Privacy Policy

1. Introduction

This Privacy Policy is published by bdko ("we", "us", "our", or "the Company") and applies to all users ("you", "your", or "User") who access or use the bdko platform at https://bdko.ws, including our website, services, betting markets, casino games, and any related features. This policy describes how we collect, use, disclose, store, and protect personal information in connection with your use of bdko's services.

By registering an account with bdko, depositing funds, placing bets, or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your data as described herein. If you do not agree with any part of this policy, you must discontinue use of our services. This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the agreement between you and bdko.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, regulatory requirements, or other operational factors. We will notify you of significant changes by posting a prominent notice on our website or by sending a notification to your registered email address. Continued use of bdko's services after any changes constitutes your acceptance of the updated policy.

2. Personal Data We Collect

2.1 Registration Data

When you create an account on bdko, we collect the following information: your full legal name, date of birth, gender, residential address (including city, district, and postal code within Bangladesh), email address, and mobile phone number. This information is required to create and verify your account, comply with age verification obligations (21+ requirement), and maintain contact with you regarding account-related matters. We do not collect sensitive personal data such as religious beliefs, political opinions, or biometric identifiers unless required by law.

2.2 Verification Documents

To comply with anti-money laundering (AML) and know-your-customer (KYC) regulations, we may request government-issued identification documents including National ID Card, passport, or driving license. We may also request proof of address such as utility bills, bank statements, or rental agreements dated within the last three months. These documents are used solely for identity verification and fraud prevention. Once verification is complete, documents are securely stored in encrypted form for the duration required by law, then permanently deleted.

2.3 Financial Transaction Data

We collect transaction history including deposit amounts, deposit dates and times, withdrawal requests, withdrawal processing status, payment method used (bKash, Nagad, Rocket, Upay), and transaction reference numbers. We do not store complete mobile wallet account numbers — only partial masked identifiers (e.g., the last 4 digits) for reference purposes. All payment processing occurs through secure, PCI-compliant third-party payment gateways that tokenize financial data.

2.4 Betting and Gaming Activity

We collect comprehensive records of your betting and gaming activity on bdko, including but not limited to: bets placed, bet amounts, stake size, bet types, selected markets, odds accepted, bet outcomes, winnings, losses, casino games played, game session durations, bonus claims, wagering progress, promotional code usage, and overall account balance history. This data is necessary to operate our platform, settle bets accurately, manage bonuses, detect irregular play patterns, and fulfill our regulatory reporting obligations.

2.5 Technical and Device Data

When you access bdko, we automatically collect technical information including IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, language preferences, time zone settings, referring website URLs, pages visited on bdko, time spent on each page, clickstream data, and interaction patterns. We also collect device identifiers such as mobile device ID where applicable. This data helps us optimize platform performance, troubleshoot technical issues, detect fraudulent activity, and understand user behavior to improve our services.

2.6 Communication Records

We retain records of all communications between you and bdko, including live chat transcripts, email correspondence, support tickets, and any phone call recordings (with your consent where required by law). These records are used for customer service quality assurance, dispute resolution, regulatory compliance, and training purposes. Communication records are retained for 12 months after the last interaction, then securely archived or deleted in accordance with regulatory retention requirements.

3. How We Use Your Personal Data

bdko processes your personal data for the following purposes, each supported by a legitimate legal basis:

• Account Management: Creating and maintaining your account, authenticating your identity, processing login requests, and securing your account against unauthorized access.
• Service Delivery: Processing deposits and withdrawals, placing and settling bets, enabling casino gameplay, calculating winnings, crediting bonuses, and managing your account balance.
• Age Verification: Confirming that you are 21 years of age or older as required by law and our terms of service. Accounts failing age verification are immediately closed.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, collusion, match-fixing, and other prohibited conduct. We use automated risk assessment tools and manual review processes.
• Regulatory Compliance: Complying with AML, KYC, counter-terrorism financing, tax reporting, and other legal obligations imposed by gambling regulators and financial authorities.
• Customer Support: Responding to inquiries, resolving disputes, investigating complaints, and providing technical assistance through live chat, email, and other support channels.
• Platform Improvement: Analyzing user behavior, identifying technical issues, optimizing website performance, testing new features, and improving the overall user experience.
• Marketing Communications: Sending promotional emails, bonus offers, tournament announcements, and platform updates to users who have consented to receive marketing communications. You can opt out at any time.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling, enforcing deposit limits, processing self-exclusion requests, and providing responsible gaming tools and resources.

4. Data Sharing and Third-Party Disclosure

4.1 Service Providers

bdko shares personal data with trusted third-party service providers who assist us in operating our platform. These include payment processors (bKash, Nagad, Rocket, Upay), game providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, etc.), cloud hosting providers, fraud detection services, identity verification services, customer support platforms, email delivery services, and analytics tools. All service providers are contractually bound to use your data only for the specific purposes we authorize and to maintain appropriate security measures. They are prohibited from selling or using your data for their own purposes.

4.2 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, and other governmental authorities when required by law, court order, or regulatory request. This includes disclosures related to AML investigations, tax audits, criminal investigations, national security matters, or compliance with gambling licensing requirements. We will disclose only the minimum data necessary to fulfill the legal obligation and will notify you of such disclosures where legally permitted.

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, bankruptcy, or other business reorganization involving bdko, your personal data may be transferred to the acquiring entity or successor organization. You will be notified via email and/or prominent website notice of any such ownership change. The acquiring entity will be bound by the commitments made in this Privacy Policy unless you consent to a new policy.

4.4 Aggregated and Anonymized Data

bdko may share aggregated, anonymized, or de-identified data that cannot be used to identify individual users with third parties for research, analytics, business intelligence, or marketing purposes. For example, we may share statistics about average bet sizes, popular game categories, or regional user distribution. This data does not contain personally identifiable information and does not fall under the protections of this Privacy Policy.

5. Data Security Measures

bdko employs industry-standard security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers uses 256-bit SSL/TLS encryption. Stored data is encrypted using AES-256 encryption algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All employees and contractors with data access are bound by confidentiality agreements.
• Secure Authentication: User passwords are hashed using bcrypt with salt and never stored in plain text. We support two-factor authentication (2FA) for enhanced account security.
• Firewall Protection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity 24/7.
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing performed by independent third-party security experts.
• Secure Data Centers: Data is hosted in secure, certified data centers with physical access controls, redundant power supplies, climate control, and 24/7 monitoring.
• Incident Response: We maintain an incident response plan to quickly address any data breaches or security incidents. Affected users will be notified within 72 hours of discovery.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data using commercially acceptable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access.

6. Cookies and Tracking Technologies

bdko uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and personalize content. A cookie is a small text file stored on your device by your web browser. We use the following types of cookies:

• Essential Cookies: Required for basic platform functionality including user authentication, session management, security features, and load balancing. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and last visited pages to provide a more personalized experience.
• Analytics Cookies: Collect anonymous usage data including pages visited, time on site, bounce rates, and traffic sources. This data helps us understand how users interact with bdko and identify areas for improvement.
• Marketing Cookies: Track your browsing behavior across sessions to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies are only set with your consent.

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling essential cookies will impair platform functionality and may prevent you from using certain features. Disabling analytics or marketing cookies will not affect core gambling services.

7. Data Retention

bdko retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and contractual obligations. Specific retention periods are:

Data Category	Retention Period	Reason
Account registration data	Account lifetime + 7 years	AML compliance, dispute resolution
Verification documents	Account lifetime + 5 years	KYC compliance, audit trail
Financial transactions	7 years	Tax reporting, financial audits
Betting and gaming activity	7 years	Regulatory reporting, dispute resolution
Communication records	12 months	Customer service quality, dispute resolution
Technical logs	90 days	Security monitoring, troubleshooting
Marketing consent records	3 years after withdrawal	Consent management, compliance

Once the retention period expires, personal data is either securely deleted through irreversible data destruction methods or anonymized so it can no longer identify you. You may request early deletion of your data by closing your account, subject to our legal obligation to retain certain records for regulatory purposes.

8. Your Data Protection Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of all personal data we hold about you. We will provide this data in a structured, commonly used, machine-readable format within 30 days.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data. We will update your records within 7 days of verification.
• Right to Erasure: You can request deletion of your personal data, subject to legal retention requirements. Data deletion requests are processed within 30 days.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances, such as during dispute resolution or verification processes.
• Right to Data Portability: You can request that we transfer your data to another service provider in a portable format where technically feasible.
• Right to Object: You can object to processing of your data for direct marketing purposes at any time. We will stop processing immediately upon request.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Protection Request". Include your full name, registered email address, and specific request details. We will respond within 30 days and may request additional information to verify your identity before processing the request.

9. International Data Transfers

bdko operates primarily within Bangladesh and stores data on servers located in secure, certified data centers. However, some of our service providers and partners may be located outside Bangladesh, which means your personal data may be transferred to, processed in, or stored in countries with different data protection standards than Bangladesh. When we transfer data internationally, we ensure that appropriate safeguards are in place, such as standard contractual clauses, data processing agreements, and adherence to international data protection frameworks. Your consent to this Privacy Policy includes consent to such international data transfers.

10. Children's Privacy

bdko's services are intended exclusively for individuals aged 21 years or older. We do not knowingly collect personal data from individuals under 21. If we discover that we have inadvertently collected data from someone under the legal age, we will immediately delete that data, close the associated account, void all bets, and return deposited funds where possible. Parents or guardians who believe their child has provided personal data to bdko should contact us immediately at [email protected].

11. Changes to This Privacy Policy

bdko reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on our website homepage for at least 30 days and by sending an email notification to your registered email address. The "Last Updated" date at the top of this document indicates when the policy was last revised. Your continued use of bdko after any changes take effect constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

12. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or how bdko handles your personal data, please contact us:

• Email: [email protected] (Data Protection Inquiries)
• Live Chat: Available 24/7 on the bdko website
• Subject Line: Use "Privacy Policy Question" or "Data Protection Request" for faster routing
• Response Time: We aim to respond to all privacy inquiries within 48 hours

For formal complaints regarding data protection, you may also contact the relevant data protection authority in your jurisdiction. We are committed to working with authorities and users to resolve any privacy concerns in a fair and timely manner.