BK33 Privacy Policy

01 Introduction

This Privacy Policy (hereinafter referred to as "this Policy" or "the Policy") is issued by BK33 (hereinafter "BK33", "we", "us", or "our") and applies to all personal data collected, processed, and stored by BK33 in connection with the operation of its online casino and sports betting platform accessible at https://bk33.casa (the "Platform") and all associated services (collectively, the "Services").

BK33 recognises that privacy is a fundamental right. We are committed to handling your personal data with care, transparency, and respect. This Policy sets out, in full, the categories of personal data we collect, the purposes for which we process that data, the legal basis upon which we rely, the parties with whom we may share your data, and the rights you hold as a data subject.

By registering an account with BK33, making a deposit, or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" — means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, online identifiers, and financial information.
• "Processing" — means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — means BK33, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — means any third party that processes Personal Data on behalf of BK33 pursuant to a written agreement, such as payment service providers or identity verification partners.
• "Data Subject" — means you, the natural person whose Personal Data is being processed.
• "Cookie" — means a small text file placed on your device by the Platform to enable functionality, analytics, or personalisation features.
• "KYC" — means Know Your Customer, the identity and age verification process mandated by applicable anti-money-laundering regulations.
• "MYR" — means Malaysian Ringgit, the exclusive operating currency of the BK33 platform.

03 Personal Data We Collect

BK33 collects Personal Data in the following categories, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (used to verify that you meet the minimum age of 21);
• Residential address, including city, state, and postcode;
• Email address and mobile phone number;
• Username and encrypted account password;
• Nationality and country of residence.

3.2 KYC & Verification Data

• Copies of government-issued photo identification (Malaysian MyKad, Passport, or Driver's Licence);
• Proof of residential address (e.g., utility bill or bank statement dated within three months);
• Selfie photographs submitted for liveness verification;
• Source-of-funds documentation, where required for enhanced due diligence.

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and associated payment references;
• Payment method identifiers (e.g., masked bank account numbers, e-wallet account identifiers for DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong);
• Transaction history and balance records;
• Bonus and promotional credit activity.

3.4 Gaming & Behavioural Data

• Game session history, including games played, bet amounts, outcomes, and session durations;
• Sports betting activity, including markets selected, odds accepted, and settlement results;
• Responsible gambling tool settings, including any deposit limits, loss limits, or self-exclusion elections you have made;
• Customer support interaction records and correspondence.

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, browser type and version;
• Unique device identifiers;
• Pages visited, time spent on pages, clickstream data, and referring URLs;
• Cookie identifiers and session tokens.

04 How We Collect Your Data

BK33 collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings;
• Automatically — through cookies, web beacons, log files, and similar tracking technologies when you access and navigate the Platform;
• From third-party service providers — including identity verification agencies, payment processors, and fraud detection services, which may share data with us as part of the Services they provide on our behalf;
• From publicly available sources — such as sanctions screening databases, politically exposed persons (PEP) lists, and adverse media databases, where required for AML compliance purposes.

05 Data Processing & Purposes of Use

BK33 processes your Personal Data only for specific, lawful purposes. The table below sets out the primary purposes for which we use your data and the corresponding category of data involved:

BK33 does not process your Personal Data for purposes other than those listed above without first notifying you and, where required, obtaining your consent.

06 Legal Basis for Processing

BK33 relies on one or more of the following legal bases when processing your Personal Data:

• Contractual Necessity: Processing required to enter into or perform the contract between you and BK33 — including account management, transaction processing, and delivery of the gaming and betting services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and record-keeping obligations imposed by our operating licence.
• Legitimate Interests: Processing carried out for BK33's legitimate business interests — such as fraud prevention, platform security, responsible gambling monitoring, and service improvement — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — such as the sending of marketing communications and newsletters. You may withdraw your consent at any time by contacting our support team or updating your account preferences.

07 Data Sharing & Disclosure

BK33 does not sell your Personal Data to any third party. We may, however, share your data with the following categories of recipients where necessary to deliver the Services or fulfil our legal obligations:

• Payment Service Providers: Including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong) — solely to process deposits and withdrawals on your behalf.
• Identity Verification Partners: Third-party KYC and age verification services that process your identification documents on our behalf under strict data processing agreements.
• Game & Platform Providers: Certified third-party game studios and live dealer providers whose services are integrated into the BK33 platform, to the extent necessary for game delivery and technical operation.
• Fraud Prevention & Security Services: Third-party providers that assist BK33 in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, BK33 may disclose Personal Data to competent governmental or regulatory authorities.
• Professional Advisers: Legal counsel, auditors, and compliance consultants who are bound by professional obligations of confidentiality.

08 Data Retention

BK33 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account's active status and for a minimum period of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required for financial and AML compliance purposes.
• Gaming and Session Records: Retained for a minimum of three (3) years following account closure.
• Technical and Device Data: Generally retained for up to twelve (12) months, unless required for longer periods in connection with an active investigation or dispute.
• Marketing Consent Records: Retained until you withdraw your consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with BK33's internal data disposal procedures.

09 Cookies & Tracking Technologies

BK33 uses cookies and similar technologies to ensure the proper functioning of the Platform, analyse usage patterns, and deliver a personalised experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state, security tokens, and load-balancing cookies. These cannot be disabled without impairing core platform functionality.
• Analytics Cookies: Used to collect aggregate data about how visitors interact with the Platform — including pages visited, session duration, and navigation paths — to help us improve the user experience. This data is processed in anonymised or pseudonymised form.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and last-visited game categories, so that the Platform behaves consistently across visits.
• Marketing and Targeting Cookies: Used, with your consent, to deliver promotional content relevant to your interests and to measure the effectiveness of BK33's marketing communications.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. Detailed cookie management instructions are available from your browser provider.

10 Data Security

BK33 employs a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Multi-factor authentication options for player account access;
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Intrusion detection systems and continuous monitoring of platform traffic for anomalous activity;
• Incident response procedures to contain, investigate, and remediate any data security events.

While BK33 takes all reasonable precautions to protect your data, no system can be guaranteed to be entirely secure. You are responsible for maintaining the security of your account credentials. If you suspect that your account has been compromised, please contact BK33 customer support immediately at [email protected].

11 Your Rights as a Data Subject

Subject to applicable law and certain conditions, you hold the following rights with respect to your Personal Data held by BK33. To exercise any of these rights, please contact us as set out in Section 16 of this Policy.

12 Minors & Age Verification

The BK33 platform is strictly intended for adults aged 21 and above. BK33 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If BK33 discovers or has reasonable grounds to believe that Personal Data has been collected from an individual who is under 21 years of age, BK33 will promptly suspend the relevant account, delete or destroy all Personal Data associated with that account, and take such further steps as may be required under applicable law. Any funds held in such an account will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child has registered an account with BK33, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action without delay.

13 International Data Transfers

In certain circumstances, BK33 may transfer your Personal Data to service providers or infrastructure hosted outside of Malaysia. Where such transfers occur, BK33 takes steps to ensure that an adequate level of data protection is maintained, including by:

• Transferring data only to jurisdictions that have been assessed as providing an adequate level of data protection;
• Entering into binding data transfer agreements with overseas recipients incorporating appropriate contractual safeguards;
• Requiring overseas service providers to implement security measures equivalent to those applied by BK33.

By using the BK33 platform, you acknowledge that your Personal Data may be processed in jurisdictions other than Malaysia, subject to the safeguards described above.

14 Third-Party Services & Links

The BK33 platform integrates third-party services — including game providers, payment processors, and analytics tools — that may process your data independently under their own privacy policies. BK33 is not responsible for the data practices of any third party. We encourage you to review the privacy policies of any third-party services you interact with.

The BK33 platform does not contain links to external websites for general browsing purposes. All navigation links within the platform direct you to pages within the BK33 domain. BK33 is not responsible for the privacy practices of any external site you may access independently.

15 Policy Amendments

BK33 reserves the right to amend, update, or replace this Privacy Policy at any time. When material changes are made to the way we process your Personal Data, BK33 will notify registered players by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect. The revised Policy will display an updated "Last Updated" date at the top of this page.

Your continued use of the BK33 platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you should cease using the Services and, if applicable, request closure of your account before the changes take effect.

16 Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact BK33 through the following channel:

For questions about your account terms, please refer to our Terms & Conditions. For information about responsible gambling tools and player protection, please visit our Responsible Gambling page.