bdok Privacy Policy

1 Introduction

bdok is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy sets out in clear, plain English how bdok collects, uses, stores, shares, and protects your personal information when you access or use the bdok website and associated services at bdok.vu.

This policy is written to meet the standards of internationally recognised data protection frameworks. We believe that privacy is a fundamental right, and we have designed our data practices to reflect that belief. We collect only what we need, protect what we hold, and respect your right to understand and control how your information is used.

This Privacy Policy should be read alongside the bdok Terms & Conditions and Responsible Gaming Policy, both of which are available on the bdok platform. Together, these documents form the complete framework governing your relationship with bdok as a player.

2 Data Controller

For the purposes of this Privacy Policy, bdok acts as the data controller in respect of the personal data of registered players and website visitors. As data controller, bdok determines the purposes and means by which your personal data is processed.

If you have any questions about how bdok processes your personal data, or if you wish to exercise any of your data rights described in Section 11 of this policy, you may contact the bdok Data Protection team directly at: [email protected] (plain text — not a clickable link).

3 Information We Collect

bdok collects several categories of personal data in the course of providing its services. The categories we collect, and examples of the specific data points within each category, are set out below.

3.1 Identity & Registration Data

When you create a bdok account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (used to verify you meet the minimum age requirement of 21 years)
• Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Email address
• Mobile telephone number
• Username and encrypted password
• Preferred language and currency (BDT, ৳)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to verify that players meet the 21+ age requirement, bdok may request the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport (for players providing international identification)
• Driving licence
• Utility bill or bank statement (as proof of residential address, issued within the last 3 months)
• Selfie photograph for live identity verification

KYC documents are processed and stored securely. They are shared with our identity verification partners solely for the purpose of completing the verification process and are not used for any other commercial purpose.

3.3 Financial & Transaction Data

When you make deposits or request withdrawals via services such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard, bdok collects and retains:

• Payment method type and identifier (e.g., last four digits of a card, mobile wallet number)
• Deposit and withdrawal amounts in BDT (৳)
• Transaction timestamps and reference numbers
• Account balance history
• Wagering history and game session data

bdok does not store full card numbers, CVV codes, or complete mobile banking PINs. Payment card data is handled by PCI-DSS compliant payment processors.

3.4 Technical & Usage Data

When you access the bdok platform, our servers and analytics systems automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Pages visited, features used, and session duration
• Referring URL (the page you visited before arriving at bdok.vu)
• Error logs and crash reports
• Game session data including stakes, outcomes, and session timing

3.5 Communications Data

When you contact the bdok support team via live chat or email, we retain a record of that communication, including the content of messages, timestamps, and the resolution outcome. This data is used for quality assurance, dispute resolution, and to improve our support services.

3.6 Responsible Gaming Data

If you voluntarily use any of bdok's responsible gaming tools — such as deposit limits, session time reminders, cooling-off periods, or self-exclusion — the settings and timestamps associated with those elections are recorded. This data is used solely to enforce the restrictions you have requested and to monitor for signs of problematic gambling behaviour where our responsible gaming obligations require it.

4 How We Collect Your Data

bdok collects personal data through the following mechanisms:

• Directly from you: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automatically: Technical and usage data collected by our servers, analytics tools, and cookies when you access the bdok website or platform (see Section 8 for full cookie details).
• From third parties: Identity verification data returned by our KYC partners after processing the documents you submitted; fraud-risk signals from payment processors; and in limited circumstances, publicly available information used for AML screening purposes.

5 Legal Basis for Processing

bdok processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

Where bdok relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to confirm that our interests are not overridden by your rights and freedoms. You may request a copy of that assessment by contacting our data team at [email protected].

6 How We Use Your Information

bdok uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your bdok player account, processing your login credentials securely, and providing access to all platform features for which you are eligible.
• Service delivery: Enabling you to place bets, access live casino games (including live dealer tables from studios such as Evolution Gaming, Pragmatic Play Live, and Ezugi), play slots and other RNG games, and use all features of the bdok platform.
• Payment processing: Processing deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), reconciling your account balance, and issuing receipts and transaction histories.
• Identity verification: Verifying that you are aged 21 or above and confirming your identity to satisfy our KYC obligations, including through third-party identity verification services.
• Fraud and AML compliance: Monitoring account and transaction activity for signs of fraud, money laundering, bonus abuse, or any other prohibited activity defined in our Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns where required by our responsible gaming obligations; enforcing deposit limits, cooling-off periods, and self-exclusion elections; and proactively reaching out to players who show indicators of problematic gambling behaviour.
• Customer support: Responding to your support queries via live chat and email, resolving disputes, and maintaining a record of our interactions to ensure consistent service quality.
• Platform improvement: Analysing aggregated usage data to identify and resolve technical issues, improve user experience, and develop new platform features.
• Promotional communications: Sending you information about bdok bonuses, seasonal promotions (such as those tied to Eid, Pohela Boishakh, or major cricket tournaments including BPL and T20 World Cup), and platform updates — where you have provided consent or where we have a legitimate interest in doing so. You may opt out of promotional communications at any time.
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from competent authorities.

7 Sharing Your Information

bdok does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data with third parties only in the following specific circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, bdok shares the minimum necessary transaction data with our payment processing partners, including mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking institutions (Dutch-Bangla Bank, City Bank, BRAC Bank, and card scheme processors for Visa and Mastercard). These partners are contractually obligated to process data only for payment purposes and in accordance with applicable data protection standards.

7.2 Identity Verification Partners

To complete KYC checks, bdok shares the identity documents and personal data you submit with specialist third-party identity verification service providers. These providers process your data solely for the purpose of confirming your identity and age, and are bound by strict data processing agreements.

7.3 Game Providers

To enable access to live casino and RNG game content, bdok shares session tokens and limited technical identifiers with third-party game studios and software providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi). These providers do not receive your full personal profile; they receive only the technical session data necessary to initialise and operate the game within the bdok platform environment.

7.4 Fraud Prevention & Security Services

bdok works with third-party fraud detection and cyber-security service providers to protect the platform and its players from fraudulent activity, account takeovers, and other security threats. These providers may receive technical data including IP addresses, device fingerprints, and transaction patterns for the purpose of risk scoring and fraud alerting.

7.5 Legal & Regulatory Authorities

bdok will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where we have a good-faith belief that such disclosure is necessary to prevent or investigate fraud, money laundering, or any other criminal activity connected to the bdok platform.

7.6 Business Transfers

In the event that bdok undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to equivalent privacy protections, and registered players will be notified in advance where practicably possible.

8 Cookies & Tracking Technologies

bdok uses cookies — small text files stored on your device — and similar tracking technologies to operate the platform effectively, remember your preferences, and understand how players use our services. The cookies we deploy fall into the following categories:

bdok does not use advertising-network cookies or cross-site tracking technologies that build profiles of your browsing behaviour across third-party websites. You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the core functionality of the bdok platform, including your ability to log in and place bets.

9 Data Security

bdok applies a layered approach to data security, combining technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bdok platform.
• Encryption at rest for sensitive personal data and payment information stored in our databases.
• Access controls restricting access to personal data to authorised bdok personnel and systems on a strict need-to-know basis, enforced via role-based permissions and multi-factor authentication for internal systems.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Intrusion detection systems and 24/7 security monitoring of our platform infrastructure.
• Secure data deletion processes for data that has reached the end of its retention period.

While bdok takes all reasonable and practicable steps to protect your personal data, no online platform can guarantee absolute security against all potential threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdok will notify affected players without undue delay in accordance with applicable legal obligations.

Players are also responsible for maintaining the security of their own bdok account. We strongly encourage you to use a strong, unique password and to enable two-factor authentication (2FA) in your account security settings.

10 Data Retention

bdok retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Where anonymisation is not technically feasible, data is deleted from live systems and any backup media within bdok's standard backup cycle.

11 Your Rights

As a data subject, you hold a number of rights in relation to the personal data that bdok holds about you. These rights are described below. To exercise any of them, please contact the bdok Data Protection team at [email protected]. bdok will respond to all data rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data bdok holds about you, together with information about how it is being used. This is commonly called a Subject Access Request (SAR).
• Right to Rectification: If any personal data bdok holds about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that bdok delete your personal data. This right is subject to overriding legal obligations — for example, we are required to retain transaction records for a minimum of 7 years for financial compliance purposes and cannot erase them within that period even upon request.
• Right to Restriction of Processing: You may request that bdok restrict the processing of your personal data in certain circumstances, for example while a rectification request is being investigated.
• Right to Data Portability: Where bdok processes your data by automated means on the basis of your consent or a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to bdok processing your personal data on the basis of legitimate interests, including profiling for direct marketing purposes. Where you object to marketing processing, bdok will cease that processing immediately.
• Right to Withdraw Consent: Where bdok relies on your consent as the legal basis for a particular processing activity (such as promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Please note that certain rights are subject to exemptions and may not apply in all circumstances. bdok will always explain clearly if a right cannot be fulfilled in a specific case and the reason why.

12 Children & Minors

The bdok platform is strictly for adults aged 21 years and above. 21+ bdok does not knowingly collect, process, or retain any personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account or attempt to use any feature of the bdok platform.

If bdok becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all funds held will be frozen pending investigation, and the personal data of the minor will be securely deleted from our systems without undue delay, subject only to any overriding legal obligations that require its retention for a defined period.

Parents and guardians who believe that a minor in their care may have registered a bdok account are encouraged to contact our support team at [email protected] immediately. bdok will treat all such reports as a priority and act swiftly to investigate and remediate.

13 International Data Transfers

bdok operates as an offshore gaming platform. This means that your personal data may be transferred to, stored in, or processed in jurisdictions outside Bangladesh. In particular, our servers, third-party payment processors, identity verification partners, and game studio providers may be located in countries other than Bangladesh.

Where personal data is transferred outside your home jurisdiction, bdok takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within your home jurisdiction. These safeguards may include:

• Standard contractual clauses incorporated into data processing agreements with third-party service providers.
• Transfers to countries recognised as providing an adequate level of data protection by relevant regulatory authorities.
• Binding corporate rules or equivalent data transfer mechanisms where applicable.

By using the bdok platform, you acknowledge that your personal data may be transferred internationally in the manner described in this section. If you would like further information about the specific safeguards in place for any particular transfer, please contact our data team at [email protected].

14 Changes to This Policy

bdok reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The updated policy will be published on this page with a revised "Last Updated" date at the top.

Where changes to this policy are material — meaning they significantly affect your rights or the way we process your personal data — bdok will notify registered players via the email address associated with their account, with reasonable advance notice before the changes take effect.

Your continued use of the bdok platform following publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you disagree with any revision to this policy, you should discontinue use of the bdok platform and request account closure in accordance with the Terms & Conditions.

15 Contact & Data Requests

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data bdok holds about you, please contact the bdok Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: bdok aims to acknowledge all data protection enquiries within 2 business days and to provide a full response within 30 calendar days of receipt.
• Subject Line: When emailing regarding a data rights request, please include "Data Rights Request" in the subject line of your email to ensure prompt routing to the correct team.

bdok support is available in English, 24 hours a day, 7 days a week, including Bangladesh public holidays. For urgent matters relating to potential data breaches or unauthorised access to your account, please mark your email as urgent and include "URGENT — Security" in the subject line. Such messages are escalated to our security team immediately upon receipt.