bkdo Privacy Policy

01 Introduction

bkdo ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of every individual who uses the bkdo online casino and sports betting platform ("Platform"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This Policy applies to all users of the bkdo Platform, including visitors who browse without registering and registered players who hold an active account. It covers all personal data collected through the Platform, through our customer support channels, and through any promotional or marketing communications you receive from bkdo where you have consented to receive them.

This Policy should be read together with the bkdo Terms and Conditions, which are available at bkdo.io/terms-conditions. In the event of any conflict between this Policy and the Terms and Conditions on a data-related matter, this Policy shall govern.

02 Data Controller

For the purposes of applicable data protection law, bkdo is the data controller responsible for your personal data. As data controller, bkdo determines the purposes for which and the manner in which your personal data is processed. We are responsible for ensuring that processing carried out on our behalf by data processors (such as payment service providers and identity verification partners) complies with applicable data protection standards.

If you have any questions about this Policy, wish to exercise your data rights, or want to raise a privacy concern, you may contact the bkdo Data Protection team at [email protected]. Please include "Privacy Enquiry" in the subject line of your message so that it is directed to the appropriate team promptly.

03 Personal Data We Collect

bkdo collects personal data in the categories set out in the table below. The specific data points collected from you will depend on how you use the Platform and the stage of account lifecycle you are in.

3.1 Special Category Data

bkdo does not intentionally collect special category personal data (sometimes referred to as sensitive personal data) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity verification purposes. Where identity documents provided by a player incidentally contain such information, we process only the data points necessary for KYC verification and do not separately record or utilise the remaining content.

04 How We Collect Your Data

bkdo collects personal data through the following channels and mechanisms:

• Direct registration: Information you provide when creating a bkdo account, completing KYC verification, or updating your account profile.
• Transactions: Data generated when you make a deposit, request a withdrawal, or participate in a promotion on the Platform.
• Platform interaction: Technical and usage data automatically generated as you navigate the Platform, place bets, or use casino games.
• Customer support: Information you share when you contact bkdo via live chat, email, or any other support channel.
• Cookies and tracking technologies: Data collected via cookies, session tokens, and analytics tools as described in Section 9 of this Policy.
• Third-party verification partners: Identity and fraud-risk data received from KYC service providers and payment processors as part of the account verification process.

05 How We Use Your Personal Data

bkdo processes personal data for the following specific purposes. We will only use your data for the purpose for which it was collected, unless we reasonably consider that we need to use it for another purpose that is compatible with the original purpose and we notify you accordingly.

5.1 Account Operation and Service Delivery

We use your identity and contact data to create and maintain your bkdo account, process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, deliver the sports betting and casino gaming services you have requested, and send you transactional notifications such as deposit confirmations and withdrawal updates.

5.2 Identity Verification and Regulatory Compliance

As part of our Know Your Customer (KYC) obligations and anti-money laundering (AML) programme, we process identity data to verify that you are who you claim to be, that you meet the 21+ age requirement, and that your use of the Platform does not present a financial crime risk. This processing is mandatory and cannot be opted out of without affecting your ability to use the Platform.

5.3 Fraud Prevention and Security

We process technical and financial data to detect, investigate, and prevent fraudulent activity, unauthorised access, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions. This processing is in our legitimate interests and in the interests of the wider player community.

5.4 Responsible Gaming

Usage and transaction data is analysed to identify patterns that may indicate gambling-related harm — such as increasing bet frequency, chasing losses, or rapid escalation of deposit amounts — so that bkdo can proactively offer responsible gaming support tools or intervene where necessary. This processing is in the vital interests of affected players.

5.5 Marketing and Promotions

Where you have given explicit consent, we use your contact data and marketing preferences to send you promotional offers, bonus notifications, and news about new games and features on the bkdo Platform. You may withdraw this consent at any time by updating your account preferences or contacting us at [email protected]. Withdrawal of marketing consent does not affect your ability to use the Platform or receive transactional communications.

5.6 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to analyse how players interact with the Platform, identify areas for improvement, test new features, and optimise the overall user experience for our Bangladesh market audience. This analysis does not identify you personally.

06 Legal Basis for Processing

bkdo processes your personal data on one or more of the following legal bases depending on the specific purpose of the processing activity:

• Performance of a contract: Processing necessary to provide the services you have requested when registering an account, making deposits, and placing bets on the Platform.
• Legal obligation: Processing required to comply with our KYC, AML, and financial crime prevention obligations under applicable law.
• Legitimate interests: Processing carried out in our legitimate business interests, including fraud prevention, platform security, and aggregate analytics, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing and promotional communications. You may withdraw consent at any time without penalty.
• Vital interests: Processing carried out to protect the wellbeing of a player where there is reasonable indication of gambling-related harm and the player is unable or unwilling to act in their own protection.

07 Data Sharing and Disclosure

bkdo does not sell, rent, or transfer your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the following limited circumstances and only to the minimum extent necessary for the purpose of the sharing:

7.1 Payment Service Providers

To process your deposits and withdrawals, we share the necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners process your data as independent data controllers in accordance with their own privacy policies and are subject to their own regulatory obligations.

7.2 Identity Verification Partners

To fulfil our KYC obligations, we share identity documents and personal data with authorised third-party identity verification service providers. These providers act as data processors under written agreements with bkdo and are contractually prohibited from using your data for any purpose other than identity verification on our behalf.

7.3 Technology and Infrastructure Providers

We use third-party cloud hosting, database, security, and analytics service providers to operate the Platform. These providers access only the data necessary to deliver their contracted services to bkdo and are bound by strict confidentiality and data processing agreements.

7.4 Legal and Regulatory Authorities

bkdo will disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally required to do so, where disclosure is necessary to protect the rights, property, or safety of bkdo, our players, or the public, or where we receive a valid legal process request such as a court order or statutory demand. We will notify affected players of such disclosure requests where we are legally permitted to do so.

08 Data Retention

bkdo retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being open and active on the Platform.
• Closed account data: Retained for a minimum of five (5) years following account closure to satisfy AML record-keeping obligations and to enable dispute resolution.
• KYC and identity documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by applicable financial crime prevention regulations.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last communication in a support thread, unless the communication is linked to an ongoing investigation or legal proceeding.
• Marketing consent records: Retained for the duration of the account relationship and for two (2) years after consent is withdrawn, as evidence of the consent given.
• Technical and log data: Retained for up to twelve (12) months for security and fraud detection purposes, after which it is deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing and scheduled for deletion at the earliest practicable opportunity.

09 Cookies and Tracking Technologies

bkdo uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, analyse Platform usage, and enhance the overall user experience. A cookie is a small text file placed on your device by the bkdo Platform when you access it.

9.1 Types of Cookies Used

• Essential cookies: Strictly necessary for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and whether you have acknowledged certain Platform notices. Disabling these may reduce Platform convenience but will not prevent access.
• Analytical cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — such as which pages are most visited, how long sessions last, and where users encounter navigation difficulties. This data is used solely to improve the Platform and is not linked to individual identities.

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that blocking essential cookies will prevent you from logging in to your bkdo account and using core Platform features. bkdo does not use third-party advertising or tracking cookies and does not participate in cross-site behavioural advertising networks.

10 Data Security

bkdo takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the bkdo Platform.
• Encryption of sensitive data at rest, including stored KYC documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular security vulnerability assessments and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for internal staff accessing production systems containing personal data.
• Comprehensive incident response and data breach notification procedures to ensure prompt detection, containment, and communication of any security incidents.

11 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data that bkdo holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and specify clearly which right you wish to exercise and in relation to which data.

11.1 Right of Access

You have the right to request a copy of the personal data that bkdo holds about you, along with information about how it is processed. We will provide this information within a reasonable timeframe. We may request proof of identity before fulfilling an access request.

11.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data that we hold about you. Where possible, you may update certain data directly through your account settings panel. For data that cannot be self-corrected, please contact our support team.

11.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that this right is subject to our legal obligation to retain certain data for the minimum retention periods set out in Section 8 — we cannot delete data that we are legally required to retain.

11.4 Right to Restrict Processing

You have the right to request that we suspend processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being evaluated. During a restriction, we may store your data but will not actively process it beyond what is necessary to maintain the restriction.

11.5 Right to Object

You have the right to object to processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to your data being used for direct marketing purposes at any time, without needing to give a reason. We will cease marketing communications promptly upon receiving a valid objection.

11.6 Right to Withdraw Consent

Where processing is based on your consent — such as receiving promotional communications — you may withdraw that consent at any time by updating your account preferences or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12 Third-Party Links

The bkdo Platform may contain links to third-party websites, game provider portals, or payment partner interfaces. This Privacy Policy applies solely to the bkdo Platform and does not extend to any third-party website or service that you navigate to from bkdo. We have no control over, and accept no responsibility for, the privacy practices or content of any third-party site. We encourage you to review the privacy policy of any third-party site before providing them with personal data.

Embedded game content provided by third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — is delivered via secure iframes. These providers may collect technical data such as session identifiers and game interaction logs as part of their service delivery. Please refer to the respective provider's privacy documentation for details of their data practices.

13 Children and Minors

bkdo is strictly an adults-only platform. Registration and use of the Platform is permitted only for individuals who are 21 years of age or older. bkdo does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process and forms part of our KYC obligations.

If bkdo becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification having taken place, the relevant account will be suspended immediately, any funds held in the account will be handled in accordance with our Terms and Conditions, and all personal data associated with the underage registration will be deleted as soon as legally permissible.

If you are a parent or guardian and believe that a minor in your care has registered on the bkdo Platform, please contact us immediately at [email protected] so that we can take prompt action.

14 Updates to This Privacy Policy

bkdo reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When we make material changes to this Policy, we will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect. The updated Policy will display a revised "Last updated" date at the top of the document.

Your continued use of the bkdo Platform following notification of a Policy update constitutes your acknowledgement of the revised Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data in accordance with the rights described in Section 11 of this Policy. We recommend that you review this Policy periodically to stay informed about how bkdo protects your data.

Minor updates — such as corrections to typographical errors, clarifications of existing language that do not alter the substance of the Policy, or updates to contact details — may be made without prior notification to players, although the "Last updated" date will always be revised to reflect any change.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bkdo processes your personal data, please reach out to our Data Protection team using the contact details below. We are committed to addressing all privacy enquiries promptly, courteously, and in full.