bpok Privacy Policy — Your Data, Your Rights, Our Commitment

1 Who We Are

1.1 bpok is an online gambling platform accessible at https://bpok.io. The Platform offers sports betting, live casino, slots, crash games, and related entertainment services targeted at adult players in Bangladesh. All customer-facing content and support communications are conducted in English.

1.2 For the purposes of this Privacy Policy, bpok acts as the data controller in respect of all personal data collected from users of the Platform. As data controller, bpok determines the purposes and means by which your personal data is processed.

1.3 If you have any questions about how your personal data is handled, please contact our data support team at [email protected]. Email must be used as plain text contact — do not use it as a clickable link.

2 Data We Collect

2.1 bpok collects personal data only to the extent necessary to provide our Services and comply with applicable obligations. The categories of personal data we may collect include:

2.2 bpok does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) unless you voluntarily disclose such information to our responsible gaming team in connection with a self-exclusion or support request.

3 How We Collect Your Data

3.1 Directly from you. The majority of personal data bpok holds is provided directly by you when you register an Account, complete identity verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or submit a complaint.

3.2 Automatically through your use of the Platform. When you access bpok, our servers automatically record Technical Data and Usage Data including your IP address, device identifiers, session timestamps, and gameplay activity. This data is collected via cookies, server logs, and similar tracking technologies described further in Section 8.

3.3 From third-party verification partners. Where you submit identity documents for KYC verification, bpok may use third-party identity verification services to cross-reference the information you provide against authoritative data sources. These partners process your data under their own privacy policies and data processing agreements with bpok.

3.4 From payment service providers. When you deposit or withdraw via bKash, Nagad, Rocket, Upay, or another approved payment method, bpok receives confirmation data from those providers (such as transaction reference numbers and masked wallet identifiers) to reconcile your Account balance. bpok does not receive your full payment credentials from these providers.

4 Legal Basis for Processing

4.1 bpok processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between bpok and you — including operating your Account, processing deposits and withdrawals, and delivering game outcomes.
• Legal obligation: Processing necessary for bpok to comply with applicable law, including anti-money-laundering obligations, KYC requirements, and record-keeping duties.
• Legitimate interests: Processing carried out for bpok's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — where those interests are not overridden by your rights.
• Consent: Where bpok relies on your consent — for example, to send you marketing communications or to place non-essential cookies on your device — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

5 How We Use Your Data

5.1 bpok uses the personal data it holds for the following specific purposes:

1. Account management: Creating, maintaining, and administering your bpok Account, including password resets, preference updates, and Account closure.
2. Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and that your identity matches the information provided at registration. 21+ Only
3. Transaction processing: Crediting deposits to your Account Balance and processing withdrawal requests to your registered bKash, Nagad, or other approved payment method in BDT.
4. Customer support: Responding to your queries, complaints, and data subject requests submitted via [email protected] or live chat.
5. Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and any other conduct prohibited under our Terms & Conditions.
6. Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling and administering voluntary self-exclusion, deposit limits, and cooling-off periods.
7. Regulatory compliance: Retaining records required by applicable anti-money-laundering and financial compliance obligations.
8. Platform improvement: Analysing anonymised and aggregated Usage Data to improve the performance, reliability, and user experience of the bpok Platform.
9. Marketing communications: Sending you promotional offers, bonus notifications, and platform news where you have consented to receive such communications. You may opt out at any time.

6 Data Sharing & Disclosure

6.1 bpok does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the circumstances described below and always under contractual safeguards that require the recipient to protect your data.

6.2 Game providers. When you play a game on bpok, a session token and anonymised player identifier may be passed to the relevant game provider (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe) to load and authenticate the game. Full identity data is not shared with game providers.

6.3 Payment processors. To process your deposit or withdrawal, bpok shares the necessary transaction data (amount, wallet reference, Account identifier) with the relevant payment service provider (bKash, Nagad, Rocket, Upay, or approved bank). These partners act as independent data controllers in respect of their own transaction records.

6.4 Identity verification partners. To fulfil KYC obligations, bpok may share identity document images and personal details with accredited third-party verification services. These partners are bound by data processing agreements and are prohibited from using your data for any purpose other than verification.

6.5 Legal and regulatory disclosure. bpok may disclose personal data to law enforcement authorities, courts, or regulatory bodies where required by applicable law, court order, or where bpok believes such disclosure is necessary to protect the rights, property, or safety of bpok, its players, or the public.

6.6 Business transfers. In the event of a merger, acquisition, or sale of all or part of bpok's business, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and any material change to this Privacy Policy that results from it.

7 Payment Data

7.1 All financial transactions on bpok are denominated in Bangladeshi Taka (BDT) and processed via bpok's approved payment partners. bpok does not store your full bKash PIN, Nagad PIN, bank card number, or any other sensitive authentication credential.

7.2 Transaction records — including deposit amounts, withdrawal amounts, dates, and masked wallet identifiers — are retained by bpok as part of your Account history for the period required under applicable financial record-keeping obligations (see Section 9).

7.3 If you believe an unauthorised transaction has been processed through your bpok Account, you must notify us immediately at [email protected]. bpok will investigate all reported unauthorised transactions and cooperate with the relevant payment provider's dispute resolution process.

7.4 bpok applies transaction monitoring to all Account activity. Unusual deposit or withdrawal patterns may trigger a compliance review, during which withdrawals may be temporarily held pending the outcome of the review. This is a standard financial compliance measure and is not an indication of any wrongdoing on your part unless otherwise communicated.

8 Cookies & Tracking Technologies

8.1 bpok uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform effectively. The types of cookies bpok uses are described in the table below:

8.2 You can control cookie preferences through your web browser settings. Disabling strictly necessary cookies may prevent the Platform from functioning correctly. Disabling analytics or marketing cookies will not affect your ability to play games or process transactions.

8.3 bpok does not use cross-site tracking cookies, browser fingerprinting for advertising purposes, or any technology designed to track your online behaviour outside of the bpok Platform.

9 Data Retention

9.1 bpok retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal, regulatory, and business obligations. The following retention periods apply as a general guide:

• Account data and identity documents: Retained for the duration of your Account relationship with bpok and for a minimum of five (5) years following Account closure, in line with standard financial record-keeping practice.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction to satisfy financial compliance obligations.
• Support communications: Retained for three (3) years from the date of the last communication, or longer if the communication relates to a live dispute or legal matter.
• Usage and analytics data: Anonymised and aggregated after thirteen (13) months. Raw usage logs are deleted on a rolling basis in line with our data minimisation policy.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications, plus two (2) years thereafter as evidence of your consent.

9.2 Where bpok is required by law to retain data for a period longer than stated above, the legal obligation takes precedence and data will be held for the legally required period.

10 Data Security

10.1 bpok implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bpok's servers;
• Encryption of sensitive data fields (including payment identifiers and identity document hashes) at rest in our database;
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data;
• Regular internal security audits and vulnerability assessments of the bpok Platform;
• Multi-factor authentication for bpok staff accounts with access to personal data systems;
• Incident response procedures to identify, contain, and notify affected parties in the event of a data breach.

10.2 While bpok takes all reasonable precautions, no internet-based system can guarantee absolute security. You are responsible for keeping your own login credentials secure. If you suspect that your Account credentials have been compromised, contact [email protected] immediately.

11 Your Rights

11.1 As a user of the bpok Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your Account username and a description of your request.

• Right of Access: You have the right to request a copy of all personal data bpok holds about you. bpok will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data bpok holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that bpok delete your personal data. This right is subject to our legal and regulatory retention obligations — data that must be retained by law cannot be erased until the applicable retention period has expired.
• Right to Restriction of Processing: In certain circumstances (for example, where you contest the accuracy of data or have objected to processing), you may request that bpok restrict processing of your data while the matter is resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that bpok provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. bpok will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where bpok relies on your consent as the legal basis for processing (such as for marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 bpok will not charge a fee for exercising any of the above rights in normal circumstances. If a request is manifestly unfounded or excessive, bpok reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision.

12 Children & Minors

12.1 bpok operates a strict minimum age policy. The Platform is intended exclusively for adults aged 21 years or older. 21+ Only

12.2 bpok does not knowingly collect personal data from individuals under the age of 21. If bpok becomes aware that personal data has been collected from a user under the minimum age, that Account will be closed immediately, all associated funds will be handled in accordance with our Terms & Conditions, and the data will be deleted as soon as practicably possible.

12.3 If you are a parent or guardian and you believe that a minor has registered a bpok Account without authorisation, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13 Marketing Communications

13.1 With your consent, bpok may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, seasonal promotions (such as Eid, Pohela Boishakh, or BPL tournament offers), and other bpok news.

13.2 You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link included in any marketing email; (b) adjusting your notification preferences in your Account settings; or (c) contacting [email protected] with the subject line "Marketing Opt-Out".

13.3 Opting out of marketing communications will not affect transactional communications that are necessary for the operation of your Account, such as deposit confirmations, withdrawal notifications, and security alerts.

13.4 bpok will never share your contact details with third-party marketers for their own direct marketing purposes.

14 Third-Party Links

14.1 The bpok Platform may contain links to third-party websites or services (for example, links to game providers' help pages or payment provider information pages). This Privacy Policy applies solely to the bpok Platform and does not extend to any third-party website or service that you access via such a link.

14.2 bpok has no control over the content, privacy practices, or data-handling policies of third-party websites. We encourage you to read the privacy policy of any third-party site you visit before providing any personal information. bpok accepts no responsibility or liability for the privacy practices of any third-party site.

15 Amendments to This Privacy Policy

15.1 bpok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-handling practices, legal obligations, or Platform features. The revised Privacy Policy will be published on this page with an updated effective date.

15.2 For material changes to this Privacy Policy — particularly those that affect how we use your data or the rights available to you — bpok will notify registered Players via the email address on record or via a prominent in-platform notice, giving you reasonable opportunity to review the changes before they take effect.

15.3 Your continued use of the bpok Platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any amendment, you must cease using the Platform and may close your Account in accordance with Section 13 of the Terms & Conditions.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions published on the bpok Platform.

16 Contact Us

16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way bpok handles your personal data, please contact our data support team using the details below.

Email: [email protected] (plain text — not a clickable link)

Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"

Response Time: bpok will acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 days of receiving a verified request.

Support Hours: 24 hours a day, 7 days a week, including public holidays in Bangladesh (Bangladesh Standard Time, UTC+6).

Language: All support and data rights correspondence is handled in English.