bdok1 Privacy Policy

bdok1 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all users who access or register with the bdok1 platform at https://bdok1.io, including all associated subdomains, mobile interfaces, and application programming interfaces (together, "the Platform"). This Privacy Policy explains in clear, plain English how we collect, use, store, share, and protect your personal data, and what rights you have in relation to that data.

This Privacy Policy applies to all personal data collected through the Platform, regardless of the device or method used to access it. It applies to registered account holders, users who browse without registering, and former account holders whose data is retained in accordance with our legal obligations.

This Privacy Policy should be read alongside the bdok1 Terms & Conditions, which govern the overall relationship between you and the Platform. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with the practices described in this policy, you should not use the bdok1 platform.

This policy is written in English and is directed at players based in Bangladesh. The bdok1 platform primarily serves the Bangladesh market and is oriented toward Bangladeshi residents using local payment methods such as bKash, Nagad, Rocket, and Upay, as well as domestic bank transfers.

2.1 Data You Provide Directly

When you register an account, verify your identity, make a deposit, request a withdrawal, or contact our support team, you provide us with personal data directly. This includes:

• Identity data: Full legal name, date of birth, gender, and government-issued identification document details (National Identity Card number, passport number, or driving licence number)
• Contact data: Email address, mobile phone number, and residential address (including division, district, and upazila within Bangladesh)
• Financial data: bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details (account number, bank name, branch, routing number), and Visa/Mastercard details where used
• Account credentials: Username and hashed password (we never store your plain-text password)
• Support communications: The content of any messages, emails, or chat transcripts exchanged with the bdok1 support team
• KYC documentation: Photographs or scans of identity documents and proof of address documents submitted as part of the Know Your Customer verification process

2.2 Data Collected Automatically

When you use the bdok1 platform, certain technical data is collected automatically by our systems. This includes:

• Device and browser data: IP address, browser type and version, operating system, screen resolution, device identifiers, and hardware configuration
• Usage data: Pages visited, time spent on pages, features accessed, games played, bets placed, deposit and withdrawal history, session start and end times, and click-path data
• Location data: General geographic location derived from your IP address (we do not collect precise GPS coordinates)
• Cookies and similar technologies: Data collected via cookies, web beacons, and local storage — see Section 5 for full details

2.3 Data from Third Parties

In certain circumstances we may receive personal data about you from third parties, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks) who confirm the outcome of payment transactions
• Identity verification service providers who validate the authenticity of identity documents submitted during KYC checks
• Fraud prevention and anti-money laundering (AML) screening services that check your details against sanctions lists and politically exposed persons (PEP) databases

bdok1 uses personal data for specific, documented purposes only. The table below summarises the primary purposes for which your personal data is processed and the corresponding legal basis for that processing.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Any profiling carried out for responsible gaming or fraud detection purposes is subject to manual review before any consequential action is taken on your account.

Every processing activity carried out by bdok1 is grounded in one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — for example, creating your account, verifying your identity sufficiently to allow play, and processing your financial transactions.
• Legal obligation: Processing required to comply with applicable laws — for example, anti-money laundering (AML) screening, age verification, and record-keeping obligations imposed on online gaming operators.
• Legitimate interests: Processing necessary for bdok1's legitimate business interests where those interests are not overridden by your privacy rights — for example, fraud prevention, platform security, and aggregated analytics to improve the user experience.
• Consent: Processing that relies on your freely given, specific, informed, and unambiguous consent — for example, sending promotional emails or WhatsApp marketing messages. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where processing is based on legitimate interests, bdok1 has carried out a balancing test to ensure that our interests do not override your fundamental privacy rights. If you wish to obtain a copy of the balancing test relevant to a specific processing activity, please contact the support team.

bdok1 uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and (with your consent) deliver relevant promotions. The categories of cookies we deploy are as follows:

5.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens (which keep you logged in during a session), load-balancing cookies, and security tokens that protect against cross-site request forgery. No consent is required for strictly necessary cookies as they are indispensable for the service you have requested.

5.2 Functional Cookies

Functional cookies remember choices you make — such as your preferred language, display settings, and session time limit preferences — so that the platform behaves consistently across visits. These cookies enhance your experience but are not strictly required for core functionality. You may disable them, but doing so may affect platform behaviour.

5.3 Analytics Cookies

With your consent, bdok1 deploys analytics cookies to understand how players navigate and use the platform in aggregate. This data is anonymised before analysis and is used solely to identify usability improvements. Analytics cookies do not track your individual behaviour for advertising purposes.

5.4 Managing Cookies

You can manage your cookie preferences at any time through your account settings or by adjusting your browser's cookie controls. Please be aware that disabling certain categories of cookies may impair platform functionality. Most modern browsers allow you to block all cookies, accept all cookies, or receive notification when a cookie is set — consult your browser's help documentation for instructions specific to your browser.

bdok1 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

6.1 Payment Processors

To process your deposits and withdrawals, bdok1 shares relevant financial and identity data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and card network acquirers. These partners act as independent data controllers for their own payment processing activities and are bound by their own privacy policies.

6.2 Identity Verification Providers

bdok1 engages third-party KYC and AML service providers to verify the identity documents you submit and to screen your details against international sanctions lists and PEP databases. These providers process your data on our behalf under strict contractual data processing agreements and may not use your data for any purpose other than fulfilling their verification services for bdok1.

6.3 Game Content Providers

Games delivered through the bdok1 platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver their games, these studios may receive a player session token and anonymised session data (such as bet amounts and game outcomes). They do not receive your full name, contact details, or payment information unless you interact with them directly outside the bdok1 platform.

6.4 Legal and Regulatory Disclosure

bdok1 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.

6.5 Business Transfers

In the event that bdok1 or any part of its business is acquired, merged with, or transferred to a successor entity, your personal data may be transferred as part of that transaction. We will notify you of any such transfer and the privacy practices of the successor entity in advance, where practicable.

Some of the third-party service providers used by bdok1 — including game content providers and identity verification services — operate servers or processing facilities outside Bangladesh. Where your personal data is transferred outside Bangladesh, bdok1 takes steps to ensure that an appropriate level of protection is in place, including:

• Entering into contractual clauses with recipient entities that impose data protection obligations equivalent to those applicable within Bangladesh
• Transferring data only to recipients in jurisdictions that are recognised as providing an adequate level of data protection by relevant authorities
• Where neither of the above applies, obtaining your explicit consent to the transfer and informing you of the associated risks

You may request details of the safeguards in place for any specific international transfer by contacting the support team at support at bdok1.io.

bdok1 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

When personal data is no longer required, it is securely deleted or anonymised in accordance with bdok1's internal data disposal procedures. Where anonymisation is not technically feasible, data is pseudonymised and access is restricted to authorised personnel only.

bdok1 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption in transit: All connections between your browser or device and the bdok1 platform use 256-bit SSL/TLS encryption, ensuring that data cannot be intercepted or read by third parties during transmission.
• Encryption at rest: Sensitive data categories, including identity document images and financial account details, are encrypted at rest using AES-256 encryption on all storage infrastructure.
• Password security: Passwords are processed through a one-way cryptographic hash function (bcrypt with a high work factor) before storage. bdok1 staff can never view your plain-text password, and our systems cannot reverse-engineer it from the stored hash.
• Access controls: Access to systems holding personal data is restricted on a strict need-to-know basis. Staff access is logged, monitored, and reviewed quarterly. Multi-factor authentication is mandatory for all internal system access.
• Independent security audits: The bdok1 platform undergoes regular independent penetration testing and security audits conducted by qualified third-party security firms. Critical vulnerabilities identified are remediated within defined SLA timeframes.
• Incident response: bdok1 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify you promptly and without undue delay, consistent with applicable legal obligations.

As a bdok1 player, you have the following rights in relation to your personal data. These rights may be subject to certain conditions and limitations where legal obligations, fraud prevention requirements, or the rights of third parties are engaged.

To exercise any of these rights, please contact the bdok1 support team via 24/7 Live Chat or by emailing support at bdok1.io. We will respond to all valid requests within 30 calendar days. Where a request is complex or we receive a high volume of requests simultaneously, we may extend this period by a further 30 days, in which case we will notify you promptly.

bdok1 will not charge a fee for processing your data rights requests in ordinary circumstances. Where a request is manifestly unfounded or excessive — in particular because it is repetitive — we reserve the right to charge a reasonable administrative fee or to decline to act on the request, providing reasons for doing so in writing.

The bdok1 platform is strictly prohibited to persons under the age of 21. bdok1 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not attempt to register an account, access, or use the bdok1 platform in any capacity.

If bdok1 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to close the associated account, delete the data in question, and retain only the minimum records required to prevent re-registration. If you believe a minor has registered an account on the bdok1 platform, please notify us immediately at support at bdok1.io so that we can act promptly.

The bdok1 platform may contain links to or integrations with third-party game providers, payment gateways, and other services operated by parties outside of bdok1's control. This Privacy Policy applies only to the bdok1 platform itself. When you access a third-party service — such as a payment processor's interface or a game studio's client — you are subject to that party's own privacy policy and terms of service.

bdok1 is not responsible for the privacy practices, content, or security of any third-party services. We encourage you to review the privacy policies of any third-party services you interact with before providing them with personal data. The inclusion of a link to or integration with a third-party service does not constitute an endorsement of that party's privacy practices by bdok1.

bdok1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our business operations, or our data processing practices. All amendments will be published on this page with an updated "Last Revised" date at the top of the document.

Where an amendment is material — meaning it significantly affects how we process your personal data or reduces your rights — we will notify you directly via the email address registered on your account, or via a prominent notice within the platform, at least 14 days before the change takes effect. Your continued use of the bdok1 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the amended terms.

We recommend that you review this Privacy Policy periodically to stay informed about how bdok1 protects your personal data. The version number and effective date at the top of this document will always reflect the most current published version.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdok1 processes your personal data, please contact our support team using any of the following channels:

• Email: support at bdok1.io (plain text — not a clickable link)
• Live Chat: Available 24/7 (Bangladesh Standard Time, UTC+6) via the in-platform chat widget
• WhatsApp: Available 08:00–22:00 BST

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. For complex matters, we will keep you informed of progress throughout the process.

If you are not satisfied with our response to your enquiry or complaint, or if you believe that bdok1 has processed your personal data in a manner inconsistent with this Privacy Policy or applicable law, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. bdok1 will cooperate fully with any such investigation.