bdoak Privacy Policy

Data We Collect

bdoak collects personal data from players through several channels: directly via account registration and profile updates, automatically through your use of the platform, and in some cases from third-party verification and payment service providers. The categories of personal data we collect are set out below.

Registration and Identity Data

When you create a bdoak account, we collect the following information: your full legal name, date of birth, residential address (including city and district — for example, Dhaka, Chittagong, Sylhet, or Khulna), email address, and mobile phone number. This information is required to create and manage your account and to verify your identity in accordance with our age verification obligations.

Verification Documents

If you are required to complete identity verification — for example, before processing a withdrawal or where our compliance team has flagged a need for additional checks — we may collect copies of your national identity card (NID), passport, or other government-issued photographic identification. We may also collect a selfie photograph for liveness verification purposes. These documents are stored securely and used solely for verification purposes.

Financial and Payment Data

To process deposits and withdrawals, we collect details of your chosen payment method. For mobile financial services (bKash, Nagad, Rocket, Upay), this includes the mobile phone number registered to the account. For card payments (Visa, Mastercard), this includes the card number (truncated — we store only the last four digits), expiry date, and the name on the card. Full card numbers and CVV codes are handled exclusively by our payment gateway partners and are not stored on bdoak's servers.

Transactional Data

We maintain a record of all financial transactions conducted through your bdoak account, including deposits, withdrawals, bets placed, game outcomes, bonus credits, and wagering activity. This data is retained for account management, dispute resolution, and regulatory compliance purposes.

Technical and Device Data

When you access the bdoak platform, we automatically collect certain technical information, including: your IP address, browser type and version, operating system, device type and model, screen resolution, referring URL, and the pages you visit within the platform. This data is collected to ensure the platform functions correctly across different devices, to detect fraudulent access, and for aggregate analytics purposes.

Data Category	Examples	Primary Purpose
Identity Data	Full name, date of birth, NID number	Account creation, age verification, KYC
Contact Data	Email address, mobile number, home address	Account communication, support
Payment Data	bKash/Nagad number, card last 4 digits	Deposit and withdrawal processing
Transactional Data	Bet history, deposit records, bonus usage	Account management, compliance, disputes
Technical Data	IP address, device ID, browser type	Fraud prevention, platform performance
Usage Data	Pages visited, games played, session duration	Platform improvement, personalisation

How We Use Your Data

bdoak uses the personal data we collect for clearly defined, legitimate purposes. We do not use your data for any purpose that is inconsistent with the reasons for which it was collected. The primary purposes for which we process personal data are described below.

Account Management and Service Delivery

The most fundamental use of your personal data is to create and maintain your bdoak account, authenticate your identity when you log in, and deliver the core services of the platform — including access to casino games, sports betting markets, and payment processing. Without processing your registration and contact data, we cannot provide these services.

Identity Verification and Fraud Prevention

We use your identity and device data to verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and that your account is not being accessed or operated fraudulently. Our fraud detection systems analyse login patterns, IP addresses, device fingerprints, and betting behaviour to identify and act upon suspicious activity.

Payment Processing

Your payment data is used solely to process deposit and withdrawal transactions in Bangladeshi Taka (৳) through your chosen payment method. Payment data is shared with our payment gateway partners only to the extent necessary to complete the transaction. We do not use your payment data for any other purpose.

Regulatory Compliance and Anti-Money Laundering

bdoak is obligated to conduct due diligence on player accounts and transactions as part of its anti-money laundering (AML) and Know Your Customer (KYC) obligations. This involves analysing transactional patterns, verifying the source of funds for large deposits, and in some cases reporting unusual activity to relevant authorities. Compliance with these obligations is a legal requirement and takes precedence over other data processing considerations.

Customer Support

When you contact bdoak's support team — whether through live chat or email — we record and process the content of those communications in order to address your query, resolve disputes, and improve our support services. Support interaction records are retained for a period consistent with our data retention policy.

Marketing Communications

Where you have provided explicit consent to receive marketing communications, we may send you information about promotions, bonuses, new games, and platform updates via email or SMS. You may withdraw this consent at any time. We do not send marketing communications to players who have opted out or who are subject to a self-exclusion arrangement.

Data Sharing & Disclosure

bdoak does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share personal data only in the following limited and clearly defined circumstances.

Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary payment data with our approved payment gateway partners, which facilitate transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers process your data under their own privacy policies and applicable financial regulations and are contractually prohibited from using your data for any purpose other than completing the transaction.

Identity Verification Partners

Where identity verification is required, we may share copies of your identification documents with approved KYC verification service providers. These providers process your data under strict confidentiality obligations and use it solely for the purpose of verifying your identity on our behalf.

Legal and Regulatory Authorities

bdoak may be required by applicable law, regulation, court order, or instruction from a competent authority to disclose certain player data to government bodies, law enforcement agencies, or regulatory authorities. We will comply with any such lawfully issued instruction and will notify affected players to the extent we are legally permitted to do so.

Fraud and Security Service Providers

We work with third-party fraud detection and cybersecurity providers who process certain technical data (such as IP addresses and device identifiers) on our behalf to identify and prevent fraudulent activity. These providers operate as data processors under contracts that restrict them to processing data solely on bdoak's instructions.

Cookies & Tracking Technologies

The bdoak platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to recognise returning users, and to collect aggregate analytics data that helps us understand how players use the platform.

What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to remember certain preferences and settings. Cookies do not contain executable code and cannot be used to access other files on your device.

Types of Cookies Used by bdoak

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account state during a gaming session, and support the security features of the platform. These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting or display options — so that you do not need to reconfigure them on each visit.
• Analytics Cookies: We use aggregate analytics data, collected via first-party analytics tools, to understand which features are most used, how players navigate the platform, and where improvements can be made. This data is aggregated and does not identify individual players.
• Security Cookies: These cookies are used as part of our fraud detection and account protection systems to identify unusual login patterns and to distinguish legitimate users from automated bots.

Managing Cookies

Most web browsers allow you to control cookie settings through the browser's preferences or settings menu. You can typically choose to block all cookies, block third-party cookies only, or delete cookies that have already been set. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your bdoak account and using the platform's core features.

Data Retention

bdoak retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold.

• Account and identity data: Retained for the duration of your active account relationship with bdoak and for a period of 5 years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• Financial and transactional data: Retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping obligations.
• Identity verification documents: Retained for the period required by applicable KYC regulations, and deleted securely once that period has elapsed.
• Support interaction records: Retained for 2 years from the date of the interaction, unless the interaction relates to an unresolved dispute, in which case records are retained until the dispute is resolved.
• Technical and device data: Retained for up to 12 months from the date of collection, unless retained for longer in connection with a fraud investigation.
• Marketing consent records: Retained for the duration of the consent period plus 1 year following withdrawal of consent, as evidence of the consent decision.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregate statistical and platform improvement purposes.

Data Security Measures

bdoak implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. While no online platform can guarantee absolute security, we take our responsibility to protect player data seriously.

Technical Security Measures

• SSL/TLS encryption: All data transmitted between your device and the bdoak platform is encrypted using industry-standard SSL/TLS protocols.
• Password hashing: Account passwords are stored as cryptographic hashes — we never store your password in plain text and our staff cannot retrieve your password.
• Access controls: Access to personal data held by bdoak is restricted on a need-to-know basis. Staff members are granted access only to the data necessary for their specific role.
• Firewall and intrusion detection: Our platform infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious access patterns in real time.
• Secure data storage: Personal data is stored on servers with physical and logical access controls, regular security patching, and automated backup procedures.

Organisational Security Measures

• All staff with access to personal data are subject to confidentiality obligations and receive regular data security training.
• Third-party data processors engaged by bdoak are subject to security due diligence and contractual data processing agreements.
• bdoak maintains an incident response procedure for handling potential data security breaches, including notification procedures in the event that a breach affects player data.

Your Privacy Rights

As a registered player on the bdoak platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team via the platform's live chat or by emailing [email protected] (plain text — not a clickable link).

• Right of Access: You have the right to request a copy of the personal data that bdoak holds about you. We will respond to access requests within a reasonable timeframe and will provide your data in a clear, structured format.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update many of your account details directly through your account profile settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that this right is subject to limitations — we may be required to retain certain data for legal, regulatory, or fraud prevention purposes, even following a request for erasure.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a correction request is being assessed.
• Right to Object to Marketing: You have an absolute right to object to the processing of your personal data for direct marketing purposes. Once you notify us of your objection, we will cease all marketing communications immediately.
• Right to Data Portability: Where technically feasible and where processing is based on your consent, you may request that your personal data be provided to you in a portable, machine-readable format.

bdoak will respond to all privacy rights requests within 30 days of receipt. Where a request is complex or where we receive a large volume of requests simultaneously, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Policy Updates & Contact

bdoak reserves the right to update this Privacy Policy at any time. When we make material changes to the Policy — for example, changes that affect how we collect or use your data in a significant way — we will notify registered players by posting a notice on the platform and, where appropriate, by sending a notification to the email address associated with your account.

The updated Privacy Policy will take effect from the date it is published on the platform. Your continued use of the bdoak platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your information.

How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bdoak holds about you, please contact our support team through the live chat facility available on the platform. Our support team is available 24 hours a day, 7 days a week. You may also reach us by email — our contact address is listed in the footer of this page as plain text (not a clickable link).

bdoak is committed to resolving privacy concerns promptly and transparently. If you submit a privacy concern and are not satisfied with the response you receive, you may escalate the matter through bdoak's formal dispute resolution process, details of which are available from the support team on request.