bdko Privacy Policy — Your Data, Protected

Introduction

This Privacy Policy ("Policy") describes how bdko ("we", "us", "the Platform") collects, uses, stores, and discloses personal information about players and visitors who access the bdko platform at bdko.asia. bdko operates as an online sports betting and casino platform primarily serving players based in Bangladesh. This Policy applies to all personal data collected through the bdko website, including data collected during account registration, betting and gaming activity, payment transactions, and customer support interactions.

By registering an account on bdko, placing a bet, or otherwise using the platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the bdko platform. This Policy should be read alongside the bdko Terms and Conditions, which govern your overall use of the platform.

Our Privacy Commitments

Six principles guide how bdko handles your personal information.

1. Information We Collect

bdko collects personal information in the following categories. The specific data points collected within each category depend on how you use the platform and what features you access.

• Category 1.1 Registration and Identity Data

  When you register a bdko account, we collect the information you provide: your full name, date of birth, Bangladeshi mobile number, and a password of your choosing. If KYC verification is required, we may additionally collect a copy of your national identity document (NID), passport, or driving licence, and a photograph or selfie for identity confirmation purposes. This data is used to create your account, verify your identity, prevent duplicate registrations, and fulfil age-verification requirements.

• Category 1.2 Transaction and Payment Data

  When you make a deposit or withdrawal on bdko, we record transaction details including the amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction reference number provided by the payment provider, and the date and time of the transaction. We do not store your bKash PIN, Nagad PIN, or any equivalent secret credential. Payment credentials are handled exclusively by the respective payment provider's own secure systems.

• Category 1.3 Betting and Gaming Activity Data

  bdko logs your betting and gaming activity on the platform, including the markets or games you have accessed, bets placed, bet amounts, outcomes, bonus claims, and session durations. This data is required for account management, dispute resolution, responsible gaming monitoring, and compliance with anti-fraud obligations. It is not used for profiling or sale to third parties.

• Category 1.4 Technical and Device Data

  When you access bdko, our systems automatically collect certain technical information about your device and connection, including your IP address, device type, operating system, mobile browser type and version, screen resolution, and network operator (e.g. Grameenphone, Robi, Banglalink). This information is used for security purposes, fraud detection, platform performance optimisation, and to ensure the platform displays correctly on your device. We do not use IP addresses to track your location beyond country-level identification.

2. How We Use Your Information

bdko uses the personal data it collects for the following purposes. We process your data only where we have a valid legal basis to do so, as described in Section 3 of this Policy.

• Account creation and management: to set up, maintain, and operate your bdko account, including processing your registration details and enabling login access.
• Identity and age verification: to verify that you meet the minimum age requirement of 21 years and to confirm that the identity information provided at registration is accurate.
• Transaction processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank accounts, and to maintain an accurate record of your account balance.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent account activity, money laundering, underage gambling, bonus abuse, and other prohibited conduct as defined in the Terms and Conditions.
• Responsible gaming monitoring: to identify patterns of betting behaviour that may indicate problem gambling, and to enable bdko's responsible gaming tools (deposit limits, session reminders, self-exclusion) to function correctly.
• Customer support: to respond to your support requests, account queries, and complaints, and to maintain a record of communications for quality and dispute-resolution purposes.

3. Legal Basis for Processing

For each category of data processing described above, bdko relies on one or more of the following legal bases:

4. Sharing Your Information

bdko does not sell your personal data. We share your data only where it is necessary to operate the platform or where we are legally required to do so. The categories of recipient are limited to the following:

• Recipient 4.1 Payment Providers

  When you make a deposit or withdrawal, bdko passes the transaction details necessary to initiate and confirm the payment to the relevant payment provider — bKash, Nagad, Rocket, Upay, or the applicable bank. This is a contractual necessity; without sharing this data, transactions cannot be completed. The payment provider processes your data under its own privacy policy, which governs its use of your information independently of this Policy.

• Recipient 4.2 Technology and Service Partners

  bdko uses third-party technology providers to operate aspects of the platform — including game content providers (such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming), server hosting infrastructure, and security and fraud-detection services. These providers may receive limited data (such as session tokens or device identifiers) as a technical requirement of delivering their services. All such providers are contractually bound to use your data only for the purpose of providing their service to bdko and to maintain appropriate security standards.

• Recipient 4.3 Legal and Regulatory Authorities

  bdko may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a court order, or a lawful request from a competent authority. In such cases, bdko will disclose only the minimum information required to satisfy the legal obligation and will, where legally permissible, notify you of the disclosure.

5. Payment Data and Financial Information

bdko takes the security of financial data with particular seriousness. When you transact via bKash, Nagad, Rocket, or Upay, the actual payment credential (your mobile wallet PIN) is entered directly into the payment provider's own interface and is never transmitted to or stored by bdko. bdko receives only a transaction confirmation and reference number from the provider once a payment is completed. For bank transfers, bdko records only the transaction reference and the sending account number to the extent necessary to match the incoming transfer to your bdko account.

bdko does not process or store credit card or debit card numbers. Where card payments are supported through a third-party payment gateway, the card data is handled entirely by the payment gateway under PCI-DSS compliant conditions; bdko receives only a tokenised reference to the transaction. Financial records relating to your bdko account — including deposit history and withdrawal history — are retained for the period specified in Section 7 of this Policy in order to comply with applicable record-keeping obligations.

6. Cookies and Tracking Technologies

bdko uses cookies and similar tracking technologies on the platform. Cookies are small data files placed on your device when you access bdko. We use three categories of cookie:

• Essential cookies: required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: used to remember your preferences and settings — such as your preferred language version of bdko — so that you do not need to reconfigure them on each visit. These cookies improve your experience but are not strictly necessary.
• Analytics cookies: used to collect aggregated, anonymised data about how players use the bdko platform — such as which pages are visited most frequently and how long sessions typically last. This data helps bdko improve the platform. Analytics data is not linked to your individual identity.

You can control cookie settings through your mobile browser's privacy or settings menu. Disabling essential cookies will prevent bdko from functioning correctly. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience.

7. Data Retention

bdko retains personal data for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply: account registration and identity data is retained for the duration of your active account plus a minimum of 5 years following account closure; transaction records are retained for a minimum of 5 years from the date of the transaction; betting and gaming activity logs are retained for a minimum of 3 years; customer support communications are retained for 2 years from the date of the last communication in a given support thread.

When retention periods expire, bdko will securely delete or anonymise the relevant data so that it can no longer be linked to your identity. Where data cannot be immediately deleted due to technical constraints (for example, where it is held in backup systems), bdko will isolate it from active processing and delete it at the earliest practicable opportunity.

8. Your Rights

As a bdko player, you have the following rights in relation to your personal data. To exercise any of these rights, contact bdko support at the email address shown in the footer of this page. bdko will respond to all valid data rights requests within a reasonable period.

• Right of access: you may request a copy of the personal data bdko holds about you, including information about how it is being used and with whom it has been shared.
• Right to rectification: if the personal data bdko holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: in certain circumstances, you may request that bdko delete the personal data it holds about you. This right is subject to bdko's legal obligation to retain certain data for specified periods (see Section 7).
• Right to restriction: you may ask bdko to restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to withdraw consent: where bdko processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To submit a data rights request, email bdko support at [email protected] with the subject line "Data Rights Request" and include your registered mobile number so that bdko can verify your identity before processing the request. bdko will acknowledge receipt of your request within 3 business days and will aim to fulfil it within 30 calendar days.

9. Security Measures

bdko implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption of all data in transit between your device and bdko's servers; access controls that restrict employee access to personal data on a need-to-know basis; regular security assessments of platform infrastructure; and secure, access-controlled data storage environments. bdko's security practices are reviewed and updated on a periodic basis to reflect developments in applicable security standards.

While bdko takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. In the event of a data security incident that materially affects your personal data, bdko will notify affected players using the contact details registered to their account within a reasonable period of becoming aware of the incident, and will take prompt remedial action.

10. Children's Privacy

bdko is strictly an adults-only platform. The minimum age to register and use bdko is 21 years. bdko does not knowingly collect personal data from individuals under the age of 21. If bdko becomes aware that personal data has been collected from an individual who is under 21, it will delete that data and close the associated account immediately. If you believe that bdko may have inadvertently collected data from an underage individual, please notify bdko support immediately at [email protected].

11. Changes to This Privacy Policy

bdko reserves the right to update or amend this Privacy Policy at any time. The date of the most recent update is displayed at the top of this page. Where changes to this Policy are material — for example, where bdko introduces a new category of data processing or a new category of data recipient — bdko will endeavour to provide advance notice to registered players via a notification displayed on the platform or a message to the registered mobile number.

Your continued use of bdko after a revised Privacy Policy takes effect constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should stop using bdko and may request account closure. The most current version of this Privacy Policy is always available at bdko.asia/privacy-policy.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bdko holds about you, please contact bdko support. All privacy-related communications should be directed to the following address. bdko will respond to privacy enquiries within 3 business days.

Email: [email protected]