apk27 Privacy Policy

apk27 ("we", "us", "our") operates the online casino and sports betting platform accessible at apk27.io (the "Platform"). This Privacy Policy describes how apk27 collects, uses, discloses, and safeguards personal information relating to individuals who register for and use the apk27 Platform ("players", "you", "your").

This policy is intended to meet internationally recognised data-protection standards and to provide players in Bangladesh with a clear and honest explanation of how their personal data is handled. We encourage you to read this document in full before creating an account. If you have any questions that are not addressed here, please contact our support team via live chat inside your account dashboard.

This Privacy Policy should be read in conjunction with the apk27 Terms & Conditions, which are incorporated into this policy by reference. Defined terms used in the Terms & Conditions carry the same meanings in this Privacy Policy unless otherwise stated.

For the purposes of this Privacy Policy, apk27 acts as the data controller in respect of personal data collected from players accessing the Platform. As data controller, apk27 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data-protection principles.

All enquiries relating to the processing of your personal data, including data subject access requests, correction requests, and deletion requests, should be directed to the apk27 support team via the live chat channel available inside your account dashboard, or via the support email address shown at the end of this policy.

apk27 collects the following categories of personal data from players:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (required to verify the 21+ age requirement)
• Gender (optional, provided voluntarily)
• Residential address in Bangladesh (city, district, postal code)
• Nationality
• Government-issued identification document number (National Identity Card, passport, or equivalent)

3.2 Contact Data

• Email address
• Mobile phone number (used for account verification and security alerts)

3.3 Financial Data

• Mobile financial service account identifiers (e.g., bKash, Nagad, Rocket, Upay account numbers — registered in the player's own name)
• Bank account details where bank transfer is used (account number, bank name)
• Transaction history including deposit amounts, withdrawal amounts, and timestamps — all denominated in Bangladeshi Taka (৳)

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited and features used within the Platform
• Betting and gaming activity logs (games played, stakes placed, outcomes)

3.5 Communications Data

• Records of communications between you and apk27 customer support, including live chat transcripts and email correspondence
• Survey responses and feedback submitted voluntarily

apk27 collects personal data through the following means:

• Direct collection: Information you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including data gathered via cookies, web beacons, server logs, and similar technologies.
• Third-party sources: Identity verification data received from KYC service providers; transaction confirmation data received from payment processors such as bKash, Nagad, Rocket, and Upay; fraud-prevention signals from security partners.

apk27 does not purchase or acquire personal data from consumer data brokers or social media platforms for the purpose of targeting players.

apk27 processes your personal data on one or more of the following legal bases:

apk27 uses the personal data we collect for the following purposes:

• To create, verify, and manage your apk27 player account, including processing your identity documents during KYC verification.
• To process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, whether bKash, Nagad, Rocket, Upay, or a supported bank.
• To settle sports betting markets (including cricket BPL, IPL, T20 World Cup, and other events) and casino game outcomes accurately and in a timely manner.
• To enforce responsible gaming commitments, including monitoring for indicators of problem gambling and applying player-requested deposit limits or self-exclusion settings.
• To detect, investigate, and prevent fraud, collusion, multi-accounting, money laundering, and other prohibited activities as defined in the apk27 Terms & Conditions.
• To send you transactional communications such as deposit confirmations, withdrawal status updates, security alerts, and account notifications.
• To send you promotional communications about bonuses, new game releases, and seasonal offers — only where you have given consent for such communications.
• To analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the apk27 Platform.
• To comply with applicable legal and regulatory obligations, including financial record-keeping requirements and responses to lawful authority requests.

apk27 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We may disclose your personal data to the following categories of third party only where necessary and proportionate:

• Payment processors: bKash, Nagad, Rocket, Upay, and partnered banks (BRAC Bank, Dutch-Bangla Bank, City Bank) receive the minimum personal data necessary to authenticate and process your financial transactions.
• KYC and identity verification providers: Third-party identity verification services receive your submitted identity documents solely for the purpose of verifying your age and identity in compliance with our KYC obligations.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token necessary to deliver their game content within the apk27 Platform. These providers do not receive your name, address, or payment details.
• Fraud prevention and security partners: Anti-fraud and cybersecurity service providers may receive technical data (IP address, device fingerprint, behavioural data) to identify and block suspicious activity on the Platform.
• Legal and regulatory authorities: apk27 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other government authorities where required to do so by applicable law, court order, or regulatory direction.
• Professional advisers: Legal, audit, and financial advisers engaged by apk27 may access personal data as strictly necessary for the professional service being provided, subject to confidentiality obligations.

Any third party receiving personal data from apk27 is contractually required to process that data only for the specified purpose, to apply appropriate security measures, and to comply with applicable data-protection standards.

The apk27 Platform and some of its service providers operate infrastructure located outside Bangladesh. As a result, your personal data may be transferred to and processed in countries other than Bangladesh. Where such transfers occur, apk27 takes steps to ensure that your data receives an equivalent level of protection to that which it would receive if processed within Bangladesh, including by entering into appropriate data-transfer agreements with receiving parties.

apk27 does not transfer personal data to jurisdictions that lack adequate data-protection frameworks without first implementing appropriate contractual safeguards. If you have questions about the specific safeguards applied to international transfers of your data, please contact the apk27 support team.

The security measures applied by apk27 include, but are not limited to, the following:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the apk27 Platform.
• Encryption at rest for stored personal data and financial records.
• Access controls that restrict employee access to personal data on a strict need-to-know basis, with role-based permissions and multi-factor authentication for internal systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous monitoring of Platform infrastructure for anomalous activity and potential security incidents.
• A documented data breach response procedure, including notification processes where a breach is likely to result in a risk to affected players.

While apk27 takes all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. apk27 cannot guarantee the absolute security of data in transit or at rest. Players are responsible for maintaining the security of their own account credentials.

apk27 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable law. The following retention periods apply as a general guide:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

apk27 uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the Platform to recognise your device on subsequent visits and to remember your preferences and session state.

11.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the Platform to function. These include session management cookies that keep you logged in during your visit and security cookies that help detect fraudulent activity. These cookies cannot be disabled without impairing core Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these cookies may affect your user experience.
• Analytics cookies: Used to collect anonymised, aggregated data about how players navigate and use the Platform. This data helps apk27 identify usability issues and improve the overall player experience. No individually identifiable data is retained in analytics reports.
• Security and fraud-prevention cookies: Used to detect and prevent fraudulent activity, multi-accounting, and automated bot access to the Platform.

11.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to receive a notification when a new cookie is set. Please be aware that blocking strictly necessary cookies will prevent you from logging into your apk27 account and using core Platform features.

apk27 does not use third-party advertising or retargeting cookies. No cookie data collected on the apk27 Platform is sold or provided to advertising networks.

As a player whose personal data is processed by apk27, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data apk27 holds about you. We will respond to verified access requests within 5 business days.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. Where the data relates to your registered account details, you may be able to update it directly within your account settings.
• Right to erasure: You may request that apk27 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligation to retain certain data for the periods specified in Section 10 of this policy.
• Right to restriction of processing: You may ask apk27 to restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To opt out of marketing communications, update your preferences in your account settings or contact support.
• Right to object: You may object to processing of your personal data where apk27 relies on legitimate interests as the legal basis, including profiling carried out on that basis. apk27 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, please contact the apk27 support team via live chat inside your account dashboard. We may need to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised party.

If apk27 becomes aware that personal data has been submitted by an individual who is under 21 years of age, that data will be deleted promptly and the associated account will be closed immediately. If you have reason to believe that a minor has registered an account on the apk27 Platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

apk27 encourages parents and guardians in Bangladesh to make use of parental control software tools to prevent minors from accessing online gambling platforms.

The apk27 Platform may contain links to third-party websites or services, such as game provider pages or payment partner information pages. This Privacy Policy applies solely to data collected by apk27 through the apk27 Platform. apk27 has no control over the privacy practices or content of any third-party website and accepts no responsibility or liability for those websites' privacy policies or practices.

We recommend that you review the privacy policy of any third-party website you visit before submitting personal data to that website.

apk27 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Where a material change is made to this policy, apk27 will notify registered players via the email address on file or via a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. We recommend that players review this policy periodically to remain informed of how apk27 handles their personal data. Continued use of the Platform following the effective date of a revised policy constitutes acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way apk27 processes your personal data, please contact our support team using the details below. The support email address is provided as plain text only — it is not a clickable link:

This Privacy Policy was last reviewed and updated in January 2026. apk27 is committed to handling your personal data with honesty, transparency, and care.