bkok Privacy Policy

1 Introduction

bkok ("we", "us", "our") operates the online betting and casino platform accessible at bkok.vu. This Privacy Policy describes how bkok collects, uses, stores, protects, and shares personal information relating to individuals ("you", "your", "the player") who visit, register on, or otherwise interact with the bkok platform.

We are committed to handling your personal data with the highest degree of care, transparency, and respect. This policy is written in plain English so that every bkok player — regardless of technical background — can understand exactly how their data is treated from the moment they first visit the site to long after their account is closed.

This Privacy Policy should be read alongside the bkok Terms & Conditions, which govern the overall relationship between you and the bkok platform. In the event of any conflict between this policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy will take precedence.

2 Personal Data We Collect

bkok collects personal data across several categories. The specific data collected depends on the nature of your interaction with the platform — for example, a visitor who does not register provides far less data than a fully verified account holder.

2.1 Registration Data

When you create a bkok account, we collect the information you provide directly, including:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification — players must be 21 or older).
• Email address associated with your account.
• Mobile phone number linked to your bKash, Nagad, Rocket, or Upay wallet.
• Chosen username and encrypted password.
• Residential address (city and district within Bangladesh).

2.2 Identity Verification Data

As part of our Know Your Customer (KYC) process, bkok may request and collect copies of the following documents:

• National ID Card (NID) or passport.
• Proof of current address (e.g., utility bill, bank statement dated within the last three months).
• Selfie photograph for biometric identity confirmation.
• Screenshot or confirmation of MFS wallet ownership where required for withdrawal processing.

2.3 Financial Transaction Data

bkok records all financial transactions processed through the platform, including:

• Deposit amounts, dates, and MFS transaction reference numbers.
• Withdrawal requests, amounts, and processing status.
• Bonus credits, wagering activity, and promotional transaction history.
• Account balance history and win/loss records.

bkok does not store full MFS wallet account numbers or PINs. Payment processing is handled by the relevant MFS provider (bKash, Nagad, Rocket, or Upay), and bkok receives only the transaction confirmation data necessary for crediting and debiting player accounts.

2.4 Technical and Usage Data

When you visit or use the bkok platform, we automatically collect certain technical data, including:

Data Type	Description	Purpose
IP Address	Your device's internet protocol address at the time of access	Fraud detection, geographic eligibility, security monitoring
Device Type	Mobile, tablet, or desktop; operating system and version	Platform optimisation, technical support
Browser Information	Browser name, version, and language settings	Compatibility and session management
Session Data	Login time, session duration, pages visited, game interactions	Responsible gaming monitoring, usage analytics
Referral Source	How you arrived at bkok (direct, search, internal link)	Platform analytics and performance measurement

2.5 Communications Data

When you contact bkok's support team via live chat or email, we retain a record of the communication, including the content of messages exchanged, timestamps, and the resolution outcome. This data is used for quality assurance, dispute resolution, and staff training purposes.

3 How We Collect Your Data

bkok collects personal data through the following channels:

• Directly from you: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your profile settings.
• Automatically through platform use: Technical and usage data collected via server logs, session tracking, and cookies as described in Section 6 of this policy.
• From payment service providers: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you process deposits or withdrawals through the bkok platform.
• From identity verification services: Where bkok uses a third-party KYC service provider to assist with document verification, data may be shared with and received from that provider for the sole purpose of completing the verification process.
• From game providers: Aggregated game session data may be received from third-party game studios integrated into the bkok platform, solely for the purpose of account balance management and dispute resolution.

4 Purpose and Legal Basis for Processing

bkok processes your personal data only where a legitimate legal basis exists for doing so. The primary purposes and their corresponding legal bases are as follows:

4.1 Account Operation and Service Delivery

Processing your registration data, managing your account balance, and delivering the betting and casino services you have requested are necessary for the performance of the contractual relationship between you and bkok. Without this processing, the platform simply cannot function for your account.

4.2 Payment Processing and Financial Management

Transaction data is processed to facilitate deposits, withdrawals, and balance adjustments — also on the basis of contractual necessity. Financial records are additionally retained to comply with anti-money-laundering (AML) obligations, which represent a legal compliance basis for processing.

4.3 Identity Verification and Fraud Prevention

KYC verification and fraud detection activities are carried out on the basis of legal obligation and legitimate interest. Age verification is mandated to prevent underage gambling. Fraud detection activities protect both bkok and its honest player community from criminal activity.

4.4 Responsible Gaming Monitoring

Session data and betting activity records are analysed to identify patterns that may indicate problem gambling behaviour. This processing is carried out in the legitimate interest of player welfare and is a core component of our responsible gaming commitments.

4.5 Customer Support and Dispute Resolution

Communications data is retained to ensure accurate and consistent resolution of player queries and disputes. This processing is carried out on the basis of both contractual necessity and legitimate interest in maintaining a fair and accountable service.

4.6 Platform Analytics and Improvement

Aggregated and anonymised usage data is analysed to understand how players interact with the bkok platform and to identify areas for improvement. This is carried out on the basis of legitimate interest and does not involve analysis of individually identifiable behaviour for commercial profiling purposes.

5 Sharing Your Personal Data

bkok does not sell, rent, or trade your personal data to any third party. Data is shared only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

5.1 Payment Service Providers

To process deposits and withdrawals, bkok shares the minimum necessary transaction data with the relevant MFS provider (bKash, Nagad, Rocket, or Upay). These providers operate under their own privacy policies and terms of service. bkok is not responsible for the data practices of MFS providers once data is transmitted to them for payment processing purposes.

5.2 Game Content Providers

Third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and wager data necessary to operate their games within the bkok platform. These studios do not receive your full personal profile and are contractually prohibited from using this data for any purpose outside of game operation.

5.3 Identity Verification Partners

Where bkok uses a third-party KYC verification service, document images and personal details provided during verification are shared with that provider under a strict data processing agreement. Verification providers are prohibited from retaining your data beyond the period required to complete the verification process.

5.4 Legal and Regulatory Disclosure

bkok may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction in response to a lawful request, court order, or legal obligation. We will notify affected players of any such disclosure to the extent permitted by law.

6 Cookies and Tracking Technologies

6.1 What Cookies bkok Uses

bkok uses a limited set of cookies and similar technologies on the platform. We categorise these as follows:

• Essential Cookies: Required for the platform to function. These cookies maintain your login session, store your language and display preferences, and enable secure payment flows. The platform cannot operate without them.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the bkok platform. This data helps us identify pages with usability issues and prioritise improvements. No individually identifiable information is stored in analytics cookies.
• Responsible Gaming Cookies: Store your session timing data locally to support session duration reminders and cool-off period features. This data does not leave your device in identifiable form.

6.2 Cookies We Do Not Use

bkok does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any other technology designed to track your behaviour across websites outside of bkok.vu. We do not participate in any third-party behavioural advertising networks.

6.3 Managing Cookies

You can control cookie storage through your browser settings. Disabling essential cookies will prevent you from logging in or using core platform features. Disabling analytics cookies will not affect your ability to use the platform but will mean that your usage patterns are excluded from our aggregated platform analytics.

7 Data Security

bkok implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and bkok servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Encryption at Rest: Personal data stored in bkok databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within bkok systems is restricted to staff members who require it to perform their job functions. Access is granted on a principle of least privilege and is logged and audited.
• Two-Factor Authentication: Internal bkok systems holding personal data require two-factor authentication for all staff access. Players are encouraged to enable two-factor authentication on their own accounts for additional protection.
• Regular Security Reviews: bkok conducts periodic internal security assessments and follows industry best practices for vulnerability management.
• Incident Response: In the event of a data security incident that affects player personal data, bkok will notify affected players within a reasonable timeframe and take all necessary remedial action.

8 Data Retention

bkok retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations.

• Active Account Data: Retained for the full duration of your account's active life and updated as your information changes.
• Financial and Transaction Records: Retained for a minimum of five years following account closure, in accordance with standard anti-money-laundering record-keeping practices.
• KYC Verification Documents: Retained for a minimum of five years after account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for three years following the resolution of the relevant query or dispute.
• Technical and Usage Logs: Retained in identifiable form for up to twelve months, after which they are anonymised for ongoing analytics purposes.
• Closed or Suspended Account Data: Where an account is closed by the player, personal data is retained for the minimum period required by law before being securely deleted or anonymised. Where an account is suspended due to suspected fraud or legal investigation, data may be retained for longer pending resolution.

When personal data is no longer required and there is no legal basis for continued retention, bkok deletes or irreversibly anonymises that data using industry-standard data destruction methods.

9 Your Data Rights

As a bkok player, you have a number of rights with respect to your personal data. bkok is committed to facilitating the exercise of these rights promptly and without undue barriers.

To exercise any of the above rights, please contact the bkok support team via live chat from your logged-in account, or send a written request to [email protected]. We will verify your identity before processing any data request and will respond within a reasonable timeframe. There is no charge for exercising your data rights.

10 Children and Minors

The bkok platform is strictly intended for adults aged 21 years and above. bkok does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

bkok employs mandatory age verification at the point of registration and at the point of first withdrawal to reduce the risk of underage access to the platform. We take this obligation extremely seriously and continuously review our age verification processes.

11 Third-Party Services and External Links

The bkok platform integrates games and services provided by third-party studios and technology providers. While bkok carefully selects its third-party partners and requires them to meet appropriate data protection standards, bkok is not responsible for the privacy practices of third-party service providers beyond the scope of data processing agreements in place between bkok and those providers.

The bkok platform does not contain links to external websites for general browsing purposes. All navigation within the bkok environment remains within the bkok.vu domain. If you access third-party services through bkok (for example, through your MFS provider's own app or portal during a payment flow), that access is governed by the third party's own privacy policy and terms of service, not this policy.

12 Amendments to This Privacy Policy

bkok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. All amendments will be published on this page with an updated effective date at the top of the document.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — bkok will make reasonable efforts to notify registered players via the email address or phone number associated with their account prior to the amendment taking effect.

Your continued use of the bkok platform following the publication of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the platform and may request account closure as described in the bkok Terms & Conditions.

13 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bkok holds about you, please contact our support team through either of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from your logged-in bkok account. Average response time is 2–5 minutes. This is the fastest way to reach us for any privacy-related matter.
• Email: [email protected] — please allow up to 4 hours for a response. For formal data subject access requests or erasure requests, email is the recommended channel as it creates a written record of your request.

When contacting us about a privacy matter, please include your registered username or email address so that we can verify your identity and locate the relevant account records. We will never ask you to provide your account password through any communication channel.