Privacy Policy —
How bk9901 Protects Your Data

INFORMATION WE COLLECT

When you register an account, use bk9901's gaming and betting services, or interact with our customer support team, we may collect the following categories of personal information:

1.1 Registration and Identity Data

• Full legal name as it appears on your official government-issued identification.
• Date of birth — used to verify that you meet the mandatory 18+ age requirement.
• Residential address — including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), and postal code.
• Email address — used for account communications, security alerts, and (with your consent) promotional updates.
• Username and encrypted password — used to secure your account login.
• Mobile phone number — used for two-factor authentication and account verification.

1.2 Identity Verification (KYC) Documents

As part of our mandatory Know Your Customer (KYC) obligations, we may request and retain copies of:

• National Identity Card (NID) or passport
• Proof of residential address (e.g., utility bill, bank statement issued within three months)
• Payment method verification documents (e.g., a screenshot of your bKash or Nagad account showing your name and mobile number)
• Selfie or live photograph for identity confirmation in certain high-risk or high-value account verification scenarios

1.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts in Bangladeshi Taka (BDT), timestamps, and payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard).
• Account balance history and transaction reference numbers.
• Payment method identifiers (e.g., bKash mobile number, last four digits of card) — full card numbers are never stored on bk9901 servers.

1.4 Gaming and Betting Activity Data

• Game history, bet amounts, wager outcomes, and session timestamps for all casino games, live dealer tables, crash games, and sports betting markets (including cricket BPL, IPL, T20 World Cup, ICC events, football, and kabaddi).
• Bonus and promotional offer usage, including wagering progress and eligibility status.
• Responsible gaming settings you have applied to your account, including deposit limits, time-out periods, and self-exclusion records.

1.5 Technical and Device Data

• IP address and approximate geographic location (city/district level, not precise GPS coordinates).
• Device type, operating system, browser type and version.
• Session duration, pages visited on bk9901.club, and click/navigation patterns (collected via cookies and analytics tools — see Section 4).
• Login timestamps and failed login attempt records (for fraud prevention and account security).

1.6 Communications Data

• Live chat transcripts and email correspondence with bk9901 customer support.
• Records of any complaints, disputes, or formal queries submitted to bk9901.
• Marketing communication preferences (opt-in/opt-out status for promotional emails and platform notifications).

HOW WE USE YOUR DATA

bk9901 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are: (a) performance of the contract between bk9901 and you as a registered player; (b) compliance with our legal obligations; (c) our legitimate business interests (where these do not override your rights); and (d) your explicit consent (particularly for direct marketing communications).

The table below maps each key use of your data to its corresponding legal basis:

DATA SHARING & DISCLOSURE

bk9901 does not sell your personal data. We share your information only in the following limited and clearly defined circumstances:

3.1 Service Providers and Technology Partners

We work with a select number of trusted third-party service providers who assist us in operating the bk9901 platform. These may include:

• Game software providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — who may receive session tokens or anonymised player identifiers to deliver their games within the bk9901 environment.
• Payment processors who facilitate bKash, Nagad, Rocket, Upay, and card-based transactions — receiving only the transaction data necessary to process your payment.
• Identity verification providers who assist with KYC document authentication.
• Analytics and platform performance tools that help us understand how players use bk9901.club and identify technical issues.
• Customer support platform providers who host our live chat and ticketing infrastructure.

All third-party service providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than providing the specified service to bk9901. They are not permitted to retain your data beyond the period necessary to fulfil their contracted role.

3.2 Legal and Regulatory Disclosures

bk9901 may disclose your personal data to competent authorities — including law enforcement agencies, financial intelligence units, or regulatory bodies — where we are legally required or compelled to do so. Such disclosures may arise in the context of:

• Anti-money laundering (AML) investigations or suspicious transaction reporting obligations.
• Court orders, subpoenas, or other legally binding demands.
• Investigation of fraud, match-fixing, or other serious criminal conduct connected to activity on bk9901.

bk9901 will notify you of any such disclosure request unless we are legally prohibited from doing so, or unless doing so would prejudice an active investigation.

3.3 Business Transfers

In the event that bk9901 undergoes a business restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data is handled as a result.

COOKIES & TRACKING TECHNOLOGIES

bk9901.club uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience for all players. This section explains what cookies we use, why, and how you can manage your preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used across the internet to make websites work correctly, remember your preferences, and provide website operators with anonymised analytical data about how their platforms are used. Cookies do not contain executable code and cannot access other files on your device.

4.2 Cookie Categories Used by bk9901

4.3 Managing Your Cookie Preferences

You may manage non-essential cookie categories through your bk9901 account privacy settings. In addition, most modern browsers allow you to control cookies through browser settings — you can instruct your browser to refuse all cookies, notify you when a cookie is set, or delete existing cookies. Please note that disabling strictly necessary or security cookies will impair your ability to log in and use bk9901 services. Your browser's help function or the browser developer's website provides detailed guidance on managing cookies for each major browser (Chrome, Firefox, Safari, Edge, Opera).

DATA SECURITY & RETENTION

bk9901 takes the security of your personal data seriously and has implemented a layered set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

5.1 Security Measures

• TLS/SSL Encryption: All data transmitted between your browser or device and bk9901's servers is encrypted in transit using TLS 1.2 or higher. The padlock icon in your browser confirms an active encrypted connection.
• Encrypted Data Storage: Sensitive data — including passwords (stored as salted hashes), identity documents, and payment references — is encrypted at rest on bk9901's secure servers.
• Access Control: Access to systems holding personal data is restricted on a strict need-to-know basis, with multi-factor authentication required for all administrative access.
• Security Monitoring: bk9901 operates continuous intrusion detection and anomaly monitoring to identify and respond to potential security incidents in real time.
• Regular Security Audits: Our platform undergoes periodic security assessments conducted by qualified independent professionals to identify and remediate vulnerabilities.
• Data Breach Response: In the unlikely event of a data breach affecting your personal information, bk9901 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

5.2 Data Retention Periods

bk9901 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

YOUR PRIVACY RIGHTS

As a bk9901 player, you hold the following rights with respect to your personal data. bk9901 is committed to honouring these rights promptly and without charge:

• Right of Access: You may request a copy of all personal data bk9901 holds about you at any time. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account information directly through your account settings; for KYC-related corrections, please contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires its retention. Note that minimum legal retention periods (see Section 5.2) may limit or delay erasure in some cases.
• Right to Restriction of Processing: You may request that bk9901 restrict processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request a machine-readable export of personal data you have provided to bk9901 directly (such as your profile information and account settings) in a structured, commonly used format.
• Right to Object: You may object to processing of your personal data carried out on the basis of bk9901's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our Data Privacy team by email at [email protected] with the subject line "Data Privacy Request". We will acknowledge your request within 72 hours and fulfil it within 30 days, except in cases of particular complexity where we may require an additional 30-day extension (in which case we will notify you of the extension and the reason for it).

bk9901 may need to verify your identity before processing your request to ensure we do not disclose or delete data belonging to another individual. We may ask you to confirm details associated with your account or to provide a copy of a government-issued ID for this purpose.

THIRD-PARTY SERVICES

bk9901 integrates a number of third-party services to deliver its full platform experience. While we select these partners carefully and contractually require them to maintain appropriate data protection standards, each third-party provider operates under its own privacy policy for data processed in its own systems. We encourage you to review those policies where relevant.

The primary categories of third-party services embedded within bk9901.club and the data they may interact with are outlined below:

• Game Engine Providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe): Game providers receive a session token and anonymised player identifier when you launch a game. They use this data solely to deliver the game experience and generate outcomes. Full financial data is not passed to game providers; deposit and withdrawal processing is handled separately by bk9901's payment infrastructure.
• Payment Gateway Partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors, Dutch-Bangla Bank, BRAC Bank): When you initiate a deposit or withdrawal, bk9901 transmits the minimum necessary transactional data to the relevant payment provider to process the transaction. Payment providers are subject to their own regulatory obligations regarding financial data security.
• Identity Verification Services: Third-party KYC verification providers receive the documents and biometric data you submit during the identity verification process. They return a verification result to bk9901 and are contractually prohibited from retaining your documents for their own purposes.
• Analytics Platforms: bk9901 uses analytics tools to understand aggregate, anonymised user behaviour patterns on the platform. These tools do not receive your name, email address, financial data, or any other directly identifiable personal information — only anonymised session and interaction data.

bk9901 does not embed social media tracking pixels, third-party advertising networks, or affiliate attribution cookies on bk9901.club that would allow external parties to build a profile of your browsing behaviour across multiple websites.

UPDATES TO THIS POLICY

bk9901 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our services, technology, legal obligations, or industry best practices. All updates will be published on this page at bk9901.club/privacy-policy, and the "Last Updated" date at the top of the document will be revised accordingly.

Where a proposed change is material — meaning it significantly affects how we collect, use, or share your personal data — bk9901 will provide advance notice to all registered players via:

• A prominent notice displayed on bk9901.club when you next log in to your account, at least 14 days before the change takes effect.
• An email notification sent to the address registered on your account, summarising the key changes and directing you to the updated policy.

Your continued use of bk9901's services following the effective date of a policy update constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the changes, you may close your account and request erasure of your personal data (subject to minimum legal retention requirements outlined in Section 5.2) by contacting our support team at [email protected].

We recommend bookmarking this page and reviewing it periodically, particularly when you receive a notification of an update. Archived versions of previous Privacy Policy editions are available upon request from our Data Privacy team.