bak44 Privacy Policy
Your Data, Your Rights

1. Information We Collect

bak44 collects personal data from you in two primary ways: information you provide directly when you interact with the platform, and information collected automatically as you use our services. We collect only the data that is genuinely necessary for the purposes described in this Policy — we do not collect information speculatively or in excess of what is required.

Information You Provide Directly:

• Registration Data: Your full legal name, date of birth, residential address (including district, city, and postal code within Bangladesh), email address, and mobile number when you create a bak44 account.
• Identity Verification Documents: Copies of government-issued identification (National Identity Card, passport) and proof of address (utility bill, bank statement) submitted during Know Your Customer (KYC) verification.
• Payment Information: Details of the payment method used to make deposits or receive withdrawals, including your bKash or Nagad mobile wallet number, Rocket account reference, or masked bank card details. bak44 does not store full card numbers — these are handled directly by our payment processing partners.
• Communications: The content of messages you send to bak44 through live chat, email, or any support channel, including details of your queries, complaints, and our responses.
• Self-Exclusion and Responsible Gaming Data: Information you provide when setting deposit limits, requesting time-outs, or submitting a self-exclusion request through our Responsible Gaming tools.

Information Collected Automatically:

• Device and Technical Data: Your IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage Data: Pages visited on bak44.net, games played, bet history, session duration, click paths, and feature interactions — used to personalise your experience and detect unusual or fraudulent activity.
• Cookies and Similar Technologies: Session identifiers, preference cookies, and anonymised analytics data. See the Cookies section below for full details.
• Transaction Logs: A complete record of all deposits, withdrawals, bets placed, bonuses claimed, and account balance changes, retained for financial reconciliation and regulatory compliance purposes.

2. How We Use Your Data

bak44 processes your personal data on the basis of contractual necessity (to provide the services you have signed up for), compliance with legal obligations, and our legitimate interests in operating a safe, fair, and commercially viable gaming platform. The specific purposes for which we use your data are as follows:

bak44 will not use your personal data for any purpose that is incompatible with the purposes listed above without first informing you and, where required, obtaining your consent. You may withdraw consent for marketing communications at any time by contacting [email protected] or by using the unsubscribe link in any promotional email.

3. Data Sharing & Disclosure

bak44 does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

Service Providers and Technology Partners: We engage carefully selected third-party service providers to support the operation of the bak44 platform. These partners may process your data on our behalf in the following capacities:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners process transaction data to complete deposits and withdrawals. These providers operate under their own privacy policies and are subject to Bangladesh Bank regulations.
• Game Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical identifiers (such as a session token) to load and authenticate games within the bak44 platform. They do not receive your full name, address, or payment details.
• Identity Verification Services: Third-party KYC providers may process copies of your identity documents to assist with age and identity verification. All such providers are contractually bound to use your data only for the purpose of completing verification checks for bak44.
• Hosting and Security Infrastructure: Cloud hosting and cybersecurity partners who maintain the technical infrastructure that powers bak44.net. These providers operate under strict data processing agreements that prohibit independent use of player data.
• Analytics Providers: Anonymised, aggregated usage data may be shared with analytics platforms to help us understand platform performance. No personally identifiable information is included in these data sets.

Legal and Regulatory Disclosures: bak44 may disclose personal data to Bangladeshi law enforcement agencies, courts, or other government authorities where we are required to do so by applicable law, court order, or lawful regulatory request. We will, where legally permissible, notify you of such a disclosure request before complying.

4. Cookies & Tracking Technologies

bak44 uses cookies and similar technologies (such as local storage and session storage) to operate and improve the platform. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies allow the website to remember your preferences and actions over time, and to distinguish you from other visitors.

Categories of Cookies Used by bak44:

• Strictly Necessary Cookies: These cookies are essential for the bak44 platform to function. They manage your login session, maintain your account authentication state, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your language preferences, display settings, and game history so that you do not have to re-configure the platform on every visit. They are not used for tracking or advertising purposes.
• Performance and Analytics Cookies: bak44 uses anonymised analytics cookies to collect data on how players navigate the platform — which pages are visited most frequently, where users drop off, and how long sessions typically last. This information is used exclusively to improve the platform's performance and user experience. No personally identifiable information is included in this data.
• Security Cookies: Short-lived cookies that help bak44's fraud detection systems identify unusual behaviour patterns, such as login attempts from new devices or locations, which may indicate account compromise.

bak44 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any other technologies that track your activity across websites outside of bak44.net.

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your bak44 account and using core platform features. Disabling functional or analytics cookies will not affect your ability to access the platform but may reduce the quality of your experience.

5. Data Security Measures

bak44 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. While no online platform can guarantee absolute security, we take the following steps to minimise risk:

• Transport Layer Encryption: All data exchanged between your browser and bak44.net is encrypted using TLS 1.2 or higher, preventing interception during transmission.
• Data at Rest Encryption: Sensitive personal data stored in our databases — including identity documents, payment details, and account credentials — is encrypted using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within bak44 is strictly limited to employees and contractors who require it to perform their specific job functions. All personnel with data access undergo background checks and are bound by confidentiality agreements.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a strong, one-way cryptographic algorithm before being stored, meaning that even bak44 employees cannot read your password.
• Intrusion Detection and Monitoring: bak44's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and other security events. Automated alerts trigger immediate investigation by our security team.
• Penetration Testing: bak44 engages independent security specialists to conduct regular penetration tests of the platform's infrastructure and application layer to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach affecting your personal information, bak44 will notify you and the relevant authorities within the timeframes required by applicable law, and will take immediate steps to contain and remediate the incident.

You also play a role in keeping your data secure. We strongly encourage you to use a unique, strong password for your bak44 account, to avoid sharing your login credentials with any third party, and to log out of your account when using a shared or public device.

6. Data Retention Policy

bak44 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. The following retention periods apply to the primary categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be linked back to any individual. Where you request deletion of your data before the end of a retention period, we will delete all data that is not subject to a legal or regulatory hold, and will inform you of any categories of data that must be retained and the reason why.

7. Your Privacy Rights

As a player using the bak44 platform, you have a number of rights in relation to your personal data. bak44 is committed to honouring these rights promptly and transparently. The rights available to you are set out below:

• Right of Access: You have the right to request a copy of all personal data that bak44 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. We will provide this information within 30 calendar days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as your email address or mobile number) directly within your bak44 account settings. For corrections to identity documents or other sensitive data, please contact our support team.
• Right to Erasure: You may request that bak44 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. We will comply with erasure requests unless we are required to retain the data to comply with a legal obligation or to defend a legal claim.
• Right to Restriction of Processing: In certain circumstances — for example, while the accuracy of data you have contested is being verified — you may request that bak44 restrict the processing of your personal data to storage only.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transferred directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where bak44 relies on legitimate interest as the legal basis. You may also object at any time to the use of your data for direct marketing purposes, including profiling for marketing. Once you object to marketing, we will cease all marketing communications to you immediately.
• Right to Withdraw Consent: Where bak44 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

8. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which bak44 handles your personal data, we encourage you to contact us in the first instance so that we can attempt to resolve the matter directly.

Data Privacy Contact: All privacy-related correspondence should be addressed to the bak44 Data Privacy team at [email protected]. Please use the subject line "Privacy Policy Query" or "Data Complaint" to ensure your message is directed to the appropriate team member. We aim to respond to all privacy queries within 5 business days (Bangladesh Standard Time, UTC+6).

Complaint Escalation: If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter. bak44 will cooperate fully with any legitimate inquiry made by the relevant authority and will provide all information requested within the timeframes required by law.

Policy Updates: bak44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via email or a prominent notice on the bak44.net platform at least 14 days before the revised Policy takes effect. The effective date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how bak44 protects your data.