apk27 Privacy
Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal information apk27 collects when you use our platform, how we use and protect that information, who we share it with, and what rights you have over your own data. We are committed to handling your information with transparency, care, and respect.
Bank-Grade Encryption
All data transmitted between your device and apk27 is protected by 256-bit SSL/TLS encryption — the same standard used by major banks. Your personal and financial data is never transmitted in plain text.
Minimal Data Collection
apk27 collects only the personal information strictly necessary to operate your account, process payments, verify your identity, and comply with responsible gaming obligations. We do not collect unnecessary data.
No Data Selling
apk27 does not sell, rent, or trade your personal information to third-party marketers. Your data is shared only with service providers who assist in delivering the apk27 platform — and only under strict confidentiality agreements.
Your Data, Your Control
You have the right to access, correct, and request deletion of your personal data at any time. apk27 provides a straightforward process for exercising these rights via your account settings or by contacting our support team.
Transparent Cookie Use
apk27 uses cookies and similar tracking technologies solely to improve platform performance, maintain your session, and deliver a more personalised experience. We do not use third-party advertising cookies that track you across the web.
Dedicated Privacy Support
Our support team is available 24/7 to handle any privacy-related queries, data subject requests, or concerns about how your information is being handled. Reach us via Live Chat or at [email protected] at any time.
Information We Collect
apk27 collects personal information in several ways: directly from you when you register or interact with the platform, automatically through your use of the platform, and from third-party service providers involved in identity verification and payment processing.
Information You Provide Directly
When you register an account on apk27, you provide us with certain personal information that is necessary to create and operate your account. This information includes your full legal name, date of birth, residential address, email address, mobile phone number, and chosen username. You may also provide identity documents such as a National ID Card (NID) or passport as part of the KYC (Know Your Customer) verification process.
When you make a deposit or request a withdrawal, apk27 collects information about the payment method you use, including your bKash, Nagad, Rocket, or Upay mobile number, or the masked card details associated with your Visa or Mastercard. Full card numbers are never stored by apk27 — card payments are processed directly through our certified payment gateway partners using tokenisation.
When you contact apk27 customer support via Live Chat or email, we collect the content of your communications, including any personal information you voluntarily share within those messages. This information is retained to maintain a record of your support history and to improve our service quality.
Information Collected Automatically
When you access and use the apk27 platform, we automatically collect certain technical and behavioural information. This includes your IP address and approximate geographic location (city/region level), the type of device and browser you are using, your operating system and screen resolution, the pages and games you access on apk27, the time and duration of your sessions, and the sequence of actions you take during each session. This information is collected primarily through server logs, session tracking software, and cookies.
We also collect data relating to your gaming activity, including the games you play, the amounts you wager and win, the bonuses you claim and the wagering progress on those bonuses, and any self-imposed responsible gaming limits you have set. This gaming activity data is essential for account management, bonus fulfilment, responsible gaming monitoring, and fraud detection.
Information From Third Parties
apk27 may receive personal information about you from third-party identity verification providers where you have consented to such checks as part of the KYC process. We may also receive information from payment processors confirming the outcome of deposit and withdrawal transactions. In all cases, third-party data sharing with apk27 is limited to what is strictly necessary for the specific service being provided.
- Full name, date of birth, address
- Email address and mobile number
- Government-issued ID documents (KYC)
- Payment method details (tokenised)
- IP address and device information
- Session and browsing behaviour
- Gaming activity and transaction history
- Support communications
- Full card numbers (processed by gateway only)
- Social media passwords or credentials
- Data from minors under 18
- Sensitive categories (religion, politics, health) unless required by responsible gaming obligations
How We Use Your Information
apk27 uses the personal information it collects for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account Registration and Management | Name, date of birth, email, phone, address, username | Contractual necessity — required to create and maintain your account |
| Identity Verification (KYC) | ID documents, proof of address, payment method proof | Legal obligation — anti-money laundering and responsible gaming compliance |
| Processing Deposits and Withdrawals | Payment method details, transaction amounts, account balance | Contractual necessity — required to execute financial transactions |
| Bonus and Promotion Management | Gaming activity data, deposit history, wagering progress | Contractual necessity — required to administer promotional offers |
| Responsible Gaming Monitoring | Session data, gaming patterns, deposit frequency, self-exclusion status | Legal obligation and legitimate interest — player protection |
| Fraud Prevention and Security | IP address, device data, login patterns, transaction anomalies | Legitimate interest — protecting the platform and its users |
| Customer Support | Support communications, account history, transaction records | Contractual necessity — required to resolve your queries |
| Platform Improvement and Analytics | Anonymised session and behavioural data, aggregate game metrics | Legitimate interest — improving service quality |
| Service Communications | Email address, mobile number | Contractual necessity — account notifications, security alerts, KYC updates |
| Promotional Communications (opt-in only) | Email address, mobile number, gaming preferences | Consent — only where you have opted in to marketing messages |
apk27 will never use your personal information for any purpose not listed in the table above without first obtaining your explicit consent. Where we rely on legitimate interest as the basis for processing, we have assessed that our interest does not override your fundamental privacy rights. You have the right to object to processing based on legitimate interest at any time — see Section 6 for details on how to exercise your rights.
Regarding promotional communications: apk27 will only send you marketing emails or SMS messages if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw your consent to receive promotional communications at any time by adjusting your notification preferences in Account Settings or by contacting support. Withdrawing consent to marketing communications does not affect your ability to continue using apk27 or receiving essential service communications such as account security alerts and transaction confirmations.
Data Sharing and Third Parties
apk27 does not sell your personal data. We share your information only with carefully selected third-party partners who assist in operating the platform, and only to the extent necessary for each partner's specific role.
Categories of Third-Party Recipients
apk27 may share your personal information with the following categories of third-party service providers, each of whom is bound by strict data processing agreements and confidentiality obligations:
- Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process your deposit and withdrawal transactions. These providers receive only the data necessary to complete each transaction and are independently regulated financial services businesses.
- Identity Verification Providers: Third-party KYC and document verification services that assist apk27 in confirming player identities and ages. These providers process your identity documents under strict data security standards.
- Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive limited player data (typically a pseudonymous player ID and session token) necessary to load and operate their game software within the apk27 platform. They do not receive your full personal profile.
- Fraud Prevention and Security Services: Specialist providers that assist apk27 in detecting and preventing fraudulent account activity, money laundering, and irregular betting patterns. These providers process IP addresses, device fingerprints, and transaction metadata.
- Platform Analytics Providers: Services that help apk27 understand how players interact with the platform at an aggregate, anonymised level. Individual player profiles are not shared with analytics providers.
- Customer Support Software Providers: The software platform that powers apk27's Live Chat and email support system processes support ticket content and basic account reference data to enable agent responses.
Legal Disclosure
apk27 may be required to disclose your personal information to government agencies, law enforcement, or regulatory bodies where required by applicable law, court order, or where there is a reasonable belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such circumstances, apk27 will disclose only the minimum data required and will, where legally permitted, notify the affected player of the disclosure.
No Cross-Border Data Transfers
apk27 processes and stores personal data within data centres that maintain internationally recognised information security standards. Where any third-party service provider processes data outside of Bangladesh, apk27 ensures that appropriate data transfer safeguards are in place, including contractual clauses that require the recipient to protect your data to a standard equivalent to the protections described in this Privacy Policy.
- Sell your personal data to any third party
- Share your data with advertisers for targeting purposes
- Transfer your data to any entity not bound by a data processing agreement
- Disclose your identity to other players on the platform
- Use your data for any purpose not described in this policy without your consent
Every third-party provider that processes apk27 player data is required to sign a data processing agreement that specifies: the exact categories of data they may access, the permitted purposes for processing, strict security standards they must maintain, an obligation to report any data breach to apk27 within 24 hours, and a prohibition on using apk27 player data for any purpose beyond delivering their service to apk27.
Data Security and Retention
Protecting your personal information is one of apk27's highest operational priorities. We maintain a comprehensive set of technical and organisational security measures to safeguard your data against unauthorised access, loss, or misuse.
Security Measures
apk27 employs the following technical and organisational security measures to protect player data:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and apk27 servers is encrypted in transit using industry-standard SSL/TLS protocols. This prevents interception by third parties during transmission.
- Data Encryption at Rest: Sensitive personal data stored in apk27's databases — including identity documents and payment method references — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to player personal data within apk27's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and subject to regular audit.
- Two-Factor Authentication (2FA): apk27 supports 2FA for player accounts and requires it for all internal staff accounts that have access to player data.
- Regular Security Audits: apk27's platform and data infrastructure are subject to periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities.
- Incident Response Plan: apk27 maintains a documented data breach incident response plan. In the event of a confirmed breach affecting player personal data, apk27 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, including a description of the data affected and the steps being taken to address it.
Data Retention
apk27 retains your personal information for as long as your account is active and for a period thereafter as required by applicable law and our internal risk management policies. The following general retention periods apply:
- Account and identity data — retained for the duration of your account plus a minimum of 5 years after account closure, in accordance with anti-money laundering record-keeping obligations.
- Transaction records — retained for a minimum of 5 years from the date of each transaction.
- KYC documents — retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
- Support communications — retained for 2 years from the date of the last communication in each ticket thread.
- Session and analytics data — retained in anonymised, aggregated form only, for up to 2 years.
- Marketing preference records — retained for 1 year after withdrawal of consent, to demonstrate compliance.
When data is no longer required and its retention period has expired, apk27 will securely delete or anonymise that data so that it can no longer be attributed to any individual player. Players may request early deletion of their data by contacting support, subject to our legal obligation to retain certain records for the minimum periods set out above.
Your Privacy Rights
As an apk27 player, you have a set of clearly defined rights over your personal data. apk27 is committed to honouring these rights promptly and without unnecessary barriers.
Right to Access
Request a full copy of the personal data apk27 holds about you. We will provide this within 30 days of a verified request, free of charge.
Right to Rectification
Request correction of any inaccurate or incomplete personal information we hold. You can update most details directly in your Account Settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
Right to Restrict Processing
Request that apk27 pause processing of your data in certain circumstances, for example while a dispute about accuracy is being resolved.
Right to Data Portability
Request a copy of the data you provided to apk27 in a structured, machine-readable format so you can transfer it to another service provider.
Right to Object
Object to apk27 processing your data on the basis of legitimate interest, including for analytics or responsible gaming monitoring purposes.
How to Exercise Your Rights
To exercise any of the rights described above, please contact apk27 customer support via Live Chat (available 24/7) or by sending an email to [email protected] with the subject line "Privacy Rights Request". To protect your privacy, apk27 will verify your identity before processing any data subject request. Verification typically requires you to confirm your registered email address and provide one piece of identifying information linked to your account.
apk27 will acknowledge your request within 5 business days and will fulfil verified requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case apk27 will notify you of the extension and the reason for it before the initial 30-day period expires.
Where apk27 is unable to fulfil a data rights request — for example, because fulfilling it would conflict with a legal obligation to retain certain data — we will explain the reason in writing. Exercising your data rights will not affect your ability to continue using apk27 or result in any negative treatment of your account.
Children's Privacy and Age Verification
apk27 is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of 18, and we maintain robust age verification processes to prevent underage access.
apk27 operates a zero-tolerance policy on underage gambling. All prospective players are required to confirm that they are aged 18 or above during the registration process, and all accounts are subject to KYC age verification before withdrawals are permitted and as part of routine account review. If apk27 discovers or has reasonable grounds to believe that a registered player is under the age of 18, the following actions will be taken immediately:
- The account will be permanently closed.
- All gaming activity conducted while underage will be voided and any associated winnings forfeited.
- Any real-money deposits made to the account will be returned to the original payment method after a review of the account's gaming and transaction history.
- Where applicable, the matter will be referred to appropriate safeguarding authorities.
apk27 does not intentionally collect any personal data from individuals under the age of 18. If a parent or guardian believes that their child has registered an account on apk27 or has otherwise provided personal information to apk27, they should contact our support team immediately via Live Chat or at [email protected]. apk27 will investigate the matter as a priority and take all necessary steps to delete the data and close the account.
apk27 also strongly recommends that parents and guardians who share devices with minors make use of third-party parental control software to restrict access to online gambling platforms. Many such tools are available free of charge and can be configured to block access to gambling-related websites at the network or device level. apk27 supports the use of these tools as part of its broader commitment to responsible gaming and child protection.
apk27 is strictly for adults aged 18 and above. If you are under 18, you must not register an account, deposit funds, or place any bets on this platform. Underage gambling is illegal and harmful. If you are struggling with gambling as a young person, please speak with a trusted adult or contact a relevant support organisation in Bangladesh.
If you share a device with a minor and are concerned about their potential access to gambling content, we recommend installing parental control software on your device and ensuring your apk27 account is protected with a strong password and two-factor authentication. Never share your account login details with anyone.
Updates to This Privacy Policy
apk27 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. This section explains how we will notify you of any changes.
apk27 reserves the right to amend this Privacy Policy at any time. When we make changes that are material — meaning changes that significantly affect how we collect, use, or share your personal data, or that affect your privacy rights — we will notify you in advance by sending an email to your registered email address and by displaying a prominent notice on the apk27 platform when you next log in. The revised Privacy Policy will take effect 7 days after the notification date, giving you time to review the changes before they apply to your account.
For minor or non-material changes — such as clarifications of existing practices, corrections of typographical errors, or updates to contact details — apk27 may update the Privacy Policy without individual notification. In all cases, the "Last Reviewed" date displayed at the top of this page will reflect the date of the most recent update, and the full version history of this Privacy Policy is available on request from our support team.
Your continued use of the apk27 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account before the effective date by contacting apk27 customer support. Upon account closure, apk27 will process any remaining balance in your account in accordance with our standard withdrawal procedures.
apk27 encourages all players to review this Privacy Policy periodically to stay informed about how we are protecting their personal information. If you have any questions about this Privacy Policy or about any update to it, please do not hesitate to contact our support team via Live Chat or at [email protected]. Our team is available 24 hours a day, 7 days a week, and aims to respond to all privacy-related enquiries within 2 business hours during Bangladesh Standard Time (UTC+6) business hours.
Ready to Play at apk27?
Now that you have read our Privacy Policy, you can explore over 3,200 casino games and live cricket betting — all secured with bank-grade SSL encryption and instant BDT deposits via bKash, Nagad, and Rocket. For players aged 18 and above only.