bodk Privacy Policy — How We Collect, Use, and Protect Your Personal Data

01 Introduction

bodk is committed to protecting the privacy and personal data of every user who interacts with the bodk platform. This Policy has been prepared in accordance with generally recognised principles of data privacy and protection, and reflects our operational standards for the handling of personal information across all platform services — including account registration, deposit and withdrawal processing, game participation, bonus redemption, customer support, and marketing communications.

This Policy applies to all personal data collected through the bodk website at https://bodk.io, any mobile-optimised version of the platform, and any communication channel operated by bodk including email correspondence via [email protected]. It applies to all registered players, individuals who have initiated but not completed registration, and anonymous visitors to the bodk website.

The bodk platform is designed for and primarily serves adult players (21+) located in Bangladesh. References to player locations and payment methods within this Policy reflect that focus — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard are the accepted payment channels, and all account balances are denominated in Bangladeshi Taka (৳).

02 Personal Data We Collect

bodk collects two broad categories of personal data: information you provide to us directly, and information we collect automatically through your use of the platform.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bets placed, session duration, click paths, and features accessed on the bodk platform.
• Location Data: Approximate geographic location derived from your IP address (country and city level only — no precise GPS coordinates are collected).
• Cookie & Tracking Data: Session identifiers, preference cookies, and analytics tracking as described in Section 7 of this Policy.

03 How We Collect Your Data

bodk collects personal data through the following channels and mechanisms:

• Direct Submission: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a promotional offer.
• Automated Technology: Through cookies, web beacons, server logs, and similar tracking technologies that operate when you browse the bodk website or use the platform (see Section 7).
• Payment Processors: When you initiate a transaction, our payment processing partners (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) may share transaction confirmation data and wallet/card identifiers with bodk for the purpose of verifying and recording the transaction.
• Identity Verification Services: Where bodk uses a third-party KYC verification provider, that provider may confirm the authenticity and validity of the documents you submit. The provider shares only the outcome of the verification (pass/fail) and does not retain your documents independently on bodk's behalf.
• Game Providers: Third-party game studios integrated into the bodk platform (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may generate game-round data and session logs that are shared with bodk for auditing, dispute resolution, and game integrity purposes.

04 Lawful Basis for Processing

bodk processes personal data only where a recognised lawful basis exists. The applicable basis for each category of processing is identified below:

• Contractual Necessity: Processing your registration data, identity data, financial data, and transaction records is necessary for bodk to perform the contract it has entered into with you as a registered player — specifically to create and operate your account, process deposits and withdrawals, and make games and betting markets available to you.
• Legal Obligation: bodk is required to collect and retain certain data — particularly KYC identity documentation and transaction records — to comply with applicable legal obligations relating to anti-money laundering (AML), fraud prevention, and responsible gaming age-verification requirements.
• Legitimate Interests: bodk processes certain technical and usage data on the basis of its legitimate interest in maintaining platform security, detecting and preventing fraud and abuse, analysing platform performance, and improving the user experience — where those interests are not overridden by your privacy rights.
• Consent: Where bodk sends you optional marketing communications (such as promotional emails about bonuses, seasonal offers, or new game launches), processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time by contacting [email protected].

05 How We Use Your Personal Data

The personal data we hold about you may be used for the following purposes:

• Creating, verifying, and maintaining your bodk account.
• Processing deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method.
• Fulfilling KYC and age-verification requirements before approving withdrawals or at any point during the account lifecycle.
• Providing 24/7 customer support in English via email correspondence.
• Administering bonuses, promotions, and wagering requirement tracking.
• Monitoring gameplay and betting activity to detect fraud, collusion, match-fixing, and other forms of Prohibited Conduct as defined in the bodk Terms & Conditions.
• Enforcing responsible gaming tools — including deposit limits, session time alerts, cooling-off periods, and self-exclusion requests — that you have activated through your account settings.
• Sending transactional communications (account confirmations, deposit receipts, withdrawal notifications, and security alerts) that are necessary for the operation of your account.
• Sending promotional communications about bodk offers, bonuses, and new games — only where you have provided consent to receive such communications.
• Conducting internal analytics to understand how players interact with the platform, identify technical issues, and improve game and betting product offerings.
• Complying with any lawful request, court order, or regulatory direction received from a competent authority.

06 Data Sharing & Disclosure

bodk does not sell, trade, or otherwise transfer your personal data to third parties for their own commercial use. bodk may share your personal data with third parties only in the following specific and limited circumstances:

6.1 Service Providers

bodk engages a limited number of carefully selected third-party service providers who assist us in operating the platform. These providers act as data processors on bodk's behalf and are contractually bound to process personal data only according to bodk's instructions, for the specific purpose for which it was shared, and not to use it for any independent purpose. Categories of service providers include: identity verification (KYC) providers, payment processing partners, fraud detection service providers, cloud hosting and data storage providers, and email delivery platforms.

6.2 Game Providers

Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a player session token and anonymised game participation data to facilitate game-round delivery, audit game outcomes, and support dispute resolution. These providers do not receive your full personal identity or financial data.

6.3 Legal & Regulatory Disclosure

bodk may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, by a valid court order, or where bodk reasonably believes disclosure is necessary to prevent fraud, money laundering, or serious harm to any individual.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bodk's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bodk will take reasonable steps to ensure that your data continues to be handled in accordance with the principles set out in this Policy and will notify you of any material change to the data controller responsible for your information.

07 Cookies & Tracking Technologies

The bodk website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather analytics data that helps us improve the user experience. The cookies used on the bodk platform fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session authentication (keeping you logged in), security tokens, and shopping basket/bet slip functionality. These cookies cannot be disabled without materially affecting your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as language setting, preferred payment method, and display preferences — to personalise your experience on return visits.
• Analytics Cookies: These cookies collect anonymised data about how visitors interact with the bodk website — which pages are visited most often, how long sessions last, and which features generate the most engagement. This data helps bodk identify areas for improvement. Analytics are processed in aggregate and are not used to identify individual users.
• Security Cookies: These cookies help bodk detect and prevent fraudulent activity, enforce login session limits, and identify unusual account behaviour consistent with automated bot activity or credential stuffing attacks.

Most web browsers allow you to control cookie settings through the browser preferences menu. You may disable non-essential cookies at any time without affecting your ability to access the bodk platform, although some preference-based features may not function as intended if functional cookies are disabled.

08 Data Retention

bodk retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

When personal data reaches the end of its retention period, bodk will securely delete or anonymise it in accordance with our internal data destruction procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate statistical analysis.

09 Data Security

bodk implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the bodk platform is encrypted in transit using SSL/TLS protocols, ensuring that sensitive information cannot be intercepted during transmission.
• At-Rest Encryption: Sensitive personal data stored in bodk's databases — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Personal data is accessible only to bodk staff and contractors who require it to perform their specific job functions. Access is granted on a least-privilege basis and is subject to regular review.
• Secure Password Storage: Account passwords are never stored in plain text. bodk uses one-way hashing with appropriate salting to ensure that passwords cannot be recovered even in the event of a data breach.
• Fraud Detection Systems: bodk employs automated monitoring systems that flag unusual account activity — including login attempts from unrecognised locations, rapid successive deposit-and-withdrawal patterns, and bot-like behaviour — for manual security review.

10 Your Data Rights

As a data subject, you hold the following rights in relation to the personal data that bodk holds about you. To exercise any of these rights, contact bodk's support team at [email protected] with the subject line "Data Rights Request" and a description of your request. bodk will respond within a reasonable timeframe and, in any case, within 30 calendar days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data bodk holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data bodk holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that bodk delete your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other lawful basis exists. This right is subject to limitations where retention is required by legal obligation.
• Right to Restriction: You may request that bodk restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on contract or consent and is carried out by automated means, you have the right to receive the personal data you have provided to bodk in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on bodk's legitimate interests at any time on grounds relating to your particular situation. You also have the absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11 Children's Privacy

bodk employs age verification checks as part of the registration and KYC process to minimise the risk of underage access to the platform. If bodk becomes aware — through the KYC process, a complaint, or any other means — that personal data has been collected from an individual under the age of 21, bodk will immediately suspend the relevant account, delete the associated personal data to the extent permitted by law, and return any deposited funds to the original payment method where technically possible.

If you are a parent or guardian and believe that your child under the age of 21 has created an account on the bodk platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". bodk will investigate and take action within 24 hours of receiving such a report.

12 Third-Party Links & Services

The bodk platform integrates third-party game content from licensed studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these integrations are hosted within the bodk environment, each provider operates under its own privacy and data handling policies. bodk is not responsible for the privacy practices of third-party game providers, and any data processed directly by those providers in connection with game-round delivery is subject to their own terms.

The bodk website does not contain links to external third-party websites. Should any such links appear in the future, bodk will not be responsible for the privacy practices, content, or security of those external sites, and recommends that you review the privacy policy of any website you visit.

13 Changes to This Privacy Policy

bodk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When material changes are made, bodk will update the "Last Updated" date at the top of the Table of Contents and, where the changes are of particular significance to player rights, will notify registered players via email to the address held on their account.

We encourage you to review this Policy periodically to stay informed about how bodk protects your personal data. Your continued use of the bodk platform following any update to this Policy constitutes your acknowledgement of the updated terms. If you do not agree with any change to this Policy, you should discontinue use of the platform and contact [email protected] to arrange account closure.

14 Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data bodk holds about you, please contact the bodk support team using the details below. All privacy-related correspondence is handled in strict confidence and processed in accordance with this Policy.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: For data rights requests, use "Data Rights Request". For data breach reports, use "Data Breach Report". For underage account reports, use "Underage Account Report".
• Response Time: bodk aims to respond to all privacy-related enquiries within 24 hours and to formal data rights requests within 30 calendar days.
• Language: English only.
• Operating Hours: 24/7, Bangladesh Standard Time (UTC+6).