Your Privacy Matters at bdok11

bdok11 processes your personal data only where we have a lawful basis to do so. The lawful bases we rely upon are: (a) performance of a contract — processing necessary to provide the services you have registered for; (b) legal obligation — processing required to comply with applicable law; (c) legitimate interests — processing that serves our genuine business interests without overriding your rights; and (d) your consent, where explicitly given.

bdok11 does not sell or rent your personal data to any third party under any circumstances. We share personal data with third parties only where it is necessary to operate the platform, comply with legal obligations, or protect the safety and security of our players. The categories of third parties with whom we may share your data are as follows:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and other payment partners receive the minimum data necessary to process your deposits and withdrawals. These providers operate their own privacy policies and are governed by applicable financial regulation.
• Identity Verification Services: Third-party KYC and age verification providers may receive your identity documents and personal details to conduct verification checks on our behalf. These providers are bound by strict confidentiality and data security obligations.
• Game Technology Providers: Game studios and platform providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming may receive technical session data necessary to deliver their games. Game providers do not receive your financial or identity data beyond what is required for fair-play and certification purposes.
• IT Infrastructure & Security Providers: Cloud hosting, content delivery, DDoS protection, and cybersecurity vendors may process technical data as part of platform infrastructure operations. All such providers are contractually bound to process data only on our instructions.
• Law Enforcement & Regulatory Bodies: Where required by applicable law, court order, or regulatory instruction, bdok11 may disclose personal data to law enforcement agencies, financial intelligence units, or other governmental bodies. We will always seek to notify you of such a disclosure unless prohibited by law from doing so.

International Data Transfers: Some of the third parties listed above may be located or operate infrastructure outside Bangladesh. Where personal data is transferred internationally, bdok11 ensures that appropriate contractual safeguards are in place to maintain an equivalent level of data protection to that described in this policy.

bdok11 uses cookies and similar tracking technologies to operate certain essential platform functions, remember your preferences, maintain your session state, and gather aggregate analytics data. A cookie is a small text file placed on your device when you visit the platform. The cookies used by bdok11 fall into the following categories:

bdok11 takes the security of your personal data seriously. We maintain a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, alteration, disclosure, loss, or destruction. Our key security measures include:

• SSL/TLS Encryption: All data exchanged between your browser and the bdok11 platform is transmitted over encrypted HTTPS connections using current TLS standards.
• Data Encryption at Rest: Sensitive personal data and financial records stored on our servers are encrypted using AES-256 encryption, ensuring that even in the event of an infrastructure breach, data remains protected.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. bdok11 staff are granted the minimum level of data access required to perform their specific job functions. All internal data access is logged and audited.
• Two-Factor Authentication: Players are encouraged to enable two-factor SMS authentication on their bdok11 accounts. Internal staff access to data systems also requires multi-factor authentication.
• Regular Security Audits: bdok11 conducts periodic internal security reviews and engages external security professionals to perform penetration testing and vulnerability assessments of our platform infrastructure.
• Incident Response: In the event of a data security incident that affects your personal data, bdok11 will notify you promptly by email and will take all necessary steps to contain the incident, assess its impact, and prevent recurrence.

Despite our best efforts, no data transmission or storage system is guaranteed to be 100% secure. If you have reason to believe that your bdok11 account has been compromised, please contact support immediately at [email protected] and change your password without delay.

bdok11 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

• Account and Identity Data: Retained for the duration of your account's active status plus a minimum of five years following account closure, in accordance with AML and financial record-keeping obligations.
• Transaction and Financial Records: All deposit, withdrawal, and wagering records are retained for a minimum of five years from the date of the transaction. These records are required for AML compliance, dispute resolution, and financial audit purposes.
• KYC Documentation: Identity verification documents (NID copies, passport scans, proof of payment method) are retained for five years following the completion of the KYC process or account closure, whichever is later.
• Communications Data: Support correspondence and chat transcripts are retained for two years from the date of the communication, unless they relate to an active dispute, in which case they are retained until the dispute is fully resolved.
• Technical and Usage Data: Aggregated analytics data may be retained indefinitely in anonymised form. Raw technical logs are retained for a maximum of 12 months and then securely deleted.
• Marketing Consent Records: Records of your marketing consent or opt-out status are retained for the lifetime of your account plus two years to demonstrate compliance with consent obligations.

When the applicable retention period for any category of personal data expires, that data is securely deleted or anonymised in a manner that prevents reconstruction. In the event that you request erasure of your data and we are required by law to retain some of it, we will clearly communicate to you which data is being retained and on what legal basis.

bdok11 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes to the services we offer, or changes in applicable law. When we make material changes to this policy, we will:

• Update the effective date displayed at the top of this page.
• Notify active account holders by email to the address registered on their bdok11 account, providing at least 14 days' advance notice before the updated policy takes effect.
• Display a prominent notice on the bdok11 platform for a period of no less than 14 days following the publication of the updated policy.

Your continued use of the bdok11 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should close your account before the revised policy takes effect by contacting support at [email protected].

For minor, non-material changes — such as grammatical corrections, clarifications that do not alter the substance of the policy, or updates to contact details — bdok11 reserves the right to update this page without sending individual notifications. We recommend bookmarking this page and reviewing it periodically to stay informed of our current privacy practices.

If you have any questions about this Privacy Policy, how your personal data is handled, or wish to exercise any of your privacy rights, please contact us at [email protected]. Our data privacy team will respond to your enquiry as promptly as possible.