🔒 Secure · Transparent · Player-First

Privacy Policy – How ywkk Protects Your Personal Data

Your privacy matters to ywkk. This policy explains exactly what personal data we collect, why we collect it, how we use it and what rights you have over it. We have written it in plain language — no legal maze, no vague promises. Just a straight explanation of how ywkk handles your information.

Last updated: 1 January 2025

Your Privacy at a Glance

Six things ywkk does to protect your personal data — before you read the full policy.

256-Bit SSL Encryption

Every connection between your device and ywkk is protected by 256-bit SSL encryption. Your personal data, payment details and account credentials are encrypted in transit and at rest. No one can intercept your data while it travels between you and ywkk.

We Never Sell Your Data

ywkk does not sell, rent or trade your personal data to any third party for marketing purposes — ever. Your information is used only to operate your account, process payments and comply with legal obligations. That is it. No data brokers, no ad networks, no exceptions.

You Control Your Data

You have the right to access, correct and delete the personal data ywkk holds about you. You can opt out of marketing communications at any time from your account settings. ywkk will action all data requests within 30 days of receipt — no delays, no runaround.

Minimal Data Collection

ywkk collects only the personal data that is genuinely necessary to operate your account and comply with legal requirements. We do not collect data speculatively or build profiles beyond what is needed for account management, payment processing and responsible gaming monitoring.

Clear Retention Limits

ywkk retains your personal data only for as long as it is needed. Account data is retained for the duration of your account plus five years to meet regulatory requirements. Data that is no longer needed is securely deleted. We do not hold your data indefinitely.

Breach Notification

In the unlikely event of a data breach that affects your personal data, ywkk will notify you within 72 hours of becoming aware of the breach. The notification will explain what data was affected, what ywkk is doing about it and what steps you should take to protect yourself.

1 Introduction

This Privacy Policy explains how ywkk ("we", "us", "our") collects, uses, stores and protects the personal data of players and visitors who use the ywkk platform at ywkk.asia, the ywkk mobile application and all associated services ( collectively, "the Platform"). By registering an account or using the Platform, you confirm that you have read and understood this Privacy Policy.

ywkk is committed to protecting your privacy and handling your personal data with care, transparency and respect. This policy is written in plain language so that every player — whether you are new to online gaming or have been with ywkk for years — can understand exactly how your information is handled. If you have questions about anything in this policy, contact us at [email protected] before using the Platform.

This Privacy Policy applies to all players using ywkk from Bangladesh and any other jurisdiction where access to the Platform is permitted. It should be read alongside the Terms and Conditions.

2 Data We Collect

ywkk collects only the personal data that is necessary to operate your account, process payments, comply with legal obligations and provide a safe gaming environment. The categories of personal data we collect are set out in the table below.

Category Examples Why We Collect It
Identity Data Full name, date of birth, national ID number, passport number Account registration, age verification, KYC compliance
Contact Data Email address, mobile number Account communications, OTP verification, support
Financial Data bKash / Nagad / Rocket account number, transaction history Processing deposits and withdrawals, fraud prevention
Technical Data IP address, device type, browser type, operating system Platform security, fraud detection, technical support
Usage Data Pages visited, games played, session duration, bet history Platform improvement, responsible gaming monitoring
Communications Data Live chat transcripts, support emails, feedback submissions Support quality, dispute resolution, compliance records

ywkk does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data unless specifically required by law and with your explicit consent.

3 How We Collect Your Data

ywkk collects your personal data through the following channels:

  • Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support or submitting feedback.
  • Automated technologies: Technical and usage data collected automatically when you use the Platform, including via cookies, server logs and analytics tools.
  • Payment providers: Transaction confirmation data received from bKash, Nagad and Rocket when you make a deposit or withdrawal.
  • Identity verification providers: Data received from third-party KYC verification services when you submit identity documents for verification.
  • Fraud prevention services: Risk signals received from fraud detection partners to protect the Platform and its players.

ywkk does not purchase personal data from data brokers or any other third-party data sources. All personal data we hold about you was either provided by you directly or collected automatically through your use of the Platform.

4 How We Use Your Data

ywkk uses your personal data for the following purposes. For each purpose, we have identified the legal basis that permits us to process your data in that way.

  • Account management: Creating and maintaining your ywkk account, verifying your identity and age, and managing your account settings. Legal basis: contract performance.
  • Payment processing: Processing deposits and withdrawals via bKash, Nagad and Rocket, and maintaining transaction records. Legal basis: contract performance and legal obligation.
  • Customer support: Responding to your queries, resolving disputes and maintaining records of support interactions. Legal basis: contract performance and legitimate interests.
  • Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering and other illegal activity on the Platform. Legal basis: legal obligation and legitimate interests.
  • Responsible gaming: Monitoring gaming behaviour to identify players who may be at risk of problem gambling and providing appropriate support. Legal basis: legal obligation and legitimate interests.
  • Platform improvement: Analysing usage data to improve the Platform's features, performance and user experience. Legal basis: legitimate interests.
  • Marketing communications: Sending promotional offers, bonus notifications and platform updates — only where you have opted in to receive them. Legal basis: consent.
  • Legal compliance: Meeting our obligations under applicable laws and regulations, including anti-money laundering regulations and gaming licence conditions. Legal basis: legal obligation.

ywkk will never use your personal data for any purpose that is incompatible with the purposes listed above. If we need to use your data for a new purpose, we will update this Privacy Policy and notify you before doing so.

5 Sharing Your Data

ywkk does not sell, rent or trade your personal data to any third party. We share your data only where it is necessary to operate the Platform or comply with legal obligations. The third parties with whom we share data, and the reason for sharing, are listed below.

  • Payment processors (bKash, Nagad, Rocket): We share the minimum data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
  • KYC verification providers: We share identity documents with our verification partner to complete age and identity checks as required by our operating licence.
  • Fraud detection services: We share technical data (such as IP address and device fingerprint) with fraud prevention partners to protect the Platform and its players.
  • IT and hosting providers: Our Platform is hosted on secure servers. Hosting providers have access to technical data as part of providing infrastructure services and are bound by strict data processing agreements.
  • Regulatory authorities: We may be required to share player data with gaming regulators, financial intelligence units or law enforcement agencies in response to lawful requests. We will notify you of such disclosures where we are legally permitted to do so.

All third parties with whom ywkk shares personal data are required to handle that data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

6 Cookies and Tracking Technologies

ywkk uses cookies and similar tracking technologies to operate the Platform, remember your preferences and analyse how the Platform is used. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain your personal data directly, but they can be used to identify your browser or device.

The types of cookies ywkk uses are:

  • Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies without disabling the Platform entirely.
  • Functional cookies: Remember your preferences such as language settings and display options. These improve your experience but are not strictly necessary.
  • Analytics cookies: Collect anonymised data about how players use the Platform — which pages are visited most, where players encounter errors and how long sessions last. This data is used to improve the Platform.
  • Security cookies: Used by our fraud detection systems to identify unusual patterns of behaviour that may indicate fraudulent activity.

You can manage your cookie preferences through your browser settings. Note that disabling functional or analytics cookies may affect your experience on the Platform but will not prevent you from using core features.

7 Data Security

ywkk takes data security seriously and has implemented a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:

  • 256-bit SSL/TLS encryption for all data in transit between your device and ywkk's servers.
  • AES-256 encryption for sensitive data stored in ywkk's databases, including payment account numbers and identity document data.
  • Multi-factor authentication for all ywkk staff who have access to player data.
  • Role-based access controls that limit staff access to personal data on a strict need-to-know basis.
  • Regular penetration testing and security audits conducted by independent third-party security firms.
  • 24/7 automated monitoring of ywkk's systems for unusual activity or potential security incidents.
  • Secure data centres with physical access controls, redundant power supplies and environmental monitoring.

While ywkk takes every reasonable precaution to protect your data, no system is completely immune to security risks. You also have a role to play in keeping your account secure — use a strong, unique password, enable two-factor authentication and never share your login credentials with anyone.

In the event of a data breach that poses a risk to your personal data, ywkk will notify you within 72 hours of becoming aware of the breach, explaining what happened, what data was affected and what steps you should take.

8 Data Retention

ywkk retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The retention periods that apply to different categories of data are set out below.

  • Account and identity data: Retained for the duration of your account plus five years after account closure, to meet anti-money laundering regulatory requirements.
  • Financial transaction data: Retained for seven years after the transaction date, as required by financial regulations.
  • Support communications: Retained for three years after the last interaction, for dispute resolution and quality assurance purposes.
  • Technical and usage data: Retained for 13 months on a rolling basis, after which it is anonymised or deleted.
  • Marketing consent records: Retained for the duration of your account plus two years, to demonstrate compliance with consent requirements.

When personal data is no longer required, ywkk deletes it securely using industry-standard data destruction methods. Data that cannot be immediately deleted (for example, data held in backup systems) is isolated from active processing until it can be securely destroyed.

9 Your Privacy Rights

You have the following rights in relation to the personal data ywkk holds about you. To exercise any of these rights, contact us at [email protected]. ywkk will respond to all rights requests within 30 days.

Right of Access

You have the right to request a copy of all personal data ywkk holds about you. We will provide this in a structured, commonly used and machine-readable format within 30 days of your request.

Right to Rectification

If any personal data ywkk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly in your account settings.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that some data must be retained to meet legal obligations and cannot be deleted on request.

Right to Restrict Processing

You have the right to request that ywkk restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider where technically feasible.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications via your account settings or by contacting support.

10 Children's Privacy

ywkk is strictly for players aged 18 and above. ywkk does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or use the Platform in any way.

If ywkk becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated account will be closed. If you believe that a person under 18 has registered an account on ywkk, please contact us at [email protected] so we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. ywkk supports the use of such tools and can provide guidance on request.

11 International Data Transfers

ywkk's primary servers are located in secure data centres in Asia. In some cases, personal data may be transferred to and processed in countries outside Bangladesh — for example, when using cloud-based services or working with international fraud prevention partners.

Whenever ywkk transfers personal data internationally, we ensure that appropriate safeguards are in place to protect your data to the same standard as it would be protected in Bangladesh. These safeguards include contractual data protection clauses with all international service providers and, where applicable, transfers only to countries that provide an adequate level of data protection.

  • All international data transfers are documented and reviewed annually.
  • ywkk does not transfer personal data to countries that do not provide adequate data protection without implementing additional safeguards.
  • You may request details of the safeguards in place for any specific international transfer by contacting [email protected].

12 Changes to This Privacy Policy

ywkk may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or Platform features. When material changes are made, we will notify registered players via email and display a prominent notice on the Platform for at least 14 days before the changes take effect.

The date at the top of this policy indicates when it was last updated. We encourage you to review this policy periodically, even if you have not received a notification, to stay informed about how ywkk protects your privacy. Continued use of the Platform after the effective date of an updated policy constitutes acceptance of the updated terms.

To ensure you receive notifications of Privacy Policy updates, keep your registered email address current in your account settings.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your privacy rights, or wish to raise a concern about how ywkk handles your personal data, please contact us through one of the following channels:

  • Email: [email protected] — privacy requests are responded to within 30 days
  • Live Chat: Available 24/7 via the chat icon on any page of ywkk.asia

If you are not satisfied with ywkk's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. ywkk will cooperate fully with any regulatory investigation into our data practices.

For questions about responsible gaming and account self-exclusion, visit the Responsible Gaming page. For questions about account terms, visit the Terms and Conditions page.

Play on ywkk with Confidence

Your data is protected, your payments are secure and your privacy is respected. Join hundreds of thousands of Bangladesh players who trust ywkk for a safe, fair and transparent gaming experience. Register in two minutes.