Effective date: August 2026
This policy is written in the style of ISO 27001 and ISO 27701 for the bk999 App; data protection, cookies, and user rights are clearly stated here
bk999 App Privacy Policy
Many users in Dhaka sign in quickly at night; what data is collected, where it is stored, and how it can be controlled, all clearly here
bk999 App Data Security
Even if you sign in by 11 AM, logs and sessions stay separate; TLS 1.2 or higher is used in transmission, so data is hard to read in transit
We only retain necessary data: account name, contact information, and session tokens are stored briefly to keep bk999 Login fast
Secure Communication
All requests go through encrypted channels; Dhaka users receive the same protection even on public Wi-Fi or weak mobile networks
Asset management and data retention rules
After installing the APK at night, many first look for the profile to see where data is stored inside the registered account
Using an account with bKash or Nagad keeps only the transaction reference; Rocket, Dhaka-based devices, and browser history are stored in separate categories
Retention period
Inactive logs rotate within 90 days; if a security investigation is needed, a larger portion may be kept longer, but it's controlled
Access control and bk999 Register
New users typically register in 3 steps: strong password, single-device verification, and session limits to reduce unauthorized access to the bk999 App
Dhaka, Chattogram, and Sylhet, mobile logins are more frequent, so account authorization is kept only with essential staff, and all access is logged
Role-based access
Support team operates with restricted roles, making it easier to view, modify, or delete user data
Encryption and bk999 APK
When the bk999 APK updates at night, hash verification occurs first to detect whether the file has been altered before installation
Stored data is kept in AES-256 encryption; users can end the session and clear cache, especially on shared phones
Cookie Control
Cookies come in three types: essential, analytics, and preferences; you can disable analytics cookies from the browser, but the main sign-in will continue
Operational Security and User Monitoring
In the evening, when many sessions occur together, unusual behavior is detected; to maintain 99.8% uptime, monitoring alerts, rollback, and backup routines are in operation
Official teams can detect misconfigurations; in the service layers of 15 countries, personal data is not unnecessarily spread
Log Management
Access logs store timestamps, device type, and partial IP; the full history is accessible only during investigations
Incident Management and User Rights
If any suspicious access is detected, the session is closed immediately; within 48 hours the extent of impact, time, and data involved are verified
You have the right to access, rectify, and request deletion of data; inquiries related to bKash, Nagad, or Rocket are also included in the same request
Provide Feedback
In serious incidents, a clear notice is sent to the user detailing what happened, what risks exist, and what the next steps are; written in clear language
Contact and Support
If you have questions about privacy, write to bk999 Support; Dhaka users typically receive quick responses via in-app messages or account email
You can also send requests related to your bk999 App, bk999 Login, and bk999 Register together; if needed, the data protection team will review them separately
For more information Security Policy, Terms, and Support See
Privacy, data protection, and user rights are handled together in the bk999 App