bak44 Privacy Policy — Your Data, Protected

1. Introduction

This Privacy Policy ("Policy") explains how bak44 ("the Platform", "we", "us", "our"), operating at https://bak44.pro, collects, uses, stores and protects the personal data of players and visitors ("you", "your") who interact with the bak44 platform. This Policy forms part of our Terms and Conditions and should be read alongside them.

By registering an account on bak44, making a deposit or using any feature of the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the bak44 platform.

2. Personal Data We Collect

bak44 collects personal data in the following categories. We collect only what is necessary for the stated purpose and do not collect data speculatively or for purposes we cannot justify.

3. How We Use Your Personal Data

bak44 uses the personal data we collect for the following purposes. We will only use your data in ways that are compatible with the purpose for which it was originally collected:

• Account creation and management — verifying your identity, setting up and maintaining your player account, processing your registration details and keeping your account secure.
• Payment processing — executing deposits and withdrawals via bKash, Nagad and Rocket, reconciling transactions, detecting and preventing payment fraud.
• Regulatory compliance — fulfilling our KYC and anti-money laundering (AML) obligations, age verification, and any reporting requirements applicable to our operations.
• Responsible gaming — monitoring gaming patterns to identify potential problem gambling behaviour, delivering deposit limit alerts, session reminders and self-exclusion tools, and responding to responsible gaming support requests.
• Customer support — handling your enquiries, resolving account issues, processing complaints and communicating service updates or changes that affect your account.
• Platform improvement — analysing aggregated, anonymised usage data to understand how players interact with bak44, identify technical issues and improve the user experience for all players.

4. Legal Basis for Processing

bak44 processes your personal data on the following legal bases. Each processing activity is justified by at least one of the bases listed below:

• Contractual necessity — processing required to fulfil our obligations under the Terms and Conditions you accepted when registering your bak44 account, including account management, payment processing and customer support.
• Legal obligation — processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money laundering obligations and responsible gaming requirements.
• Legitimate interests — processing necessary for fraud prevention, platform security, abuse detection and service improvement, where our legitimate interests are not overridden by your rights and interests.
• Consent — where we send you marketing communications or use non-essential cookies, we do so only with your explicit, freely given consent. You may withdraw consent at any time by contacting [email protected].

5. Sharing Your Personal Data

bak44 does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors — bKash, Nagad and Rocket receive the minimum data necessary to process your transactions. These providers are bound by their own privacy obligations and do not receive your gaming history or betting records.
• Identity verification providers — third-party KYC service providers who assist with document verification receive only the identity documents and personal details required for that verification. They are contractually prohibited from using your data for any other purpose.
• Technology and infrastructure providers — companies that provide hosting, cloud storage, security monitoring or analytics services to bak44 may have access to personal data as part of providing those services. Such providers are bound by data processing agreements and may not use your data independently.
• Law enforcement and regulators — where we are required by applicable law, court order or regulatory direction to disclose personal data to government authorities or law enforcement agencies, we will comply. We will notify you of such a disclosure where we are legally permitted to do so.

In all cases where personal data is shared with a third party, bak44 requires contractual commitments from that party ensuring the data is protected to a standard consistent with this Policy and used only for the specified purpose.

6. Payment Data and Mobile Wallets

When you make a deposit or withdrawal using bKash, Nagad or Rocket, bak44 records the mobile wallet number associated with the transaction and the transaction reference provided by the payment provider. We do not store full mobile banking PINs, passwords or one-time passwords (OTPs). These credentials are entered directly into the payment provider's own interface and never pass through bak44's systems.

Payment transaction records are retained for a minimum of five years from the date of the transaction for anti-money laundering compliance purposes. This retention period is mandatory and cannot be shortened at individual player request, even following account closure.

7. Cookies and Tracking Technologies

bak44 uses cookies and similar browser storage technologies to operate the platform correctly and to improve the user experience. Cookies are small text files placed on your device. We use the following types of cookies on the bak44 platform:

• Strictly necessary cookies — required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking the platform.
• Functional cookies — remember your preferences such as language selection and display settings so you do not need to re-enter them on each visit. These are set only with your consent.
• Analytics cookies — collect anonymised data about how visitors use the bak44 platform, such as which pages are visited most frequently and where errors occur. This data helps us improve the platform. Analytics cookies are set only with your consent and do not identify you personally.

You can manage cookie preferences through your browser settings. Please be aware that disabling strictly necessary cookies will affect the functionality of the bak44 platform and may prevent you from logging in or completing transactions. To withdraw consent for functional or analytics cookies, contact [email protected].

8. Data Retention

bak44 retains personal data only for as long as it is necessary for the purpose for which it was collected or as required by applicable law. The following general retention periods apply: account data and gaming records are retained for a minimum of five years from the date of account closure; KYC and identity verification documents are retained for a minimum of five years from the date of verification or account closure, whichever is later; payment and transaction records are retained for a minimum of five years from the date of the transaction; support correspondence is retained for two years from the date of the last communication in each case.

When the applicable retention period expires and there is no legal basis to continue holding your data, bak44 will securely delete or anonymise it. Anonymised data (from which you cannot reasonably be identified) may be retained beyond the standard retention periods for aggregate analytics and service improvement purposes.

9. Your Data Protection Rights

As a user of the bak44 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered phone number and a clear description of your request. We aim to respond within 30 days of receiving a valid request:

• Right of access — you have the right to request a copy of the personal data bak44 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification — if any data we hold about you is inaccurate, incomplete or outdated, you have the right to request that we correct or update it without undue delay.
• Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where it has been unlawfully processed. This right is subject to our legal data retention obligations.
• Right to restriction — you have the right to request that we restrict processing of your personal data in certain circumstances, for example while the accuracy of data is being contested or while an objection to processing is being considered.
• Right to data portability — you have the right to receive a copy of the personal data you provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to object — you have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

To submit a data subject request or raise a privacy concern, please email [email protected] with the subject line "Data Request" and include your registered phone number. We will verify your identity before processing the request and respond within 30 days. Complex requests may take up to an additional 60 days, in which case we will notify you of the extension and the reason for it.

10. Data Security

bak44 implements appropriate technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, alteration, disclosure or destruction. Our security infrastructure includes 256-bit SSL encryption for all data transmitted between your device and our servers, encrypted storage for sensitive data at rest, access controls that restrict employee access to personal data on a strict need-to-know basis, regular security assessments and vulnerability testing, and intrusion detection and monitoring systems operating around the clock.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bak44 will notify affected players promptly and take immediate steps to contain and remediate the breach. We will also notify relevant authorities as required by applicable law.

11. Children and Minors

The bak44 platform is strictly for adults aged 21 and above. bak44 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a minor, we will delete that data immediately and close the associated account. If you are a parent or guardian and believe that a minor has registered on bak44 using false age information, please contact us immediately at [email protected] so we can investigate and take appropriate action.

12. Changes to This Privacy Policy

bak44 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations or the features and services we offer. When we make a material change to this Policy, we will update the "Last updated" date displayed at the top of this page and, where appropriate, notify registered players by posting a notice on the platform or by contacting you directly.

Your continued use of the bak44 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how bak44 protects your personal data. The current version of this Policy is always available at https://bak44.pro/privacy-policy.

13. Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to raise a privacy concern, please contact the bak44 data team. Our support team is available around the clock, every day of the week including Bangladesh public holidays, and aims to respond to all privacy-related enquiries within 24 hours and to all formal data subject requests within 30 days.

Contact bak44 by email at [email protected]. When submitting a data subject request, please use the subject line "Privacy Request", include your registered mobile phone number and a clear description of the right you wish to exercise or the concern you wish to raise. bak44 will verify your identity before processing any data subject request to protect against unauthorised access to your personal data.