Privacy Policy – How bk11 Collects, Uses, and Protects Your Personal Data

1 Who We Are

bk11 is an online betting and live casino platform operated at https://bk11.bar, designed specifically for players in Bangladesh. The platform offers cricket betting, live casino tables, slot games, and related entertainment services. All financial transactions are conducted in Bangladeshi Taka (BDT) via locally trusted payment methods including bKash, Nagad, Rocket, and Upay.

For the purposes of this Privacy Policy, bk11 is the data controller — meaning we are the entity that determines the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, the contact details in Section 13 of this Policy are the appropriate point of contact.

bk11 is committed to operating as a safe, fair, and transparent platform. Responsible handling of player data is a fundamental part of that commitment, alongside our responsible gaming obligations described in the Responsible Gaming section of this site.

2 Personal Data We Collect

bk11 collects personal data across several categories. The table below sets out each category, provides examples of the specific data points within it, and identifies the primary purpose for which that category is collected.

3 How We Collect Your Data

bk11 collects personal data through the following channels and mechanisms:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion, you directly provide personal data to bk11.
• Automated technical collection: When you visit and interact with the bk11 platform, certain technical and usage data is collected automatically via server logs, session tracking systems, and browser cookies. This occurs whether or not you are logged into a registered account.
• Payment providers: When you transact via bKash, Nagad, Rocket, Upay, or a bank card, the payment provider confirms transaction details (amount, reference, payer identity) to bk11 for reconciliation purposes. bk11 does not receive your full payment account credentials from these providers.
• KYC verification partners: Where bk11 uses a third-party identity verification service to assist with document authentication, that service will return a verification result (pass/fail) and identity-match confidence score to bk11. The underlying document data may be processed by the verification partner subject to their own privacy terms.
• Communications: Any message, email, or live chat interaction you initiate with the bk11 support team generates a record that is retained as communication data.

4 Why We Use Your Personal Data

bk11 uses the personal data it collects for the following documented purposes only:

• Account creation and management: To register your account, authenticate your identity on login, maintain your account settings, and process account closure requests.
• Age and identity verification (KYC): To confirm that all registered players are aged 21 or above, as required by bk11's responsible gaming policy, and to verify that account details match the identity of the person using the account.
• Payment processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and bank cards, and to reconcile financial records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent betting patterns, multi-accounting, identity theft, money laundering, and other prohibited conduct as defined in the Terms and Conditions.
• Customer support: To respond to your queries, resolve disputes, and process responsible gaming requests such as self-exclusion and deposit limits.
• Platform improvement and analytics: To understand how players use the bk11 platform, identify technical issues, and prioritise feature development. Analytics are performed on aggregated or pseudonymised data wherever possible.
• Legal and regulatory compliance: To fulfil any reporting obligations, respond to lawful requests from Bangladeshi authorities, and maintain records required by applicable law.
• Promotional communications: To send you information about relevant promotions, bonuses, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].

5 Legal Basis for Processing

bk11 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing your identity data, contact data, financial data, and account data is necessary for bk11 to perform its contractual obligations to you as set out in the Terms and Conditions — including operating your account, processing transactions, and providing the betting and gaming services you have registered for.
• Legal obligation: Certain processing activities — particularly KYC identity verification, anti-money laundering checks, and retention of financial transaction records — are required by applicable law. bk11 cannot waive these obligations regardless of your preferences.
• Legitimate interests: bk11 processes technical data and usage data on the basis of its legitimate interests in maintaining platform security, preventing fraud, improving the user experience, and protecting the rights of other players on the platform. These interests are balanced against your privacy rights and are not used as a blanket justification for unrestricted data collection.
• Consent: Where bk11 sends you optional promotional communications or uses non-essential cookies, this is done on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

6 How We Share Your Data

bk11 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and terms of service.
• KYC and identity verification partners: Where bk11 uses a third-party service to assist with document verification, identity-match data is shared with that provider for the sole purpose of completing the verification check.
• Fraud detection and AML services: bk11 may share account and transaction data with specialist fraud detection or anti-money laundering screening services to protect the platform and its players.
• Game technology providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token to operate their games within the bk11 platform. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: bk11 will disclose personal data to law enforcement, regulatory bodies, or judicial authorities in Bangladesh where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent serious harm.
• Business transfers: In the event of a merger, acquisition, or sale of bk11's business assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data handling practices that result from it.

7 Cookies and Tracking Technologies

bk11 uses cookies and similar tracking technologies to operate the platform, maintain session continuity, prevent fraud, and improve the user experience. The following categories of cookies are used:

• Strictly necessary cookies: These are required for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences such as language settings, previously selected payment methods, and responsible gaming settings (e.g., deposit limits, session reminder intervals). Disabling these cookies may degrade your experience.
• Analytics cookies: bk11 uses pseudonymised analytics cookies to understand aggregate player behaviour, identify technical errors, and measure the effectiveness of platform improvements. Individual players are not singled out in analytics reporting.
• Security cookies: These are used to detect and prevent fraudulent login attempts, bot activity, and multi-accounting. They analyse device fingerprint signals alongside your session data.

Most browsers allow you to control or block cookies through their settings. Please note that blocking strictly necessary cookies will prevent you from logging into your bk11 account. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

8 Data Retention Periods

bk11 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes.

9 Your Data Rights

As a registered player on the bk11 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact bk11 at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request — [Your Username]".

• Right of access: You have the right to request a copy of all personal data bk11 holds about you. bk11 will provide this in a structured, commonly used, machine-readable format within 30 calendar days of receiving a verified request.
• Right to rectification: If any personal data held by bk11 is inaccurate or incomplete, you have the right to request that it be corrected. Identity and contact data corrections may require re-verification of your identity.
• Right to erasure ("right to be forgotten"): You may request that bk11 delete your personal data. This right is subject to exceptions where retention is required by law (e.g., financial transaction records must be retained for 7 years). Where deletion is not possible, bk11 will explain the specific legal basis for continued retention.
• Right to restrict processing: You may request that bk11 temporarily suspend the processing of your data while a dispute is resolved or a rectification request is being investigated.
• Right to data portability: You may request that bk11 transfer your account and transaction data to another service provider in a structured format, where technically feasible.
• Right to object: You may object to bk11 processing your data on the basis of legitimate interests. bk11 will cease that specific processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

10 Security Measures

bk11 employs a layered security architecture to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures in place include:

• SSL/TLS encryption: All data transmitted between your browser or device and the bk11 servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser's address bar confirms this connection is active during your bk11 session.
• Password hashing: Account passwords are processed through a one-way cryptographic hash function before storage. Even bk11's own technical staff cannot retrieve your original password. If you forget your password, it must be reset — not recovered.
• Access controls: Access to databases containing player personal data is restricted to authorised personnel whose roles require it. All internal data access is logged and audited regularly.
• KYC document storage: Identity documents submitted for KYC verification are stored in an access-restricted document management system separate from general account data, with additional encryption at rest.
• Fraud monitoring: Automated systems monitor account activity in real time for patterns indicative of account takeover, multi-accounting, and money laundering. Suspicious activity triggers an internal review workflow.
• Third-party security assessments: bk11 conducts periodic security reviews of its platform and data handling practices. Any identified vulnerabilities are remediated on a risk-priority basis.

Despite these measures, no internet-based system can guarantee absolute security. If you believe your bk11 account has been compromised, contact [email protected] immediately and change your password. bk11 will not be held responsible for security breaches resulting from your failure to maintain the confidentiality of your own login credentials.

11 Children and Minors

The bk11 platform is strictly for adults aged 21 years and above. bk11 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and any account found to belong to a person under 21 will be immediately suspended with all balances handled in accordance with the Terms and Conditions.

If you are a parent or guardian and believe that a minor in your care has registered an account on the bk11 platform or submitted personal data to bk11, please contact [email protected] immediately. bk11 will investigate and, if confirmed, will delete all data associated with the minor's account without undue delay.

bk11 also encourages parents and guardians to use device-level parental control software to prevent minors from accessing online gambling services. For further guidance on protecting young people from gambling harm, please visit the Responsible Gaming page.

12 Changes to This Privacy Policy

bk11 reviews this Privacy Policy at least annually and may update it at any time to reflect changes in data processing practices, applicable law, or platform functionality. When a material change is made — for example, a new category of data being collected, a new third-party data processor being engaged, or a change in retention periods — bk11 will:

• Update the "Last reviewed and updated" date at the top of this page.
• Post a notice on the bk11 platform homepage for a minimum of 14 days following the change.
• Where practicable, notify registered players by email of the nature of the change.

Your continued use of the bk11 platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to any material change, you should request Account closure before the change takes effect. Non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy) will take effect immediately upon publication.

bk11 recommends that you bookmark this page and review the Privacy Policy each time you log in to your account, particularly following any email notification of a policy update.

13 Contact Information

For all privacy-related enquiries, data rights requests, or concerns about how bk11 handles your personal data, please contact us using the details below. All contact information is provided as plain text only and is not presented as clickable links.

• Email: [email protected]
• Subject line for data requests: "Data Rights Request — [Your Username]"
• Subject line for privacy concerns: "Privacy Concern — [Your Username]"
• Live Chat: Available 24 hours a day, 7 days a week via the bk11 platform (Bangladesh Standard Time, UTC+6)
• WhatsApp: +880 1XXXXXXXXX (plain text)
• Response time target: All privacy-related communications will receive an acknowledgment within 24 hours and a substantive response within 30 calendar days.