spk48 Privacy Policy

1 Who We Are

spk48 is an online casino and sports betting platform accessible at spk48.io, operated for and primarily directed at players located in Bangladesh. In this Privacy Policy, references to "spk48", "we", "us" or "our" mean the operator of the spk48 platform. References to "you" or "your" mean any individual who visits, registers on, or interacts with the spk48 platform in any capacity.

spk48 acts as the data controller in respect of the personal data collected from players via the spk48.io website and associated services. As data controller, spk48 is responsible for determining the purposes and means by which your personal data is processed, and for ensuring that such processing is conducted lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected through the spk48.io website, the spk48 mobile browser interface, email communications, live chat interactions, and any other channel through which you engage with spk48. It does not apply to third-party websites or services that may be linked to or referenced from the spk48 Platform — those third parties operate their own independent privacy policies for which spk48 accepts no responsibility.

2 Data We Collect

spk48 collects personal data from you in the categories described below. We collect only the data that is necessary for the specific purposes outlined in this Policy, and we do not collect sensitive categories of personal data (such as racial or ethnic origin, religious beliefs, or health data) unless directly relevant to a responsible gaming intervention.

3 How We Collect Data

spk48 collects personal data through the following channels and mechanisms:

• Direct registration: When you create a spk48 account, you voluntarily provide your name, date of birth, contact details, and preferred payment method. This is the primary source of identity and contact data.
• Identity verification submissions: When you submit KYC documents (National ID, passport, utility bill, bank statement) in connection with account verification or withdrawal processing, we collect the personal data contained in those documents.
• Payment transactions: Each deposit or withdrawal generates a transaction record that includes the payment method reference, amount in Bangladeshi Taka (BDT), timestamp (BST), and transaction status. This data is received from your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard).
• Platform interactions: Your gameplay, betting activity, and navigation behaviour are recorded automatically by the spk48 platform as you use it. This includes the games you play, the amounts wagered, session start and end times, and the outcomes of individual game rounds.
• Device and browser data: Automatically collected via standard web server logs and client-side tracking scripts each time your browser loads a spk48 page. Includes IP address, browser fingerprint, and device identifiers.
• Cookies and similar technologies: See Section 7 for a full description of the cookies and tracking mechanisms used on the spk48 Platform.
• Third-party identity verification providers: Where spk48 uses a third-party identity verification service to conduct automated or assisted KYC checks, that provider may supply us with a verification result and associated data derived from your submitted documents.
• Support communications: Any data you include in live chat messages, emails, or feedback forms sent to the spk48 support team is collected and retained as part of our support records.

4 Legal Basis for Processing

spk48 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to create and maintain your spk48 account, process deposits and withdrawals, resolve disputes, and deliver the gaming and betting services you have requested. Without this processing, we cannot operate your account.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) laws, counter-terrorism financing (CTF) regulations, age verification requirements, fraud reporting obligations, and data retention requirements mandated by applicable law.
• Legitimate interests: Processing conducted in pursuit of spk48's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and internal analytics — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of your personal data for optional marketing communications (promotional emails, SMS offers, seasonal casino promotions) where you have given explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Data

spk48 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age (21+), maintain your account profile, and process account closure requests.
• Service delivery: To make casino games, live dealer tables, slots, cricket betting, and sports markets available to you, process your bets, calculate and credit winnings, and manage your account balance in Bangladeshi Taka (BDT).
• Payment processing: To process deposit and withdrawal transactions via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), verify payment method ownership, and maintain transaction records.
• Identity verification (KYC): To verify your identity, date of birth, and residential address in compliance with our KYC policy, and to confirm that you are not subject to sanctions, self-exclusion orders, or other disqualifying conditions.
• Fraud and AML prevention: To monitor your account activity for indicators of fraudulent behaviour, money laundering, or other financial crime, and to report suspicious activity to relevant authorities as required by applicable law.
• Responsible gaming: To monitor your gameplay patterns for indicators of problem gambling behaviour, to enforce deposit limits, loss limits, cooling-off periods, and self-exclusion orders you have requested, and to proactively offer support tools where our systems identify a potential concern.
• Customer support: To respond to your support queries, resolve disputes, investigate complaints, and improve our support processes.
• Security: To detect and prevent unauthorised access to your account, protect the integrity of the spk48 Platform, investigate security incidents, and enforce our Terms & Conditions.
• Platform analytics and improvement: To analyse aggregate usage patterns, identify areas for improvement in the platform's design and performance, and develop new features and game categories — using anonymised or pseudonymised data where possible.
• Marketing communications (consent-based): Where you have opted in, to send you promotional offers, bonus notifications, tournament announcements (including BPL, IPL, and T20 World Cup promotions), and seasonal casino offers via email or SMS. You may opt out at any time.
• Legal compliance: To fulfil data retention, reporting, and disclosure obligations arising under applicable laws, court orders, or regulatory instructions.

6 Data Sharing & Disclosure

spk48 does not sell your personal data to any third party. We share your data only in the following limited circumstances, and only to the extent necessary for the relevant purpose:

• Game providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive gameplay data and account session tokens necessary to deliver their games within the spk48 platform. These providers do not receive your full identity data unless required for their own regulatory compliance obligations.
• Payment processors: Your payment transaction data is shared with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) to the extent required to execute the deposit or withdrawal transaction.
• Identity verification services: Where a third-party KYC provider is used to verify your identity documents, your submitted documentation and personal details are shared with that provider solely for the purpose of completing the verification check.
• Fraud prevention and AML services: spk48 may use third-party fraud screening tools and AML monitoring services that process your account and transaction data to generate risk scores and flag suspicious activity. All such providers are contractually bound to process data only for these specific purposes.
• Legal and regulatory authorities: spk48 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal order, or where disclosure is necessary to protect spk48's legal rights or the safety of other players.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of spk48 or any of its assets, your personal data may be transferred to the acquiring entity as part of the transaction, provided that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by spk48 may access personal data on a strictly confidential, need-to-know basis for the purpose of providing professional services.

All third parties to whom spk48 discloses personal data are subject to contractual data protection obligations and are prohibited from using your data for any purpose other than the specific purpose for which it was disclosed.

7 Cookies & Tracking

spk48 uses cookies and similar tracking technologies on the spk48.io website. Cookies are small text files placed on your device by a website you visit. They serve a number of important functions, including keeping you logged into your account, remembering your preferences, and helping us understand how players interact with the platform.

spk48 uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the spk48 Platform to function. They include session authentication cookies that keep you logged in during a game session, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences such as language settings, last-used game category, and notification preferences, so you do not need to re-configure them on each visit.
• Analytics cookies: These collect anonymised or pseudonymised data about how visitors use the spk48 website — which pages are most visited, how long sessions last, and which device types are most common. This data is used to improve the platform.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These include device fingerprinting components that help identify unusual access patterns.

spk48 does not use third-party advertising or retargeting cookies. We do not permit third-party ad networks to place cookies on spk48.io for the purpose of building advertising profiles about our players.

You may control cookie settings through your browser's built-in privacy controls. Disabling strictly necessary cookies will impair or prevent access to the spk48 platform. Disabling analytics or functional cookies will reduce the quality of your experience but will not prevent access.

8 Data Retention

spk48 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the minimum retention periods required by applicable law. The following retention schedule applies:

• Active account data: Retained for the duration of your account's active status and for a period of five (5) years following account closure, to comply with AML record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in compliance with AML and financial crime prevention regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Gameplay logs and bet records: Retained for a minimum of three (3) years from the date of each game session or bet, for dispute resolution and fair play audit purposes.
• Support communications: Retained for three (3) years from the date of the final communication in a support thread, unless the communication relates to a dispute or legal matter in which case it is retained for five (5) years.
• Marketing consent records: Retained for the duration of your account plus two (2) years following account closure, to evidence the basis on which marketing communications were sent.
• Technical and usage data (anonymised): May be retained indefinitely in anonymised, aggregated form for platform analytics, as it no longer constitutes personal data.

Upon the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. spk48 conducts periodic data audits to ensure that data held beyond its retention period is identified and disposed of promptly.

9 Data Security

spk48 implements a layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your browser and the spk48 servers is encrypted using TLS 1.2 or higher. This is indicated by the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive data fields — including identity document scans, payment references, and password hashes — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within spk48's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Password security: Player passwords are stored as salted cryptographic hashes. spk48 staff members do not have access to your plain-text password and will never ask you for it via any channel.
• Two-factor authentication (2FA): spk48 offers optional 2FA for player accounts as an additional layer of protection against unauthorised access.
• Intrusion detection and monitoring: spk48's infrastructure is monitored continuously for anomalous activity, attempted intrusions, and known attack signatures.
• Third-party security audits: spk48 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, spk48 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

You play an important role in your own account security. Use a strong, unique password for your spk48 account, do not share your login credentials with any third party, and contact [email protected] immediately if you suspect your account has been compromised.

10 International Transfers

spk48 is operated primarily for the Bangladesh market, and the majority of data processing activities take place within the systems and data centres used by the spk48 platform operator. However, some of our third-party service providers — including certain game providers, KYC verification services, and cloud infrastructure providers — may process your data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, spk48 takes reasonable steps to ensure that appropriate safeguards are in place to protect your data in the destination jurisdiction. These safeguards may include:

• Contractual data protection clauses requiring the recipient to apply data protection standards equivalent to those described in this Policy.
• Ensuring that the recipient jurisdiction has an adequate level of data protection as recognised by applicable international standards.
• Processing the data under one of the lawful bases described in Section 4 of this Policy, where the international transfer is a necessary element of contract performance or legal compliance.

If you would like further information about the international transfer safeguards applicable to a specific processing activity, please contact [email protected].

11 Your Rights

Subject to applicable law and the limitations arising from spk48's legal obligations (particularly in relation to AML record-keeping), you have the following rights with respect to your personal data held by spk48:

• Right of access: You may request a copy of the personal data spk48 holds about you, including information about the categories of data held, the purposes for which it is processed, and the third parties to whom it has been disclosed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. For certain data fields, you can update information directly within your account dashboard.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to spk48's legal data retention obligations, which may require us to retain certain data despite a deletion request.
• Right to restriction of processing: You may request that spk48 restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that spk48 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing of your personal data where spk48 relies on legitimate interests as the legal basis, unless spk48 can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". spk48 will acknowledge your request within 5 business days and respond in full within 30 calendar days. We may request proof of identity before processing your request to ensure we do not disclose data to an unauthorised person.

12 Children & Minors

spk48 operates a strict minimum age policy. Access to, and participation in, the spk48 platform is restricted to individuals who are at least 21 years of age. spk48 does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted as part of the registration process and is reinforced at the point of first withdrawal via KYC documentation review. Where spk48 discovers that an account has been opened by, or on behalf of, a person under the age of 21, the account will be suspended immediately, all gameplay transactions during the period of underage access will be reviewed, and any balance held in the account will be dealt with in accordance with spk48's underage access policy.

If you believe that a person under the age of 21 has opened a spk48 account or that your child has accessed the platform without your knowledge, please contact [email protected] immediately. We take all such reports seriously and will act promptly to investigate and resolve the matter.

Parental control tools are available for devices used in Bangladesh. We encourage parents and guardians to use device-level content filtering and parental controls to prevent minors from accessing online gambling platforms.

13 Third-Party Services

The spk48 platform incorporates services and content provided by third parties, including game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), and infrastructure providers. Each of these third parties operates under its own privacy policy and data practices.

When you interact with a live dealer game powered by Evolution Gaming, a slot game provided by Pragmatic Play, or a payment transaction processed by bKash, some of your data is processed by those third-party systems in accordance with their own privacy frameworks. spk48 does not control those third-party data practices and is not responsible for them.

spk48 selects third-party partners carefully and requires, by contract , that all partners who process spk48 player data do so only for the specific, disclosed purposes and maintain data security standards consistent with those described in this Policy. However, we encourage you to review the privacy policies of the third-party providers you interact with, particularly the payment providers you use for deposits and withdrawals.

14 Changes to This Policy

spk48 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, the introduction of new platform features, or the onboarding of new third-party service providers.

When material changes are made to this Policy, spk48 will notify registered players via email (to the address associated with your account) and will display a prominent notice on the spk48.io website for a minimum of 30 days following publication of the updated Policy. The "Last Updated" date at the top of this Policy will be revised to reflect the date on which the most recent changes took effect.

Your continued use of the spk48 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this Policy, you should cease using the spk48 Platform and may request account closure by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how spk48 handles your personal data. Archived versions of previous Privacy Policies are available on request by contacting our support team.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to spk48's handling of your personal data, please contact the spk48 data team using the details below. All privacy-related enquiries are handled by our dedicated support team, who will respond to your query within 5 business days.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Data Rights Requests: [email protected] (subject line: "Data Rights Request")
• Response time: Acknowledgement within 5 business days; full response within 30 calendar days
• Operating hours: Support is available 7 days a week, Bangladesh Standard Time (BST, UTC+6)

If you are dissatisfied with spk48's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction. spk48 will cooperate fully with any such authority in the investigation of a complaint.