bvk8 Privacy Policy

This Privacy Policy ("Policy") is issued by bvk8 and applies to all personal data collected from players and visitors who access or use the bvk8 platform at bvk8.bio. This Policy forms part of the bvk8 Terms and Conditions and should be read alongside them. By creating an account or using the bvk8 platform, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

bvk8 is committed to protecting the privacy of every individual whose personal data we process. We collect only the data necessary to deliver our services, fulfil our legal obligations, and maintain the security and integrity of the platform. We do not use your personal data for purposes beyond those described in this Policy without your prior consent.

bvk8 collects personal data in the following categories, depending on how you interact with the platform:

bvk8 uses the personal data we collect for the following specific purposes:

• Account creation, identity verification (KYC), and ongoing account management.
• Processing deposits, withdrawals, and all financial transactions on the platform.
• Fraud detection, anti-money laundering compliance, and security monitoring of account activity.
• Providing responsible gaming tools and monitoring for signs of problem gambling behaviour.
• Sending account-related communications such as deposit confirmations, withdrawal notifications, and security alerts.
• Improving the bvk8 platform through aggregated analytics, A/B testing, and performance monitoring.

bvk8 does not use your personal data to send unsolicited marketing communications to third-party lists, for profiling based on protected characteristics, or for any purpose not listed above. Where we send optional promotional messages to registered players, these are sent only to players who have not opted out via their account preferences.

bvk8 processes personal data only where a lawful basis exists. The legal bases we rely on are:

• Contract performance — processing is necessary to provide the bvk8 platform services you requested when creating your account.
• Legal obligation — processing is necessary to comply with applicable KYC, anti-money laundering, and other regulatory requirements.
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent — where processing is based on your consent (e.g. receiving optional promotional communications), you may withdraw that consent at any time by updating your account preferences or contacting support.

bvk8 may share your personal data with the following categories of third parties, strictly for the purposes indicated:

• Payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) — to process deposits and withdrawals on your behalf. These providers operate under their own privacy policies and security certifications.
• Game content providers (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, Ezugi) — to facilitate gameplay and RNG certification. These providers receive only the minimum data required to operate the game session, typically a session token, not your personal identity data.
• Compliance and fraud-prevention service providers — to perform identity verification, sanctions screening, and anti-money laundering checks as required by applicable law.
• Law enforcement and regulatory authorities — where bvk8 is legally required or compelled by a valid court order or regulatory directive to disclose personal data. bvk8 will use reasonable efforts to notify affected players before such disclosure where permitted by law.

bvk8 does not store complete bKash, Nagad, or Rocket wallet credentials on its own servers. All payment transactions are handled through the secure API interfaces of the respective payment providers. When you initiate a deposit or withdrawal, you are authenticated directly by the payment provider via their own secure channel — OTP, PIN, or biometric depending on the provider. bvk8 receives only a transaction confirmation token and the transaction amount, not your wallet PIN or password.

Bank transfer data (account numbers, routing numbers, and IBAN details where applicable) is stored in encrypted form and is accessible only to the bvk8 compliance team for the purpose of processing and verifying your withdrawal. This data is not shared with game providers or any third party other than the processing bank.

bvk8 uses cookies and similar browser-based storage mechanisms to operate the platform. A cookie is a small data file placed on your device when you visit a website. bvk8 uses cookies to maintain your login session, remember your language preference, and collect anonymous usage statistics that help us improve the platform. We do not use third-party advertising cookies or cross-site tracking technologies.

You may control cookie settings through your browser preferences. Disabling certain functional cookies such as session cookies may prevent you from logging in or accessing some platform features. Disabling analytics cookies will not affect your ability to use bvk8.

bvk8 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Account registration data, KYC documents, and transaction records are retained for a minimum of five (5) years from the date of account closure, in accordance with anti-money laundering record-keeping requirements. After the applicable retention period, data is securely deleted or anonymised.

Communications data (customer support correspondence) is retained for two (2) years from the date of the last communication, unless a longer period is required in connection with an unresolved dispute or regulatory inquiry. Technical and usage data (server logs, IP address records) is retained for up to twelve (12) months for security and fraud-detection purposes, after which it is deleted or anonymised.

As a registered bvk8 player, you have the following rights with respect to your personal data:

• Right of access — you may request a copy of the personal data bvk8 holds about you. We will respond to verified access requests within thirty (30) calendar days.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update basic account details directly in your account settings.
• Right to erasure — you may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to our legal data retention obligations.
• Right to restrict processing — in certain circumstances you may request that we limit the way we process your personal data while a matter is being investigated, for example if you contest the accuracy of data we hold.
• Right to withdraw consent — where our processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal.

To exercise any of the above rights, contact the bvk8 data team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request. We aim to respond within thirty (30) calendar days. In complex cases this period may be extended by a further thirty (30) days, in which case we will notify you promptly.

bvk8 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit between your device and our servers, AES-256 encryption for sensitive data at rest, role-based access controls limiting data access to authorised personnel only, and regular independent security audits of our platform infrastructure.

While bvk8 takes all reasonable precautions to protect your personal data, no internet transmission or electronic storage system is entirely risk-free. In the unlikely event of a personal data breach likely to result in a high risk to your rights or freedoms, bvk8 will notify affected players without undue delay and take immediate steps to contain the breach and mitigate any harm.

bvk8 is strictly an adult platform. We do not knowingly collect, process, or store personal data of any person under the age of 21. If bvk8 becomes aware that personal data of a person under 21 has been collected — whether through misrepresentation at registration or any other means — that account will be immediately suspended, all associated data will be deleted subject to any mandatory legal retention requirements, and any funds in the account will be handled in accordance with applicable legal requirements. If you believe a minor has registered on bvk8, please contact us immediately at [email protected].

bvk8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered players via the email address associated with their account or by displaying a prominent notice on the platform before the changes take effect. The date of the most recent revision is shown at the top of this Policy. Continued use of the bvk8 platform after any updated Policy has been published constitutes your acceptance of the revised Policy.

For questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the bvk8 data protection team by email at [email protected]. We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within thirty (30) calendar days.