Your Privacy Matters at bk9908

1. Data We Collect

When you register, verify your identity, make deposits, or interact with any feature on bk9908.vip, we collect personal data that falls into the following categories:

1.1 Registration and Identity Data

To open an account on bk9908, you must provide certain mandatory identification details. This includes your full legal name as it appears on your government-issued ID, date of birth, nationality, residential address (including district, division, and Bangladesh postal code), email address, and mobile phone number. This data is required to create and maintain your player account and to fulfil our KYC obligations.

1.2 Identity Verification (KYC) Documents

Before we process any withdrawal from your bk9908 account, our compliance team requires copies of the following documentation from Bangladesh-based players:

• National Identity Card (NID) — front and back
• Passport or driver's licence as an alternative to NID
• Proof of residential address (utility bill, bank statement, or official government letter dated within 3 months)
• Screenshot or statement confirming ownership of your bKash, Nagad, Rocket, or Upay mobile wallet

These documents are stored in encrypted form on secure servers and are accessed only by authorised compliance personnel on a strict need-to-know basis.

1.3 Financial Transaction Data

We record all deposit and withdrawal transactions associated with your account, including the transaction amount in BDT, the payment method used (bKash, Nagad, Rocket, or Upay), the timestamp of the transaction (Bangladesh Standard Time, UTC+6), and the transaction reference number issued by the payment provider. We do not store your full mobile banking PIN or account passwords — only the masked wallet number and transaction reference are retained.

1.4 Gaming Activity Data

bk9908 maintains a full record of your gaming activity on the platform. This includes the games played (casino games, live dealer sessions, sports betting markets), bet amounts, game outcomes, session start and end times, and cumulative wagering totals. This data is used for account management, fraud detection, bonus compliance monitoring, and responsible gaming oversight.

1.5 Technical and Device Data

When you access bk9908.vip, our servers automatically collect certain technical data about your connection and device, including:

• IP address and approximate geolocation (country and city level)
• Device type (mobile, tablet, desktop) and operating system
• Browser type and version
• Referring URL (the site you visited immediately before bk9908.vip)
• Pages visited on bk9908.vip and time spent on each page
• Clickstream data (the sequence of links clicked during a session)

1.6 Communications Data

If you contact our customer support team via live chat or by email at [email protected], we retain a transcript of that communication, including the subject matter, your enquiry, and our response. This record is used to resolve disputes, improve service quality, and maintain a full audit trail of player-support interactions.

Data Category	Examples	Primary Purpose
Identity Data	Full name, DOB, NID number	Account creation, KYC
Contact Data	Email, phone, address	Communication, verification
Financial Data	Wallet reference, transaction amounts	Deposits, withdrawals, AML
Gaming Data	Bets placed, game history, winnings	Account management, compliance
Technical Data	IP address, device, browser	Security, fraud prevention
Communications Data	Chat logs, email threads	Support, dispute resolution

2. How We Use Your Data

bk9908 uses the personal data we collect strictly for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first obtaining your explicit consent.

• Account Administration: Creating, maintaining, and securing your player account, including password resets, account balance management, and session control.
• KYC and Identity Verification: Verifying your identity and age in accordance with our responsible gaming and anti-money laundering obligations before processing withdrawals or awarding significant bonuses.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay, including communicating with payment providers to confirm and reconcile transactions.
• Fraud and Security Monitoring: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised access attempts using automated rule engines and manual review processes.
• Responsible Gaming: Monitoring gaming activity patterns to identify potential problem gambling behaviour and to enforce deposit limits, cooling-off periods, and self-exclusion orders at the player's request or when required by our responsible gaming obligations.
• Customer Support: Responding to enquiries, resolving disputes, and following up on complaints submitted through our live chat or email channels.
• Marketing Communications: Sending you promotional emails, SMS notifications, or in-platform messages about bonuses, tournament announcements, and seasonal promotions (such as Eid and BPL offers) — but only if you have opted in to receive such communications. You may opt out at any time.
• Legal and Regulatory Compliance: Meeting obligations imposed by applicable law, including anti-money laundering requirements, responding to lawful requests from law enforcement, and maintaining records required for audit purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and game selection of bk9908.vip.

3. Legal Basis for Processing

bk9908 processes your personal data on the following legal grounds:

• Contractual Necessity: Much of the data we process is necessary to perform the contract between you and bk9908 — specifically, to operate your player account, process your bets, and handle your deposits and withdrawals.
• Legal Obligation: Certain processing activities — particularly KYC verification, transaction record-keeping, and reporting to relevant authorities — are required by applicable law and cannot be avoided through consent withdrawal.
• Legitimate Interests: We process technical data, gaming activity data, and communications data on the basis of our legitimate interest in preventing fraud, ensuring platform security, and resolving disputes fairly. We have assessed that our legitimate interests do not override your privacy rights in these contexts.
• Consent: Where we send you marketing communications, we rely on your explicit opt-in consent. You may withdraw this consent at any time by contacting us at [email protected] or using the unsubscribe link in any marketing email.

4. Data Sharing and Disclosure

bk9908 may share your personal data with the following categories of recipients, solely to the extent necessary for the stated purpose:

• Payment Service Providers: We share transaction reference data with bKash, Nagad, Rocket, and Upay to facilitate deposits and withdrawals. These providers receive only the information necessary to process the specific transaction.
• Identity Verification Partners: Our KYC compliance process may involve sharing identity documents with third-party verification service providers who assist us in confirming the authenticity of submitted documents.
• Game Technology Providers: When you play a game powered by a third-party provider such as Pragmatic Play, Evolution Gaming, Spribe, or Ezugi, your account identifier and game session data are shared with that provider's system to operate the game. These providers are contractually bound to process data solely for game delivery purposes.
• Fraud Prevention Services: We may use third-party fraud detection platforms that analyse IP addresses, device fingerprints, and behavioural patterns to flag suspicious activity. These platforms process data under strict data processing agreements.
• Law Enforcement and Regulatory Bodies: We will disclose personal data to law enforcement agencies, courts, or regulatory authorities when required to do so by a valid legal order, subpoena, or applicable law. We will notify you of such a disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bk9908's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy commitments described in this policy.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device by your browser when you visit a website. bk9908.vip uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform correctly, remember your preferences, and understand how players use our site.

5.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, store your language preference, and ensure that the site behaves consistently. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use bk9908.vip — which pages are visited most, how long sessions last, and where users encounter errors. This data helps us improve the platform. These cookies do not identify you personally.
• Functional Cookies: These remember your in-platform preferences such as your preferred payment method, last-used game category, or responsible gaming settings, so you do not need to reconfigure them on each visit.
• Marketing Cookies: With your consent, we may use cookies to deliver promotional content relevant to your interests and to measure the effectiveness of our marketing campaigns. You may opt out of marketing cookies at any time via your browser settings.

5.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, and the browsers on Android and iOS devices popular in Bangladesh) allow you to block or clear cookies at any time. Please note that disabling strictly necessary cookies will prevent bk9908.vip from functioning correctly and you will not be able to maintain a login session.

6. Data Retention

bk9908 retains your personal data only for as long as is necessary for the purposes for which it was collected, subject to applicable legal requirements. Our standard retention periods are as follows:

• Active account data (identity, contact, gaming history): Retained for the full duration of your account's active life plus a minimum of 5 years following account closure, in line with standard anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the last interaction, unless the matter is subject to an ongoing dispute or legal proceeding, in which case the record is retained until the matter is fully resolved.
• Technical and device data (logs): Retained for 12 months from collection, after which it is either deleted or permanently anonymised.
• Marketing consent records: Retained for the duration of your opt-in plus 3 years after opt-out, as evidence of your consent history.

When the applicable retention period expires, personal data is either securely deleted from our systems or, where deletion is not technically feasible, permanently anonymised so that it can no longer be associated with any identifiable individual.

7. Your Privacy Rights

As a user of bk9908, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond to all verified requests within 30 days.

• Right of Access: You may request a copy of the personal data bk9908 holds about you, along with information on how it is processed, who it is shared with, and how long it will be retained.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances — for example, where the data is no longer necessary for the purpose it was collected — you may request that we delete your personal data. Note that this right is subject to overriding legal obligations such as AML record-keeping requirements, which may prevent full deletion.
• Right to Restriction of Processing: You may request that we restrict our processing of your personal data in specific circumstances, such as while an accuracy dispute is being resolved.
• Right to Data Portability: Where processing is carried out on the basis of your consent or a contract, you may request a structured, commonly used, machine-readable copy of your personal data.
• Right to Object: You may object at any time to processing carried out on the basis of our legitimate interests, including profiling for fraud detection. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8. Data Security

Our security infrastructure includes the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and bk9908.vip is encrypted using TLS 1.2 or higher, ensuring that your credentials, financial details, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data at rest — including KYC documents and financial transaction records — is stored using AES-256 encryption on access-controlled servers.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA via SMS OTP on their bk9908 accounts to protect against unauthorised login attempts.
• Access Controls: Access to player data within bk9908's internal systems is granted strictly on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion Detection and Monitoring: bk9908's technical infrastructure is monitored 24/7 for signs of unauthorised access, unusual traffic patterns, and potential data breach events.
• Breach Response: In the event of a data breach that poses a risk to your rights and freedoms, bk9908 will notify affected players by email within 72 hours of becoming aware of the breach, and will take immediate steps to contain and remediate the incident.

While we take every reasonable precaution to secure your data, no internet-based system can be guaranteed to be completely secure. You also bear responsibility for keeping your bk9908 login credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

9. Third-Party Links

bk9908.vip may contain links to or integrate content from third-party platforms, including game providers, payment service pages, and affiliate partner sites. This Privacy Policy applies solely to data collected and processed by bk9908 directly. When you leave bk9908.vip and visit a third-party platform, that platform's own privacy policy governs your data. bk9908 is not responsible for the privacy practices, content, or security standards of any third-party website or service. We recommend reviewing the privacy policy of any third-party site before providing personal information to it.

10. Children's Privacy

If you are a parent or guardian and believe that your child has registered on bk9908.vip and provided personal data without your consent, please contact us immediately at [email protected]. We will investigate the matter promptly and, if confirmed, delete all data associated with the underage account and return any deposited funds to the payment method used.

bk9908 employs age-gate measures at registration, including mandatory date-of-birth entry and KYC age verification via NID or passport. These measures are designed to prevent access by persons under 18. However, we rely on users providing accurate information during registration — deliberate misrepresentation of age constitutes a breach of our Terms & Conditions.

11. Changes to This Privacy Policy

bk9908 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made to this policy, we will notify active players by displaying a prominent notice on bk9908.vip and, where we hold a valid email address for you, by sending an email notification to your registered address.

The revised policy will display an updated "Last Updated" date at the top of this document. Your continued use of bk9908.vip after the publication of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you should close your account in accordance with Section 9.1 of our Terms & Conditions.

We recommend bookmarking this page and reviewing it periodically, particularly before making significant deposits or engaging with new platform features.

12. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bk9908 holds about you, please reach out to our dedicated privacy support team through any of the following channels:

• Email: [email protected] — please include "Privacy Rights Request" in the subject line for data rights enquiries.
• Live Chat: Available 24/7 on bk9908.vip — select "Account & Privacy" from the support topic menu.
• Response Time: We aim to acknowledge all privacy-related emails within 24 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days.

bk9908 is committed to resolving all privacy concerns fairly, transparently, and promptly. We treat every data rights request with the utmost seriousness and will never penalise a player for exercising their legitimate privacy rights.