bigtk Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bigtk ("bigtk", "we", "us", "our"), operator of the online gaming platform at https://bigtk.io, collects, processes, stores, and protects personal data provided by players and visitors ("you", "your") who access or use the bigtk platform.

bigtk is committed to handling your personal data with transparency, integrity, and respect. This Policy is designed to give you a clear understanding of our data practices so that you can make informed decisions about the information you share with us.

This Policy applies to all personal data collected through the bigtk website, mobile-optimised web platform, live chat support, and any other communication channel operated by bigtk. This Policy should be read in conjunction with the bigtk Terms & Conditions and Responsible Gaming Policy.

Data We Collect

bigtk collects personal data that you provide directly to us, as well as data generated automatically through your use of the platform. The categories of data we collect include the following:

bigtk does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, except where directly relevant to our responsible gaming obligations (for example, where a player voluntarily discloses a gambling-related health concern in a support interaction).

How We Use Your Data

bigtk uses the personal data we collect for clearly defined, legitimate purposes. We do not use your data for any purpose incompatible with those listed below. The primary purposes for which bigtk processes your personal data are:

• Account Registration & Management: To create and maintain your bigtk account, verify your identity, and administer your account settings and preferences.
• KYC & Age Verification: To confirm that you are aged 21 or above and to fulfil our Know Your Customer obligations, ensuring that our platform is used only by eligible, verified players.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, and other supported methods, and to process withdrawal requests back to your registered payment accounts.
• Platform Delivery & Personalisation: To deliver the bigtk gaming experience, including casino games from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as cricket betting on BPL, IPL, T20 World Cup, and other markets, tailored to your preferences and account history.
• Responsible Gaming: To monitor gaming behaviour patterns and intervene where indicators of problem gambling are detected, in compliance with our Responsible Gaming Policy.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, and other unlawful activities.
• Customer Support: To respond to your enquiries, complaints, and support requests via live chat and email.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaigns (e.g., Eid promotions, BPL season bonuses, Pohela Boishakh offers) where you have given your consent to receive such communications. You may opt out at any time.
• Legal & Regulatory Compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements, data retention obligations, and any direction issued by a competent authority.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the performance and functionality of the bigtk platform.

Legal Basis for Processing

bigtk processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and bigtk — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC, AML, and data retention obligations.
• Legitimate Interests: Processing is necessary for bigtk's legitimate interests, including fraud prevention, platform security, and platform improvement, where these interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent — such as direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

bigtk does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data only in the following limited and controlled circumstances:

• Payment Service Providers: Your financial data is shared with payment processors (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard) strictly to the extent necessary to process your deposits and withdrawals.
• Game Software Providers: Technical identifiers (such as your anonymised player ID and session token) are shared with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to facilitate game delivery. These providers do not receive your full identity or financial data.
• KYC & Identity Verification Partners: Where bigtk uses third-party identity verification services to support the KYC process, your identity documents may be securely transmitted to those services for verification purposes only.
• Fraud Prevention & Security Partners: Aggregated and anonymised risk signals may be shared with fraud-detection services to protect the integrity of the bigtk platform and all its players.
• Legal & Regulatory Authorities: bigtk may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or official direction.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a material part of bigtk's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties who receive personal data from bigtk are required to process that data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures.

Cookies & Tracking Technologies

bigtk uses cookies and similar tracking technologies to operate the platform, remember your preferences, and collect usage analytics. Cookies are small text files stored on your device when you access the bigtk website.

The types of cookies used by bigtk include:

• Essential Cookies: Required for the core functionality of the bigtk platform, including session management, login state, and security token validation. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings (English), your most recently played games, and notification preferences.
• Analytics Cookies: Used to collect anonymised data about how players use the bigtk platform, including which pages are visited most frequently, session duration, and navigation patterns. This data is used solely to improve platform performance.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic, unauthorised login attempts, and session hijacking.

bigtk does not use advertising cookies or third-party behavioural tracking cookies for the purpose of serving targeted advertisements on external websites.

Data Retention

bigtk retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applied by bigtk are as follows:

• Account Data & KYC Records: Retained for the duration of your account relationship with bigtk, and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with financial record-keeping obligations.
• Gaming History: Retained for a minimum of three (3) years following the relevant gaming session, for responsible gaming monitoring and dispute resolution purposes.
• Support Communications: Retained for a minimum of two (2) years following the resolution of the relevant support case, unless a longer retention period is required for an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for as long as you remain a bigtk account holder, or until you withdraw your marketing consent, whichever is earlier.

When personal data is no longer required for any legitimate purpose, bigtk will securely delete or anonymise it in accordance with our internal data disposal procedures.

Data Security

bigtk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-Bit SSL Encryption: All data transmitted between your device and the bigtk platform is protected by 256-bit SSL/TLS encryption, the same standard used by international financial institutions.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial account details, is stored in encrypted form using industry-standard encryption algorithms.
• Access Controls: Access to personal data within bigtk's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: bigtk supports and strongly recommends two-factor authentication (2FA) for all player accounts to protect against unauthorised account access.
• Intrusion Detection & Monitoring: bigtk's infrastructure is monitored continuously for suspicious activity, including unauthorised login attempts and anomalous data access patterns.
• Secure Payment Processing: All payment transactions are processed through secure, encrypted connections. bigtk does not store full bKash, Nagad, Rocket, or card credentials on its servers.

Your Rights

As a bigtk player and data subject, you hold the following rights in relation to your personal data. bigtk is committed to facilitating the exercise of these rights promptly and without unnecessary delay:

• Right of Access: You have the right to request a copy of the personal data that bigtk holds about you, along with information about how that data is processed.
• Right to Rectification: You have the right to request that any inaccurate or incomplete personal data held by bigtk be corrected or updated.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations.
• Right to Restrict Processing: You have the right to request that bigtk restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your privacy rights override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the bigtk support team using the contact details provided in Section 13 of this Policy. bigtk will acknowledge your request and aim to provide a substantive response within 30 days.

Children & Minors

bigtk enforces a strict minimum age requirement of 21 years for all account holders. The bigtk platform is not directed at, and must not be used by, individuals under the age of 21. bigtk does not knowingly collect, store, or process the personal data of anyone under the age of 21.

If bigtk becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any winnings generated by an underage player will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child may have provided personal data to bigtk or created a bigtk account, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

Third-Party Services

The bigtk platform integrates with a number of third-party service providers to deliver a complete gaming experience to players in Bangladesh. These integrations include game software from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment processing services from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard.

Each of these third-party providers operates under its own privacy policy and data protection framework. bigtk is not responsible for the data practices of third-party providers, and we encourage you to review the relevant privacy policies of any third-party services you interact with in connection with your bigtk account.

bigtk does not embed third-party advertising networks, social media tracking pixels, or affiliate tracking scripts on the bigtk platform that would allow third parties to collect your personal data for their own purposes without your knowledge.

Policy Updates

bigtk reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. The date of the most recent revision will always be displayed at the top of this page.

Where changes to this Policy are material — meaning they significantly affect your rights or the way in which bigtk processes your personal data — we will notify you via a prominent notice on the bigtk platform or by email to your registered address prior to the changes taking effect.

Your continued use of the bigtk platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should discontinue use of the platform and contact our support team to request account closure.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bigtk handles your personal data, please do not hesitate to contact our dedicated support team. Our privacy-related enquiries are handled with priority and in strict confidence.

For data subject rights requests — including access, rectification, erasure, or portability — please include your registered email address, your bigtk account username, and a clear description of your request in your correspondence. This will help our team process your request efficiently.

For urgent security concerns, such as suspected unauthorised access to your account or a potential data breach, please contact our support team immediately via live chat so that we can respond without delay.