Privacy Policy

This Privacy Policy ("Policy") is published by bak333 ("bak333", "we", "us", "our") and applies to all personal data processed in connection with the bak333 Platform available at https://bak333.app, including all associated mobile-optimised pages, subdomains, and related services (collectively, the "Platform"). The Policy is addressed to all registered players, prospective players, and visitors ("you", "your") who interact with the Platform, whether from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or anywhere else in Bangladesh.

bak333 takes the protection of personal data seriously. We are committed to handling your information with transparency, integrity, and appropriate technical safeguards. This Policy explains what personal data we collect, the purposes and legal bases for processing it, how long we retain it, the parties with whom it may be shared, and the rights available to you as a data subject.

By registering an account on the bak333 Platform, by depositing funds via bKash, Nagad, Rocket, or Upay, or by simply browsing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing activities described herein. If you do not agree to this Policy, please discontinue use of the Platform immediately and contact [email protected] to request account closure.

This Policy should be read in conjunction with the bak333 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated herein by reference.

bak333 collects personal data in three principal ways: directly from you when you provide it voluntarily, automatically as you use the Platform, and from third-party service providers involved in delivering the bak333 service. The categories of personal data we collect include the following:

bak333 uses personal data for the following purposes. Each purpose is tied to a legal basis, detailed in Section 04 below:

• Account Creation and Management: To create, verify, and maintain your bak333 player account, including processing your username, password, and contact details.
• Identity and Age Verification (KYC): To confirm that you are at least 18 years of age and that your account details match your verified identity, as required to prevent underage gambling and fraud.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records for each transaction.
• Game Delivery and Personalisation: To deliver the games and betting markets you request, store your preferences (e.g., preferred game categories such as cricket betting, Pragmatic Play slots, or Spribe crash games), and personalise your experience on the Platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct outlined in our Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns and proactively apply responsible gaming tools — including deposit limits, session reminders, and self-exclusion — where there is evidence of harmful gambling behaviour.
• Customer Support: To respond to your queries, complaints, and requests via email, live chat, or WhatsApp, and to maintain records of those interactions for quality assurance purposes.
• Legal and Regulatory Compliance: To comply with applicable anti-money-laundering (AML) obligations, financial record-keeping requirements, and any lawful requests received from competent authorities.
• Marketing and Promotions: To send you information about bak333 promotions — such as Eid bonus offers, BPL season specials, and Pohela Boishakh promotions — where you have given your consent to receive marketing communications. You may withdraw this consent at any time by contacting [email protected].
• Platform Analytics: To analyse aggregate usage patterns, improve Platform performance, troubleshoot technical issues, and develop new features.

bak333 processes personal data only where a lawful basis for doing so exists. The primary legal bases on which bak333 relies are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bak333 — specifically, the bak333 Terms & Conditions — including account registration, payment processing, and game delivery.
• Legal Obligation: Processing that is required to comply with applicable law, including Know Your Customer (KYC) obligations, anti-money-laundering regulations, and lawful requests from regulatory authorities.
• Legitimate Interests: Processing carried out in pursuit of bak333's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics. bak333 has conducted legitimate-interest assessments for each such purpose.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

bak333 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and is bound by applicable Bangladeshi financial regulations.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token to enable game delivery. They do not receive your full identity or payment data.
• KYC and Identity Verification Partners: bak333 may engage third-party identity verification services to cross-reference documents you submit. These partners are contractually bound to process your data solely for verification purposes.
• Fraud Prevention and Analytics Providers: Aggregated or pseudonymised data may be shared with fraud-detection and web-analytics platforms to identify unusual patterns. Raw personal data identifying you is not shared with these services.
• Legal and Regulatory Authorities: bak333 will disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or valid legal process. bak333 will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a material part of bak333's business, personal data held by bak333 may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom bak333 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using the data for any purpose beyond the specific purpose for which it was shared.

bak333 uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate the Platform, improve your experience, and ensure security. The cookies used by bak333 fall into the following categories:

bak333 does not use advertising cookies or share cookie data with ad networks or social media platforms. You may control cookie settings through your browser's privacy settings; however, disabling strictly necessary cookies may impair Platform functionality, including your ability to remain logged in.

bak333 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention schedule applies:

• Active Account Data: Retained for the duration of your account and for a period of 5 years following permanent account closure, to satisfy AML record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of submission, as required by anti-money-laundering regulations applicable to financial services providers.
• Transaction Records: Retained for 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
• Customer Support Communications: Retained for 3 years from the date of the final communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the period during which you remain a registered bak333 player, or until you withdraw consent, whichever occurs first.
• Server Logs and Usage Data: Retained for 12 months in identifiable form; thereafter, anonymised for long-term analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

bak333 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• Encryption in Transit: All data transmitted between your browser or device and bak333 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser's address bar confirms that your connection is secure.
• Encryption at Rest: Sensitive personal data fields — including identity document images, financial account references, and authentication credentials — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within bak333 systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo data privacy training and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): bak333 strongly recommends that players enable 2FA on their accounts. Internal bak333 systems that process personal data require 2FA for all administrative access.
• Penetration Testing and Vulnerability Scanning: bak333 conducts periodic penetration tests and automated vulnerability scans to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, bak333 will notify affected players without undue delay and will take immediate remediation steps.

As a bak333 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request" and include sufficient information to verify your identity:

• Right of Access: You may request a copy of the personal data that bak333 holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure ("Right to be Forgotten"): You may request that bak333 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to bak333's legal obligation to retain certain records (see Section 07).
• Right to Restriction of Processing: You may request that bak333 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of bak333's legitimate interests. bak333 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Rights in Relation to Automated Decision-Making: bak333 does not make decisions that produce legal or similarly significant effects on you solely by automated means without human review.

bak333 will respond to all verified data-subject requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, with prior notification to you. There is no fee for submitting a data subject request, unless requests are manifestly unfounded or excessive.

The bak333 Platform is strictly for adults aged 18 and above. bak333 does not knowingly collect personal data from any person under the age of 18. Age verification is a mandatory step in the account registration process, and bak333 reserves the right to request documentary proof of age from any player at any time.

If bak333 discovers that personal data has been collected from a person under the age of 18, the account will be immediately suspended, all funds returned to the source payment account where possible, and all personal data associated with the account permanently deleted. If you are a parent or guardian and believe that a minor in your care has registered on the bak333 Platform, please contact us immediately at [email protected].

The bak333 Platform may contain links to or integrations with third-party services, including game studio platforms operated by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you access a game delivered by one of these studios, your session data is processed by that studio's infrastructure in accordance with the studio's own privacy policy.

bak333 is not responsible for the privacy practices of any third-party game studio or payment service provider, and this Policy does not extend to those services. We encourage you to review the privacy policy of any third-party service you use in connection with your bak333 account. bak333 selects all game-content and payment partners on the basis of, among other criteria, their data protection standards and compliance posture.

bak333 reserves the right to amend this Privacy Policy at any time. Material changes — for example, changes to the categories of data collected, the purposes of processing, or your rights — will be communicated to registered players by email to the address on file and by a prominent notice on the Platform homepage prior to the changes taking effect.

Minor clarifications and corrections that do not affect your rights or the substance of processing activities may be made without individual notice, though the "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following any amendment constitutes your acknowledgement of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by bak333, please reach out through any of the following channels. All contact details are provided as plain text — they are not clickable links:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the bak333 Platform.
• WhatsApp: +880 1700 000 000
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

bak333 treats all privacy-related correspondence with the highest level of confidentiality. Our data protection team is available to assist you with access requests, consent withdrawals, rectification requests, and any other data-subject rights exercise. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days.