bak33 Privacy Policy

1 Introduction

bak33 ("we", "us", "our") operates the online betting and casino platform accessible at bak33.io (the "Platform"). This Privacy Policy describes how bak33 collects, uses, stores, and discloses personal information obtained from individuals ("you", "the Player") who register for or access the Platform from Bangladesh.

By creating a bak33 account and using any part of the Platform — including sports betting, live casino, slots, crash games, and payment services — you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately and request account closure by contacting [email protected].

This Privacy Policy should be read alongside the bak33 Terms & Conditions, available at /terms-conditions, and the Responsible Gaming Policy, available at /responsible-gaming. Together these documents form the complete agreement governing your use of the bak33 Platform.

2 Personal Data We Collect

bak33 collects the following categories of personal data in the course of operating the Platform and providing services to registered players:

2.1 Identity & Contact Information

• Full legal name as it appears on your national identity documents.
• Date of birth (required to verify that you are aged 21 or above).
• Residential address in Bangladesh (district, city, and full postal address).
• Bangladeshi mobile number registered to your bak33 account.
• Email address (if provided during registration or support communications).

2.2 Identity Verification Documents

• National Identity Card (NID) number and a copy of the NID document.
• Passport or other government-issued photo ID where requested for enhanced verification.
• Proof of address documents such as a recent utility bill or bank statement.

2.3 Financial & Payment Data

• bKash, Nagad, Rocket, or Upay account numbers associated with deposits or withdrawals.
• Bank account details (account holder name, account number, bank name) where bank transfers are used.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment references.

2.4 Account & Activity Data

• bak33 account username and encrypted password hash.
• Betting history, casino game history, wager amounts, and settlement records.
• Bonus activations, wagering progress records, and promotional participation history.
• Customer support communications, including chat logs and email correspondence.
• Responsible gaming tool usage, including any self-exclusion or deposit limit settings applied to your account.

2.5 Technical & Device Data

• IP address at the time of login and during active sessions.
• Device type, operating system, and browser version.
• Session timestamps, login location data, and session duration.
• Cookie identifiers and similar tracking technologies as described in Section 7.

3 How We Collect Your Data

bak33 collects personal data through the following channels:

• Direct registration: Information you provide when creating or updating your bak33 account, including the registration form, identity verification submissions, and account settings.
• Platform usage: Data generated automatically as you interact with the bak33 Platform — including bets placed, games played, pages visited, and features used.
• Payment processing: Transaction data received from bKash, Nagad, Rocket, Upay, and banking partners when you make deposits or request withdrawals.
• Support communications: Information you share when contacting bak33 via email or live support, including account queries, complaints, and verification requests.
• Cookies and analytics: Technical data collected automatically through browser cookies and similar technologies when you visit the Platform. See Section 7 for full details.
• Third-party verification providers: Identity verification services used to confirm the accuracy of documents you submit during KYC (Know Your Customer) checks.

4 How We Use Your Personal Data

bak33 uses the personal data it collects for the following purposes:

bak33 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, beyond the automated fraud-detection and responsible gaming monitoring systems that protect the integrity of the Platform and the safety of players.

5 Legal Basis for Processing

bak33 processes personal data on the following legal grounds:

• Contract performance: Processing necessary to fulfil our contractual obligations to you as a registered bak33 player, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) checks, and financial record-keeping requirements.
• Legitimate interests: Processing undertaken to pursue the legitimate business interests of bak33, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent — for example, for the sending of promotional communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

6 Data Sharing & Disclosure

bak33 does not sell, rent, or trade your personal data to third-party marketers or data brokers. We may share your personal data with third parties only in the following limited circumstances:

6.1 Payment Service Providers

To process your deposits and withdrawals, bak33 shares the minimum necessary payment data with bKash, Nagad, Rocket, Upay, and partnered banks including Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank. These providers process payment data solely for transaction execution and are bound by their own privacy and security obligations.

6.2 Identity Verification Partners

During KYC checks, bak33 may share identity documents and personal identifiers with approved third-party identity verification service providers. These partners are contractually obligated to process the data solely for verification purposes and to maintain confidentiality.

6.3 Game Content Providers

Casino game providers — including but not limited to Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — may receive the minimum technical identifiers required to operate their game engines within the bak33 Platform. These providers do not receive full player identity data.

6.4 Legal & Regulatory Disclosure

bak33 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by law, court order, or where such disclosure is necessary to protect the rights, property, or safety of bak33, its players, or the public.

7 Cookies & Tracking Technologies

bak33 uses cookies and similar browser-based tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise returning visitors, maintain session security, and understand how the Platform is used.

7.1 Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without disrupting core Platform functionality.
• Analytics cookies: Used on an anonymised basis to understand player behaviour on the Platform, identify technical issues, and measure the performance of pages and features. No personally identifiable data is transmitted via analytics cookies.
• Preference cookies: Store your language and display preferences so the Platform presents correctly on repeat visits.
• Fraud-prevention cookies: Used by our security systems to detect and prevent suspicious login activity, bot traffic, and other forms of platform abuse.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will impair your ability to log in and use the bak33 Platform.

8 Data Security

bak33 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the bak33 Platform.
• Encryption at rest for all personally identifiable data stored on bak33 servers.
• Multi-factor authentication (MFA) requirements for platform staff accessing player data systems.
• Role-based access controls ensuring that only authorised personnel with a verified business need can access player personal data.
• Regular penetration testing and security audits conducted by independent information security professionals.
• Automatic session expiry and suspicious-login alerting for all player accounts.

While bak33 takes all reasonable steps to safeguard your personal data, no system is entirely immune to security risks. In the event of a data breach that poses a risk to your rights and interests, bak33 will notify affected players as promptly as practicable in accordance with applicable obligations.

9 Data Retention

bak33 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the full duration of your account's active status on the bak33 Platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date, in line with financial record-keeping obligations applicable to payment service operations.
• KYC and identity verification records: Retained for a minimum of five (5) years following account closure or the last verified transaction, whichever is later.
• Support communications: Retained for three (3) years following the closure of the relevant support case.
• Self-exclusion records: Retained for the full duration of the exclusion period plus five (5) years thereafter, to prevent re-registration during an active exclusion.
• Analytics data: Retained in anonymised, aggregated form with no expiry, as it no longer constitutes personal data once anonymised.

Requests for early deletion of personal data are subject to bak33's legal obligations to retain certain records. Where a deletion request cannot be fulfilled in full, bak33 will explain which data must be retained and the legal basis for doing so.

10 Your Data Rights

As a bak33 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact bak33 at [email protected] from the email address or mobile number registered to your account:

• Right of access: You may request a copy of the personal data bak33 holds about you, along with information about how that data is used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held on your account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bak33's legal retention obligations.
• Right to restriction: You may request that bak33 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to object: You may object to the processing of your personal data where that processing is based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bak33 will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request to ensure that personal data is not disclosed to an unauthorised individual.

11 Children & Minors

The bak33 Platform is strictly intended for individuals aged 21 years and above. bak33 does not knowingly collect personal data from anyone under the age of 21. If you believe that a minor has registered for or accessed the bak33 Platform, please notify us immediately at [email protected].

Upon receiving a verified report that a minor has created a bak33 account, we will immediately suspend the account, delete all associated personal data to the extent permitted by our legal obligations, and refund any deposits made to the appropriate payment source. bak33 cooperates fully with any parental or guardian request related to the protection of minor data.

12 Third-Party Links

The bak33 Platform does not contain links to external third-party websites. All navigation links on the Platform direct players exclusively to internal bak33 pages. Accordingly, this Privacy Policy governs all data collected via the bak33 Platform itself, and bak33 is not responsible for the privacy practices of any third-party payment provider's own interface (such as the bKash or Nagad app) when you interact with those services outside the bak33 Platform environment.

13 Updates to This Privacy Policy

bak33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, bak33 will make reasonable efforts to notify registered players via their registered mobile number or email address prior to the changes taking effect.

The "Last Updated" date at the top of this document reflects when the most recent version was published. Continued use of the bak33 Platform following publication of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how bak33 protects your data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bak33 handles your personal data, please contact our support team using the details below. All privacy-related communications should be submitted in English and include your registered bak33 account details for verification purposes.

Email: [email protected]

Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

Postal Reference: For formal written data requests, please email [email protected] with the subject line "Data Rights Request" and include your full name, registered mobile number, and a description of your request.