Privacy Policy

1. Data Controller Information

For the purposes of this Privacy Policy, bhk88 (operating the website at bhk88.app) is the data controller responsible for your personal information collected through the platform. As data controller, bhk88 determines the purposes and means by which your personal data is processed and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bhk88 handles your personal data, you may contact our dedicated privacy team using the details below. All privacy-related correspondence should be directed to:

bhk88 is committed to responding to all privacy-related enquiries within 10 business days of receipt. For urgent matters relating to suspected unauthorised access to your account or data breach concerns, please use the 24/7 live chat facility within the platform for the fastest possible response.

2. Information We Collect

bhk88 collects personal data from you in several ways: directly when you register an account, make a deposit or withdrawal, contact our support team, or participate in a promotion; automatically when you interact with the platform through your device and browser; and from third-party payment providers as part of transaction processing. The categories of data we collect are described below.

bhk88 does not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. We do not require you to submit a photograph of yourself (selfie) unless specifically requested as part of an enhanced KYC procedure triggered by our compliance team.

3. How We Use Your Data

bhk88 processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely upon are: (a) performance of a contract — processing necessary to provide the bhk88 gaming service to you; (b) legal obligation — processing required to comply with anti-money laundering, responsible gaming, and other applicable regulatory obligations; (c) legitimate interests — processing for fraud prevention, platform security, and service improvement; and (d) your consent — where you have explicitly opted in to receive marketing communications.

The following table maps each processing purpose to its lawful basis:

bhk88 will never use your personal data for purposes that are incompatible with the purposes listed above without first notifying you and, where required, obtaining your explicit consent. If you have opted in to marketing communications and later wish to opt out, you may do so at any time via Account → Settings → Notifications, or by emailing [email protected] with the subject line "Marketing Opt-Out".

4. Data Sharing & Third Parties

bhk88 does not sell your personal data. We may share your data with carefully selected third-party organisations where necessary to deliver our services, comply with legal obligations, or protect the safety and integrity of the platform. All third-party recipients of bhk88 player data are contractually required to handle that data in accordance with applicable privacy standards and to use it only for the specific purpose for which it was shared.

• Payment processors: bKash, Nagad, Rocket, Upay, and USDT network operators receive transaction data (wallet number, amount, reference) solely for the purpose of processing deposits and withdrawals. These providers operate their own privacy policies.
• Game content providers: Third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a unique anonymous player token to manage game session state. These providers do not receive your name, contact details, or payment information.
• Identity verification services: Third-party KYC and document verification vendors may process your identity documents to confirm authenticity as part of our compliance programme. These vendors are bound by strict data processing agreements.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to help bhk88 understand user behaviour and improve the platform experience. No personally identifiable information is included in these data sets.
• Legal and regulatory authorities: bhk88 may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or in response to a valid legal process. We will notify you of such disclosures wherever legally permitted to do so.
• Fraud prevention networks: In cases of suspected fraud, money laundering, or multi-accounting, bhk88 may share relevant data with industry fraud prevention networks to protect the platform and other players.

5. Cookies & Tracking Technologies

bhk88 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the platform, remember your preferences, maintain your logged-in session, and analyse how the platform is used. This section explains what types of cookies we use and how you can manage them.

How to manage cookies: Most modern browsers allow you to view, block, or delete cookies through the browser's privacy or settings menu. Please note that blocking strictly necessary cookies will prevent you from logging in to your bhk88 account. For instructions specific to your browser, refer to your browser's help documentation.

bhk88 does not use third-party advertising cookies or cross-site tracking cookies for behavioural advertising purposes. We do not participate in real-time bidding (RTB) advertising ecosystems that rely on your personal browsing history.

6. Data Retention Policy

bhk88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal and regulatory obligations, or resolve disputes. The retention periods below represent our standard schedule; in exceptional circumstances (such as active litigation or a regulatory investigation), data may be retained for longer periods.

• Account data (registration details, contact information): Retained for the lifetime of your active account plus 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or from account closure, whichever is later, in accordance with financial compliance standards.
• Transaction records (deposits, withdrawals, bet history): Retained for 7 years from the transaction date for accounting, audit, and legal compliance purposes.
• Support communications (live chat transcripts, emails): Retained for 3 years from the date of the communication to enable quality assurance, dispute resolution, and training purposes.
• Analytics and usage data: Aggregated, anonymised analytics data may be retained indefinitely. Personally identifiable usage logs are retained for no longer than 13 months.
• Marketing consent records: Retained for the duration of your marketing consent plus 3 years after withdrawal of consent, as evidence that communications were sent with a valid lawful basis.
• Self-exclusion records: Retained permanently (or for the maximum legally required period) to prevent re-registration by self-excluded players, even after account closure.

When your data reaches the end of its retention period, bhk88 will securely delete or anonymise it in accordance with our data destruction procedures. Anonymised data that cannot reasonably be used to identify you may be retained indefinitely for statistical and analytical purposes.

7. Security Measures

bhk88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following controls:

• Transport Layer Security (TLS 1.3): All data in transit between your browser or mobile device and the bhk88 platform is encrypted using TLS 1.3 with 256-bit AES encryption. Our SSL certificate is issued by a recognised certificate authority and is renewed regularly.
• Data at rest encryption: Sensitive data stored in bhk88's databases — including identity data, KYC documents, and financial records — is encrypted at rest using AES-256 encryption. Encryption keys are stored separately from the encrypted data in a dedicated key management system.
• Access controls: Access to player data within bhk88's internal systems is restricted on a need-to-know basis. All staff with data access are required to authenticate using multi-factor authentication (MFA). Access logs are maintained and reviewed regularly.
• Penetration testing and vulnerability scanning: bhk88 conducts regular penetration tests and automated vulnerability scans on its platform infrastructure. Critical vulnerabilities identified through these processes are remediated on a priority basis.
• Incident response: bhk88 maintains a documented data breach response plan. In the event of a data breach that poses a risk to player rights and freedoms, bhk88 will notify affected players and relevant authorities within the timeframes required by applicable law.
• Staff training: All bhk88 personnel who handle player data receive regular training on data protection obligations, phishing awareness, and secure data handling procedures.

8. Your Data Rights

As a bhk88 player, you hold a number of rights with respect to the personal data we hold about you. bhk88 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, contact us at [email protected] with the subject line "Data Rights Request" and provide sufficient information for us to verify your identity before processing the request.

1. Right of access: You have the right to request a copy of all personal data bhk88 holds about you (a "Subject Access Request" or SAR). We will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving your verified request.
2. Right to rectification: If any personal data bhk88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most data fields, you can update your own information directly via Account → Settings without needing to contact support.
3. Right to erasure ("right to be forgotten"): You may request that bhk88 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where we have no other lawful basis for retaining it. Note that this right is subject to bhk88's legal data retention obligations — we cannot delete data we are legally required to keep (e.g., transaction records within the statutory retention period).
4. Right to restriction of processing: You may request that bhk88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request, or while a complaint about processing is under investigation.
5. Right to data portability: Where bhk88 processes your data on the basis of consent or contract performance, you have the right to receive your personal data in a portable format and to request that it be transferred directly to another service provider where technically feasible.
6. Right to object: You have the right to object to bhk88 processing your personal data where we rely on legitimate interests as the lawful basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
7. Right to withdraw consent: Where bhk88 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bhk88 will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period. bhk88 will not charge a fee for processing data rights requests in standard circumstances.

9. Children's Privacy

bhk88 is strictly an adult-only platform. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 18. Our registration system includes age verification controls designed to prevent minors from creating accounts. If bhk88 becomes aware that personal data has been collected from a person under 18 years of age, we will immediately suspend the account, delete the data, and take appropriate steps as required under our responsible gaming policy.

Parents and guardians who believe their child may have registered on bhk88 or submitted personal data to the platform should contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate all such reports on a priority basis and take prompt action, including data deletion and a permanent bar on re-registration from the relevant device and payment method.

bhk88 strongly encourages parents and guardians in Bangladesh to use parental control software to restrict access to online gambling websites on shared devices. For guidance on free parental control tools, contact our support team who will be happy to provide recommendations.

10. Updates to This Policy

bhk88 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made to this policy, bhk88 will notify registered players by displaying a prominent notice on the platform and, where practicable, by sending an email notification to the registered email address on file.

The effective date displayed in the hero section of this page indicates when the current version of the Privacy Policy came into force. We encourage you to review this policy periodically to stay informed about how bhk88 protects your personal data. Continued use of the bhk88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

Previous versions of this Privacy Policy are available on request by contacting [email protected]. If you have any questions about changes made in the most recent update, our support team is available 24/7 via live chat within the platform or by email.