bk45 Privacy Policy

1 Who We Are

1.1 bk45 operates the online casino and sports betting platform accessible at https://bk45.io ("the Platform"). In this Privacy Policy, references to "bk45", "we", "us", and "our" refer to the operator of the bk45 Platform. References to "you" and "your" refer to any individual who accesses or uses the Platform, whether as a registered account holder or as an anonymous visitor.

1.2 bk45 acts as the data controller in respect of all personal data collected through the Platform. As data controller, bk45 determines the purposes and means by which personal data is processed. Where bk45 engages third-party service providers to process data on its behalf, those providers act as data processors under bk45's instructions.

1.3 Our designated data protection contact can be reached at [email protected]. All data-related enquiries, rights requests, and complaints should be directed to this address with the subject line "Data Privacy Request".

2 Personal Data We Collect

2.1 The categories of personal data bk45 collects depend on how you interact with the Platform. The following table summarises the main categories:

2.2 bk45 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required by applicable anti-money laundering law and with explicit consent where required.

3 How We Collect Your Data

3.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, use responsible gaming tools, contact our support team, or respond to a voluntary survey or promotion.

3.2 Automatically — when you access the Platform, our servers and analytics tools automatically record Technical Data and Usage Data. This collection occurs whether or not you are logged into an account.

3.3 From payment service providers — when you initiate a transaction via bKash, Nagad, Rocket, Upay, or a card network, transaction confirmation data (including payment reference numbers and timestamps) is transmitted to bk45 by the respective payment provider.

3.4 From identity verification partners — during the KYC process, bk45 may use regulated third-party identity verification services that cross-reference the documents you submit against official records. These services return a verification result (pass / fail / refer) and any data points necessary to complete the verification.

3.5 From cookies and similar technologies — as described in Section 7 of this policy. You can manage cookie preferences through your browser settings at any time.

4 How We Use Your Personal Data

4.1 bk45 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity at login, and maintain your account profile in an accurate and up-to-date state.
• Transaction processing: To process deposits and withdrawals in BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and to maintain an accurate transaction history on your account.
• Identity verification (KYC): To comply with our legal obligations relating to anti-money laundering, counter-terrorism financing, and age verification. KYC is mandatory before withdrawals can be processed.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other Prohibited Conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling, to enforce deposit limits and self-exclusion periods you have set, and to reach out proactively if we identify concerning activity on your account.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, test new features, and improve the overall player experience on bk45.
• Marketing communications: To send you promotional offers, bonus notifications, and news about bk45 — but only where you have provided explicit consent to receive marketing communications. You may withdraw this consent at any time.
• Legal compliance: To comply with any applicable legal obligation, court order, or instruction from a competent authority.

5 Legal Bases for Processing

5.1 bk45 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing that is necessary to deliver the services described in our Terms & Conditions — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations and the retention of financial records for the period required by law.
• Legitimate interests: Processing that is necessary for bk45's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud detection, platform security, and service improvement through aggregated analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

6 Sharing Your Personal Data

6.1 bk45 may share your personal data with the following categories of recipients:

Payment Service Providers

Transaction data is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to process your deposit or withdrawal. These providers operate under their own privacy policies and are bound by applicable financial services regulations.

Identity Verification Partners

During KYC, identity documents and verification data are shared with regulated identity verification service providers acting as data processors under bk45's instructions. These providers do not retain your data beyond the period needed to complete the verification.

Technology and Infrastructure Providers

bk45 uses third-party cloud hosting, database management, and cybersecurity services to operate the platform. These providers process technical and operational data as data processors and are contractually bound to process data only in accordance with bk45's instructions and applicable law.

Game Software Providers

Certain game session data (such as player session tokens and bet amounts) is transmitted to game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe to enable real-time game delivery. These studios are contractually bound to keep such data confidential and use it only for game delivery purposes.

Legal and Regulatory Authorities

bk45 may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where bk45 reasonably believes disclosure is necessary to prevent criminal activity, protect the safety of a person, or enforce its Terms & Conditions.

Business Transfers

In the event that bk45 undergoes a merger, acquisition, or sale of all or a material part of its business assets, player data may form part of the transferred assets. You will be notified in advance of any such transfer and of any resulting change in the identity of the data controller.

7 Cookies & Tracking Technologies

7.1 bk45 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to analyse how the platform is used, and to detect fraudulent or abusive activity.

7.2 The main categories of cookies used on the bk45 Platform are:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and previously entered information to improve your experience.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate the platform. This data is used in aggregate form to identify areas for improvement and does not identify you personally.
• Security cookies: Used to detect and prevent bot activity, credential stuffing attacks, and other security threats. These cookies are strictly necessary for platform integrity.

7.3 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7.4 bk45 does not use cookies to serve third-party advertising or to track your activity on other websites outside the bk45 Platform.

8 Data Retention

8.1 bk45 retains your personal data for the periods set out below, or for longer where required by applicable law:

• Account data and transaction records: Retained for a minimum of five years from the date of the last transaction on your account, as required by applicable financial records obligations.
• KYC documents: Retained for a minimum of five years from the date of verification, in accordance with anti-money laundering record-keeping requirements.
• Communications data (support tickets, chat logs): Retained for three years from the date of the communication, to enable dispute resolution and quality assurance review.
• Gaming session data: Retained for five years from the date of each session, to support dispute resolution, regulatory compliance, and responsible gaming monitoring.
• Technical and usage data: Retained in anonymised or aggregated form for analytical purposes. IP logs that can be linked to an individual are retained for 12 months.
• Marketing consent records: Retained for three years from the date consent was recorded or until consent is withdrawn, whichever is earlier.
• Responsible gaming records (self-exclusion, limit settings): Retained permanently to prevent circumvention of responsible gaming restrictions.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised so that it can no longer be linked to any individual.

9 Data Security

9.1 bk45 implements a layered approach to data security, including the following controls:

• End-to-end 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data fields (including payment details and identity documents) at rest in our databases;
• Role-based access controls limiting staff access to personal data strictly to those with a documented operational need;
• Full audit logging of all access to personal data, with anomaly detection alerts for unusual access patterns;
• Two-factor authentication required for all bk45 staff accessing internal systems containing personal data;
• Regular independent security audits and penetration tests;
• Documented incident response procedures, including breach notification protocols.

9.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bk45 will notify affected players without undue delay via the email address registered on their account, and will take all reasonable steps to contain and remediate the breach.

9.3 While bk45 takes all reasonable technical and organisational measures to protect your data, no internet transmission is completely secure. You are responsible for keeping your account login credentials confidential and for notifying bk45 immediately at [email protected] if you suspect any unauthorised access to your account.

10 Your Data Rights

10.1 As a data subject, you have the following rights in relation to your personal data held by bk45. To exercise any of these rights, contact [email protected] with the subject line "Data Privacy Request" and include your registered email address and a description of your request. bk45 will respond within 30 days.

10.2 bk45 will not charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. bk45 will notify you in advance if any fee is applicable.

10.3 To verify your identity before processing a rights request, bk45 may ask you to confirm certain account details. This verification step is necessary to ensure that personal data is not disclosed to or acted upon at the request of an unauthorised third party.

11 Children's Privacy

11.1 The bk45 Platform is strictly intended for adults aged 21 years and above. bk45 does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not use the Platform or provide any personal data to bk45.

11.2 If bk45 discovers that personal data has been collected from a person under the age of 21, that data will be immediately and permanently deleted, the associated account will be closed, and any funds in the account will be dealt with in accordance with our Terms & Conditions and applicable law.

11.3 If you are a parent or guardian and believe that your child has provided personal data to bk45, please contact us immediately at [email protected] so that we can take appropriate action without delay.

12 Third-Party Links

12.1 The bk45 Platform may contain references to game studios, payment providers, and other third-party entities. Where such references include links to external websites (for example, links to payment provider support pages), please be aware that bk45 has no control over the content, privacy practices, or data handling of those external sites.

12.2 This Privacy Policy applies solely to the bk45 Platform at https://bk45.io. bk45 accepts no responsibility for the privacy practices of any third-party website. We encourage you to review the privacy policy of any external site before submitting personal data to it.

13 Changes to This Privacy Policy

13.1 bk45 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

13.2 Where changes are material — meaning they meaningfully affect your rights or the way we use your data — bk45 will notify you by email to your registered address at least 14 days before the changes take effect. For minor clarifications and corrections that do not affect your rights, the updated policy will be posted on this page without a separate notification.

13.3 Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with the changes, you must contact [email protected] to close your account before the effective date of the revision.

14 Contact Us & Complaints

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bk45 handles your personal data, please contact our data protection team:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 via the bk45 Platform
• Support Page: bk45 Support Centre

14.2 Our support team operates around the clock, Bangladesh Standard Time (BST, UTC+6). We aim to acknowledge all data privacy requests within 24 hours and to provide a substantive response within 30 calendar days of receipt. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

14.3 If you are not satisfied with our response to a data privacy request or complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.