39ko Privacy Policy

1. Introduction

39ko ("we", "us", "our", "Platform") operates the online gaming platform available at 39ko.vip. This Privacy Policy describes how 39ko collects, processes, stores, and protects the personal data of players and visitors who access or use the Platform. This Policy applies to all users of 39ko, including registered account holders and unregistered visitors browsing the site.

By registering an account on 39ko, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree, you must discontinue use of the Platform immediately.

2. Data We Collect

39ko collects personal data through two primary means: information you provide directly when registering and using your account, and information collected automatically through your use of the Platform. The categories of data we collect are set out below.

Data you provide directly:

Data collected automatically:

When you visit or use 39ko, we automatically collect technical data including your device type and model, operating system version, browser type, IP address, approximate geographic location at city level, pages visited within 39ko, session start and end times, and referring URL. This data is used to maintain platform security, detect fraud, and improve performance. It is not linked to your personal identity unless required for a fraud investigation or legal compliance.

3. How We Use Your Data

39ko uses your personal data only for legitimate purposes directly connected to operating a safe and fair online gaming platform for players in Bangladesh. Specifically, we use your data for the following purposes:

• Account creation and management: Processing your registration, verifying your identity via KYC, managing account settings, and enabling secure login authentication.
• Transaction processing: Facilitating deposits and withdrawals via your linked bKash, Nagad, Rocket, or Upay wallet and maintaining accurate financial records of all transactions on your account.
• Platform security and fraud prevention: Detecting and investigating suspicious activity, identifying duplicate accounts, preventing money laundering, and fulfilling legal obligations to report suspicious transactions to relevant authorities.
• Responsible gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling, enforcing deposit limits and self-exclusion settings applied to your account, and fulfilling age verification obligations.
• Customer support: Responding to your support enquiries, resolving account and payment disputes, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with 39ko and to improve site performance, game selection, and new feature development.

39ko does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without providing a meaningful opportunity for human review.

4. Legal Basis for Processing

39ko processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the Terms and Conditions agreement between you and 39ko — including account management, transaction processing, and dispute resolution.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, age verification requirements, KYC regulations, and obligations to report suspicious financial activity to authorities.
• Consent: Processing based on your explicit consent, including sending promotional communications. You may withdraw consent at any time by contacting support at [email protected].
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregate analytics — where these interests do not override your fundamental rights and freedoms.

5. Sharing Your Personal Data

39ko does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the specific, limited circumstances described below and only to the minimum extent necessary for the stated purpose.

• Payment processors (bKash, Nagad, Rocket, Upay): Your mobile wallet number and transaction reference are shared solely to process deposit and withdrawal transactions. No additional data is shared beyond what is required to complete a transaction.
• Game providers (Pragmatic Play, Evolution Gaming, Ezugi, etc.): Anonymised session and gameplay data may be shared for game performance and fairness auditing. This data does not contain your name, contact details, or financial information.
• Regulatory and law enforcement authorities: Where required by applicable law, 39ko will disclose personal data to government bodies, financial intelligence units, or law enforcement agencies. We will notify you of any such disclosure unless legally prohibited from doing so.
• Technology and security service providers: Technical service providers who assist 39ko in operating the platform — such as hosting providers, cybersecurity vendors, and analytics tools — may process data on our behalf under strict contractual data protection obligations.

All third parties with whom 39ko shares personal data are required to handle that data securely, use it only for the purpose for which it was shared, and comply with applicable data protection standards. 39ko does not permit third-party recipients to use your data for their own marketing or commercial purposes.

6. Payment Data and Mobile Wallet Privacy

39ko processes all payments through Bangladesh's local mobile money platforms: bKash, Nagad, Rocket, and Upay. 39ko does not store full mobile wallet credentials or transaction PINs. The payment data 39ko retains is limited to your registered wallet number, transaction reference numbers, transaction amounts in BDT, and timestamps. This data is retained for financial record-keeping, dispute resolution, and regulatory compliance purposes only.

When you initiate a deposit or withdrawal, you interact with the relevant payment provider's own interface. Your interaction with bKash, Nagad, Rocket, or Upay at that point is governed by those providers' own privacy policies, not this Policy. 39ko strongly encourages all players to review the privacy terms of their chosen payment provider before completing any transaction.

7. Cookies and Tracking Technologies

39ko uses cookies and similar tracking technologies to operate the platform, maintain your session while you are logged in, and understand how players navigate the site. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not give us access to your device or any information beyond what you choose to share with us.

Types of cookies we use:

• Essential cookies: Strictly necessary for the platform to function. These include session cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use 39ko — such as which pages are visited most frequently and average session duration. This data helps us improve the platform and is not linked to your personal identity.
• Preference cookies: Store your in-platform preferences such as language settings to personalise your experience on return visits to 39ko.

Most mobile browsers allow you to control cookie settings through your device's browser preferences. Disabling essential cookies will affect your ability to use 39ko, including staying logged in. Disabling analytics or preference cookies will not prevent you from using the platform but may reduce the quality of your experience.

8. Data Retention

39ko retains your personal data for as long as your account is active and for a defined period after account closure as required by applicable law and our internal compliance obligations. Account registration and identity data is retained for the duration of your account plus a minimum of 5 years following account closure. Financial transaction records are retained for a minimum of 7 years from the date of the transaction. Gaming activity logs are retained for 3 years. Support correspondence is retained for 3 years from the date of the interaction.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised aggregate data derived from your account activity may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data.

9. Your Data Rights

As a player on 39ko, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and your registered mobile number. We will respond within 30 days.

• Right of access: Request a copy of the personal data 39ko holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: Request correction of any inaccurate or incomplete personal data held by 39ko. You may be required to submit verified identity documentation to support a rectification request.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. Certain data such as financial transaction records may be exempt from erasure where retention is required by law.
• Right to restriction: Request that 39ko restricts processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction to erasure.
• Right to object to marketing: You may opt out of receiving promotional SMS messages or other marketing communications from 39ko at any time by contacting support at [email protected]. Opting out of marketing does not affect service-related communications such as transaction confirmations or account security alerts.

39ko will respond to all data rights requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days and will notify you of the extension and the reason for it. There is no fee for exercising your data rights.

10. Data Security

39ko implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive account data including identity verification documents, strict access controls limiting personal data access to authorised personnel only, regular security audits and penetration testing of platform infrastructure, and real-time fraud monitoring systems that flag anomalous account behaviour.

While 39ko takes all reasonable steps to safeguard your data, no online platform can guarantee absolute security. In the event of a data breach likely to result in a risk to your rights and freedoms, 39ko will notify affected players without undue delay and will take immediate steps to contain and remedy the breach. You are responsible for keeping your account credentials confidential. 39ko will never ask you for your password via live chat, SMS, or email.

11. Children's Privacy and Age Restriction

39ko is strictly an adult platform. You must be 21 years of age or older to register an account or use any feature of 39ko. We do not knowingly collect personal data from individuals under the age of 21. If 39ko becomes aware that personal data has been collected from a person under 21 without verified consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on 39ko, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

39ko reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make changes, we will update the "Last updated" date at the top of this page. Where changes are material — meaning they significantly affect how we collect or use your personal data — we will make reasonable efforts to notify registered players via SMS to their registered mobile number or via an in-platform notification.

Your continued use of 39ko after any updated Privacy Policy is published constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically. The current version is always available at 39ko.vip/privacy-policy.

13. Contact and Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 39ko holds about you, please contact our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.