3kk Privacy Policy

When you register an account, make a deposit, contact support, or use any feature of the 3kk platform, you may provide us with the following categories of personal data:

• Identity data: full name, date of birth, national ID number, passport number, or other government-issued identification details submitted during KYC verification.
• Contact data: email address, mobile phone number, and city or region of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account credentials: your chosen username and a hashed representation of your password. We never store your plaintext password.
• Financial data: bKash account numbers, Nagad wallet identifiers, Rocket account references, Upay details, or other payment method information used to process deposits and withdrawals. Full payment credentials are not retained after a transaction is confirmed.
• Communications data: the content of any messages you send to our support team, including live chat transcripts and email correspondence.
• Responsible gaming preferences: any deposit limits, session time limits, self-exclusion requests, or reality-check settings you configure on your account.

When you access the 3kk platform, our systems automatically collect certain technical information to ensure the platform functions correctly and securely:

• Device and browser data: device type, operating system version, browser type and version, screen resolution, and preferred language settings.
• Network data: IP address, approximate geographic location derived from IP, mobile network operator, and connection type (Wi-Fi or mobile data).
• Session data: pages visited, time spent on each page, game sessions initiated, bets placed, game outcomes, and in-session navigation paths.
• Cookie and tracking data: session identifiers and, where you have consented, analytics identifiers that help us understand how players use the platform. See Section 7 for full cookie details.

In limited circumstances, 3kk may receive personal data about you from third-party sources:

• Identity verification providers: third-party KYC services may confirm or supplement identity information you have provided to us.
• Payment processors: bKash, Nagad, Rocket, and Upay may provide transaction confirmation data and, where required by our fraud-prevention obligations, account status information.
• Fraud and risk screening services: we may cross-reference data with industry fraud databases to protect the integrity of the platform and all players on it.

In each case, 3kk only receives the minimum data necessary for the stated purpose, and all third-party providers are contractually bound to handle data in accordance with applicable privacy standards.

3kk processes your personal data only for the purposes set out below, each of which has a defined legal basis:

3kk does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where profiling is used (for example, to identify patterns consistent with problem gambling), it is used to trigger responsible gaming interventions, not to disadvantage players.

3kk works with a limited number of trusted third-party service providers who process personal data on our behalf, strictly under our instruction and bound by data processing agreements. These include:

• Payment processors: bKash, Nagad, Rocket, and Upay for transaction processing.
• Identity verification services: for KYC document review and age verification.
• Cloud hosting providers: for secure storage of platform data and account records.
• Customer support platforms: for managing live chat and email support ticket systems.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Play'n GO receive the minimum session data necessary to deliver their games (typically a session token and account identifier, not your full personal profile).

3kk may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by law, court order, or other binding legal process. We will, where legally permitted, notify affected players of any such disclosure request.

3kk does not sell, rent, license, or otherwise transfer your personal data to any third party for that party's own commercial or marketing purposes. This commitment applies regardless of the value or nature of the data concerned.

3kk retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Our standard retention periods are as follows:

• Active account data: retained for the full duration of your account's existence on the platform.
• Transaction records: retained for a minimum of 5 years from the date of each transaction, in accordance with standard anti-money-laundering record-keeping obligations.
• KYC verification documents: retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications: retained for 2 years from the date of the most recent communication in a support thread.
• Self-exclusion records: retained for the duration of the self-exclusion period plus 5 years thereafter, to prevent circumvention.
• Analytics and log data: retained in anonymised or aggregated form for up to 12 months from the date of collection.

When data is no longer required and its retention period has expired, it is securely deleted or permanently anonymised so that it can no longer be associated with any individual player.

As a player on the 3kk platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days of receiving a valid request.

• Right of Access: you may request a copy of all personal data 3kk holds about you, along with information about how it is being used.
• Right to Rectification: if any personal data we hold is inaccurate or incomplete, you may request that it be corrected. You may also update basic profile information directly from your account settings after login.
• Right to Erasure ("Right to Be Forgotten"): you may request deletion of your personal data in circumstances where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where you object to processing with no overriding legitimate interest. Note that certain data (particularly transaction records and KYC documents) must be retained for legal compliance purposes and cannot be erased on request during applicable retention periods.
• Right to Restrict Processing: in certain circumstances you may request that we limit how we use your data while a dispute or verification is in progress.
• Right to Data Portability: where processing is based on your consent or a contract with you, you may request a machine-readable copy of the personal data you have provided to us.
• Right to Object: you may object to processing based on legitimate interest, including profiling for marketing purposes. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Rights Related to Automated Decision-Making: you have the right not to be subject to decisions made solely by automated processing where such decisions produce significant effects on you. 3kk does not currently make legally significant automated decisions about players without human oversight.

We may need to verify your identity before processing any data rights request to ensure we are responding to the correct individual. This is a security measure, not an obstacle to exercising your rights.

3kk implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• TLS encryption in transit: all data exchanged between your device and 3kk servers is encrypted using TLS 1.2 or higher.
• Password hashing: account passwords are stored as one-way cryptographic hashes using a modern, salted hashing algorithm. Even 3kk personnel cannot retrieve your original password.
• Access controls: access to player data within 3kk is restricted on a strict need-to-know basis. Internal systems use role-based access control (RBAC) with audit logging of all data access events.
• Network security: our infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning.
• Incident response: 3kk maintains a documented security incident response plan. In the event of a data breach that may affect your rights, we will notify affected players promptly and take immediate remediation action.

While we take every reasonable precaution, no online platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for reporting any suspected unauthorised access to your account without delay.

Cookies are small text files placed on your device when you visit a website. 3kk uses cookies and similar technologies (such as local storage and session tokens) to make the platform function correctly and to understand how players use it.

• Essential cookies: strictly necessary for the platform to operate. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: remember your preferences such as language settings and responsible gaming configurations. Disabling these may affect your experience but will not prevent you from using the platform.
• Analytics cookies: used to collect anonymised information about how players navigate the platform, which pages are most visited, and where errors occur. This data is used solely to improve the platform. Analytics cookies require your consent and can be declined.
• Fraud prevention cookies: used to identify suspicious patterns of behaviour that may indicate fraudulent activity or multiple-account creation. These are classified as essential for security purposes.

You can control non-essential cookies through your browser settings. Most browsers allow you to view, manage, and delete cookies stored on your device. Note that disabling essential cookies will prevent you from logging in to your 3kk account. Deleting analytics cookies will not affect your ability to play games or make transactions.

3kk does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements on other platforms.

3kk operates as an offshore platform and some of our service providers are located in jurisdictions outside Bangladesh. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including contractual data processing agreements that require third parties to apply a standard of data protection equivalent to that described in this policy.

Players in Bangladesh should be aware that data protection laws differ across jurisdictions, and 3kk's practices are governed by the laws of our operational jurisdiction rather than Bangladeshi domestic law. By using the platform, you consent to the international transfer of your data as described in this section.

The 3kk platform is strictly for adults aged 21 years and above. 21+ We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data belonging to a person under 21 has been collected, we will take immediate steps to close the associated account and securely delete all related personal data.

If you are a parent or guardian and believe that your child has registered on the 3kk platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

3kk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email to the address on file and/or by a prominent notice on the platform, no less than 14 days before the changes take effect.

The date at the top of this page always reflects the version currently in force. We encourage you to review this policy periodically. Continued use of the 3kk platform after the effective date of any revision constitutes acceptance of the updated policy.

Previous versions of this policy are available on request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 3kk processes your personal data, please contact our support team using the details below. We treat all privacy enquiries as a priority and aim to acknowledge all contacts within 48 hours.

• Email: [email protected]
• Support availability: 24 hours a day, 7 days a week
• Response language: English
• Target response time: Under 2 hours during Bangladesh Standard Time (BST, UTC+6) business hours; within 48 hours at all other times

For questions about responsible gaming tools, deposit limits, or self-exclusion, please visit our Responsible Gaming page. For general platform questions, our FAQ covers the most common topics.