Privacy Policy — bigtaka3

1. Introduction & Scope

This Privacy Policy is published by bigtaka3 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player", "data subject") who access or use the bigtaka3 website, mobile platform, casino services, sports betting services, customer support channels, and any associated features or communications (collectively, "the Services").

bigtaka3 is committed to handling all personal data with the highest standards of care, transparency, and security. This policy is written in clear, accessible English so that players across Bangladesh — including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and Barisal — can understand precisely how their information is managed.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which are published on bigtaka3 .app. Together, these documents form the complete framework governing your relationship with our platform.

2. Data We Collect

bigtaka3 collects personal data through several channels: directly from you when you register and use the platform, automatically through your device and browser as you interact with our Services, and from trusted third-party sources where necessary to verify your identity or prevent fraud. The following table summarises the categories of data we collect and the primary source of each:

2.1 Data We Do Not Collect

bigtaka3 does not collect or store full payment card numbers (PAN), card security codes (CVV/CVC), or full bank account passwords. Payment instrument verification is handled by our regulated payment processing partners using tokenisation. We also do not collect biometric data beyond liveness check images submitted for KYC purposes, which are processed by our identity verification partner and not stored on bigtaka3 servers beyond the verification period.

3. How We Use Your Data

bigtaka3 uses the personal data it collects for the following specific purposes. We do not use your data in any manner not described in this policy without first obtaining your explicit consent or being required to do so by law.

• Account creation and management: To register your player account, verify your identity, maintain your account settings, and provide access to the Services.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and connected Bangladeshi bank accounts, and to maintain accurate financial records of all transactions on your account.
• Identity verification and KYC compliance: To fulfil our Know Your Customer obligations, verify that you meet the 18+ age requirement, and confirm that you are the legitimate holder of the payment instruments used on your account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other illegal or prohibited activities on the platform.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to apply deposit limits, cooling-off periods, and self-exclusion tools at your request, and to fulfil our duty of care obligations to players.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions.
• Platform improvement: To analyse aggregated and anonymised usage data in order to improve the performance, reliability, and design of the bigtaka3 platform.
• Legal and regulatory compliance: To retain records as required by applicable law and to respond to lawful requests from courts, regulators, and law enforcement authorities.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new features — but only where you have provided your explicit consent to receive marketing messages. You may withdraw marketing consent at any time by contacting support@bigtaka3.

4. Legal Basis for Processing

bigtaka3 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and bigtaka3 — that is, to provide the Services you have registered to use, including account management, payment processing, and game access.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC verification requirements, and record-keeping duties.
• Legitimate interests: Processing is necessary for bigtaka3's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud prevention, platform security, and business analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is based on your consent (for example, sending marketing communications or using non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Data Sharing & Third Parties

bigtaka3 does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

5.1 Payment Processing Partners

To process deposits and withdrawals, we share necessary financial and identity data with our payment processing partners, including bKash, Nagad, Rocket, Upay, and affiliated Bangladeshi banking institutions. These partners are independently regulated and are contractually bound to use your data solely for the purpose of executing transactions on your behalf.

5.2 Identity Verification Providers

To conduct KYC verification and age checks, we share identity documents and verification data with regulated third-party identity verification service providers. These providers process your data on our behalf under strict data processing agreements that prohibit any secondary use of your information.

5.3 Game Content Providers

bigtaka3's casino and sports betting Services are powered by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive limited technical data (such as a pseudonymous player session token) necessary to deliver the game experience. They do not receive your full identity or payment data.

5.4 Legal and Regulatory Authorities

bigtaka3 may disclose personal data to courts, law enforcement agencies, or regulatory authorities where required to do so by law, court order, or in connection with any legal proceeding. We will notify you of such disclosure where we are legally permitted to do so.

5.5 Business Transfers

In the event that bigtaka3 undergoes a merger, acquisition, or sale of assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. Any such transfer would be subject to confidentiality obligations, and affected players would be notified in advance where required by applicable law.

6. Cookies & Tracking Technologies

bigtaka3 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to support the delivery, security, and performance of the platform. The following categories of cookies are used:

6.1 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling essential or security cookies will impair your ability to log in and use the bigtaka3 platform. Instructions for managing cookies are available in the help documentation for all major browsers including Chrome, Firefox, Safari, and Edge.

7. Data Retention

bigtaka3 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to maintain accurate records for legal and audit purposes, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your account relationship with bigtaka3, plus a mandatory post-closure retention period.
• Transaction and financial records: Retained for a minimum of 7 years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years from account closure, in accordance with anti-money laundering compliance obligations.
• Customer support correspondence: Retained for 3 years from the date of resolution of the relevant interaction, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for as long as your consent remains active and for a period of 2 years after consent is withdrawn, to demonstrate compliance.
• Technical and server log data: Retained for up to 12 months before being anonymised or deleted, unless a specific security investigation requires extended retention.

When data is no longer required under the applicable retention period, bigtaka3 will securely delete or irreversibly anonymise it in accordance with our internal data destruction procedures.

8. Your Privacy Rights

As a data subject, you hold the following rights with respect to the personal data bigtaka3 processes about you. To exercise any of these rights, please contact our support team at support@bigtaka3. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

9. Data Security Measures

bigtaka3 employs a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your browser or mobile device and bigtaka3 is encrypted using TLS 1.2 or higher, providing 256-bit encryption strength.
• Password hashing: Player passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm with a unique salt per account.
• Access controls: Access to personal data within bigtaka3's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality agreements and regular security awareness training.
• Infrastructure security: bigtaka3's servers are hosted in secure, access-controlled data centre facilities. Regular vulnerability assessments and penetration testing are conducted to identify and address potential weaknesses.
• Incident response: bigtaka3 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities within the timeframes required by applicable law.
• Payment security: bigtaka3 does not store full payment card numbers or mobile banking PINs on its own servers. All sensitive payment credentials are handled exclusively by our regulated payment processing partners.

10. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how bigtaka3 has handled your personal data, please contact our support team:

• Email: support@bigtaka3 (plain text — not a clickable link)
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 calendar days of receipt.
• Escalation: If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority or seek legal remedy through a court of competent jurisdiction in your location.

10.1 Updates to This Policy

bigtaka3 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email or by displaying a prominent notice on the bigtaka3 platform before the changes take effect. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.