bdoko Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is published by bdoko ("bdoko", "we", "us", "our"), the operator of the online gaming platform accessible at bdoko.io. This Policy applies to all personal data collected from individuals ("you", "your", "the Player") who access, browse, register on, or otherwise interact with the bdoko platform, including its website, mobile-optimised interface, and all associated account, payment, and gaming services.

bdoko is committed to protecting your privacy and handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy describes the categories of personal data we collect, the purposes for which we process it, the legal bases on which we rely, and the rights you hold in relation to your data.

This Policy should be read alongside our Terms and Conditions, which are available at bdoko.io/terms-conditions and which govern the overall contractual relationship between you and bdoko. Where this Policy refers to the bdoko platform, that reference encompasses all pages, features, games, and services delivered under the bdoko.io domain.

2. Data Controller Information

For the purposes of this Policy, bdoko is the data controller responsible for your personal data collected through the bdoko platform. As data controller, bdoko determines the purposes and means of processing your personal data.

If you have any questions about this Policy or wish to exercise any of your rights described in Section 11, please contact us at the email address above. We will respond to all legitimate privacy enquiries within thirty (30) days of receipt.

3. Personal Data We Collect

bdoko collects the following categories of personal data from players and site visitors. The specific data collected depends on how you interact with the platform and at what stage of your relationship with bdoko you are.

3.1 Identity and Registration Data

When you register an account with bdoko, we collect information necessary to create and verify your account, including:

• Full legal name
• Date of birth (to verify that you are aged 21 or older)
• Email address
• Mobile phone number
• Preferred username
• Residential address (city, district, postal code)
• Nationality

3.2 Identity Verification (KYC) Documents

Before processing your first withdrawal, bdoko is required to verify your identity. For this purpose, we may collect:

• National Identity Card (NID) number and image
• Passport or driving licence image
• Proof of residential address (utility bill, bank statement dated within three months)
• Selfie or live photo for identity confirmation

3.3 Financial and Transaction Data

To facilitate deposits and withdrawals, bdoko processes transaction-related data including:

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers (masked)
• Bank account details where bank transfer is used
• Deposit and withdrawal amounts and timestamps
• Transaction reference numbers
• Wagering history and gaming activity records

3.4 Technical and Usage Data

bdoko automatically collects certain technical data when you access the platform, including:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Pages visited, session duration, and navigation paths
• Referring URL and search terms used to arrive at bdoko
• Game session logs including wagers placed, outcomes, and session duration

3.5 Communication Data

When you contact bdoko support or respond to our communications, we collect the content of those interactions, including live chat transcripts, email correspondence, and any attachments you provide. We retain these records to resolve disputes and improve our service quality.

4. How We Collect Your Data

bdoko collects personal data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically: through cookies, web beacons, and server logs when you browse the bdoko platform (see Section 8 for full cookie details).
• From third-party providers: including payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), identity verification partners, and fraud detection services — where these providers share data with bdoko as part of a contracted service.
• From game providers: licensed third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session-level game data with bdoko for dispute resolution and responsible gaming monitoring purposes.

5. Legal Basis for Processing

bdoko relies on the following legal bases to process your personal data:

Where bdoko relies on consent as a legal basis, you may withdraw that consent at any time by contacting [email protected] or by adjusting your account notification settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. How We Use Your Data

bdoko uses the personal data we collect for the following purposes:

6.1 Account Management

To create and maintain your bdoko account, authenticate your identity when you log in, enforce the one-account-per-player policy, and communicate important account-related information such as transaction confirmations, security alerts, and policy updates.

6.2 Payment Processing

To facilitate deposits to your account via bKash, Nagad, Rocket, Upay, and supported bank partners, and to process withdrawal requests to your verified payment method. Financial data is handled by our contracted payment processors under data processing agreements.

6.3 Identity Verification and Compliance

To verify that you meet the minimum age requirement of 21 years and to comply with anti-money laundering (AML) and know-your-customer (KYC) obligations. This processing is a legal requirement and cannot be opted out of by players who wish to make withdrawals.

6.4 Responsible Gaming

To monitor gaming activity for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to provide tailored support where we identify patterns that may indicate harm. This processing is a legitimate interest of bdoko and a core component of our duty of care to players.

6.5 Fraud Prevention and Platform Security

To detect and prevent fraudulent account activity, bonus abuse, money laundering, unauthorised access, and technical exploits. This includes analysis of IP addresses, device fingerprints, betting patterns, and transaction histories.

6.6 Customer Support

To respond to your enquiries, resolve disputes, process complaints, and improve the quality of our support services. Support communications may be monitored and recorded for quality assurance and training purposes.

6.7 Marketing Communications

Where you have provided consent, to send you promotional offers, bonus notifications, seasonal campaign communications, and personalised game recommendations. You may opt out of marketing communications at any time by clicking "unsubscribe" in any email or by contacting [email protected].

6.8 Platform Analytics and Improvement

To analyse how players navigate and use the bdoko platform so we can identify usability issues, improve game offerings, and enhance the overall player experience. This analysis is conducted on aggregated or pseudonymised data wherever possible.

7. Data Sharing and Disclosure

bdoko does not sell your personal data. We may share your data with third parties only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

7.1 Payment Processors

To process your deposits and withdrawals, bdoko shares necessary payment details with our contracted payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These partners process data under their own privacy policies and applicable financial regulations.

7.2 Identity Verification Partners

bdoko works with licensed third-party KYC and identity verification providers to validate the documents you submit. These providers are contractually bound to process your data solely for verification purposes and to maintain appropriate security standards.

7.3 Game Technology Providers

Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate the game engines on our platform. Session-level data (wagers, outcomes, timestamps) may be processed by these providers under data processor agreements with bdoko.

7.4 Legal and Regulatory Authorities

bdoko may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required by law, where necessary to establish, exercise, or defend legal claims, or where required by bdoko's licensing authority as part of a regulatory audit or investigation.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of bdoko's assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected players via email and on-platform notice in advance of any such transfer taking effect.

8. Cookies and Tracking Technologies

bdoko uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage, and deliver relevant content. The following categories of cookies are used on bdoko.io:

You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may prevent you from accessing certain features of the bdoko platform, including account login.

9. Data Security

bdoko implements technical and organisational measures proportionate to the risks associated with processing your personal data. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bdoko servers
• Encryption of sensitive data fields (including payment details and identity document images) at rest
• Role-based access controls ensuring that bdoko staff can access personal data only to the extent required for their specific job function
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Multi-factor authentication for internal administrative systems
• Automated anomaly detection for unusual login patterns or data access events

Notwithstanding these measures, no system connected to the internet can be guaranteed to be entirely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdoko will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

10. Data Retention

bdoko retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following standard retention periods:

At the end of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Some data may be retained beyond these periods where required by applicable law or pending legal proceedings.

11. Your Rights

As a player on the bdoko platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact bdoko at [email protected] with your registered email address and a description of your request.

• Right of Access: You may request a copy of the personal data bdoko holds about you and information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that bdoko delete the personal data we hold about you. This right is subject to our legal obligation to retain certain data for regulatory compliance purposes.
• Right to Restriction: You may ask bdoko to restrict the processing of your data while a dispute about its accuracy or the lawfulness of processing is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of bdoko's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bdoko will respond to all valid rights requests within thirty (30) days. In complex or high-volume cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day window.

12. Children and Minors

The bdoko platform is strictly restricted to individuals aged 21 years and older. bdoko does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person below the minimum age, we will immediately close the relevant account and securely delete all associated data.

If you are a parent or guardian and believe that your child has accessed the bdoko platform or submitted personal data without your knowledge, please contact us immediately at [email protected]. We will take prompt action to address the situation.

13. International Data Transfers

bdoko operates internationally and your personal data may be transferred to and processed in countries outside Bangladesh in connection with the provision of our services. This may include transfers to countries where our game technology providers, payment processors, or infrastructure partners are based.

Where personal data is transferred internationally, bdoko takes appropriate steps to ensure that such transfers are carried out with adequate protections in place, including the use of contractual safeguards and data processing agreements that require recipients to maintain standards equivalent to those described in this Policy.

14. Third-Party Services

The bdoko platform may contain references to third-party payment partners and game providers. These third parties operate under their own privacy policies, which govern how they collect and process personal data in connection with their respective services. bdoko is not responsible for the privacy practices of third-party services, and we encourage you to review the privacy policies of any third-party providers with whom you interact as part of using the bdoko platform.

bdoko does not embed third-party social media widgets, advertising networks, or analytics providers that would allow those parties to collect personal data from bdoko players without an appropriate data processing agreement in place.

15. Changes to This Policy

bdoko may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will notify you via the email address registered to your account at least fourteen (14) days before the changes take effect.

Non-material changes, such as clarifications to existing descriptions or corrections to typographical errors, may be made without advance notice. The effective date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the bdoko platform after the effective date of any revision constitutes your acknowledgment of the updated Policy.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdoko handles your personal data, please reach out to our support team using the contact details below. All privacy-related enquiries will be handled with confidentiality and responded to within thirty (30) days.

All privacy requests must be submitted from the email address registered to your bdoko account so that we can verify your identity before processing the request. Requests submitted from unregistered email addresses may be delayed pending identity confirmation.