apk48 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how apk48 ("apk48", "we", "us", "our") collects, processes, stores, and shares personal information about users ("you", "your", "Player") who access the apk48 platform at https://apk48.io, including all associated services such as online casino games, cricket and sports betting, live casino, payment processing, customer support, and promotional communications.

apk48 is committed to protecting the privacy of all players in Bangladesh and to handling personal data with care, transparency, and in compliance with applicable data protection principles. This Policy is written in plain English and explains in straightforward terms what data we hold, why we hold it, who we share it with, and what rights you have over it.

For the purposes of this Privacy Policy, apk48 acts as the data controller in respect of all personal data collected from players who use the apk48 platform. As the data controller, apk48 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how apk48 processes your personal data, or if you wish to exercise any of your rights as described in this Policy, you may contact our data protection team at any time using the contact details provided in Section 15 of this Policy. All data-related correspondence is handled in English during our standard support hours in Bangladesh Standard Time (BST, UTC+6).

apk48 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are described below.

apk48 does not collect or process special categories of personal data (such as health data, religious beliefs, or political opinions) unless you voluntarily disclose such information in the context of a responsible gaming request, in which case it is handled with heightened confidentiality.

apk48 collects personal data through several channels, each of which is described below. We only collect data that is relevant and necessary for the stated purpose.

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically when you visit the apk48 website, including via cookies, log files, pixel tags, and session tracking tools. See Section 10 for full cookie details.
• Payment providers: Transaction confirmation data shared by bKash, Nagad, Rocket, Upay, and other payment partners when you make a deposit or withdrawal. We receive confirmation and reference data, not your full payment credentials.
• Identity verification services: Confirmation data from third-party KYC/AML service providers used to verify the authenticity of identity documents submitted during account verification.
• Game providers: Aggregated game outcome and session data shared by third-party game studios (e.g., Pragmatic Play, Evolution Gaming, Ezugi) for the purpose of operating the games and compiling your account history.
• Publicly available sources: In limited cases related to fraud or AML investigations, apk48 may consult publicly available sources or sanctions databases to verify player information.

apk48 uses your personal data for the following purposes. We process data only where we have a valid legal basis for doing so, as set out in Section 6.

• To create and manage your apk48 account, including verifying your identity and age (21+) in accordance with our eligibility requirements.
• To process deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method (bKash, Nagad, Rocket, Upay, or other supported options).
• To operate and deliver the games and betting services you use on the platform, including recording game outcomes and maintaining your account balance.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• To comply with our legal obligations, including KYC/AML requirements, age verification, and responses to lawful requests from competent authorities.
• To manage and resolve customer support queries, complaints, and disputes in a fair and timely manner.
• To operate responsible gaming tools including deposit limits, self-exclusion, and session reminders, and to monitor player behaviour for signs of potential harm.
• To send you service-related communications such as account confirmations, transaction receipts, security alerts, and policy updates.
• To send you promotional communications about bonuses, new games, and special offers — where you have given your explicit consent to receive such communications. You may withdraw consent at any time.
• To analyse usage patterns and improve the apk48 platform, game selection, and player experience for users across Bangladesh.

apk48 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil our contract with you, including account management, payment processing, and game operation. Without this processing, we cannot provide you with apk48 services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) regulations, age verification obligations, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for apk48's legitimate business interests where those interests are not overridden by your rights and freedoms. This includes fraud detection, platform security, responsible gaming monitoring, and service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and for any optional data sharing beyond what is required to operate the service. You may withdraw consent at any time without affecting the lawfulness of prior processing.

apk48 does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, and other payment partners receive the minimum data necessary to process your deposit or withdrawal transaction.
• Game providers: Third-party studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and others) receive session and account reference data necessary to operate their games within the apk48 platform. They do not receive your financial or identity documents.
• KYC/AML service providers: Identity verification partners receive document images and personal details solely for the purpose of verifying your identity and age. These providers are contractually bound to process your data only for this purpose.
• IT and platform service providers: Cloud hosting, security monitoring, and analytics vendors who support the operation of the apk48 platform. All such providers are subject to data processing agreements that restrict their use of your data.
• Legal and regulatory authorities: Where required by law or in response to a valid legal request from a competent authority in connection with fraud, AML, or other investigations, apk48 may disclose personal data without prior notice to you.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of apk48's business, player data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy.

All third-party data processors engaged by apk48 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with apk48's documented instructions.

apk48 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised and aggregated, it may be retained indefinitely for statistical analysis and platform improvement purposes.

apk48 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the apk48 platform, protecting your login credentials, payment information, and personal data in transit.
• Encryption of sensitive data fields at rest, including identity document references and payment method details.
• Role-based access controls ensuring that apk48 staff can only access personal data that is directly necessary for their job function.
• Regular internal and external security assessments, penetration testing, and vulnerability scanning of the apk48 platform infrastructure.
• Multi-factor authentication options for player accounts and mandatory multi-factor authentication for all apk48 administrative access.
• Incident response procedures that include prompt notification to affected players in the event of a personal data breach that poses a risk to their rights and freedoms.
• Staff training on data protection obligations and security best practices, conducted on a regular basis.

apk48 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session security, and analyse how players use the site. A cookie is a small text file placed on your device by the apk48 web server. The categories of cookies used by apk48 are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that detect fraudulent activity. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your account preferences, language settings, and display options so that you do not need to reconfigure them on each visit.
• Analytics cookies: Used to collect aggregated information about how players navigate and use the apk48 platform. This data helps us identify areas for improvement. Analytics data is processed in anonymised or pseudonymised form.
• Performance cookies: Used to monitor platform load times, error rates, and server response quality to ensure apk48 performs reliably for players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, and other regions.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain features of the apk48 platform. apk48 does not use third-party advertising cookies or sell cookie-based data to advertising networks.

As a player whose personal data is processed by apk48, you have the following rights in relation to your personal data. These rights may be subject to certain conditions and limitations as permitted by applicable law.

• Right of access: You have the right to request a copy of the personal data apk48 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected. You may update basic account information directly from your account settings.
• Right to erasure: You may request that apk48 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that require us to retain certain records.
• Right to restriction: You may request that processing of your personal data be restricted while a dispute regarding accuracy or lawfulness is being resolved.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming monitoring, where you believe your individual circumstances override apk48's interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the apk48 data protection team at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 days. We may need to verify your identity before processing your request to protect against unauthorised access to another person's data.

The apk48 platform is strictly for adults aged 21 and above. apk48 does not knowingly collect, process, or store personal data from any person under the age of 21. All new accounts are subject to age verification during the registration and KYC process.

If apk48 becomes aware or reasonably suspects that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the data will be securely deleted to the extent permitted by legal retention requirements, and any winnings associated with the account will be voided. If you believe that a minor has registered on the apk48 platform, please contact us immediately at [email protected].

Some of the third-party service providers used by apk48 — including game studios, cloud infrastructure providers, and KYC vendors — may process your personal data in countries outside Bangladesh. Where such transfers occur, apk48 takes steps to ensure that your personal data receives an equivalent level of protection to that which applies within Bangladesh.

These steps include entering into data processing agreements with all international data processors that impose contractual obligations equivalent to the data protection standards described in this Policy. apk48 does not transfer personal data to any country or organisation where adequate protection cannot be ensured. If you would like more information about the safeguards applied to international data transfers involving your personal data, please contact [email protected].

apk48 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, we will provide notice to registered players via email or a platform notification at least 7 days before the updated Policy takes effect, except where immediate changes are required to address an urgent security or legal matter.

The current version of this Privacy Policy, with the effective date displayed at the top, is always available at https://apk48.io/privacy-policy. We encourage you to review this Policy periodically. Continued use of the apk48 platform after any revision constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you should cease using the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way apk48 handles your personal data, please contact us using the details below. All privacy-related correspondence is treated with strict confidentiality and handled by our dedicated data protection team.

• Email: [email protected] — Subject line: "Privacy Query" or "Data Rights Request"
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Language: English
• Response Time: Within 30 days for data rights requests; within 5 business days for general privacy queries

apk48 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to your complaint, you may have the right to escalate the matter to a relevant supervisory authority or data protection body applicable in your jurisdiction.