Privacy Policy — How bk34 Collects, Uses, and Protects Your Data

This Privacy Policy (the "Policy") sets out how bk34 (the "Company", "Platform", "We", "Us", or "Our") collects, uses, stores, shares, and protects personal data relating to individuals who register for or otherwise use the bk34 online casino and sports betting platform, accessible at https://bk34.io and any associated mobile-optimised versions thereof.

bk34 serves adult players resident in Bangladesh. Our platform is made available exclusively in the English language, and all communications with players — including this Policy — are conducted in English. References to "you", "your", or "Player" in this Policy mean any individual who accesses or uses the bk34 platform, whether or not they have completed account registration.

This Policy was last updated and became effective as of January 2026. We reserve the right to update or replace this Policy at any time to reflect changes in our data practices, platform features, or applicable law. The current version of the Policy will always be published at https://bk34.io/privacy-policy, with the effective date displayed at the top of the document. We will notify registered players of material changes via the email address on file.

This Policy should be read alongside the bk34 Terms and Conditions and Responsible Gaming Policy, both of which are available via the links in the footer of every page on this site.

bk34 collects personal data through several channels: directly from you during the registration and account management process, automatically through your use of the platform, and in limited cases from third-party identity verification and fraud prevention providers. The categories of personal data we collect are described below.

bk34 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data processed for identification purposes, health data, or data concerning sexual orientation, unless required to do so by applicable law or with your explicit consent.

bk34 uses the personal data we collect for the specific, defined purposes set out below. We will not use your personal data for any purpose that is incompatible with the purposes listed here without first obtaining your explicit consent or as otherwise required by applicable law.

• Account registration and management: To create and maintain your bk34 player account, authenticate your identity at login, manage your account preferences, and communicate account-related notifications to you.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and affiliated banking partners; to reconcile transaction records; and to investigate and resolve payment disputes.
• Identity verification and KYC compliance: To verify that you are at least 21 years of age and are the person you claim to be, in compliance with our responsible gaming obligations and internal anti-fraud procedures.
• Fraud prevention and platform security: To detect and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited activities that may harm the platform or other players.
• Responsible gaming monitoring: To identify players who may be displaying indicators of problem gambling — such as rapidly escalating deposit amounts, session lengths that exceed stated time limits, or patterns consistent with chasing losses — and to take proactive welfare steps where appropriate.
• Platform improvement and analytics: To understand how players navigate and use the bk34 platform, identify popular games and features, diagnose technical issues, and prioritise product development improvements.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, seasonal promotions (such as those tied to BPL cricket season, Eid, or Pohela Boishakh), and relevant platform updates — but only where you have consented to receive such communications.
• Legal and regulatory compliance: To maintain records required for financial reporting, to respond to lawful requests from competent authorities, and to enforce our Terms and Conditions where a breach has occurred.

bk34 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual necessity: Processing that is required to perform the contract between you and bk34 — specifically, to operate your player account, process deposits and withdrawals, and deliver the gaming services you have subscribed to.
• Legitimate interests: Processing carried out to pursue bk34's legitimate business interests, such as fraud prevention, platform security, internal analytics, and improving our service quality. We conduct a balancing assessment to ensure that our legitimate interests are not overridden by your privacy interests.
• Legal obligation: Processing required to comply with applicable financial, anti-money-laundering, or other legal obligations to which bk34 is subject.
• Consent: Where we rely on your consent — specifically, for marketing communications and the use of non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bk34 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data with third parties only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: We share relevant financial and identity data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank as required to process your deposits and withdrawals. These parties act as independent data controllers for their own services and are subject to their own privacy policies.
• Identity verification providers: We share identity document data and personal details with third-party KYC (Know Your Customer) service providers to verify player age and identity as part of our responsible gaming and anti-fraud procedures.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session and transaction data necessary for game delivery and dispute resolution. These providers do not receive your full identity or financial profile.
• Fraud prevention services: We may share account activity and device fingerprint data with specialist fraud detection services to identify and prevent prohibited activities such as multi-accounting, bonus abuse, or money laundering.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory bodies where we are required to do so by law or where disclosure is necessary to protect the rights, property, or safety of bk34, its players, or the public.
• Business transfers: In the event that bk34 undergoes a merger, acquisition, or sale of all or part of its assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and the resulting changes to data controllership prior to any change taking effect.

bk34 uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform, remember your login state, and gather analytics data about platform usage. The categories of cookies we use are described below.

• Strictly necessary cookies: These cookies are essential for the bk34 platform to function. They include session authentication tokens, anti-CSRF tokens, and load-balancing cookies. These cannot be disabled without disrupting core platform functionality.
• Analytics cookies: We use analytics cookies to understand how players interact with the bk34 platform — which game categories are most popular, where players spend the most time, and where usability issues may exist. This data is processed in aggregated and anonymised form where possible.
• Preference cookies: These cookies remember your platform preferences, such as your preferred game view or previously entered username (not password), to provide a more convenient experience on subsequent visits.
• Security cookies: Used to detect and prevent fraudulent account access attempts, including identifying unusual login patterns based on device fingerprint or IP geolocation that deviate from your established usage history.

You may control non-essential cookies through your browser settings. Please note that disabling analytics or preference cookies will not affect your ability to play games or manage your account, but may result in a slightly less personalised experience.

bk34 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the bk34 platform, including during login, deposit, withdrawal, and account management sessions.
• Passwords stored using industry-standard hashing algorithms. bk34 staff never have access to your plain-text password, and we will never request your password via email or telephone.
• Access to player personal data within the bk34 organisation is restricted on a strict need-to-know basis. Staff who handle personal data undergo data protection training and are subject to confidentiality obligations.
• Regular security reviews of platform infrastructure, including penetration testing and vulnerability assessments, to identify and remediate potential weaknesses before they can be exploited.
• Automated monitoring for suspicious account activity — including unusual login locations, rapid successive failed login attempts, and atypical transaction patterns — with automated protective responses such as temporary account locks and email alerts to the registered account holder.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bk34 will notify you without undue delay via your registered email address, and will take immediate steps to contain and remediate the breach.

bk34 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for such additional periods as are required by applicable legal, financial, or regulatory obligations. The key retention periods applicable to each data category are set out below.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised and aggregated data that cannot identify you may be retained for longer periods for statistical and analytical purposes.

As a registered player on bk34, you have a number of rights in relation to your personal data. These rights are described below, along with guidance on how to exercise them. All rights requests should be submitted to support@bk34.io with the subject line "Data Rights Request" and sufficient information to identify your account.

• Right of access: You have the right to request a copy of all personal data bk34 holds about you, along with information about how and why it is being processed. We will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data bk34 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details (such as contact phone number or city of residence) may be correctable directly through your account settings page.
• Right to erasure: You have the right to request that bk34 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and there is no other legal basis for continued processing. This right is subject to our legal retention obligations, and certain data may be retained even following an erasure request.
• Right to restrict processing: You may request that bk34 restrict the processing of your personal data in certain situations — for example, while a rectification request is being assessed, or where you have objected to processing based on legitimate interests and we are evaluating whether our interests override yours.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests. Where you raise an objection, bk34 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where bk34 processes your data on the basis of consent (including marketing communications and non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The bk34 platform is strictly for adults aged 21 and above. bk34 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification steps designed to prevent minors from creating accounts.

If bk34 discovers or is credibly notified that personal data has been collected from an individual who was under 21 years of age at the time of collection, we will take immediate steps to: suspend the account, delete the personal data concerned, reverse any financial transactions where this is technically and legally possible, and notify the parent or guardian where we have a means of doing so.

If you are a parent or guardian and believe that your child may have registered on the bk34 platform, please contact us immediately at support@bk34.io. We will investigate and respond within 48 hours of receiving your report.

bk34 may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality, applicable law, or in response to feedback from our players. When we make changes to this Policy, we will update the "Effective Date" shown at the top of the document.

For material changes — those that significantly affect your rights or how we process your personal data — we will provide prominent notice via the email address registered to your bk34 account at least 14 days before the changes take effect. Continued use of the bk34 platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how bk34 protects your personal data. The most current version will always be available at https://bk34.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bk34 processes your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and professionally.

All data rights requests, complaints, and privacy enquiries should be directed to:

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority or seek independent legal advice regarding your rights under applicable privacy law.