bk0k Privacy Policy — How We Handle Your Personal Data

1 Data We Collect

bk0k collects personal data from players in Bangladesh through several channels: directly when you register and use the platform, automatically when you browse or interact with the website, and occasionally from third-party identity verification and payment service providers. The categories of data we collect are described below.

When you create a bk0k account, we collect the following information:

• Full legal name as it appears on your National Identity Card (NID) or passport
• Date of birth (to verify you meet the 18+ age requirement)
• Residential address in Bangladesh (district, thana, full address)
• Contact email address
• Bangladeshi mobile phone number (used for verification and payment linkage)
• Username and encrypted account password

To comply with our Know Your Customer (KYC) obligations and prevent fraud and money laundering, bk0k may request copies of the following documents from players, particularly at the point of first withdrawal or where enhanced verification is required:

• National Identity Card (NID) — front and back
• Passport biographical data page (for players without an NID)
• Recent utility bill or bank statement dated within the last three months as proof of address
• Screenshot or transaction confirmation showing ownership of the bKash, Nagad, Rocket, or bank account used to deposit

bk0k records data relating to all financial transactions conducted on the platform, including deposit amounts, payment method references (such as the last four digits of a bKash number), withdrawal requests, bonus credits and debits, and account balance history. We do not store full payment credentials such as complete mobile banking PINs or full bank account numbers.

We automatically collect certain technical and behavioural data when you use the bk0k platform, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session start and end times, pages visited, and features used
• Game play history, wager amounts, and bet outcomes
• Interaction with promotions and bonus offers

This data is used to improve platform performance, detect fraud, enforce responsible gaming limits, and personalise your experience within bk0k.

When you contact bk0k support via live chat, email, or WhatsApp, we retain records of those communications. This includes the content of your messages, timestamps, and the support agent who handled your request. These records enable us to manage ongoing issues, maintain quality assurance, and comply with any legal obligation to retain records of customer interactions.

2 How We Use Your Data

bk0k processes player data for the specific purposes listed below. We do not use your data for purposes that are incompatible with those disclosed at the time of collection.

bk0k may send you promotional emails or SMS messages about bonuses, new games, seasonal promotions such as Eid offers, BPL cricket specials, and Pohela Boishakh events — but only where you have explicitly opted in to receive such communications during registration or via your account settings. You may opt out of marketing communications at any time by updating your preferences in your bk0k account or by contacting support.

3 Data Sharing & Third Parties

bk0k does not sell your personal data to any third party. We share player data only in the limited and specific circumstances described below, and only to the extent necessary to fulfil the stated purpose.

To process your deposits and withdrawals, bk0k shares relevant transaction data with the payment providers you use. This includes mobile financial services such as bKash, Nagad, Rocket, and Upay, as well as partner Bangladeshi banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each of these providers operates under its own privacy obligations and applicable financial regulations. bk0k shares only the minimum data necessary to process each specific transaction.

Where bk0k uses third-party KYC service providers to assist with identity document verification, we share the relevant identity documents and personal details required to complete the verification check. These providers are contractually bound to process such data only for the verification purpose and not to retain or use it for any other purpose.

bk0k's platform features games developed and operated by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. When you play a game delivered by these providers, certain gameplay data (such as session identifiers, bet amounts, and game outcomes) may be processed by the relevant provider's systems. These providers operate under their own privacy practices as certified game studios, and bk0k selects only providers with established data protection standards.

bk0k may be required to disclose personal data in response to a lawful request from a competent regulatory authority, law enforcement body, or court order. In such cases, bk0k will comply with the legal requirement and will inform the affected player of the disclosure where it is legally permitted to do so.

In the event of a merger, acquisition, or transfer of bk0k's business operations, player data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

4 Cookies & Tracking Technologies

bk0k uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to understand how players use the site, and to improve the overall experience. This section explains the types of cookies we use and how you can manage them.

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function efficiently and to provide information to the site operator. Cookies set by bk0k are stored on your device for the durations described below and can be managed through your browser settings.

• Strictly Necessary Cookies: These cookies are essential for the bk0k platform to operate. They enable core functions such as maintaining your login session, remembering your account preferences, and ensuring security checks function correctly. These cookies cannot be disabled without impairing platform functionality.
• Analytics Cookies: bk0k uses analytics tools to collect aggregated, anonymised data about how players navigate the platform. This helps us identify pages that perform poorly, features that are underused, and areas where the player journey can be improved. The data collected through analytics cookies does not personally identify you.
• Functional Cookies: These cookies remember your preferences such as language settings, preferred payment method, and display options to provide a more personalised experience during your sessions on bk0k.
• Security Cookies: Short-lived cookies used to support fraud detection and account security features, including detection of unusual login patterns and device fingerprinting used as part of bk0k's anti-fraud measures.

You may manage or disable non-essential cookies through your web browser settings. Most modern browsers allow you to block or delete cookies via the browser's privacy or settings menu. Please note that disabling strictly necessary cookies will affect your ability to use bk0k, including logging in and accessing your account. Disabling analytics or functional cookies will not prevent you from using the platform but may reduce the personalisation of your experience.

5 Data Retention & Storage

bk0k retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal obligations. The table below sets out our standard data retention periods by category.

When data reaches the end of its retention period, bk0k securely deletes or anonymises it so that it can no longer be attributed to an identified individual. Where anonymised data is retained beyond the stated retention period, it is used only in aggregated, non-identifiable form for analytical and reporting purposes.

bk0k stores player data on secured servers. Where data is processed or stored outside Bangladesh by third-party service providers, bk0k ensures that appropriate contractual protections are in place to maintain data security standards equivalent to those applied within bk0k's own systems.

6 Your Data Rights

As a player using the bk0k platform, you hold a number of rights with respect to the personal data we process about you. bk0k is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Data Rights Request" and a description of the specific right you wish to exercise.

You have the right to request a copy of the personal data bk0k holds about you, along with information about how it is processed. We will provide this information within a reasonable period following verification of your identity.

If you believe that any personal data bk0k holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly from your bk0k account settings. For changes to identity-critical information such as your legal name or date of birth, documentary evidence will be required.

You may request that bk0k delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent is the legal basis), or where you object to processing and there are no overriding legitimate grounds. Please note that this right is subject to bk0k's legal retention obligations: we cannot delete data that we are required by law to retain, such as financial transaction records and KYC documents.

In certain circumstances, you may request that bk0k restrict the processing of your personal data — for example, while the accuracy of data is contested, or while an objection to processing is being considered. During a restriction period, bk0k will continue to store your data but will not actively process it for purposes other than storage and legal compliance.

You have the right to object to bk0k processing your personal data where that processing is based on legitimate interests. You also have an absolute right to object to your data being used for direct marketing purposes, which bk0k will honour immediately upon receipt of such an objection.

Where bk0k processes your data on the basis of your consent or in connection with a contract, and that processing is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format. This right covers account and transaction data held in bk0k's systems.

7 Security Measures

bk0k implements a layered security architecture to protect the personal and financial data of all registered players. Our security programme encompasses technical controls, access management policies, and operational procedures designed to prevent unauthorised access, data breaches, and system compromise.

• 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile device and bk0k's servers is encrypted using industry-standard TLS protocols. This protects your credentials, payment data, and personal information from interception during transmission.
• Encrypted Data at Rest: Sensitive data stored in bk0k's databases — including identity documents and payment references — is encrypted at rest using AES-256 encryption. Even in the event of unauthorised server access, encrypted data cannot be read without the corresponding decryption keys.
• Firewalls and Intrusion Detection: bk0k's infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for and respond to suspicious network activity.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication on their bk0k account for an additional layer of login security. Administrative system access by bk0k staff requires mandatory 2FA.

Access to player personal data within bk0k's systems is governed by strict role-based access controls. Staff members can only access the data relevant to their specific function. All administrative access to player records is logged, timestamped, and subject to regular audit review. bk0k operates a clear desk and clean screen policy for all staff handling personal data.

In the event of a data security incident that poses a risk to the rights and freedoms of affected players, bk0k will take immediate remedial action, investigate the scope and cause of the incident, and notify affected players without undue delay. bk0k maintains a documented incident response plan that is reviewed and tested on a regular basis.

8 Policy Updates & Contact

bk0k reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The effective date at the top of this document will be updated whenever a new version is published. Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — bk0k will notify registered players via the email address associated with their account prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how bk0k protects your data. The current version of this policy is always accessible at https://bk0k.net/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to bk0k's handling of your personal data, you may contact us through any of the following channels. Note that all contact details below are displayed as plain text and are not clickable links.

• Email: [email protected] — subject line: "Privacy Enquiry"
• Live Chat: Available 24/7 via the bk0k platform — the fastest channel for urgent privacy matters
• WhatsApp: +880 1700 000000 — available during Bangladesh Standard Time (BST, UTC+6) business hours

bk0k is committed to responding to all privacy-related enquiries within 2 business days. Formal data rights requests will be processed within the timeframes described in Section 6 of this Privacy Policy.

The bk0k platform is strictly intended for adults aged 18 years and above. bk0k does not knowingly collect personal data from persons under the age of 18. If you believe that a minor has registered a bk0k account or that bk0k has inadvertently collected data from a person under 18, please contact us immediately at [email protected] so that we can investigate and take appropriate action, including closure of the account and deletion of the associated data.