bsok Privacy Policy — How We Handle Your Data

When you interact with the bsok platform — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect and process certain categories of personal data. The specific data we collect depends on the nature of your interaction with the platform and is described in detail below.

1.1 Registration and Identity Data

When you create a bsok account, we collect the information you provide during the registration process. This includes your legal full name, date of birth, residential address in Bangladesh (including city — whether that is Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, or any other location), email address, and mobile phone number. This data is required to establish your account identity and to deliver account-related communications to you.

1.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to verify that players meet the 18+ age requirement, bsok may request documentary evidence of identity and age. Acceptable documents include a Bangladesh National Identity Card (NID), passport, or other government-issued photographic identification. We may also request a selfie photograph for liveness verification purposes. KYC documents are processed securely and retained only for as long as required by applicable legal obligations.

1.3 Financial and Transaction Data

We collect information about the financial transactions you conduct on the bsok platform. This includes deposit amounts, withdrawal amounts, transaction timestamps, the payment methods used (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard), and transaction reference numbers. We do not store full card numbers or mobile banking PINs — these are handled directly by the relevant payment processors under their own security protocols.

1.4 Gaming and Betting Activity Data

We maintain a detailed log of all gaming and betting activity conducted through your bsok account. This includes the games played, bet amounts, game outcomes, bonus claims, wagering progress, session durations, and win/loss records. This data is used to manage your account, settle bets accurately, administer bonuses, and identify potential problem gambling patterns for responsible gaming purposes.

1.5 Technical and Device Data

When you access the bsok platform — whether via a mobile browser on an Android or iPhone device, or via a desktop browser — we automatically collect certain technical data. This includes your IP address, device type and model, operating system, browser type and version, screen resolution, time zone settings, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

1.6 Communications Data

If you contact the bsok customer support team by email at [email protected] or through any other communication channel we provide, we retain a record of that correspondence including the content of your messages, the date and time of communication, and any supporting documentation you attach. This data is used to resolve your query, improve our support processes, and maintain a record of our communications for dispute resolution purposes.

bsok processes your personal data only where we have a lawful basis for doing so. The primary bases on which we process your data are: (a) the performance of our contract with you as a registered player; (b) compliance with applicable legal and regulatory obligations; (c) our legitimate interests in operating a secure, fair, and commercially viable online gaming platform; and (d) your explicit consent, where required for specific processing activities such as direct marketing communications.

2.1 Account Operations and Service Delivery

The primary use of your personal data is to operate and manage your bsok account. This includes processing your registration, verifying your identity, enabling deposits and withdrawals through bKash, Nagad, Rocket, and other supported payment methods, settling bets and game outcomes, administering bonus credits and wagering requirements, and delivering account notifications and transaction receipts to your registered email address or mobile number.

2.2 Security and Fraud Prevention

bsok uses your technical and transaction data to monitor for suspicious account activity, detect unauthorised access attempts, prevent multi-accounting, and identify patterns consistent with bonus abuse, money laundering, or other fraudulent conduct. Our security systems operate continuously and may flag accounts for manual review where anomalous behaviour is detected. This processing is carried out in bsok's legitimate interest of protecting the integrity of its platform and the security of all player accounts.

2.3 Responsible Gaming Monitoring

We analyse your gaming activity data — including session duration, deposit frequency, bet sizes relative to account balance, and loss patterns — to identify indicators of potential problem gambling behaviour. Where our responsible gaming algorithms identify a player who may be experiencing gambling-related harm, we may proactively reach out with resources and information, or apply account-level protections as described in our Responsible Gaming Policy. This processing is carried out in the legitimate interests of player welfare.

2.4 Legal and Regulatory Compliance

bsok processes and retains certain categories of your data to fulfil its legal and regulatory obligations. This includes maintaining transaction records for anti-money laundering (AML) reporting purposes, retaining KYC documentation as required by applicable law, and responding to lawful requests from competent authorities. This processing is mandatory and cannot be opted out of — it is a fundamental condition of your use of the bsok platform.

2.5 Platform Improvement and Analytics

We use aggregated and anonymised data derived from player behaviour across the bsok platform to improve our games, betting markets, payment processes, and user interface. This analytics processing does not identify you personally — it operates at the aggregate level. Individual player data is not shared with game studios or content providers in identifiable form for analytics purposes.

2.6 Marketing Communications

With your consent, bsok may send you promotional communications about new games, upcoming sports events (such as BPL cricket, IPL, T20 World Cup fixtures), bonus offers, and seasonal promotions timed around events like Eid, Pohela Boishakh, or Bangladesh Victory Day. You may withdraw your consent to marketing communications at any time by contacting [email protected] or by using the unsubscribe link included in each marketing message. Withdrawal of marketing consent does not affect the processing of your data for account operation or legal compliance purposes.

In the course of operating the bsok platform, we share certain categories of your personal data with trusted third parties. All such sharing is governed by data processing agreements that require those third parties to process your data only as instructed by bsok and in compliance with applicable data protection standards.

3.1 Payment Processors

To facilitate deposits and withdrawals, bsok shares the minimum necessary transaction data with our payment processing partners. For mobile banking transactions via bKash, Nagad, Rocket, and Upay, this means sharing your registered mobile number and transaction amount with the relevant mobile financial service provider. For card payments via Visa or Mastercard, transaction data is processed by our card payment gateway partner. All payment processor integrations are secured via SSL/TLS encryption and tokenisation. Full financial credentials (mobile banking PINs, card CVV codes) are never processed or stored by bsok directly.

3.2 Identity Verification Partners

For KYC verification, bsok may share your identity documents (NID, passport) and facial verification data with a specialist identity verification service provider. These providers process your documents solely for the purpose of confirming your identity and age on bsok's behalf. Identity data is not retained by verification partners beyond the period necessary to complete the verification check.

3.3 Game Providers and Software Suppliers

The bsok platform is powered by games and platform technology supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners. These providers operate the game logic, random number generation (RNG), and live dealer streaming components of their respective games. For audit and dispute resolution purposes, game providers may retain records of game rounds played on their systems. bsok shares session identifiers with game providers but does not share full identity data unless required for a specific regulatory or dispute resolution purpose.

3.4 Regulatory and Law Enforcement Authorities

bsok may be required to disclose personal data to competent regulatory authorities, law enforcement agencies, financial intelligence units, or courts in response to a lawful order, subpoena, or regulatory requirement. In such cases, bsok will disclose only the data specifically requested and will inform the affected player where it is legally permissible to do so.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bsok's business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bsok will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations that are at least as protective as those set out in this Privacy Policy, and will notify affected players of any material change to the data controller's identity before the transfer takes effect.

bsok uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse aggregate usage patterns. This section explains the types of cookies we use and how you can manage your cookie preferences.

4.1 What Are Cookies?

A cookie is a small text file placed on your device (smartphone, tablet, or desktop computer) by a website when you visit it. Cookies allow the website to remember your actions and preferences over a period of time so you do not have to re-enter them each time you visit. bsok uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period or until you delete them).

4.2 Managing Your Cookie Preferences

You can control and delete cookies through your browser settings. Most modern browsers allow you to block or delete cookies from specific websites. Please note that disabling essential or fraud prevention cookies will impair the functionality of the bsok platform — you may be unable to maintain a login session or access certain features if essential cookies are blocked. To manage cookies, refer to your browser's help documentation. On mobile devices, cookie management options are typically found in the browser application's privacy or site settings menu.

4.3 Third-Party Tracking

bsok does not permit third-party advertising networks or data brokers to place tracking cookies on the bsok platform. Game providers (such as Pragmatic Play, Evolution Gaming, and Spribe) may set their own functional cookies within their game frames for the purpose of operating the game session. These provider-level cookies are strictly functional and do not track your activity outside of the bsok platform.

bsok takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it from unauthorised access, accidental loss, disclosure, or destruction. No online platform can guarantee absolute security, but bsok's security infrastructure is designed to industry-leading standards appropriate for a financial services and gaming environment.

5.1 Technical Security Measures

All data transmitted between your device and the bsok platform is encrypted using TLS 1.2 or TLS 1.3 (Transport Layer Security), which underpins the padlock indicator you see in your browser's address bar. Account passwords are stored in a hashed, salted format and are never stored in plain text. Sensitive financial data is tokenised — bsok stores payment tokens rather than raw account numbers or PINs. Our platform infrastructure operates behind multi-layer firewalls, and access to production systems is restricted to authorised personnel via multi-factor authentication.

5.2 Organisational Security Measures

Access to personal data within the bsok organisation is governed by a strict need-to-know principle. Only those members of the bsok team whose role requires access to specific categories of personal data are granted access to that data. All personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training. bsok conducts periodic internal reviews of data access controls and security procedures.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, bsok will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as promptly as practicable. Notification will be sent to your registered email address and will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the steps bsok has taken or proposes to take to address the breach.

5.4 Data Retention Periods

bsok retains your personal data for as long as your account is active and for a defined period following account closure, in order to satisfy legal, regulatory, and audit requirements. The table below summarises our standard retention periods by data category.

As a player on the bsok platform, you have a number of rights with respect to the personal data we hold about you. These rights are set out below. Where bsok processes your data on the basis of legitimate interests or legal obligation, some of these rights may be subject to limitations — bsok will explain any such limitations clearly when responding to your request.

6.1 Right of Access

You have the right to request a copy of all personal data that bsok holds about you. This is commonly referred to as a Subject Access Request (SAR). Upon receiving a valid SAR, bsok will provide you with a structured summary of your data including the categories of data held, the purposes for which it is processed, the retention periods applied, and any third parties with whom it has been shared.

6.2 Right to Rectification

If you believe that any personal data bsok holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account details such as your email address, mobile number, or residential address, you can update these directly through your bsok account dashboard. For identity data (name, date of birth) and KYC documents, corrections require verification and must be requested via [email protected] with supporting documentation.

6.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent for a consent-based processing activity. Please note that bsok is subject to legal obligations to retain certain categories of data (particularly financial transaction records and KYC documents) for defined periods after account closure, and erasure requests cannot override these legal retention obligations.

6.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data held about you, or where you have objected to processing and a determination is pending — you may request that bsok restricts the processing of your data to storage only, pending resolution of the relevant issue.

6.5 Right to Data Portability

Where bsok processes your data on the basis of your consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format (such as CSV or JSON). You may also request that bsok transmit this data directly to another data controller where technically feasible.

6.6 Right to Object

You have the right to object to bsok's processing of your personal data where that processing is carried out on the basis of legitimate interests. Where you object, bsok will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims. You have an unconditional right to object to processing for direct marketing purposes, including profiling related to direct marketing.

The bsok platform integrates technology and content from a number of carefully selected third-party service providers. This section describes the key categories of third-party integration and their implications for your personal data.

7.1 Game Content Providers

Games available on bsok are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch and play a game, your session is connected to that provider's game servers. The provider processes the game round data necessary to operate the game and determine outcomes. Game providers are contractually required to process this data only for the purposes of game operation and regulatory compliance. bsok does not authorise game providers to use player data for their own marketing purposes.

7.2 Mobile Banking and Payment Integrations

Deposit and withdrawal functionality on bsok is integrated with mobile financial service providers including bKash, Nagad, Rocket, and Upay, as well as bank partners including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. When you initiate a payment, you are interacting directly with that provider's secure payment interface. Each payment provider operates under its own privacy policy and terms of service, which govern the data they collect during the transaction. bsok recommends that you review the privacy policies of your chosen payment providers for full details of their data practices.

7.3 No Third-Party Advertising Networks

bsok does not integrate third-party advertising networks, social media tracking pixels, retargeting platforms, or programmatic advertising technologies on its platform. Your browsing and gaming activity on bsok is not shared with advertising networks and is not used to serve targeted advertisements on other websites or applications.

7.4 Links to External Websites

The bsok platform does not include links to external websites outside the bsok domain. If you navigate away from the bsok platform to an external website (for example, by independently visiting a payment provider's website or a cricket news source), your activity on that external site is governed entirely by that site's own privacy policy. bsok has no responsibility for the data practices of external websites.

bsok reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. The effective date at the top of this policy indicates when the current version came into force.

8.1 Notification of Material Changes

Where bs ok makes a material change to this Privacy Policy — for example, a change that introduces a new category of data collection, a new purpose for processing, or a new category of third-party recipient — we will notify affected players by email to their registered account address at least 14 days before the change takes effect. For non-material clarifications and corrections, we will update the policy and revise the effective date without individual notification.

8.2 Continued Use as Acceptance

Your continued use of the bsok platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material change to this Privacy Policy, you should cease using the bsok platform and contact [email protected] to request closure of your account and erasure of your personal data (subject to the legal retention obligations described in Section 5.4 above).

8.3 Policy Archive

bsok maintains an internal archive of all prior versions of this Privacy Policy. If you wish to review a previous version of this policy — for example, to understand what terms applied during a specific period of your account activity — you may request a copy by emailing [email protected] with the specific effective date of the version you require. We will provide the relevant archived version within 10 business days of receiving your request.

8.4 Contact for Privacy Enquiries

All privacy-related enquiries, data rights requests, and complaints regarding bsok's handling of your personal data should be directed to our data protection contact at: [email protected]. We aim to respond to all privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to resolve all formal data rights requests within 30 calendar days of receipt.