bbokk Privacy Policy
Your Data, Our Responsibility

1. Data We Collect

bbokk collects personal data only where there is a clear, lawful basis for doing so. We distinguish between data you provide directly, data generated by your use of the platform, and data we receive from trusted third-party partners such as payment processors and identity verification services.

1.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, nationality.
• Contact data: Mobile phone number, email address, residential address (city and division within Bangladesh).
• Identity document data: National Identity Card (NID) number, passport number, or other government-issued ID details submitted for KYC verification.
• Payment data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are never stored on bbokk servers; they are processed directly through PCI-DSS compliant payment gateways.
• Communications data: Messages, queries, and attachments sent to bbokk support via live chat, email, or any other communication channel.
• Preference data: Language preferences, communication preferences, and responsible gaming settings such as deposit limits and session reminders that you configure in your account.

1.2 Data Generated by Platform Use

When you access or use the bbokk platform, we automatically collect certain technical and behavioural data:

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Usage data: Pages visited, games played (cricket betting, slots, crash games, live casino), session duration, betting history, transaction history, and navigation patterns within the platform.
• Location data: Approximate geographic location derived from your IP address (city and country level). We do not collect GPS-level precise location data.
• Log data: Server logs recording login times, logout times, failed login attempts, and actions taken within the platform for security and fraud prevention purposes.

1.3 Data from Third Parties

We may receive personal data about you from trusted third-party sources, including:

• Payment processors: Transaction confirmation data, payment status updates, and fraud screening results from bKash, Nagad, Rocket, Upay, and banking partners.
• Identity verification providers: Results of automated NID or document checks conducted by our KYC service partners.
• AML screening providers: Sanctions list screening results and politically exposed person (PEP) checks conducted as part of our Anti-Money Laundering compliance obligations.

2. How We Use Your Data

bbokk uses your personal data only for the specific purposes listed below. For each purpose, we identify the lawful basis on which we rely.

bbokk does not use your personal data for automated profiling that produces legal or similarly significant effects without human review. Where risk scoring models are applied for fraud or AML purposes, material decisions are reviewed by a human compliance officer before any action is taken against your account.

3. Data Sharing & Disclosure

bbokk does not sell, rent, or trade your personal data. We share your data only where strictly necessary for the purposes described in this policy, and only with the categories of recipients listed below.

3.1 Payment Processors

To process your deposits and withdrawals, we share the minimum necessary payment and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These partners are contractually bound to process your data only for the specific transaction purpose and not to use it for their own marketing activities.

3.2 Identity and KYC Verification Providers

We share identity document data with third-party KYC verification providers to confirm your identity and age in compliance with our responsible gaming and AML obligations. These providers are required to maintain confidentiality and to delete or return your documents once verification is complete.

3.3 Legal and Regulatory Authorities

bbokk may be required to disclose personal data to government bodies, law enforcement agencies, financial intelligence units, or regulators where we are legally compelled to do so — for example, in connection with a court order, AML investigation, or tax authority request. We will notify you of such disclosures where permitted by law.

3.4 Technology Service Providers

We use carefully selected technology partners to operate and maintain the platform, including cloud hosting providers, customer support software vendors, and cybersecurity monitoring services. These providers access personal data only to the extent necessary to perform their contracted services and are bound by strict data processing agreements.

3.5 Game Content Providers

To deliver live casino and RNG game content, we work with licensed game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive anonymised session identifiers to facilitate gameplay, but they do not receive your full personal profile or payment details.

4. Cookies & Tracking Technologies

bbokk uses cookies and similar tracking technologies to operate the platform, remember your preferences, measure platform performance, and, with your consent, deliver relevant promotional content. The following table summarises the types of cookies we use.

4.1 Managing Your Cookie Preferences

You can manage non-essential cookie categories through your account settings or by adjusting your browser settings to block or delete cookies. Please note that disabling strictly necessary or functional cookies may impair the performance of the bbokk platform, including your ability to maintain a logged-in session or retain your responsible gaming preferences.

Most modern browsers — including Chrome, Firefox, Samsung Internet (widely used in Bangladesh), and Opera Mini — allow you to view, manage, and delete cookies through the browser's privacy or settings menu. Consult your browser's help documentation for specific instructions.

4.2 Do Not Track Signals

Some browsers transmit a "Do Not Track" (DNT) signal to websites. bbokk currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for interpreting them. We encourage you to use the cookie preference controls described above to exercise granular control over your data.

5. Data Retention & Security

5.1 Retention Periods

bbokk retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the duration of your account and for 5 years following account closure, to meet AML record-keeping obligations.
• KYC and identity documents: Retained for 5 years following account closure or the last transaction date, whichever is later, in accordance with financial compliance requirements.
• Transaction records: Retained for 5 years following the transaction date.
• Support communications: Retained for 2 years following the resolution of the relevant query.
• Marketing consent records: Retained for 3 years following the withdrawal of consent, as evidence of your opt-in and opt-out history.
• Technical and log data: Retained for 12 months for security monitoring purposes, then deleted or anonymised.

5.2 Security Measures

bbokk implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bbokk servers.
• AES-256 encryption for sensitive data fields stored at rest, including payment details and identity document references.
• Role-based access controls (RBAC) ensuring that only authorised personnel with a legitimate business need can access personal data.
• Multi-factor authentication (MFA) for all bbokk staff accessing internal systems that contain personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security auditors.
• Automated intrusion detection systems (IDS) monitoring for unusual access patterns and potential data breaches 24 hours a day, 7 days a week.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, bbokk will notify affected players without undue delay — and in any event within 72 hours of becoming aware of the breach — via SMS to your registered mobile number. The notification will describe the nature of the breach, the categories of data affected, and the steps we have taken or propose to take to address the breach and mitigate its effects.

6. Your Privacy Rights

As a player on the bbokk platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] or via live chat. We will respond within 10 business days of receiving a verified request.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may also update certain details directly through your account profile.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where we have no other lawful basis for retaining it. This right is subject to legal retention obligations — for example, we are required to retain KYC and transaction records for 5 years under AML regulations and cannot delete these at your request during that period.
• Right to restrict processing: You may request that we restrict the processing of your data — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) to transfer to another service provider.
• Right to object: You may object to processing based on legitimate interest (such as marketing analytics), and we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

7. Third-Party Services & External Links

The bbokk platform integrates with third-party services to deliver core functionality, including payment processing, live game streaming, and customer support tooling. While we vet these partners carefully, please note that their own privacy policies govern how they handle data within their systems. bbokk is not responsible for the privacy practices of third-party services accessed through the platform.

7.1 Game Providers

Live casino and slot game content delivered by Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming is governed by those providers' own data processing agreements with bbokk. Game play sessions may be recorded by the game provider for integrity and dispute resolution purposes. These recordings are not accessible to other players and are retained in accordance with the provider's own data retention schedule.

7.2 Payment Partners

Payment transactions processed via bKash, Nagad, Rocket, and banking partners are subject to those institutions' own privacy policies and regulatory obligations under Bangladesh Bank guidelines. bbokk has no control over how these partners handle data within their own systems once a transaction has been initiated.

7.3 No External Advertising Networks

bbokk does not place third-party advertising network trackers or social media pixel tags on the bbokk.net platform. We do not share your browsing behaviour on bbokk.net with social media platforms or advertising networks. Any promotional communications from bbokk are sent directly from bbokk's own systems to your registered mobile number or email address.

8. Policy Updates & Contact

8.1 Updates to This Policy

bbokk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, we will notify registered players via SMS to their registered mobile number at least 7 days before the updated policy takes effect. The "Last updated" date at the top of this document will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically, particularly before providing additional personal data or using new platform features. Continued use of the bbokk platform after the effective date of an updated policy constitutes your acceptance of the changes.

8.2 Contacting Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bbokk handles your personal data, you can reach our Data Protection team using the following contact:

• Email: [email protected]
• Live Chat: Available 24/7 through the bbokk platform
• Response time: We aim to respond to all privacy-related queries within 10 business days (Bangladesh Standard Time, UTC+6)

All privacy-related communications are handled in English. If you are writing from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar, you are welcome to reach out via live chat for the fastest response.