ak33 Privacy Policy — How We Collect, Use, and Protect Your Data

1 Introduction

ak33 ("ak33", "we", "us", "our") operates the online betting and gaming platform accessible at ak33.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the ak33 Platform. This Privacy Policy sets out in plain terms what personal data we collect from you, the purposes for which that data is used, the basis on which it is processed, and the rights you hold in relation to your personal information.

This Privacy Policy applies to all personal data collected through the ak33 website, mobile-optimised site, and any associated customer communications channels including email and live chat support. By registering an account on ak33 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of this Privacy Policy, ak33 acts as the data controller in respect of personal data collected from players and visitors on the Platform. As data controller, ak33 determines the purposes and means by which your personal data is processed. All data protection queries, subject access requests, and complaints should be directed to our dedicated privacy support address at [email protected].

ak33 operates as an entertainment platform serving players primarily located in Bangladesh. We are committed to applying data protection principles that are consistent with internationally recognised standards of data privacy, including principles of transparency, data minimisation, purpose limitation, storage limitation, integrity, and accountability.

3 Data We Collect

ak33 collects personal data from you in a number of ways — directly when you provide information to us, automatically when you use the Platform, and in certain cases from third-party sources such as payment processors and identity verification partners. The categories of personal data we collect include the following:

Data Category	Specific Data Points	Collection Method
Identity Data	Full legal name, date of birth, nationality, government-issued ID number	Registration form; KYC verification process
Contact Data	Email address, mobile phone number, residential address	Registration form; account profile updates
Financial Data	Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details, transaction history, deposit and withdrawal records	Payment processing; account activity
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session duration, pages visited	Automatic collection via cookies and server logs
Behavioural Data	Games played, bet amounts and frequency, wagering patterns, bonus usage, login times	Platform activity tracking
Communications Data	Customer support chat and email records, complaint submissions, feedback forms	Direct communications with ak33 support team
Verification Documents	Copies of national identity card, passport, driver's licence, utility bills or bank statements (for address verification)	KYC verification process on request

4 How We Use Your Data

ak33 uses the personal data it collects for specific, defined purposes only. We do not use your data in ways that you would not reasonably expect, and we do not sell your personal data to any third party for their own marketing or commercial purposes. The primary purposes for which we process your personal data are:

• Account registration and management: To create, verify, and maintain your ak33 player account, and to enable you to log in, deposit, withdraw, and use all platform features.
• Identity and age verification: To confirm that you are at least 21 years of age and to verify that the identity information provided at registration is accurate and genuine, in accordance with our responsible gaming obligations.
• Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and connected bank accounts, and to maintain an accurate record of all financial transactions on your account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, collusion, and other forms of platform abuse.
• Responsible gaming: To monitor your betting patterns and account activity for indicators of problem gambling behaviour, and to administer any self-imposed responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) that you activate on your account.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account-related matters.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the design, performance, and content offering of the ak33 platform.
• Marketing communications: Where you have provided explicit consent to receive promotional communications, to send you information about ak33 bonuses, promotions, new games, and relevant offers. You may withdraw this consent at any time by emailing [email protected].
• Legal compliance: To comply with any applicable legal obligation, court order, or lawful request from a competent authority.

5 Legal Basis for Processing

ak33 processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are as follows:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform our obligations under the contract formed when you register an account and agree to our Terms & Conditions. Without this processing, we could not provide you with account access, accept deposits, or pay out winnings.
• Legitimate interests: Processing your technical data, behavioural data, and communications data for fraud prevention, platform security, and platform improvement is carried out on the basis of ak33's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing your identity documents, transaction records, and account data for anti-money laundering screening and regulatory compliance is carried out to fulfil our legal obligations.
• Consent: Processing your contact data for the purpose of sending marketing communications is carried out only where you have given us your explicit prior consent. This consent may be withdrawn at any time with immediate effect.

6 Data Sharing & Disclosure

ak33 does not sell, rent, or trade your personal data to any third party. We may share your personal data with carefully selected third parties only in the specific circumstances described below:

• Payment processing partners: We share necessary transaction data with payment processors including bKash, Nagad, Rocket, Upay, and partner banks (City Bank, BRAC Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank) to facilitate deposits and withdrawals. These partners receive only the minimum data required to process the transaction and are contractually bound to handle it securely.
• Identity verification (KYC) providers: We may share identity document images and personal details with contracted third-party KYC verification service providers for the purpose of confirming player identities and ages. These providers operate under strict data processing agreements.
• Game technology providers: Game platform providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data necessary to deliver their games within the ak33 environment. These providers do not receive your financial or identity data.
• Anti-fraud and security providers: We may share technical and behavioural data with specialist anti-fraud platforms that help us identify and prevent fraudulent activity on the platform.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, regulators, or other competent authorities where we are legally required to do so, or where we have reasonable grounds to believe that disclosure is necessary to prevent or detect crime or to comply with a binding legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of ak33's business assets, personal data held by ak33 may be transferred to the successor entity, subject to that entity agreeing to uphold the privacy protections described in this Policy.

7 Cookies & Tracking Technologies

ak33 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain your login session, and gather anonymised analytics data about how the platform is used. The types of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language and region preferences, and enable core security features. You cannot opt out of strictly necessary cookies without ceasing to use the Platform.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors use the Platform — which pages are visited most frequently, how long sessions last, and which features are used most often. This data helps ak33 identify areas for improvement. No personally identifiable information is collected by these cookies.
• Functional cookies: These cookies remember your in-session preferences such as your chosen game category view, notification settings, and responsible gaming dashboard configuration.
• Marketing and preference cookies: With your consent, we may use cookies to deliver promotional content that is relevant to your usage history on the Platform. You may withdraw consent for these cookies at any time.

You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and performance of the ak33 Platform. For further information on managing cookies, consult the help documentation provided by your browser.

8 Data Retention

ak33 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:

• Account data: Retained for the duration of your active account relationship with ak33 and for a period of five (5) years following account closure, in order to comply with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, or for the duration of any unresolved dispute, whichever is longer.
• Technical and analytics data: Retained for a maximum of twenty-four (24) months in an anonymised or pseudonymised form.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years following your withdrawal of consent, for the purpose of demonstrating compliance.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked back to you as an individual.

9 Data Security

ak33 applies a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our current security infrastructure includes:

• SSL/TLS encryption: All data transmitted between your device and the ak33 Platform is encrypted using industry-standard SSL/TLS protocols. This applies to all pages of the site, including login, registration, deposit, and withdrawal flows.
• Encrypted data storage: Sensitive personal data — including identity documents and financial account references — is stored in encrypted form within our secure server infrastructure. Plain-text storage of sensitive data is prohibited.
• Access controls: Access to personal data within ak33's internal systems is strictly limited to authorised personnel on a need-to-know basis. All internal access is logged and subject to regular audit review.
• Penetration testing: ak33's platform infrastructure undergoes regular security assessments and penetration testing by qualified third-party security specialists to identify and remediate vulnerabilities.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ak33 will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate its impact.

10 International Data Transfers

ak33 operates primarily as a platform serving players in Bangladesh. However, some of our contracted third-party service providers — including game technology providers and KYC verification partners — may process data on servers located outside of Bangladesh. Where personal data is transferred to a service provider operating in another country, ak33 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to that described in this Privacy Policy.

Safeguards for international transfers may include contractual data processing agreements that impose binding data protection obligations on the recipient, or the use of service providers that maintain internationally recognised security certifications. ak33 does not transfer personal data to any jurisdiction without first assessing the adequacy of data protection standards in that jurisdiction and putting in place appropriate transfer mechanisms.

11 Your Rights Over Your Personal Data

As a registered player on ak33, you hold a number of rights in relation to the personal data we hold about you. These rights are summarised below, along with details of how to exercise each one:

• Right of access: You have the right to request a copy of all personal data that ak33 holds about you. Submit a subject access request to [email protected]. We will respond within thirty (30) days of receiving a valid request.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data that ak33 holds about you. Minor corrections (such as email address or phone number) can be made directly through your account settings. For identity data corrections, contact our support team.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing carried out on the basis of legitimate interests. Please note that this right is subject to overriding legal obligations — for example, ak33 is required by law to retain certain financial and identity records for a minimum of five years, and we cannot delete those records earlier even on request.
• Right to restriction: You have the right to request that ak33 temporarily restrict the processing of your personal data while a dispute about its accuracy or the legitimacy of processing is being resolved.
• Right to data portability: For data you have provided to us on the basis of consent or contractual necessity, you may request that we provide it to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. You also have the absolute right to object to your data being used for direct marketing at any time.
• Right to withdraw consent: Where ak33 processes your data on the basis of consent (such as for marketing communications), you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12 Children's Privacy

The ak33 Platform is strictly intended for use by adults aged 21 years and above. ak33 does not knowingly collect, process, or retain personal data from any individual under the age of 21. If we become aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended and all associated data will be promptly deleted in accordance with our data minimisation obligations.

If you are a parent or guardian and you believe that your child has accessed or registered on the ak33 Platform, please contact us immediately at [email protected] so that we can take appropriate action without delay. We take underage access extremely seriously and operate age verification checks at the point of registration and at the point of first withdrawal to prevent it.

13 Third-Party Links

The ak33 Platform may contain references to game providers and payment partners whose own services and platforms are subject to their own separate privacy policies. ak33 is not responsible for the privacy practices, content, or data security measures of any third-party service provider or external platform. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of ak33.

In particular, when you use bKash, Nagad, Rocket, or Upay to fund your ak33 account or receive a withdrawal, your transaction with those providers is also governed by the respective terms and privacy policies of those payment services. ak33 has no control over how those providers handle your data on their own platforms.

14 Policy Amendments

ak33 reserves the right to update or amend this Privacy Policy at any time. When we make a material change to this Policy, we will notify registered players via the email address associated with their account and will display a prominent notice on the Platform for a reasonable period following the change. The "Last updated" date at the top of this document reflects when the most recent revision was made.

We encourage you to review this Privacy Policy periodically to stay informed about how ak33 is protecting your personal data. Your continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised Privacy Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ak33 handles your personal data, please contact our privacy support team using the details below. All communications relating to data privacy are treated with the highest priority and handled by dedicated personnel.

• Privacy enquiries: [email protected] (subject line: "Privacy Enquiry")
• Data rights requests: [email protected] (subject line: "Data Rights Request")
• Data breach reports: [email protected] (subject line: "Data Security Report")
• Response time: We aim to acknowledge all privacy-related communications within 24 hours and to provide a substantive response within thirty (30) days.

ak33 is committed to resolving all data privacy concerns fairly and transparently. If you are not satisfied with our response to your privacy query or complaint, you may have the right to escalate your concern to a competent data protection authority in your jurisdiction.