Measures

11.1 bk39 implements a range of technical and organisational security measures designed to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and bk39 servers.
• Encryption of sensitive data fields (including financial data and document data) at rest in bk39 databases.
• Access controls that limit internal access to Personal Data to authorised personnel who require it to perform their duties.
• Regular security audits and penetration testing of the bk39 Platform infrastructure.
• Multi-factor authentication options for Player accounts to reduce the risk of unauthorised access.
• Secure data deletion procedures applied when Personal Data reaches the end of its retention period.

11.2 In the event of a data security incident that poses a risk to players' Personal Data, bk39 will notify affected players and relevant authorities as required by applicable law, without undue delay.

12. Children and Minors

12.1 The bk39 Platform is strictly intended for individuals aged 21 years and above. 21+ bk39 does not knowingly collect Personal Data from any person under the age of 21.

12.2 If bk39 becomes aware that Personal Data has been collected from a person under 21 years of age, that data will be deleted promptly and the associated account will be permanently closed. Any balance held in such an account will be handled in accordance with our Terms and Conditions and applicable law.

12.3 Account holders who share a device with minors are advised to ensure that their bk39 account is logged out when the device is not in use, and to consider using parental control software to prevent underage access to gambling platforms.

13. Third-Party Services

13.1 The bk39 Platform incorporates services and software provided by third parties, including game technology providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and identity verification partners. Each of these providers operates under its own privacy policy and data protection framework.

13.2 bk39 is not responsible for the privacy practices of third-party providers beyond the scope of its contractual data processing agreements with them. Players who have concerns about how a specific provider handles data are encouraged to review that provider's own privacy documentation.

13.3 bk39 does not include third-party advertising networks or social media tracking pixels on the Platform without disclosing this in the cookie notice displayed to users.

14. Changes to This Policy

14.1 bk39 may update this Privacy Policy from time to time to reflect changes in law, technology, or the way the Platform operates. When a material change is made, bk39 will notify registered players by email to their registered address and display a prominent notice on the Platform at least 14 days before the change takes effect.

14.2 The effective date at the top of this document will be updated to reflect the date of the most recent revision. Players are encouraged to review this Policy periodically to stay informed about how their data is handled.

14.3 Where a change to this Policy requires your fresh consent (for example, a new purpose for processing your data that was not covered in the previous version), bk39 will seek that consent explicitly before the new processing begins.

15. Contact and Complaints

15.1 If you have any questions, concerns, or complaints about this Privacy Policy or about how bk39 handles your Personal Data, please contact the bk39 privacy team:

Email: [email protected]

Please use the subject line "Privacy Request" or "Privacy Complaint" so your message reaches the correct team. bk39 will acknowledge receipt within 48 hours and provide a substantive response within 30 days of receiving your request. All privacy correspondence is handled in English during Bangladesh Standard Time (BST, UTC+6) business hours.

15.2 If you are not satisfied with bk39's response to your privacy complaint, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction.