bk0k Privacy Policy — How We Handle Your Personal Data

1. Introduction

bk0k is an online betting and casino platform built specifically for players in Bangladesh. We are committed to operating transparently and responsibly — and that commitment extends fully to the way we handle your personal information. Privacy is not an afterthought at bk0k; it is embedded into our platform architecture, our operational procedures, and our relationships with every third-party service provider we engage.

This Privacy Policy sets out in plain, accessible English what personal data we collect from you, the lawful reasons for collecting it, how long we retain it, who we may share it with, and the rights you are entitled to exercise over your own information at any point during or after your relationship with bk0k.

We process personal data in accordance with accepted data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. If you have any questions about this policy at any point, our 24/7 English support team is available via live chat on the Platform, or you may contact us directly at [email protected].

2. Data We Collect

bk0k collects personal data only where there is a clear and legitimate purpose for doing so. The categories of personal data we may collect and hold about you are set out below.

2.1 Registration and Identity Data

When you create a bk0k account, we collect the information you provide during the registration process. This includes:

• Full legal name (as it appears on your government-issued identification).
• Date of birth (to verify that you meet the minimum age requirement of 21 years).
• Residential address, including city and postal code.
• Mobile phone number (used for account verification and security alerts).
• Email address (used for account communications, bonus notifications, and support correspondence).
• Username and encrypted password credentials.

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering obligations and to protect the integrity of our Platform, bk0k may request copies of identity documents at registration or prior to processing a withdrawal. These documents may include:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Passport (biographical data page).
• Driving licence.
• Utility bill or bank statement as proof of residential address (dated within 90 days).
• Screenshot or statement confirming ownership of the mobile wallet account used for deposits (e.g., bKash, Nagad, Rocket, Upay).

2.3 Financial and Transaction Data

We collect records of all financial transactions conducted through your bk0k account, including:

• Deposit amounts, dates, and mobile wallet account identifiers (e.g., bKash number).
• Withdrawal requests, amounts, processing dates, and destination account details.
• Bonus credits applied, wagering progress, and bonus settlement records.
• Account balance history.

bk0k does not store full card numbers. All payment processing is handled by regulated third-party payment providers. We retain only the data necessary to maintain accurate account records and comply with financial compliance requirements.

2.4 Activity and Usage Data

As you use the bk0k Platform, we automatically collect technical usage data including:

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Pages visited on the Platform, session duration, and navigation paths.
• Game history: games played, wagers placed, results, and timestamps.
• Login timestamps and logout events.
• Responsible gaming tool usage (e.g., deposit limit activations, self-exclusion requests).

2.5 Communications Data

If you contact bk0k via live chat, email, or any other support channel, we retain a record of those communications. This includes chat transcripts, email threads, complaint submissions, and any supporting documentation you provide. These records are used for quality assurance, dispute resolution, and to ensure continuity of service.

3. How We Collect Your Data

bk0k collects personal data through the following channels:

• Directly from you — through the account registration form, KYC verification upload, deposit/withdrawal forms, support interactions, and any communications you initiate with bk0k.
• Automatically — via cookies, server logs, and analytics tools that capture technical usage data as you navigate the Platform. See Section 7 for full details on cookie use.
• From third-party service providers — including identity verification services, payment processors (bKash, Nagad, Rocket, Upay), and fraud prevention partners, who may return data to us as part of the verification and transaction process.

4. How We Use Your Personal Data

bk0k uses the personal data we collect for specific, defined purposes only. We do not use your data for any purpose incompatible with the reason it was originally collected. The primary purposes for which we process personal data are:

Purpose	Data Used
Account creation and authentication	Name, email, phone number, password credentials
Age and identity verification (KYC)	Date of birth, NID / passport, address documents
Processing deposits and withdrawals	Mobile wallet identifiers, transaction amounts, account balance
Fraud prevention and security monitoring	IP address, login history, device data, transaction patterns
Customer support and complaint resolution	Communications data, account history, transaction records
Responsible gaming compliance	Betting history, session data, deposit limits, self-exclusion status
Regulatory and legal compliance	Identity data, financial records, KYC documents
Platform improvement and analytics	Anonymised usage data, session paths, feature engagement
Marketing communications (where consent given)	Email address, communication preferences

5. Legal Basis for Processing

bk0k processes your personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contractual necessity — processing required to perform the contract between you and bk0k (i.e., to operate your account, process transactions, and deliver gaming services).
• Legal obligation — processing required to comply with applicable legal requirements, including anti-money laundering regulations, age verification obligations, and financial record-keeping requirements.
• Legitimate interests — processing necessary for bk0k's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, Platform security, and service improvement.
• Consent — where you have given explicit, informed consent for a specific processing activity, such as receiving marketing communications by email. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

bk0k does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We treat your data with strict confidentiality. We may, however, share specific personal data with the following categories of third-party recipients where strictly necessary to deliver our services or comply with legal obligations:

6.1 Payment Service Providers

To process your deposits and withdrawals, bk0k shares necessary transaction data with mobile wallet and payment providers including bKash, Nagad, Rocket, and Upay. The data shared is limited to what is required to authenticate and complete the specific transaction. These providers operate under their own privacy policies and are regulated financial service providers in Bangladesh.

6.2 Identity Verification Partners

bk0k works with regulated KYC and identity verification service providers to confirm Player eligibility. Where your identity documents are submitted for verification, they may be processed by these providers' secure systems. Document data is not retained by third-party KYC providers beyond the period necessary to complete the verification check.

6.3 Fraud Prevention and Security Services

bk0k uses third-party fraud detection and cybersecurity services to protect the integrity of the Platform and the safety of Player accounts. Technical data including IP addresses, device fingerprints, and behavioural patterns may be processed by these services to identify and prevent fraudulent activity.

6.4 Technology and Hosting Providers

The bk0k Platform is hosted on secure cloud infrastructure provided by third-party technology partners. These providers process data strictly on bk0k's instructions and are contractually bound to maintain confidentiality and implement appropriate security measures.

6.5 Legal and Regulatory Disclosure

bk0k may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law or in response to a valid legal order. bk0k will not disclose more data than is strictly required by such an order, and will endeavour to inform you of any such disclosure where legally permitted to do so.

7. Cookies and Tracking Technologies

bk0k uses cookies and similar technologies (including local storage and session storage) on the Platform. Cookies are small text files placed on your device that help us recognise you on return visits, maintain your session, and understand how players use our Platform.

7.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Required for core Platform functions: session authentication, account security, and navigation. Cannot be disabled without breaking Platform functionality.	Session / up to 24 hours
Functional	Remember your preferences such as language settings, preferred game view, and responsible gaming tool settings.	Up to 30 days
Analytics	Collect anonymised data on how players navigate the Platform, which features are used most, and where technical errors occur. Used solely to improve the Platform experience.	Up to 12 months

bk0k does not use advertising or tracking cookies to serve personalised advertising on third-party websites. We do not share cookie data with advertising networks.

7.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive warnings before cookies are stored. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

8. Data Retention

bk0k retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account registration and KYC data: Retained for the duration of your account plus a minimum of five (5) years following permanent account closure, to satisfy financial compliance and anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping obligations.
• Support communications: Retained for two (2) years from the date of the interaction, or longer if the communication relates to an unresolved dispute.
• Marketing consent records: Retained for the duration of your consent plus one (1) year following withdrawal, to maintain an auditable record of consent history.
• Usage and activity data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised for aggregated analytics purposes with no further retention limit.

When data is no longer required and no legal retention obligation applies, bk0k securely deletes or anonymises it using industry-standard data destruction procedures.

9. Data Security

bk0k takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure. Key security measures include:

• SSL/TLS encryption on all data transmitted between your device and the bk0k Platform.
• AES-256 encryption for personal data stored on bk0k servers.
• Role-based access controls ensuring that staff members can only access personal data relevant to their specific operational role.
• Two-factor authentication available for Player accounts to add an additional layer of login security.
• Regular security audits and penetration testing of the Platform infrastructure.
• Incident response procedures to detect, contain, and respond to any personal data breach in a timely and structured manner.

While bk0k implements robust security measures, no internet-based system can guarantee absolute security. You also have a role to play in keeping your account safe — use a strong, unique password, do not share your credentials with others, and contact bk0k support immediately if you suspect your account has been compromised.

10. Your Privacy Rights

As a Player on the bk0k Platform, you are entitled to exercise the following rights in respect of your personal data. To exercise any of these rights, please contact bk0k support via live chat or email [email protected]. We aim to respond to all privacy rights requests within thirty (30) calendar days of receipt.

• Right of Access: You have the right to request confirmation of whether bk0k holds personal data about you and, if so, to receive a copy of that data together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Account details (name, email, address) can also be updated directly through your Account profile settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to legal retention obligations — bk0k cannot delete transaction records that must be retained for regulatory compliance.
• Right to Restrict Processing: You may request that bk0k restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while a legitimate interest objection is being assessed.
• Right to Data Portability: You have the right to receive personal data you have provided to bk0k in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: Where bk0k processes your personal data on the basis of legitimate interests, you have the right to object to that processing. bk0k will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11. Marketing Communications

bk0k may send you promotional communications including bonus offers, seasonal promotions (such as Eid, Pohela Boishakh, or Bangladesh Victory Day specials), and Platform updates by email or SMS, but only where you have given explicit consent to receive such communications during or after the registration process.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included at the bottom of any marketing email from bk0k.
• Updating your communication preferences in your bk0k Account dashboard.
• Contacting bk0k support via live chat or at [email protected] and requesting removal from the marketing list.

Opting out of marketing communications does not affect the delivery of transactional account communications such as deposit confirmations, withdrawal notifications, account security alerts, or important Platform notices. These communications are sent as a necessary part of the service and cannot be disabled while your account remains active.

12. Children's Privacy

The bk0k Platform is strictly intended for adults aged 21 years and above. bk0k does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. If bk0k discovers or is informed that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated Account will be permanently closed, with all balances forfeited.

If you are a parent or guardian and believe that a minor may have created a bk0k account using your or their own personal details, please contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

13. Changes to This Privacy Policy

bk0k reserves the right to update or amend this Privacy Policy at any time. The effective date displayed at the top of this document will be updated to reflect the date on which any revised version enters into force.

Where changes are material — meaning they substantially affect how your personal data is processed or the rights available to you — bk0k will provide advance notice via the email address registered to your Account and/or by displaying a prominent notice on the Platform prior to the change taking effect. For non-material changes (such as typographical corrections or clarifications that do not alter the substantive content of the policy), the revised policy will be published with an updated effective date without prior notification.

We encourage you to review this Privacy Policy periodically. Continued use of the bk0k Platform following the effective date of a revised policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bk0k handles your personal data, please reach out to our team using the contact details below. All privacy-related enquiries are handled in English and are treated with strict confidentiality.

• Live Chat: Available 24/7 directly on the bk0k Platform. Average first response under 2 minutes.
• Email: [email protected] — average response time under 4 hours.
• Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).