bkko Privacy Policy — How We Handle Your Data

1. Introduction

bkko ("we", "us", "our") operates the online gaming platform available at https://bkko.org. This Privacy Policy describes how bkko collects, stores, uses and shares personal information about individuals ("you", "your") who register for, or otherwise interact with, the bkko platform. This policy applies to all personal data processed in connection with your use of bkko, including data collected through our website, our mobile-optimised interface, and any communications you have with our support team.

By registering an account or using the bkko platform in any way, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use bkko. This policy should be read alongside our Terms and Conditions, which govern the overall use of the platform.

2. Information We Collect

bkko collects personal data through three main channels: information you provide directly, information generated by your use of the platform, and information we receive from third-party service providers (such as payment processors).

Information You Provide Directly

When you register, verify your identity or contact bkko support, you may provide:

• Full legal name, date of birth, and a copy of a government-issued identity document (for KYC verification purposes).
• Bangladeshi mobile phone number and email address.
• Mobile banking account identifiers associated with bKash, Nagad, Rocket or Upay, used for deposit and withdrawal processing.
• Communications you send to our support team, including any attachments, screenshots or documents provided in connection with a support request.

Information Generated by Your Platform Use

As you use bkko, we automatically collect data relating to your activity, including:

• Game play records, including bets placed, amounts wagered, games accessed, outcomes and winnings.
• Session data, including login timestamps, session duration, device type, operating system and browser information.
• IP address and approximate geolocation data derived from your IP address at the time of login.

Information Received from Third Parties

bkko may receive information about you from third-party service providers in the following circumstances:

• From mobile banking providers (bKash, Nagad, Rocket, Upay) — transaction confirmation data to reconcile deposit and withdrawal records.
• From identity verification providers — confirmation of identity document authenticity when you complete the KYC process.
• From fraud prevention and anti-money-laundering screening services — risk signals used to assess and verify the legitimacy of account activity.

3. How We Use Your Information

bkko uses your personal data for the following purposes:

• Account creation and management: to register your account, verify your identity, and maintain the ongoing operation of your bkko account.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket and Upay, and to maintain accurate transaction records.
• Platform personalisation: to tailor game recommendations, promotional offers and content based on your activity on bkko.
• Fraud prevention and security: to detect, investigate and prevent fraudulent transactions, account abuse, money laundering and other prohibited activities.
• Responsible gaming compliance: to monitor gaming patterns, enforce age verification, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: to respond to your enquiries, resolve disputes, and maintain records of support interactions for quality and compliance purposes.

bkko does not use your personal data for purposes incompatible with those listed above. We do not sell your personal data to third parties. We do not use your personal data for the purposes of third-party advertising networks.

4. Legal Basis for Processing

bkko processes your personal data on the following legal grounds:

• Contractual necessity: processing required to enter into and perform the contract between you and bkko (including account registration, game access, deposits and withdrawals).
• Legal obligation: processing required to comply with applicable anti-money-laundering regulations, KYC requirements, responsible gaming obligations, and other legal duties applicable to the operation of a gaming platform.
• Legitimate interests: processing carried out for the purposes of fraud prevention, platform security, and improving the bkko product — where such processing does not override your fundamental privacy rights.
• Consent: where bkko relies on your consent as the legal basis for processing (for example, for certain marketing communications), you may withdraw that consent at any time by contacting our support team.

5. Disclosure of Your Information

bkko does not sell your personal data. We share your personal data only in the limited circumstances described below.

Service Providers

bkko engages trusted third-party service providers to assist with the operation of the platform. These providers may process your personal data on our behalf, strictly for the purposes for which they have been engaged. Current categories of service provider include: payment processing partners (bKash, Nagad, Rocket, Upay), identity verification and KYC providers, IT infrastructure and hosting providers, fraud detection and security vendors, and customer support tooling. All third-party service providers are contractually bound to process your data securely and only as instructed by bkko.

Legal and Regulatory Disclosure

bkko may disclose your personal data to competent authorities, law enforcement agencies or regulatory bodies where required by law, court order or regulatory requirement. This includes disclosure in connection with anti-money-laundering investigations, fraud enquiries, and responsible gaming enforcement proceedings. bkko will notify you of any such disclosure where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of bkko's business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bkko will take reasonable steps to ensure that your data continues to be processed in accordance with this Privacy Policy, and you will be notified of any material change to the controller of your data.

6. Payment Data and Mobile Banking Partners

Each mobile banking provider (bKash, Nagad, Rocket, Upay) operates under its own privacy policy and data protection practices. bkko is not responsible for the data handling practices of these third-party payment providers. We recommend that you review the privacy policy of your chosen mobile banking provider to understand how your financial data is managed on their side.

All financial transaction data held by bkko is encrypted at rest and in transit. Access to payment records is restricted to authorised bkko staff whose roles require such access for operational or compliance purposes. Transaction records are retained for the periods required by applicable financial regulations, after which they are securely deleted.

7. Data Retention

bkko retains your personal data for as long as your account is active and for such additional periods as are required to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Specifically: account data and game history are retained for the duration of your account's active life plus a minimum of five years following account closure, in order to meet financial record-keeping and anti-money-laundering obligations; KYC documentation is retained for the period required by applicable regulations; support communications are retained for up to three years from the date of the relevant interaction.

When your personal data is no longer required for the purposes for which it was collected and no legal obligation requires its continued retention, bkko will securely delete or anonymise the data. Where deletion is not immediately practicable (for example, because data is held in backup archives), bkko will isolate the data from further processing until deletion is possible.

8. Data Security

bkko implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL encryption for all data transmitted between your device and the bkko platform, encryption of sensitive data at rest, access controls limiting staff access to personal data on a need-to-know basis, regular security assessments and vulnerability testing, and incident response procedures for data breaches.

While bkko takes data security seriously and implements industry-standard protections, no system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bkko will notify affected players as soon as reasonably practicable and will take all steps necessary to mitigate the impact of the breach.

9. Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights with respect to the personal data bkko holds about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request".

• 👁️
  Right of Access You have the right to request a copy of the personal data bkko holds about you, together with information about how it is being used.
• ✏️
  Right to Rectification You have the right to request that bkko correct any inaccurate or incomplete personal data held about you without undue delay.
• 🗑️
  Right to Erasure You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw the consent on which processing is based. This right is subject to overriding legal retention obligations.
• ⏸️
  Right to Restriction You have the right to request that bkko restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested or where processing is unlawful but you prefer restriction over deletion.
• 📦
  Right to Data Portability You have the right to receive a copy of the personal data you provided to bkko in a structured, commonly used and machine-readable format, and to request that we transmit that data to another controller where technically feasible.

bkko will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request. In some cases, we may be unable to comply with a request in full due to overriding legal obligations — in such cases, we will explain the reason for any limitation on our response.

10. Cookies and Tracking Technologies

bkko uses cookies and similar tracking technologies on the platform to ensure the proper functioning of the site, to remember your preferences, and to analyse usage patterns for platform improvement purposes. The following categories of cookies are used:

• Strictly necessary cookies: required for the platform to function correctly — these include session authentication cookies that keep you logged in during your active session. These cannot be disabled without breaking core platform functionality.
• Functional cookies: used to remember your preferences and settings (such as language and display preferences) across sessions so that you do not need to re-enter them each time you visit bkko.
• Analytics cookies: used to collect aggregated, anonymised information about how users interact with the bkko platform — including pages visited, session durations and error events. This data helps bkko improve the platform experience.

You may manage cookie preferences through your device or browser settings. Please note that disabling certain categories of cookies may affect the functionality of the bkko platform. bkko does not use cookies to serve third-party advertising to users of the platform.

11. Children and Underage Users

If bkko discovers or reasonably suspects that personal data belonging to a person under the age of 21 has been collected, we will take immediate steps to delete that data and close the associated account. If you believe that an underage individual has registered on bkko, please contact our support team immediately at [email protected].

12. Changes to This Privacy Policy

bkko reserves the right to update this Privacy Policy at any time. When material changes are made, bkko will post the revised policy on this page with an updated effective date and, where appropriate, notify registered players via their account email address or mobile number. The date at the top of this page indicates when the policy was last updated.

Your continued use of bkko following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you must stop using the platform and may request account closure by contacting bkko support.

13. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to the way bkko handles your personal data, please contact our dedicated data support team. We are committed to resolving all privacy-related enquiries promptly and transparently.

You can reach our data support team by email at: [email protected]