bkoko Privacy Policy

1 Introduction

bkoko ("the Platform", "we", "us", "our") is an internationally operated online betting and casino platform serving players in Bangladesh. We are committed to handling the personal information of our users — including registered players, visitors to the bkoko website at https://bkoko.io, and anyone who contacts our support team — with the utmost care, transparency, and respect.

This Privacy Policy ("Policy") sets out in plain language what personal data we collect from you, the purposes for which we use it, the limited circumstances in which we share it with third parties, how long we keep it, and what rights you have in relation to it.

This Policy should be read in conjunction with the bkoko Terms & Conditions and the Responsible Gaming policy. Where any conflict exists between this Policy and the Terms & Conditions, the Terms & Conditions shall take precedence in matters of contract, while this Policy shall govern all matters relating to personal data processing.

This Policy was last reviewed and updated on 1 January 2026. The most current version of this Policy is always available at https://bkoko.io/privacy-policy.

2 Data We Collect

The categories of personal data we collect depend on how you interact with the bkoko platform. The following table summarises the main categories, with examples of the specific data points within each category.

We do not collect or store full payment card numbers. We do not collect biometric data unless specifically required for identity verification under applicable regulations. We do not access your device contacts, microphone, or camera.

3 How We Collect Your Data

3.1 Directly From You

The majority of personal data we hold is provided directly by you when you register an account, complete the KYC verification process, make a deposit or request a withdrawal, use any game or betting market on the platform, contact our support team, or respond to a survey or promotion.

3.2 Automatically

When you visit https://bkoko.io, our servers and analytics tools automatically collect Technical Data and Usage Data. This includes your IP address, the type of device and browser you are using, and how you navigate through the platform. This data is collected using cookies and similar technologies — see Section 7 for our full Cookies policy.

3.3 From Third Parties

We may receive limited personal data from third parties in the following contexts:

• Payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank): transaction confirmation data including the registered mobile number or account reference associated with a payment.
• Identity verification services: confirmation of identity document authenticity where we use a third-party KYC tool.
• Fraud prevention partners: risk signals and device fingerprinting data used to detect account takeover attempts or fraudulent activity.
• Game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, etc.): aggregated session and game outcome data for dispute resolution purposes.

4 Legal Basis for Processing

bkoko processes personal data only where a valid legal basis exists. The primary legal bases we rely on are as follows:

• Contractual necessity: Processing required to fulfil the contract between bkoko and you as a registered player — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and fraud prevention duties.
• Legitimate interests: Processing for purposes such as platform security, fraud detection, responsible gaming monitoring, internal analytics, and improving the quality of the bkoko service — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent (for example, for certain marketing communications), we will ask for your explicit agreement and provide a clear, easy mechanism to withdraw that consent at any time.

5 How We Use Your Data

bkoko uses the personal data we collect for the following specific purposes:

• Account management: Creating and maintaining your player account, authenticating your identity at login, and managing account settings and preferences.
• Payment processing: Processing deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and supported bank transfer channels. Verifying that payment methods are registered in your name.
• KYC and compliance: Verifying your age (21+ requirement), identity, and source of funds to comply with AML obligations and to prevent underage gambling.
• Game delivery: Providing access to sports betting markets, live casino tables, slot games, and crash games, and maintaining accurate records of your gaming activity for dispute resolution.
• Responsible gaming: Monitoring gaming behaviour patterns to identify potential signs of problem gambling and to enforce self-exclusion, deposit limits, or session restrictions that you have set.
• Fraud and security: Detecting and preventing fraudulent account activity, collusion, money laundering, unauthorised access, and the use of automated betting software.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the platform and to improve the design, performance, and content of bkoko.
• Marketing (with consent): Sending promotional communications about bonuses, new game launches, and seasonal offers where you have provided explicit consent.
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from competent authorities.

6 Data Sharing

bkoko does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. We share personal data only in the following limited and controlled circumstances:

6.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf under contractual data processing agreements. These providers are permitted to use your data only for the purposes we specify and in accordance with this Policy. Categories of service provider include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank)
• Identity verification and KYC solution providers
• Fraud detection and cybersecurity services
• Cloud hosting and infrastructure providers
• Customer support platform operators
• Email and SMS communication service providers (for account notifications and, where consent is given, marketing)
• Third-party game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, PG Soft, Ezugi, Nolimit City) — limited to session and outcome data required for game delivery and dispute resolution

6.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other competent bodies where we are required to do so by applicable law, a valid court order, or a lawful regulatory request. In such cases, we will disclose only the minimum data required to fulfil the legal obligation.

6.3 Business Transfers

In the event that bkoko undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify affected players before any such transfer takes effect and will ensure that the receiving entity is bound by privacy obligations at least as protective as those set out in this Policy.

7 Cookies & Tracking Technologies

bkoko uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate the platform, maintain your authenticated session, remember your preferences, and gather analytics data that helps us improve the user experience.

7.1 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the platform to function. They enable you to log in, navigate between pages, and complete transactions. The platform cannot operate without these cookies.
• Functional cookies: These remember your preferences such as language settings, preferred payment method, and responsible gaming limits you have set within your account.
• Analytics cookies: These collect aggregated, anonymised data about how visitors use the platform — which pages are most visited, where users drop off, and how navigation flows. This data is used purely to improve platform design and performance.
• Security cookies: These help us detect and prevent fraudulent access attempts, unusual login patterns, and CSRF (cross-site request forgery) attacks.

7.2 Managing Cookies

You can control or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your bkoko account and will disrupt core platform functionality. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience.

Most modern browsers (Chrome, Firefox, Safari, Edge) provide detailed cookie management options under their privacy or security settings. For guidance specific to your browser, please consult the browser's official support documentation.

8 Data Security

bkoko implements a multi-layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data in transit between your device and bkoko servers.
• Encryption of sensitive data (including financial data and identity documents) at rest using industry-standard algorithms.
• Role-based access controls ensuring that only authorised bkoko personnel with a legitimate need can access player personal data.
• Regular security audits and vulnerability assessments of the platform infrastructure.
• Intrusion detection and real-time monitoring systems to identify and respond to security incidents promptly.
• Secure password hashing — bkoko never stores your account password in plain text.
• Two-factor authentication options available to players for additional account security.

While bkoko takes all reasonable technical and organisational measures to protect your data, no online platform can guarantee absolute security. If you become aware of any unauthorised use of your bkoko account or any suspected security breach, please contact us immediately at [email protected].

9 Data Retention

bkoko retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification of the individual. Anonymised, aggregated data may be retained beyond these periods for statistical analysis.

10 Your Rights

As a bkoko player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account details and a description of your request. We aim to respond to all privacy rights requests within 30 calendar days.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is used and stored.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details, you can update these directly through your account settings.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that we may be required to retain certain data to comply with legal obligations (see Section 9), and erasure requests will be fulfilled only to the extent permitted by law.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or while an objection is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling, where your personal circumstances make it appropriate to do so. You also have an unconditional right to object to processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

11 Minors

bkoko does not knowingly collect personal data from any person under the age of 21. Our KYC verification process is specifically designed to confirm the age of all registering players before their accounts are activated. If we become aware that personal data has been collected from a person under 21, we will promptly close the associated account, securely delete all data collected, and return any deposited funds to the originating payment method.

If you are a parent or guardian and believe that a minor in your care has registered on bkoko, please contact us immediately at [email protected]. We take underage gambling concerns with the utmost seriousness and will act swiftly on any such report. For guidance on parental controls and responsible gaming, please visit our Responsible Gaming page.

12 International Data Transfers

bkoko is an internationally operated platform. As a result, your personal data may be processed on servers located in countries outside of Bangladesh. When personal data is transferred internationally, bkoko ensures that adequate safeguards are in place to protect it, including:

• Contractual data transfer agreements that impose obligations on the receiving entity equivalent to those set out in this Policy.
• Transfer to countries or service providers recognised as providing an adequate level of data protection.
• Technical security measures (encryption, access controls) that protect data regardless of the jurisdiction in which it is processed.

By using the bkoko platform, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described in this section.

13 Changes to This Policy

bkoko reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, we will:

• Update the "Effective Date" at the top of this document.
• Notify registered players via the contact information (email or SMS) associated with their account, where the change is material and affects how we use their data.
• In some cases, request fresh consent where required by applicable law.

Your continued use of the bkoko platform following notification of a material change constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bkoko processes your personal data, please contact our dedicated privacy support team. We are committed to addressing all privacy enquiries promptly and thoroughly.

Email: [email protected]
Platform: https://bkoko.io

When contacting us about a privacy matter, please include your registered account username or email address, a clear description of your request or concern, and any relevant details that will help us locate your data and respond efficiently. All privacy communications are handled confidentially by trained staff.