Your Privacy, Protected by yk44

When you interact with the yk44 platform — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing — we may collect certain categories of personal information. We collect only what is necessary to deliver our services securely and in compliance with anti-money-laundering obligations.

1.1 — Identity & Contact Information

This includes your full legal name, date of birth, nationality, residential address (including city, such as Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number. This information is collected at account registration and may be supplemented during KYC verification.

1.2 — Identity Verification Documents

To comply with our Know Your Customer (KYC) obligations, we may request copies of a government-issued photo ID (National Identity Card, passport, or driving licence), proof of residential address (utility bill or bank statement dated within three months), and proof of payment method (screenshot of your bKash, Nagad, or Rocket wallet, or a redacted copy of your bank card).

1.3 — Financial & Transaction Data

We record all deposits, withdrawals, bonus activations, bet placements, and game activity associated with your account. This includes transaction amounts in BDT or INR, timestamps, payment method identifiers (mobile wallet numbers, card last-four digits), and transaction reference numbers. We do not store full card numbers or mobile banking PINs.

1.4 — Technical & Device Data

When you access yk44, our servers automatically log your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, and session duration. This data helps us detect fraud, optimise platform performance, and troubleshoot technical issues.

1.5 — Behavioural & Usage Data

We collect information about how you use the platform: which games you play, how long you play them, which pages you visit, what search queries you enter, and how you navigate between sections. This data is used to personalise your experience, improve our product, and identify potential responsible gaming concerns at an early stage.

1.6 — Communications Data

We retain records of all communications between you and yk44's support team, including live chat transcripts, email correspondence, and any files or screenshots you submit. These records are kept to maintain service continuity, resolve disputes, and comply with regulatory requirements. All live chat sessions are encrypted in transit using TLS 1.3.

yk44 processes your personal data only for specific, legitimate purposes. We do not sell your data to third parties for advertising purposes, and we do not use your data to make fully automated decisions that would significantly affect your legal rights without a human review process available.

Purpose	Legal Basis	Data Categories Used
Account registration and authentication	Contractual necessity	Identity, contact, device data
Processing deposits and withdrawals	Contractual necessity	Financial, identity, KYC documents
KYC and age verification (18+ compliance)	Legal obligation	Identity documents, date of birth
Anti-money-laundering (AML) screening	Legal obligation	Financial, identity, transaction history
Fraud detection and security monitoring	Legitimate interests	Device, technical, behavioural data
Customer support and dispute resolution	Contractual necessity	Communications, identity, transaction data
Responsible gaming monitoring	Legal obligation / legitimate interests	Behavioural, financial, usage data
Platform personalisation and improvement	Legitimate interests / consent	Behavioural, usage, device data
Promotional communications (opted-in only)	Consent	Contact, behavioural data

Where yk44 processes your data on the basis of legitimate interests, we carry out a balancing test to ensure that our interests do not override your fundamental privacy rights. You have the right to object to processing based on legitimate interests — see Section 6 for details on how to exercise this right.

yk44 does not sell, rent, or trade your personal information. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

3.1 — Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. Each of these providers operates under its own privacy policy and security standards. yk44 shares only the transaction details required to complete or verify a specific payment; we do not provide payment processors with your full account profile or betting history.

3.2 — KYC and Identity Verification Partners

To fulfil our age and identity verification obligations, yk44 may use third-party KYC verification services. These partners receive only the specific identity documents and data points required to complete the verification check. All KYC partners used by yk44 operate under contractual obligations that restrict them from using your data for any purpose beyond the verification service they provide.

3.3 — Game Content Providers

yk44's game library is powered by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, certain anonymised technical data (session identifiers, game outcomes, round IDs) is transmitted to the game provider's servers to render the game correctly and to maintain the integrity of the certified RNG system. Your personal identity information is not shared with game studios.

3.4 — Legal and Regulatory Disclosure

yk44 may disclose your personal data to law enforcement agencies, financial intelligence units, or regulatory authorities when required to do so by applicable law, court order, or in response to a lawful governmental request. We will notify you of such disclosure wherever we are legally permitted to do so.

3.5 — Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of yk44's business assets, player data may be transferred to the acquiring entity as part of that transaction. In such cases, yk44 will provide reasonable notice via the registered email address associated with your account prior to your data becoming subject to a different privacy policy.

yk44 uses cookies and similar tracking technologies (such as local storage, session storage, and pixel tags) to operate and improve the platform. The following table summarises the categories of cookies we use and their purpose.

Cookie Type	Purpose	Duration	Required?
Strictly Necessary	Session management, login authentication, security tokens, load balancing	Session	Yes — cannot be disabled
Functional	Remembering your preferred language, currency (BDT / INR), odds format, and game view settings	12 months	Optional
Analytics	Understanding page traffic patterns, feature usage, and navigation flows to improve the product (data is aggregated and anonymised)	24 months	Optional
Responsible Gaming	Tracking session duration to trigger time-reminder notifications and enforce self-imposed session limits	Session	Yes — required for responsible gaming compliance

yk44 does not use third-party advertising cookies or cross-site tracking technologies that follow your activity outside of the yk44 platform. All analytics data collected on yk44 is processed within our own environment or by contracted analytics providers under strict data processing agreements that prohibit secondary use.

yk44 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following retention periods apply by default:

• Active account data (identity, contact, financial records): Retained for the full duration of your account's active status, plus a minimum of 5 years following account closure. This period aligns with standard anti-money-laundering record-keeping requirements applicable to online financial services platforms operating in the South Asia region.
• KYC verification documents (ID copies, address proof): Retained for 5 years from the date of the most recent transaction on your account, or from account closure, whichever is later.
• Transaction records (deposit/withdrawal logs, bet history): Retained for 7 years from the date of each transaction for financial audit and regulatory compliance purposes.
• Support and communications records (live chat transcripts, email threads): Retained for 3 years from the date of the communication, unless the communication relates to an open dispute, in which case it is retained until the dispute is fully resolved plus 12 months.
• Technical and device logs (IP addresses, session logs): Retained for 12 months from the date of the session, after which they are anonymised or deleted.
• Marketing consent records: Retained for the period during which consent is active, plus 3 years following withdrawal of consent, for regulatory accountability purposes.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures. Physical documents containing personal data (if any) are shredded. You may request early deletion of your data under the rights described in Section 6, subject to our legal retention obligations.

As a yk44 player, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request".

Right of Access

You have the right to request a copy of the personal data yk44 holds about you, along with information about how that data is being used. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of a valid request.

Right to Rectification

If any of the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct it. Many data points — such as your contact email or phone number — can be updated directly within your account settings. For changes to legally sensitive fields such as your name or date of birth, additional identity verification will be required before the correction is applied.

Right to Erasure ("Right to be Forgotten")

You may request that yk44 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that this right is subject to our legal retention obligations: financial transaction records and KYC documents must be retained for the periods stated in Section 5, even following an erasure request.

Right to Restriction of Processing

In certain circumstances, you may request that yk44 restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while an objection to processing is under review. During a restriction period, your data will be stored but not actively processed beyond what is strictly required.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider. This right applies to data you have actively provided to yk44 (such as profile information) rather than inferred or derived data.

Right to Object

You have the right to object at any time to processing of your personal data that is based on yk44's legitimate interests. You also have the unconditional right to object to your data being used for direct marketing purposes — upon receipt of such an objection, yk44 will cease all marketing communications addressed to you within 5 business days.

yk44 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, unlawful destruction, and misuse. Our security programme encompasses technical, organisational, and procedural controls operating across all layers of the platform.

7.1 — Encryption

All data transmitted between your browser or mobile device and yk44's servers is encrypted using TLS 1.3 with 256-bit AES encryption — the same standard used by major international banks and financial institutions. Data stored in yk44's databases is encrypted at rest using AES-256. Payment credentials (such as mobile wallet reference numbers) are additionally tokenised so that full credentials are never stored in plaintext within our systems.

7.2 — Access Controls

Access to personal data within yk44's internal systems is restricted on a strict need-to-know basis using role-based access control (RBAC). Customer support agents can access only the minimum account information required to resolve your query. No yk44 employee or contractor has access to your account password in plaintext — passwords are stored as salted hashes using bcrypt.

7.3 — Infrastructure Security

yk44's platform is hosted on enterprise-grade cloud infrastructure with continuous security monitoring, intrusion detection systems (IDS), and web application firewalls (WAF). Our infrastructure undergoes regular penetration testing by independent third-party security firms. Critical systems are segregated in separate network zones with strict firewall rules governing all inter-zone traffic.

7.4 — Incident Response

In the event of a personal data breach that poses a risk to your rights and freedoms, yk44 will notify affected users by email to their registered address within 72 hours of becoming aware of the breach. The notification will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach.

7.5 — Staff Training and Policies

All yk44 employees and contractors who handle personal data complete mandatory data protection training upon onboarding and on an annual basis thereafter. yk44 maintains an internal data protection policy that all staff are contractually required to comply with. Violations of this policy are treated as serious disciplinary matters.

yk44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Where a material change is made — for example, a new category of data collection, a new sharing partner, or a change to retention periods — we will publish a notice on the yk44 platform and send an email notification to your registered address at least 14 days before the change takes effect.

Minor or non-material amendments (such as correcting a typographical error or clarifying an existing practice without substantively changing it) may be made at any time without prior notice. The effective date at the top of this policy will be updated on every revision. We recommend reviewing this page periodically.

Your continued use of the yk44 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any change, you should discontinue use of the platform and request closure of your account in accordance with the procedure described in our Terms and Conditions.

yk44 is committed to resolving all privacy concerns directly and promptly. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction. We will always cooperate fully with any legitimate regulatory or supervisory process arising from a privacy complaint made in good faith.

18+  yk44 is an adult entertainment platform. All data collection and processing described in this policy applies exclusively to users who are 18 years of age or older. If you believe a minor has registered on our platform, please contact [email protected] immediately. We take underage access extremely seriously and will take immediate action upon notification.