Last Updated: January 2025

BK22 Privacy Policy — Your Data, Your Rights, Our Responsibility

We've written this policy in plain, straightforward English — not legal jargon designed to be skimmed past. It tells you exactly what information BK22 collects, why we need it, what we do with it, and the rights you have over it as a Pakistani player on our platform.


What This Privacy Policy Covers

Six key commitments BK22 makes to every player about how their personal data is handled.

Your Data Is Encrypted End-to-End

Every piece of personal information you share with BK22 — from your CNIC number to your Easypaisa account details — is stored using industry-standard encryption. Data in transit is protected by TLS. Data at rest is encrypted in our secure servers.

We Never Sell Your Personal Data

BK22 does not sell, rent, or trade your personal information to any third party for their marketing purposes. Your data is shared only where necessary for platform operations — payment processing, identity verification, fraud prevention — and nothing beyond that.

You Control What BK22 Keeps

You can request a copy of all personal data BK22 holds about you, ask for corrections to inaccurate information, or request deletion of your account and associated data — all via your account settings or by contacting our support team directly.

Cookies Are Minimal and Transparent

BK22 uses cookies for session management, security, and platform performance — not for tracking you across other websites or building advertising profiles. Non-essential cookies can be declined and your preference is remembered. Full details are in the Cookie section of this policy.

Breach Response Within 72 Hours

In the unlikely event of a data breach that affects your personal information, BK22 commits to notifying affected players within 72 hours of the breach being identified, in line with standard data protection obligations. We will tell you what happened and what we're doing about it.

Defined Retention Periods — No Indefinite Storage

BK22 keeps your data only as long as necessary. Active account data is retained while your account is open plus a post-closure compliance window. Data that is no longer needed for legal or operational purposes is deleted on a defined schedule — not stored indefinitely.


bk22

Contents

This Privacy Policy ("Policy") explains how BK22 ("BK22," "we," "us," "our") collects, uses, stores, and protects the personal information of users ("you," "your," "the Player") who visit and use the bk22.world website and associated services. By registering a BK22 account or using our platform, you acknowledge that you have read and understood this Policy and consent to the practices described within it. This Policy forms part of the BK22 Terms and Conditions.

01 Who We Are and How to Contact Us

BK22 is the operator of the bk22.world online gaming platform, serving Pakistani players with live casino games, crash games, Teen Patti, Andar Bahar, slots, and associated services. BK22 is the data controller responsible for the personal information collected through this platform — meaning we determine the purposes and means by which your personal data is processed.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, you can reach the BK22 data team through the following channels:

  • Live Chat: Available 24/7 from within your logged-in BK22 account — use the "Privacy / Data" category when initiating a chat.
  • Email: support@bk22.world — please include "Privacy Policy Query" in your subject line for fastest routing.

BK22 aims to acknowledge all privacy-related requests within 24 hours and to provide a substantive response within 30 days of receipt. Complex requests (such as full data exports) may take longer; we will communicate a revised timeline where applicable.

02 What Personal Data BK22 Collects

BK22 collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information received from third-party service providers (such as payment processors and identity verification services). The table below summarises the categories of data collected:

Category Examples Source
Identity Data Full name, date of birth, CNIC number, gender Provided by you at registration / KYC
Contact Data Mobile number, email address, city Provided by you at registration
Financial Data Easypaisa / JazzCash account number, IBFT bank details, card last four digits Provided by you at cashier
Transaction Data Deposit amounts, withdrawal amounts, dates, payment method used Generated by platform activity
Gaming Data Bets placed, games played, session duration, wager amounts, outcomes Generated by platform activity
Technical Data IP address, device type, browser, operating system, session timestamps Automatically collected
Communication Data Support chat transcripts, email correspondence Generated by your support interactions
Verification Data CNIC scan, selfie for liveness check (KYC only) Provided by you at withdrawal verification

BK22 does not collect sensitive personal data beyond what is listed above. We do not collect biometric data for purposes other than identity verification, and we do not collect information about your religion, ethnicity, or political opinions.

bk22

03 Why BK22 Collects Your Data — Our Lawful Bases

BK22 processes your personal data only where there is a legitimate, lawful basis to do so. The purposes for which we use your data, and the lawful basis in each case, are as follows:

  • To create and manage your account — necessary for the performance of our contract with you. Without this data, the account cannot function.
  • To process deposits and withdrawals — necessary for contractual performance and required by payment providers to prevent fraud.
  • To verify your identity (KYC) — required by our licensing obligations. We cannot process withdrawals without completing verification.
  • To detect and prevent fraud, money laundering, and bonus abuse — legitimate interest. BK22 has an obligation to operate a clean platform for the benefit of all players.
  • To provide customer support — contractual necessity and legitimate interest. Support interactions are logged so we can provide consistent service and resolve disputes accurately.
  • To send you promotional communications — only with your explicit consent. You can withdraw marketing consent at any time from your account settings.
  • To comply with legal and regulatory obligations — legal obligation. Certain data must be retained for defined periods under the laws of our operating jurisdiction.
  • To improve the platform — legitimate interest. Aggregated, anonymised gaming data helps us improve game selection, performance, and user experience.

BK22 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent and updating this Policy to reflect the change.

04 Who BK22 Shares Your Data With

BK22 does not sell your personal data to any third party. We share data only where it is necessary for platform operations, legal compliance, or the protection of your account. The categories of recipients are:

  • Payment service providers — Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners require transaction data to process your deposits and withdrawals. They are bound by their own data protection obligations.
  • Identity verification providers — our KYC partner receives the identity documents you submit for verification. Documents are processed and then deleted by the provider in accordance with their retention policy.
  • Fraud prevention and security services — BK22 uses third-party fraud detection tools that analyse transaction and behavioural patterns. These tools do not have access to your full identity documents.
  • Game software providers — live casino and slot providers receive game session data necessary to deliver their services. They operate as data processors under contracts with BK22.
  • Legal and regulatory authorities — BK22 will share data with law enforcement, regulators, or courts when required to do so by law, court order, or regulatory direction.
  • Professional advisers — lawyers, auditors, and accountants may access data on a need-to-know basis and are bound by professional confidentiality obligations.

All third parties who process data on BK22's behalf are required to do so in accordance with this Policy and applicable data protection law. BK22 does not permit sub-processors to use your data for their own marketing purposes.

05 How BK22 Protects Your Personal Data

Data security is not an afterthought at BK22 — it's built into the platform architecture. The measures we have in place to protect your personal information include:

  • TLS encryption in transit: All data transmitted between your device and BK22's servers is protected by Transport Layer Security. The padlock icon in your browser confirms this is active.
  • Encryption at rest: Personal data stored on BK22's servers is encrypted using AES-256, the same standard used by financial institutions.
  • Access controls: Only BK22 employees with a specific operational need can access personal account data. Access is logged and audited.
  • Regular security testing: BK22's platform undergoes regular penetration testing and security audits by independent security professionals.
  • Two-factor authentication: BK22 accounts support two-factor authentication via SMS OTP. We strongly recommend all players enable this from their account security settings.
  • Incident response: BK22 has a documented data breach response procedure. Affected players will be notified within 72 hours of a confirmed breach, as detailed in Section 1.

While BK22 takes every reasonable precaution to protect your data, no digital system is completely immune to risk. You can reduce your personal exposure significantly by using a strong, unique password for your BK22 account and enabling two-factor authentication — both available in your account security settings.

06 Cookies and Tracking Technologies

BK22 uses cookies — small text files stored on your device — and similar tracking technologies to make the platform work correctly and to understand how it is being used. We divide our cookies into the following categories:

BK22 does not use advertising or cross-site tracking cookies. Your cookie preferences are stored in your account settings and respected on each session. You can update your preferences at any time.

Most browsers allow you to manage cookies through browser settings — you can block or delete cookies at the browser level. Note that disabling essential cookies will prevent you from logging into your BK22 account, as they are required for secure session management.

bk22

07 How Long BK22 Keeps Your Data

BK22 retains personal data only for as long as it is necessary for the purposes described in this Policy. Our retention schedule is as follows:

Data Type Retention Period Reason
Account profile data Duration of account + 5 years post-closure Regulatory compliance, dispute resolution
Transaction records 7 years from transaction date Anti-money laundering legal requirement
KYC documents 5 years post account closure Regulatory compliance
Gaming history 5 years from session date Dispute resolution, responsible gaming monitoring
Support chat transcripts 3 years from interaction date Quality assurance, dispute evidence
Marketing consent records 3 years from consent date or withdrawal Consent audit trail
Technical / log data 12 months Security monitoring, fraud detection

At the end of each retention period, data is deleted or irreversibly anonymised in accordance with BK22's internal data deletion procedures. Where data must be retained for legal reasons (such as an ongoing investigation or regulatory inquiry), deletion may be delayed until that requirement has been satisfied.

08 Your Privacy Rights as a BK22 Player

BK22 respects your rights over your personal data. The rights available to you are described below. To exercise any of these rights, contact BK22 via live chat or at support@bk22.world. We will respond within 30 days and will not charge a fee for standard requests.

Right to Access

Request a copy of all personal data BK22 holds about you, including what categories of data are held and how they are being used.

Right to Rectification

Request correction of any inaccurate personal data BK22 holds about you. For basic details like email or phone number, you can update these directly in your account settings.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent and there is no other legal basis. Some data must be retained for regulatory compliance and cannot be deleted on request.

Right to Restriction

Request that BK22 restricts processing of your data in certain circumstances — for example, while a dispute about its accuracy is resolved.

Right to Data Portability

Request a machine-readable export of personal data you provided to BK22, in a format that can be transferred to another service provider if applicable.

Right to Object

Object to BK22 processing your data based on legitimate interest, including for profiling or direct marketing. Where you object to marketing, processing for that purpose will stop immediately.

BK22 will verify your identity before actioning any data rights request. This protects you from someone else requesting or deleting your data without your knowledge. Verification is typically completed via a confirmation message to your registered mobile number or email.

09 Children's Privacy

BK22 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account or use any BK22 service.

If BK22 becomes aware that personal data has been collected from a person under the age of 18, we will immediately delete that data and close the associated account. If you believe a minor has registered an account on BK22, please contact us immediately at support@bk22.world so we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. BK22 is not responsible for access by minors that results from inadequate parental supervision or circumvention of age-verification mechanisms using false identity information.

10 International Data Transfers

BK22 is headquartered and licensed outside Pakistan, and some of the third-party service providers we use — particularly game software providers and fraud detection services — operate servers in various international locations. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where such transfers occur, BK22 ensures that appropriate safeguards are in place to protect your data to the same standard described in this Policy. These safeguards include:

  • Data processing agreements with all third-party processors that include mandatory data protection standards.
  • Transfers only to service providers operating in jurisdictions with adequate data protection frameworks, or under equivalent contractual safeguards.
  • Regular review of the data protection practices of all service providers with whom BK22 shares personal data.

If you have concerns about international data transfers relating to your account, please contact us at support@bk22.world and we will provide specific information about where your data is processed and the protections in place.

11 Changes to This Privacy Policy

BK22 reviews this Privacy Policy regularly and updates it when our data practices change, when relevant laws or regulations change, or when we add new services. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

For material changes — those that affect your rights or how your data is used in a meaningful way — BK22 will provide at least 14 days' advance notice via email to your registered address and via an in-platform notification. You will be asked to acknowledge the changes before your next login following the effective date.

We encourage you to review this Policy periodically. If you continue to use BK22 after a change to this Policy takes effect, that constitutes your acceptance of the updated Policy. If you do not agree with a change, you have the right to close your account and request deletion of your data before the effective date.

12 Contact BK22 About Privacy

BK22 takes privacy seriously and we want to make it as easy as possible for you to get answers to your questions and exercise your rights. Here are all the ways you can reach us about privacy matters:

  • Live Chat (fastest): Log in to your BK22 account and open the live chat. Select "Privacy / Data Rights" from the topic menu and you'll be connected to a team member who handles these queries specifically.
  • Email: Send your query or request to support@bk22.world with the subject line "Privacy Policy" or "Data Rights Request."

BK22 will acknowledge your request within 24 hours and provide a full response within 30 days. For complex requests — such as full account data exports — we may need up to 60 days and will communicate any extension in writing.

If you are not satisfied with how BK22 has handled a privacy concern, you have the right to escalate to our dispute resolution process as described in the Terms and Conditions. We commit to taking all privacy concerns seriously and resolving them fairly.


Your Data is Safe — Now Enjoy the Platform

BK22 has been built with privacy and security at its core from day one. Register your account in two minutes, deposit from Rs 200 via Easypaisa or JazzCash, and claim your 100% welcome bonus up to Rs 50,000. You know exactly how we handle your data — now let's get started.

18+ only. Responsible gaming applies. Responsible Gaming tools available in your account settings.