Privacy Policy

1. Introduction

bdoko ("bdoko", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("Player", "User", "you") who access and use the bdoko platform at bdoko.org. This Privacy Policy describes the categories of personal data we collect, the purposes for which we use it, the legal bases on which we rely, and the rights you hold as a data subject.

This Privacy Policy forms part of the bdoko Terms & Conditions. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must not use the Platform.

2. Information We Collect

bdoko collects personal data through several channels: directly from you when you register or interact with the Platform, automatically as you use our services, and from third-party verification and payment partners. The categories of personal data we collect are described below.

Registration & Identity Data

• Full name, date of birth and nationality — collected at registration and used for account creation and age verification (21+ compliance).
• Bangladesh mobile number and email address — used as your account login identifier and for account notifications and support communications.
• KYC identity documents — National Identity Card (NID), passport or driver's licence images, collected and processed solely for identity and age verification as required by our anti-money-laundering obligations.
• Residential address (city and district in Bangladesh) — collected where required for regulatory compliance and fraud prevention.

Financial & Transaction Data

• Deposit and withdrawal transaction records — including amounts, timestamps, payment method type (e.g., bKash, Nagad, Rocket, bank transfer) and transaction reference numbers. Account numbers are never stored in full — only masked identifiers are retained.
• Betting and gaming history — game titles played, bet amounts, outcomes, bonus usage and session durations. This data is used for responsible gaming monitoring and account support.
• Bonus and promotion activity — which offers you have claimed, wagering progress, and whether eligibility criteria for each promotion have been met.
• Currency and account balance information — current available balance, bonus balance, and pending withdrawal amounts in BDT.

Technical & Usage Data

• Device information — device type, operating system version, browser type and version, screen resolution, and device language settings. This data helps us optimise the Platform for devices commonly used by players in Bangladesh (primarily Android and iOS mobile devices).
• IP address and approximate geolocation — used to detect access from prohibited jurisdictions, prevent fraud, and comply with anti-money-laundering requirements. We collect city-level location only; we do not collect GPS coordinates.
• Session logs and activity timestamps — pages visited, features accessed, navigation paths and error logs. Stored for security auditing and Platform performance improvement. Retained in anonymised aggregate form after 12 months.

3. How We Use Your Information

bdoko uses your personal data strictly for the following purposes. We do not use your personal data for any purpose that is incompatible with those listed below without obtaining your specific consent in advance.

• Account creation, management and authentication — verifying your identity, maintaining your player account, processing your login sessions, and enabling account recovery where requested.
• Processing deposits, withdrawals and financial transactions — ensuring payments are credited and withdrawn accurately via your chosen Bangladesh payment method (bKash, Nagad, Rocket, Upay, or bank transfer).
• KYC and age verification — confirming that all players meet the 21+ age requirement and providing the identity verification records required by our responsible gaming and anti-money-laundering obligations.
• Fraud detection and security — monitoring account activity to detect and investigate suspicious transactions, unauthorised access attempts, multi-accounting, bonus abuse, money laundering and other prohibited conduct.
• Responsible gaming compliance — using betting history, session data and account activity to monitor for patterns consistent with problem gambling and to enforce deposit limits, cooling-off periods or self-exclusions where requested or required.
• Platform improvement and analytics — using aggregated, anonymised usage data to understand how players interact with the Platform, identify performance bottlenecks, and improve the user experience for players across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur and Mymensingh.
• Marketing communications — sending you promotional offers, bonus notifications and Platform news by SMS or email, but only where you have explicitly opted in to receive such communications. You may opt out at any time by contacting [email protected].

4. Legal Basis for Processing

bdoko processes personal data on the following legal bases. Each processing activity is linked to at least one of these bases, and we rely on the most appropriate basis for each specific purpose.

5. Sharing Your Information

bdoko does not sell, rent or trade your personal data. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary for each purpose.

• Payment processors and mobile wallet providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Bangladesh bank partners) — to process your deposit and withdrawal transactions. These processors receive only the data required to complete the specific transaction and are contractually bound to use it for no other purpose.
• Identity verification and KYC service providers — specialised third-party services that assist bdoko in verifying identity documents and checking players against applicable watchlists. These providers are subject to strict confidentiality obligations and data processing agreements.
• Game software providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt and others) — these providers operate the game engines and live dealer studios that power bdoko's gaming content. They receive pseudonymised session and bet data necessary to run the games and calculate outcomes. They do not receive your full identity or payment details.
• Law enforcement and regulatory authorities — bdoko will disclose personal data to government bodies, law enforcement agencies or regulators where required to do so by applicable law, court order or binding regulatory direction. We will notify affected players of any such disclosure where permitted by law.
• Business successors — in the event of a merger, acquisition, restructuring or sale of all or part of bdoko's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy.

6. Cookies & Tracking Technologies

bdoko uses cookies and similar tracking technologies on its Platform to enable essential functionality, improve performance, and — where you have consented — to deliver relevant promotional content. The categories of cookies we use are described below.

Cookie Categories

• Essential cookies — required for the Platform to function. These enable login sessions, maintain account authentication state, remember your language preference, and protect against cross-site request forgery. They cannot be disabled without breaking core Platform functionality.
• Performance cookies — collect anonymised data on how players navigate the Platform, which pages load most slowly, and where errors occur. This data is aggregated and cannot identify individual players. It is used exclusively to improve Platform reliability and speed.
• Functional cookies — remember your optional preferences such as display settings and responsible gaming limit reminders, so you do not have to reconfigure them on each visit.
• Analytics cookies — where you have consented, these track your usage patterns across sessions to help bdoko understand player behaviour and improve the gaming experience. You may withdraw consent for analytics cookies at any time by contacting [email protected].

Most mobile browsers allow you to control cookies through the browser settings menu. Disabling essential cookies will affect your ability to log in and use the Platform. Disabling performance or analytics cookies will not affect your ability to play games or process transactions.

7. Data Retention

bdoko retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold.

• Active account data (identity, contact, financial and transaction records) — retained for the full duration of your active account plus a minimum of 5 years after account closure, in compliance with standard anti-money-laundering record-keeping requirements.
• KYC documents — retained for 5 years from the date of submission, in line with applicable identity verification and anti-money-laundering obligations. After this period, KYC documents are securely deleted or anonymised.
• Technical and session logs — retained in identifiable form for 12 months for security and fraud investigation purposes. After 12 months, logs are anonymised and retained in aggregate form for up to 36 months for Platform analytics, then permanently deleted.

Where you request deletion of your personal data and no legal retention obligation requires us to keep it, bdoko will securely delete or anonymise your data within 30 days of the verified request. We will acknowledge your deletion request within 5 business days.

8. Data Security

bdoko implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. No security system is impenetrable, but the following measures are in place to protect your data against unauthorised access, loss, disclosure or misuse.

• 256-bit SSL/TLS encryption on all data transmitted between your device and the bdoko Platform — including all login sessions, game sessions, deposit and withdrawal flows, and support chat interactions.
• Encryption of sensitive data at rest — KYC documents, payment identifiers and personal identity data are stored in encrypted form in bdoko's database infrastructure. Encryption keys are managed separately from the data they protect.
• Access controls — access to player personal data within bdoko is restricted on a strict need-to-know basis. Only authorised staff with a defined operational requirement (e.g., KYC review, fraud investigation, withdrawal processing, support) can access relevant data categories.
• Security incident response — bdoko maintains an internal data breach response procedure. In the event of a security incident that affects your personal data, we will notify affected players promptly and take immediate steps to contain and remediate the incident.

9. Your Data Rights

As a player using the bdoko Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within 5 business days and fulfil verified requests within 30 days.

• Right of access — you may request a copy of all personal data bdoko holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For example, if your registered name or contact number contains a typographical error, we will correct it upon verified request.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, you have withdrawn consent (where consent was the legal basis), or processing is otherwise unlawful. This right is subject to legal retention obligations.
• Right to restriction of processing — in certain circumstances, you may request that we limit the way we use your personal data (for example, while a data accuracy dispute is being resolved).
• Right to data portability — where processing is based on your consent or on contract performance, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent — where we process your personal data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

bdoko will not discriminate against you for exercising any data rights described above. Exercising your data rights will not result in account suspension, reduced service quality or denial of any gaming features, except where the exercise of the right itself (for example, deletion of identity data) makes it technically impossible for bdoko to continue providing services lawfully.

10. Payment Data & Financial Privacy

bdoko takes particular care with payment-related personal data. When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay or any Bangladesh bank, the payment transaction is processed by the relevant third-party payment provider. bdoko receives only a transaction confirmation, a masked payment identifier (e.g., the last 4 digits of a mobile number), and the transaction amount. bdoko does not store full mobile wallet account numbers, full bank account numbers, or card numbers.

All financial transaction records are retained in encrypted form for 5 years after the transaction date in compliance with anti-money-laundering and record-keeping obligations. These records are accessible only to authorised bdoko compliance and finance staff, and to law enforcement or regulatory authorities where required by law.

11. Children's Privacy

The bdoko Platform is strictly restricted to adults aged 21 and above. bdoko does not knowingly collect, process or retain personal data from any person under the age of 21. If you are under 21, you must not use the Platform or provide any personal information to bdoko.

If bdoko becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account closed. If you are a parent or guardian and believe that a minor has used the bdoko Platform, please contact us immediately at [email protected].

12. Third-Party Links

The bdoko Platform may from time to time contain links or references to third-party websites, game provider portals or payment provider pages. This Privacy Policy applies solely to the bdoko Platform and does not govern the privacy practices of any third-party site. bdoko is not responsible for the privacy policies or data practices of any third party, and we encourage you to review the privacy policy of any third-party site before providing personal information to it.

13. Changes to This Privacy Policy

bdoko reserves the right to update or revise this Privacy Policy at any time. Where a change is material — for example, a change to the purposes for which we use your data, or a change to the categories of third parties with whom we share it — we will notify registered players via the email address associated with their account, or via a prominent notice on bdoko.org, at least 14 days before the change takes effect.

Your continued use of the bdoko Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated policy. If you do not agree with the revised policy, you should stop using the Platform and may request deletion of your personal data (subject to legal retention obligations).

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the bdoko privacy team. We aim to respond to all privacy-related enquiries within 5 business days. Our support team is available 24 hours a day, 7 days a week.