bhk33 Privacy Policy

---

This Privacy Policy ("Policy") applies to all users of the bhk33 platform, accessible at bhk33.app. It describes the types of personal data collected by bhk33 ("we", "us", "our"), the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you as a data subject. By registering an account or continuing to use the bhk33 platform, you acknowledge that you have read and understood this Policy. This Policy should be read in conjunction with the bhk33 Terms & Conditions and Responsible Gaming Policy.

---

1. Data We Collect

bhk33 collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the service, and in limited cases from third-party verification partners. The categories of personal data we collect include:

1.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address, including city, district, and postcode within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Email address and mobile phone number registered with your bhk33 account.
• Username and encrypted password hash (we never store passwords in plain text).

1.2 Financial & Payment Data

• Mobile wallet identifiers associated with your bKash, Nagad, Rocket, or Upay accounts (phone number used for transactions).
• Bank account or card details (last four digits, card type) where Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank payment methods are used.
• Transaction history including deposit amounts, withdrawal requests, and timestamps — all recorded in Bangladeshi Taka (BDT).
• Bonus redemption history and wagering activity linked to promotional offers.

1.3 KYC Verification Documents

• Scanned copies or photographs of your National Identity Card (NID), passport, or other government-issued identity document.
• Proof of address documents (utility bill, bank statement) dated within three months of submission.
• Selfie or liveness-check image where required by our verification partner to confirm document authenticity.

1.4 Technical & Usage Data

• IP address and approximate geolocation (country/city level) at the time of login and each session.
• Device type, operating system, browser type and version, screen resolution.
• Pages visited on the bhk33 platform, time spent on each page, click and scroll patterns.
• Session start and end times, login frequency, and game or betting event interactions.
• Error logs and crash reports generated during your use of the platform.

1.5 Communications Data

• Content of messages sent via bhk33's live chat support system.
• Email correspondence with the bhk33 support team at [email protected].
• Records of any formal complaints or dispute submissions submitted through the platform.

---

2. How We Use Your Data

bhk33 processes your personal data for specific, legitimate purposes only. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The table below summarises the primary purposes and the lawful basis for each:

Purpose	Data Used	Lawful Basis
Account registration and identity verification (KYC)	Identity data, KYC documents, date of birth	Contractual necessity; legal obligation
Processing deposits and withdrawals in BDT	Financial data, payment method identifiers	Contractual necessity
Providing sports betting and casino game services	Account data, usage data, transaction data	Contractual necessity
Anti-fraud and anti-money-laundering (AML) screening	Identity data, financial data, IP address, device data	Legal obligation; legitimate interests
Responsible gaming monitoring and intervention	Usage data, transaction history, session data	Legal obligation; legitimate interests
Delivering customer support and resolving disputes	Communications data, account data	Contractual necessity; legitimate interests
Sending transactional notifications (deposit confirmations, withdrawal updates)	Contact data, transaction data	Contractual necessity
Sending promotional communications (bonuses, seasonal offers)	Contact data, game preference data	Consent (opt-in)
Platform analytics and product improvement	Usage data, technical data (aggregated/anonymised)	Legitimate interests
Enforcing bhk33's Terms & Conditions	All relevant data categories	Legitimate interests; legal obligation

Where bhk33 relies on consent as the lawful basis for processing (primarily for marketing communications), you have the right to withdraw that consent at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

---

3. Cookies & Tracking

bhk33 uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to operate the platform efficiently, maintain your login session, remember your preferences, and gather anonymised analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancer routing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences such as language setting (English), display preferences, and last-visited game category. These improve your experience on repeat visits.
• Analytics Cookies: Used to collect anonymised data about how players navigate the bhk33 platform — which pages are visited most, how long sessions last, and where users encounter errors. This data is used in aggregated form only and cannot be used to identify individual players.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot traffic, and suspicious account activity. These cookies work alongside our IP monitoring and device fingerprinting systems.

bhk33 does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bhk33 account.

---

4. Data Sharing & Disclosure

bhk33 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients only where necessary and under strict data protection obligations:

4.1 Payment Processing Partners

To process deposits and withdrawals in BDT, bhk33 shares the minimum necessary financial data with its payment processing partners including bKash, Nagad, Rocket, Upay, and card/banking processors connected to Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. These partners process data only for the purpose of completing your requested transaction and are bound by their own data protection obligations.

4.2 Identity Verification (KYC) Providers

bhk33 works with a third-party KYC verification provider to authenticate player identities and comply with age verification requirements. Your identity documents and verification selfie are shared with this provider solely for the purpose of completing the KYC check. Documents are not retained by the provider beyond the period required for verification.

4.3 Game Studio Partners

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers and game result data to facilitate game delivery and jackpot management. These studios do not receive your name, contact details, or payment information.

4.4 Legal and Regulatory Authorities

bhk33 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, or where disclosure is necessary to protect the rights, property, or safety of bhk33, its players, or the public. Such disclosures are made in good faith and under legal compulsion only.

4.5 Professional Advisers

bhk33 may share personal data with legal counsel, auditors, or fraud investigation specialists where strictly necessary to obtain professional advice or to protect bhk33's legal position. All such advisers are bound by confidentiality obligations.

---

5. Data Retention

bhk33 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or for as long as required by applicable law. The following retention periods apply as a general guide:

• Active account data (identity, contact, payment details): Retained for the duration of your account and for a period of 5 years after account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification completion, in line with applicable financial crime prevention standards.
• Transaction records: Retained for 7 years from the date of each transaction, to meet financial record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of the final message in each support thread.
• Analytics and usage data (anonymised): Retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.
• Marketing consent records: Retained until you withdraw consent, and for a further period of 2 years after withdrawal as evidence of the consent originally given.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately technically feasible (e.g., data held in encrypted backup archives), the data is isolated from active processing and deleted in the next scheduled backup cycle.

---

6. Your Rights

As a bhk33 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a clear description of your request. We will respond within 28 calendar days.

• Right of Access: You may request a copy of the personal data bhk33 holds about you, along with information on how it is being processed.
• Right to Rectification: If any of your personal data held by bhk33 is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis for processing applies. Note that this right is subject to bhk33's legal obligations to retain certain data (see Section 5).
• Right to Restrict Processing: In certain circumstances, you may request that bhk33 restrict the processing of your data — for example, while a dispute over data accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a commonly used, machine-readable format.
• Right to Object: You may object to processing based on bhk33's legitimate interests, including any profiling carried out for responsible gaming monitoring purposes. bhk33 will cease such processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

---

7. Data Security

bhk33 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Transport Layer Security (TLS 1.2+): All data in transit between your browser or mobile device and the bhk33 servers is encrypted using industry-standard TLS protocols.
• Data Encryption at Rest: Sensitive data fields — including identity document images, payment method identifiers, and KYC records — are encrypted at rest using AES-256 encryption.
• Password Security: Passwords are stored as salted cryptographic hashes. bhk33 staff cannot view your password in plain text and will never ask for it via any communication channel.
• Access Controls: Access to production databases containing player data is restricted to authorised personnel on a need-to-know basis. All internal access is logged and audited.
• Fraud Monitoring: bhk33 operates real-time fraud detection systems that monitor for unusual login patterns, suspicious transaction activity, and potential account takeover attempts. Suspicious activity triggers automatic security alerts and may result in temporary account restriction pending investigation.
• Third-Party Security Audits: bhk33's platform and data handling practices are subject to periodic independent security reviews to identify and remediate vulnerabilities.

While bhk33 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

---

8. Children's Privacy

The bhk33 platform is strictly intended for adults aged 18 and above. 18+ We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes mandatory date-of-birth verification, and our KYC process includes identity document checks designed to detect and prevent underage registration.

If bhk33 discovers or is notified that personal data has been collected from a person under the age of 18, we will immediately and permanently close the account, forfeit any balance held in the account, and securely delete all associated personal data without undue delay. Parents or guardians who believe that a minor may have registered on bhk33 are urged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

bhk33 supports responsible gaming initiatives across Bangladesh and encourages parents and guardians to make use of parental control software and to discuss the risks of online gambling with young people. For further guidance, please visit our Responsible Gaming page.

---

9. Policy Updates

bhk33 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a notice on the bhk33 platform for a minimum of 7 days following the publication of the revised Policy.
• Send a notification to the registered email address or mobile number of active players where the changes are significant.

Your continued use of the bhk33 platform after any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should stop using the platform and contact us to close your account and request deletion of your data under your right to erasure (see Section 6).

Previous versions of this Privacy Policy are available on request by contacting [email protected]. bhk33 recommends saving or printing a copy of this Policy for your records at the time of registration.

---

10. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bhk33 handles your personal data, please contact our support team in the first instance:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within the bhk33 platform (English-language support)
• Response Time: bhk33 acknowledges privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and aims to provide a full response within 28 calendar days.

bhk33 takes all privacy complaints seriously. If you are not satisfied with our response to your complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction. bhk33 commits to cooperating in good faith with any regulatory enquiry related to the handling of personal data.