bek3 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") applies to all users of the bek3 platform, accessible at bek3.io ("Platform"), and governs how bek3 ("we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data in connection with your access to and use of the Platform and its associated services.

bek3 is committed to handling all personal data in a manner that is lawful, fair, transparent, and in accordance with applicable data protection principles. This Policy is intended to provide you with clear and comprehensive information about our data practices so that you can make informed decisions about sharing your personal information with us.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, each of which is available via the Quick Links section of this website. By continuing to use the bek3 Platform, you acknowledge that you have read and understood this Privacy Policy in its entirety.

For the purposes of applicable data protection law, bek3 acts as the data controller in respect of personal data collected through the bek3.io Platform. As data controller, bek3 determines the purposes for which, and the means by which, your personal data is processed.

If you have any questions about this Policy or wish to exercise any of your data rights, you may contact bek3 directly using the contact information provided in Section 15 of this Policy.

bek3 collects several categories of personal data from users of the Platform. The specific data collected depends on the nature of your interaction with bek3 and whether you are a registered account holder or a visitor. Categories of personal data collected include:

bek3 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or for responsible gaming compliance purposes.

bek3 collects personal data through the following methods:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you visit or interact with the bek3 Platform, including via cookies, log files, and analytics tools.
• Third-party providers: Identity verification data from KYC/AML service providers; payment confirmation data from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank); fraud risk signals from third-party fraud detection partners.
• Publicly available sources: In limited circumstances, bek3 may supplement account data with information from publicly available sources for the purpose of verifying identity or investigating suspected fraud or money laundering.

bek3 processes your personal data only where a valid legal basis exists. The primary purposes for which bek3 processes personal data, and the corresponding legal basis, are set out below:

Where bek3 relies on your consent as a legal basis — for example for promotional email communications — you may withdraw that consent at any time by updating your account communication preferences or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

bek3 uses cookies and similar tracking technologies to enhance platform functionality, analyse user behaviour, and maintain session security. Cookies are small text files placed on your device when you access the bek3 Platform. They allow the Platform to recognise your device and remember certain information about your preferences and session state.

bek3 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies enable core features such as secure login sessions, fraud prevention, and load balancing. They cannot be disabled.
• Functional Cookies: Enable the Platform to remember your preferences such as language settings, currency display, and last-used payment method. Disabling these may limit personalisation features.
• Analytics Cookies: Used to collect aggregate, anonymised data about how users interact with the bek3 Platform — such as pages visited, session duration, and navigation paths — to help us improve service quality.
• Security Cookies: Help detect and prevent fraudulent activity, bot traffic, and multiple-account registration attempts.

bek3 does not use advertising cookies or place tracking pixels on behalf of third-party advertisers. No cookie data is sold to or shared with any external marketing network.

bek3 does not sell, rent, or trade your personal data. Data is shared with third parties only in the following limited and controlled circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum financial data necessary to process your deposit and withdrawal transactions.
• Identity Verification Partners: Licensed KYC/AML service providers receive copies of identity documents and biometric data (where applicable) solely for the purpose of verifying your identity and age in accordance with regulatory requirements.
• Fraud Prevention Services: Third-party fraud detection providers may receive technical identifiers (IP address, device fingerprint, risk signals) to assist with identifying and preventing fraudulent activity on the Platform.
• Technology Infrastructure Providers: Cloud hosting, CDN, and database providers who operate the technical infrastructure underlying the bek3 Platform. These providers are contractually bound to process data only on bek3's instructions and to maintain appropriate security standards.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory request, bek3 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. bek3 will notify affected users of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of bek3 or its assets, personal data held by bek3 may be transferred as part of that transaction. Affected users will be notified in advance of any such transfer and of any resulting changes to this Privacy Policy.

All third parties with whom bek3 shares personal data are required to maintain appropriate technical and organisational security measures and to process data solely for the specified purpose under a binding data processing agreement.

bek3 primarily serves users in Bangladesh and processes data in connection with this market. Some of bek3's technology infrastructure providers and third-party service partners may be located outside of Bangladesh. Where personal data is transferred to a country that may not offer an equivalent level of data protection, bek3 ensures that appropriate safeguards are in place prior to any such transfer.

Safeguards may include contractual clauses, data processing agreements, or reliance on recognised data transfer mechanisms appropriate to the jurisdiction involved. By using the bek3 Platform, you acknowledge that your personal data may be processed in countries outside Bangladesh as part of the delivery of the bek3 service.

bek3 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your account relationship with bek3, and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction in accordance with applicable financial regulation.
• Gaming and betting history: Retained for a minimum of three (3) years for regulatory audit and dispute resolution purposes.
• Customer support communications: Retained for two (2) years from the date of the last communication, or longer if related to an ongoing dispute or investigation.
• Technical and usage data (log files): Retained for up to twelve (12) months, after which it is deleted or anonymised.
• Self-exclusion and responsible gaming records: Retained indefinitely to ensure that any self-exclusion decision is respected even if a new account registration is attempted at a later date.

When a retention period expires, bek3 will securely delete or anonymise the relevant personal data in accordance with our internal data lifecycle procedures. Anonymised data that cannot be traced back to an individual may be retained for analytics purposes beyond the specified retention periods.

bek3 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Transport Layer Security: All data transmitted between your device and bek3 servers is encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that data in transit is protected from interception.
• Password Security: User passwords are stored as salted cryptographic hashes. bek3 never stores passwords in plain text and cannot retrieve your password — only reset it.
• Access Controls: Access to personal data within bek3's systems is restricted on a strict need-to-know basis. Staff with access to personal data undergo security training and are subject to confidentiality obligations.
• Firewalls & Intrusion Detection: bek3's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and continuous security monitoring.
• Regular Security Audits: bek3 conducts periodic security assessments and vulnerability testing of its Platform and infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to users, bek3 will take prompt remedial action and notify affected users and any relevant authorities in accordance with applicable law.

As a user of the bek3 platform, you have the following rights in respect of your personal data. These rights apply subject to applicable law and to bek3's legal obligations:

• Right of Access: You may request a copy of all personal data bek3 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements.
• Right to Restrict Processing: You may request that bek3 pause processing of your personal data in certain circumstances.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data for direct marketing or profiling purposes.
• Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce significant effects on you.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". bek3 will verify your identity before processing any request and will respond within thirty (30) days. In complex cases, this period may be extended by an additional sixty (60) days, in which case we will notify you of the extension and the reasons for it.

bek3 does not charge a fee for exercising your data rights in ordinary circumstances. However, where requests are manifestly unfounded or excessive — particularly where they are repetitive — bek3 reserves the right to charge a reasonable administrative fee or to decline to act on the request.

bek3 employs age verification checks as part of the account registration and KYC process to prevent minors from accessing the Platform. Any account found to belong to a person under the age of 21 will be immediately suspended and any funds held in the account will be managed in accordance with our Terms & Conditions and applicable law.

Parents and guardians who are concerned about a minor accessing online gambling platforms are encouraged to make use of parental control software and to review our Responsible Gaming page for additional guidance and support resources.

The bek3 Platform may, from time to time, contain references or links to third-party websites or services for informational or operational purposes. These third-party sites operate independently of bek3 and have their own privacy policies. bek3 accepts no responsibility or liability for the content, privacy practices, or data processing activities of any third-party website.

We encourage you to review the privacy policy of any third-party site you visit before providing any personal information. The presence of a link or reference to a third-party site on the bek3 Platform does not constitute an endorsement of that site or its data practices by bek3.

bek3 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, bek3 will take reasonable steps to notify registered users — for example by displaying a prominent notice on the Platform or by sending a notification to the email address associated with your account — prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page reflects the date on which the most recent version of this Privacy Policy came into effect. We encourage you to review this Policy periodically to remain informed about how bek3 protects your personal data.

Your continued use of the bek3 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you should discontinue use of the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which bek3 processes your personal data, please contact the bek3 data support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: bek3 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.
• Operating Hours: Support is available 24 hours a day, 7 days a week. Bangladesh Standard Time (BST, UTC+6) is the reference time zone for all response windows.

If you are not satisfied with bek3's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection or regulatory authority in your jurisdiction. bek3 encourages users to contact us in the first instance so that we have the opportunity to resolve any concerns directly.