bfok Privacy Policy

1. Introduction

bfok ("we", "us", "the Platform") is committed to safeguarding the privacy of every individual who accesses or uses our online casino and sports betting services at https://bfok.ws. This Privacy Policy describes the types of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights you hold with respect to your personal information. This Policy applies to all users of the bfok Platform, regardless of the device or network used to access it.

By registering an account or using the bfok Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact support to close your account.

2. Information We Collect

bfok collects personal data through several channels: directly from you during account registration and use, automatically through your interaction with the Platform, and occasionally from third-party verification or payment partners. The categories of data we collect include:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond what is necessary for standard identity verification), or health information. Any KYC documents you submit are reviewed solely for identity and age verification purposes and are stored in encrypted form.

3. How We Use Your Information

bfok processes your personal data only for clearly defined and legitimate purposes. We will never use your data for any purpose that is incompatible with the purposes described in this Policy. The primary purposes for which we use your data are:

• Account creation and management: to register your bfok account, verify your identity (KYC), and maintain your profile information.
• Transaction processing: to process deposits via bKash, Nagad, Rocket, and other approved payment methods, and to execute withdrawal requests to your verified payment account.
• Platform security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, money laundering, underage gambling, and other prohibited activities as required by applicable AML standards.
• Customer support: to respond to your queries, complaints, and requests submitted via email at [email protected], and to maintain records of our support interactions.
• Personalisation and platform improvement: to analyse usage patterns, understand which games and features are most popular among Bangladesh players, and improve the overall bfok experience.
• Marketing communications (opt-in only): to send you promotional offers, bonus alerts, and platform news — but only if you have explicitly opted in. You may withdraw your consent to marketing communications at any time by contacting support.

4. Legal Basis for Processing

bfok processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: processing required to fulfil our obligations under the Terms and Conditions you accepted when creating your bfok account.
• Legal obligation: processing required to comply with applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and any other legal or regulatory obligations applicable to online gambling platforms.
• Legitimate interests: processing for fraud prevention, platform security, and internal analytics where our interests do not override your fundamental privacy rights.
• Consent: processing for optional marketing communications and non-essential cookies, where you have given explicit, freely withdrawable consent.

5. Data Sharing and Disclosure

bfok does not sell, trade, or rent your personal data to third parties. We may disclose your data only to the following categories of recipients, and only to the minimum extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, and approved banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank) receive only the transaction data necessary to process your deposit or withdrawal.
• Identity verification partners: third-party KYC service providers may receive identity documents and personal details strictly to carry out mandatory player verification checks.
• Game technology providers: game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi receive pseudonymised session data (player ID, bet amounts, game results) for game delivery and fairness auditing purposes.
• Law enforcement and regulatory authorities: where required by applicable law or court order, bfok may disclose personal data to the Bangladesh Financial Intelligence Unit (BFIU), police, or other competent authorities. We will notify you of any such disclosure where legally permitted to do so.

All third-party partners who receive personal data from bfok are contractually bound to process that data only for the specified purpose, to maintain appropriate security standards, and to delete or return the data once the purpose has been fulfilled. bfok does not transfer personal data outside of the jurisdictions in which our service providers operate without appropriate safeguards in place.

6. Payment Data and Financial Information

bfok handles all financial data with the highest level of care. We do not store full mobile wallet account numbers, bank card details, or complete bank account numbers on our servers. Payment transactions are processed through secure, tokenised integrations with our payment partners. The only financial identifiers stored on our Platform are partial references (e.g., the last 4 digits of a mobile number or account number) necessary to link a transaction to your bfok account for audit and dispute resolution purposes.

All financial data transmitted between your device and bfok servers is protected by TLS 1.2 or higher encryption. Stored financial records are encrypted at rest. In the event of a suspected data breach affecting financial information, bfok will notify affected users and relevant authorities within the timeframe required by applicable law, and will take immediate remediation steps.

7. Cookies and Tracking Technologies

bfok uses cookies and similar technologies (local storage, session storage) on the Platform. Cookies are small data files placed on your device that help us deliver a functional, secure, and personalised experience. We categorise our cookies as follows:

• Essential cookies: required for the Platform to function correctly — including session authentication tokens, security cookies, and language preferences. These cannot be disabled without breaking the site.
• Performance cookies: collect anonymised data about how players navigate the Platform (pages visited, time on page, game categories browsed) to help us improve the user experience.
• Functional cookies: remember your preferences such as game volume settings and notification choices to provide a more personalised experience on return visits.

You may manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your ability to access and use the core bfok Platform features. Please note that completely disabling cookies may affect certain platform functionalities such as automatic login and saved preferences.

8. Data Retention

bfok retains your personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law. The following retention periods apply as a general guide:

Active account data (identity, contact, financial records) is retained for the duration of your account and for a minimum of 5 years after account closure, in line with standard AML record-keeping requirements. Technical and usage data (logs, session data) is retained for up to 12 months. Marketing preference data is retained until you withdraw consent. After the applicable retention period, your data is securely deleted or irreversibly anonymised.

9. Your Privacy Rights

As a bfok user, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Request". We will respond within 10 business days.

• Right of access: you may request a copy of the personal data bfok holds about you, along with information about how it is processed.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right of erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: you may ask us to pause processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to withdraw consent: where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will not discriminate against you for exercising any of these rights. In some cases, exercising a right (such as erasure) may require us to close your bfok account, as we may be legally required to retain certain data for AML compliance even after account closure.

10. Security Measures

bfok employs a multi-layered security architecture to protect your personal and financial data. Our security measures include TLS 1.2+ encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting internal staff access to personal data on a need-to-know basis, regular security audits and penetration testing by independent security professionals, and automated fraud detection systems that monitor transactions in real time across all Bangladesh payment channels including bKash, Nagad, and Rocket.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, bfok will notify affected users as promptly as possible and will take all necessary steps to contain the breach and prevent further exposure. We strongly recommend that you use a strong, unique password for your bfok account and enable any available two-factor authentication features.

11. Children's Privacy

bfok is strictly an adult platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we discover that a user account belongs to a person under 21, we will immediately suspend the account, void any transactions, and securely delete all associated personal data. If you believe a minor has registered an account on bfok, please report it immediately to [email protected] so we can investigate and act without delay.

12. Third-Party Links

The bfok Platform may occasionally reference third-party service names (such as payment providers or game studios) in its content. bfok does not control the privacy practices of any third-party services and is not responsible for their data handling. This Privacy Policy applies solely to data collected and processed by bfok. We encourage you to review the privacy policies of any third-party services you interact with independently.

13. Changes to This Privacy Policy

bfok reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to registered users via the Platform and the "Last updated" date at the top of this document will be revised accordingly. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the bfok Platform after any changes to this Policy constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised Policy, please stop using the Platform and contact support to request account closure.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bfok handles your personal data, our dedicated privacy support team is available around the clock. We aim to respond to all privacy-related inquiries within 2 business hours during Bangladesh Standard Time (BST, UTC+6) working hours, and within 24 hours at all other times.

Email: [email protected]