Privacy Policy — bsok

1 Introduction

Welcome to the bsok Privacy Policy. bsok ("we", "our", or "us") operates the online betting and casino platform available at https://bsok.io (the "platform"). We are committed to handling your personal data with care, transparency, and integrity. This Privacy Policy describes the types of personal data we collect from players and visitors, the purposes for which that data is used, the parties with whom it may be shared, the measures we take to keep it secure, and the rights available to you as a data subject.

This Privacy Policy applies to all individuals who access or use the bsok platform — including registered players, visitors browsing the site without an account, and any person who communicates with us through our support channels. By creating an account or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the bsok platform more broadly. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall take precedence.

2 Personal Data We Collect

Depending on how you interact with the bsok platform, we may collect the following categories of personal data:

We do not collect special categories of sensitive personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health status, or biometric data) unless specifically required by applicable law or with your explicit consent in a clearly defined context.

3 How We Collect Your Data

bsok collects personal data through the following means:

• Direct submission: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions.
• Automated technologies: Data collected automatically when you access the platform, including via cookies, pixel tags, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and browsing behaviour on the bsok platform.
• Payment processors: Transaction data and payment confirmation details received from payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank when you initiate a deposit or withdrawal.
• Identity verification providers: Where we use third-party KYC or identity verification services, those providers may return verified identity data and risk scores to bsok as part of the verification process.
• Fraud prevention and AML services: Data received from anti-fraud and anti-money laundering screening services that we use to assess account risk and transaction legitimacy.
• Game technology providers: Gameplay data — including bet amounts, outcomes, and session durations — provided to us by our game technology partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) via their platform integration APIs.

4 Purposes of Processing

bsok processes your personal data for the following purposes:

• Account management: Creating, maintaining, and managing your registered player account, including processing deposits, withdrawals, bet settlements, and bonus allocations.
• Identity and age verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in compliance with our KYC obligations.
• Payment processing: Facilitating secure deposits and withdrawals through your chosen payment method, and reconciling financial records.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: Responding to your queries, complaints, and responsible gaming requests promptly and effectively.
• Responsible gaming: Monitoring your account activity to identify potential signs of problem gambling, enforcing deposit limits and self-exclusion arrangements, and providing player-protection interventions where appropriate.
• Platform improvement: Analysing usage patterns and technical performance data to improve the features, content, and reliability of the bsok platform.
• Legal compliance: Meeting our obligations under applicable laws, including anti-money laundering regulations and data protection requirements, and responding to lawful requests from regulatory authorities.
• Communications: Sending you service-related notifications about your account, transactions, security alerts, and updates to our policies. We do not send unsolicited marketing communications without your explicit consent.

5 Legal Basis for Processing

bsok processes your personal data on the following legal grounds, depending on the specific purpose of the processing activity:

• Contract performance: Processing necessary to fulfil our obligations under the agreement formed when you register an account and accept our Terms & Conditions — including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, age verification, anti-money laundering checks, and record-keeping requirements.
• Legitimate interests: Processing carried out in pursuit of bsok's legitimate business interests, where those interests are not overridden by your rights and freedoms — including fraud prevention, platform security, responsible gaming monitoring, and product improvement.
• Consent: Where we rely on your consent as the legal basis (for example, for optional marketing communications or the use of non-essential cookies), you may withdraw your consent at any time by contacting us at [email protected] or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing and Disclosure

bsok does not sell your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa/Mastercard acquirers, Dutch-Bangla Bank, and City Bank — solely to process your deposits and withdrawals and verify payment method ownership.
• Identity verification providers: Third-party KYC service providers used to verify your identity and age in compliance with our obligations. These providers process your data under strict contractual confidentiality obligations.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studio partners receive the minimum data required to deliver game content and reconcile gameplay records. Their own privacy policies govern data they hold independently.
• Fraud and AML screening services: Specialised providers used to screen transactions and account activity for fraud indicators and money laundering risk. Data shared is limited to what is necessary for screening purposes.
• IT infrastructure and cloud service providers: Providers of hosting, data storage, content delivery, and cybersecurity services who process data on our behalf under data processing agreements that impose equivalent data protection standards.
• Regulatory and law enforcement authorities: Government bodies, law enforcement agencies, and courts where we are legally required to disclose data — for example, in response to a valid court order, law enforcement request, or regulatory investigation. We will notify you of such disclosures where we are legally permitted to do so.
• Professional advisers: Lawyers, auditors, and accountants who require access to data in the course of providing professional services to bsok, all of whom are bound by professional confidentiality obligations.

7 Data Retention

bsok retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following general retention guidelines apply:

• Active accounts: Personal data associated with your active account is retained for the duration of the account relationship and for a minimum of five years following permanent account closure, to comply with anti-money laundering and financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of five years following the end of the customer relationship, in accordance with applicable regulatory requirements.
• Transaction records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum of seven years following the date of each transaction.
• Communications data: Customer support correspondence is retained for a minimum of three years following closure of the relevant support case, to support dispute resolution and service quality review.
• Technical and usage data: Server logs and anonymised usage analytics data are retained for up to 24 months, after which they are securely deleted or fully anonymised.
• Self-exclusion records: Records of self-exclusion requests and responsible gaming interventions are retained for the full duration of the exclusion period plus five years thereafter.

Where retention beyond these minimum periods is required by applicable law or is necessary to defend legal claims, bsok will retain the relevant data for the duration of that requirement. Once retention obligations are satisfied, data is securely deleted or irreversibly anonymised.

8 Data Security

bsok implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and the bsok platform is encrypted using industry-standard SSL/TLS protocols, ensuring that data in transit cannot be intercepted by third parties.
• Encryption at rest: Sensitive personal data — including identity documents, financial data, and account credentials — is stored in encrypted form on our servers.
• Access controls: Access to personal data within bsok's systems is restricted on a strict need-to-know basis. Staff members who process personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring: Our platform infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and other security events.
• Secure password storage: Account passwords are stored using cryptographic hashing; bsok staff cannot access or recover your plain-text password.
• Vendor security assessments: Third-party service providers who process personal data on our behalf are assessed for their security practices before engagement and are contractually required to maintain appropriate security standards.

While bsok applies robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that your device and network connection are appropriately secured. If you suspect any unauthorised access to your account, please contact us immediately at [email protected].

9 Cookies and Tracking Technologies

bsok uses cookies and similar tracking technologies to operate the platform effectively, to remember your preferences, and to analyse how the platform is used. The following types of cookies may be placed on your device when you visit the bsok platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as session management, account authentication, and security checks. The platform cannot function properly without these cookies, and they cannot be disabled.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language, display preferences, and regional settings — to provide a more personalised experience across sessions.
• Analytics cookies: These cookies collect anonymised or aggregated data about how visitors interact with the platform — including pages visited, session duration, and navigation paths — to help us improve platform performance and user experience. We use this data internally and do not share it with third-party analytics networks for advertising purposes.
• Security cookies: These cookies help us detect and prevent fraudulent activity, including bot traffic, account takeover attempts, and suspicious betting patterns.

bsok does not use third-party advertising cookies or retargeting pixels to serve advertisements to you on other websites based on your bsok platform activity.

10 Your Data Rights

Subject to applicable law and verification of your identity, you have the following rights in relation to your personal data held by bsok:

• Right of access: You may request a copy of the personal data we hold about you and information about how it is being processed. We will respond to access requests within a reasonable timeframe.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. For data displayed in your account profile, you may also update certain information directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Note that we may be unable to delete data that we are legally required to retain.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have disputed.
• Right to object: You may object to processing carried out on the basis of our legitimate interests where you believe your rights and freedoms override those interests. You may also object at any time to the use of your data for direct marketing purposes.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our data team at [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request. We aim to respond to all valid requests within 30 days.

11 Minors and Age Restriction

If bsok discovers or has reasonable cause to believe that personal data belonging to a person under the age of 21 has been submitted — whether through registration, KYC, or any other channel — that data will be deleted promptly and the associated account will be permanently closed. Any funds deposited by an underage user will be handled in accordance with applicable law.

Parents and guardians who believe that their child under the age of 21 may have accessed the bsok platform or submitted personal data are encouraged to contact us immediately at [email protected] so that we may take appropriate action without delay.

12 International Data Transfers

The bsok platform primarily serves players in Bangladesh, and personal data is processed and stored in accordance with applicable data protection standards. However, some of bsok's third-party service providers — including game technology partners, cloud infrastructure providers, and identity verification services — may process data in jurisdictions outside Bangladesh as part of their global operations.

Where personal data is transferred to a third-party service provider operating in another jurisdiction, bsok takes steps to ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that which applies within Bangladesh. Such safeguards may include contractual data processing agreements that impose data protection obligations on the recipient, or reliance on the recipient's participation in recognised international data protection frameworks.

By using the bsok platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh for the purposes described in this Privacy Policy, subject to the safeguards described above.

13 Changes to This Privacy Policy

bsok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via the email address associated with their account or via a prominent notice on the platform, no less than 7 days before the updated Policy takes effect.

The effective date of the current version of this Privacy Policy is displayed at the top of this page and in the version badge below. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data. Your continued use of the bsok platform following the effective date of any updated version constitutes your acknowledgement of the changes and your agreement to be bound by the revised Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bsok handles your personal data, please contact our support team using the details below. All contact details are provided as plain text only.

For responsible gaming related matters — including requests to set deposit limits, activate a self-exclusion, or access other player-protection tools — please use the subject line "Responsible Gaming Request" so your message is prioritised by our player welfare team. You can also visit our Responsible Gaming page for further guidance.