bfok Privacy Policy
This Privacy Policy explains how bfok collects, processes, stores, and protects your personal data when you use our online casino and sports betting platform. We are committed to handling your information with full transparency and in accordance with responsible data management standards.
How bfok Protects Your Privacy
Your personal data is handled with the same care we apply to your financial security. Here are the core commitments bfok makes to every player on our platform.
No Sale of Personal Data
bfok does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Your data is used solely to operate and improve your bfok experience, comply with legal obligations, and prevent fraud.
End-to-End Encryption
All data transmitted between your device and the bfok platform is protected by 256-bit SSL/TLS encryption. Sensitive fields such as passwords and payment details are stored using industry-standard hashing and tokenisation — never in plain text.
Minimal Data Collection
bfok collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and responsible gaming compliance. We do not collect information beyond what is required for these purposes.
Player Control
You retain meaningful control over your personal data at all times. You may request access to your data, correct inaccurate records, restrict how your data is used, or request deletion of your account and associated data by contacting our support team.
Defined Retention Periods
bfok retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years after account closure to meet anti-money laundering record-keeping requirements.
Breach Notification
In the unlikely event of a data security incident affecting your personal information, bfok will notify affected users via their registered email address within a reasonable timeframe and take all necessary steps to contain and remediate the incident.
1 Introduction
This Privacy Policy ("Policy") sets out how bfok ("bfok", "we", "us", "our"), the operator of the online casino and sports betting platform at bfok.io, collects, uses, discloses, and safeguards the personal information of users ("you", "Player", "User") who access or register on the Platform. This Policy forms part of the overall agreement between you and bfok, alongside the Terms and Conditions and any applicable promotion-specific terms.
By creating a bfok account, depositing funds, or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read, understood, and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue your use of the Platform and contact our support team to request account closure.
bfok is committed to responsible data stewardship. We believe that transparency about our data practices is fundamental to the trust our players place in us. This Policy uses plain English wherever possible so that you can make informed decisions about your personal data.
2 Personal Data We Collect
bfok collects the following categories of personal data from players. The specific data points collected may vary depending on the services you use and the verification requirements applicable to your account.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, national ID number, passport number | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile phone number, residential address | Account communications, support, transaction notifications |
| Financial Data | bKash/Nagad mobile number, bank account details, transaction history, deposit and withdrawal records | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, browser type, device identifiers, operating system, session timestamps | Platform security, fraud detection, performance optimisation |
| Usage Data | Games played, bets placed, session durations, feature interactions, promotional engagement | Responsible gaming monitoring, product improvement, personalisation |
| Communications Data | Support chat logs, email correspondence, complaint records | Customer service, dispute resolution, quality assurance |
| KYC Documents | Scanned copies of national ID, passport, utility bills, payment method screenshots | Identity verification, withdrawal processing, AML compliance |
3 How We Collect Your Data
3.1 Directly From You
The majority of the personal data bfok holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional communication. You are in control of what you share with us in these interactions.
3.2 Automatically During Platform Use
When you access the bfok website or mobile platform, certain technical data is collected automatically via server logs, cookies, and similar tracking technologies. This includes your IP address, device fingerprint, browser configuration, and session activity. This data is collected to maintain platform security, detect fraudulent access patterns, and improve the overall user experience.
3.3 From Third-Party Service Providers
bfok may receive personal data about you from third-party partners in the following circumstances:
- Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) may share transaction confirmation data and the mobile number or account identifier associated with a payment.
- Identity verification providers may share the outcome of document checks performed on our behalf.
- Fraud prevention services may share risk scores or flags associated with your IP address, device, or payment method.
- Game providers such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming may share game session data relevant to your account activity on their titles.
4 How We Use Your Personal Data
bfok uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.
- Account management: Creating, maintaining, and securing your bfok player account, including processing login requests and updating account details.
- Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years to use the Platform.
- Payment processing: Handling deposits and withdrawals via your chosen payment method, reconciling transactions, and investigating disputed payments.
- Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
- Responsible gaming compliance: Monitoring your betting behaviour to identify potential signs of problem gambling and applying account-level safeguards where appropriate.
- Legal and regulatory compliance: Meeting obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection frameworks.
- Customer support: Responding to your queries, complaints, and account-related requests in an accurate and timely manner.
- Marketing communications: Sending you promotional offers, bonus notifications, and platform updates via email or SMS, where you have consented to receive such communications. You may withdraw this consent at any time.
- Platform improvement: Analysing aggregate usage patterns to identify areas for product development, performance optimisation, and user experience enhancement.
5 Legal Basis for Processing
bfok processes your personal data on the following legal bases, depending on the nature of the processing activity:
- Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted at registration, including account management, payment processing, and game access.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and record-keeping obligations.
- Legitimate interests: Processing necessary for bfok's legitimate business interests, including fraud detection, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
- Consent: Processing based on your explicit opt-in consent, principally in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 Sharing Your Personal Data
bfok does not sell your personal data. We share your data only with the following categories of third parties, and only to the extent necessary for the stated purpose:
6.1 Payment Service Providers
We share the minimum necessary transaction data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by financial data protection standards.
6.2 Identity Verification Partners
Where KYC verification is required, we share relevant identity documents and personal details with accredited verification service providers who act on our behalf. These providers are contractually prohibited from using your data for any purpose other than completing the verification request.
6.3 Game Technology Providers
Game session data — including your player identifier, bet amounts, and game outcomes — is shared with game providers such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming to enable game functionality, calculate results, and maintain game integrity logs.
6.4 Fraud Prevention and Security Services
Technical identifiers such as your IP address, device fingerprint, and behavioural session data may be shared with fraud prevention and cybersecurity partners to identify and block fraudulent activity on the Platform.
6.5 Legal and Regulatory Authorities
bfok will disclose personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by applicable law, valid legal process, or in response to a binding order from a competent authority. We will notify you of any such disclosure to the extent permitted by law.
No Cross-Border Transfers for Marketing: bfok does not transfer your personal data to third-party marketing companies, data brokers, or advertising networks. Our data sharing is strictly limited to operational partners required to deliver the bfok service.
7 Cookies & Tracking Technologies
bfok uses cookies and similar tracking technologies (including local storage, session tokens, and device fingerprinting) to operate the Platform securely and effectively. The categories of cookies we use are as follows:
- Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking Platform functionality.
- Functional cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming configurations between sessions.
- Analytics cookies: Collect anonymised data about how players interact with the Platform, which pages are most visited, and where technical errors occur. This data is used exclusively for internal product improvement.
- Security cookies: Detect anomalous login patterns, identify potentially compromised sessions, and support our fraud prevention systems.
You may manage cookie preferences via your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using the Platform. bfok does not use third-party advertising or behavioural tracking cookies.
8 Data Retention
bfok retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required for legal compliance:
- Account and identity data: Retained for a minimum of five (5) years following account closure to meet anti-money laundering record-keeping requirements.
- Financial transaction records: Retained for a minimum of seven (7) years for financial audit and regulatory compliance purposes.
- KYC documentation: Retained for the duration of the account relationship plus five (5) years post-closure, or longer if required by a specific regulatory obligation.
- Support communications: Retained for three (3) years from the date of the last interaction, or longer where the communication relates to an unresolved dispute.
- Technical and usage data: Typically retained for thirteen (13) months in an identifiable form, after which it is anonymised or deleted.
- Marketing consent records: Retained for the duration of the account relationship plus two (2) years after withdrawal of consent, to evidence that communications were sent lawfully.
Upon expiry of the applicable retention period, bfok will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with your identity.
9 Data Security
bfok implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and bfok servers
- AES-256 encryption for sensitive data at rest, including payment credentials and KYC documents
- Bcrypt password hashing — bfok never stores passwords in plain text
- Role-based access controls ensuring that internal staff can only access the data necessary for their specific job function
- Two-factor authentication (2FA) available for all player accounts and mandatory for internal administrative access
- Regular penetration testing and vulnerability assessments conducted by independent security specialists
- Automated intrusion detection and real-time anomaly monitoring on all production systems
- Secure, geographically redundant data storage with encrypted backup procedures
Your Role in Security: bfok's security measures protect data on our side. You are responsible for keeping your login credentials, OTP codes, and device access secure. Never share your password or one-time codes with anyone — including individuals claiming to be bfok staff. Our support team will never ask for your password.
10 Your Data Rights
As a bfok player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and a description of your request. We will respond within 30 calendar days.
Right of Access
You may request a copy of all personal data bfok holds about you, including the categories of data, the purposes of processing, and the third parties with whom it has been shared.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Right to Restrict Processing
You may ask us to temporarily halt processing of your data — for example, while the accuracy of certain data is being contested — without requesting full deletion.
Right to Data Portability
Where processing is based on your consent or a contract, you may request your personal data in a structured, machine-readable format to transfer to another service provider.
Right to Object
You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your rights override those interests.
11 Minors
The bfok platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data relating to individuals under the age of 21. If you believe that a minor has accessed the Platform or provided us with personal data, please contact us immediately at [email protected]. Upon confirmation, we will take prompt steps to delete the relevant data and close the associated account.
bfok employs age verification procedures at the point of registration and during KYC reviews to prevent minors from accessing real-money gambling services. Parents and guardians are encouraged to use parental control software to restrict access to gambling websites on shared devices.
12 Third-Party Links
The bfok platform may from time to time contain references to third-party game providers, payment services, and partner organisations. This Privacy Policy applies solely to data processed by bfok directly. When you interact with a third-party service — such as completing a payment through your bKash or Nagad application — that interaction is governed by the privacy policy of the relevant third party. bfok accepts no responsibility for the data practices of third-party services and encourages you to review their privacy policies before sharing personal information with them.
13 Policy Updates
bfok reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify you by displaying a prominent notice on the Platform and, where practicable, by sending an email to your registered address. The revised Policy will state the updated effective date at the top of the document.
Your continued use of the bfok Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you should discontinue use of the Platform and contact us to close your account.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bfok handles your personal data, please contact our Data Support team using the details below. All privacy-related communications should be submitted in English.
- Data Enquiries Email: [email protected]
- Subject Line for Data Requests: Data Rights Request
- Response Time: Within 30 calendar days of receipt for formal data rights requests; within 48 hours for general privacy queries
- Support Availability: 24 hours a day, 7 days a week
- Platform: bfok.io
When submitting a data rights request, please include your registered email address and, if possible, your bfok account username to help us locate your records promptly. Do not include your password, OTP codes, or full payment method details in any email correspondence with our team.
Safe & Secure Gaming
Ready to Play on a Platform You Can Trust?
Your data is protected. Your account is secure. Explore bfok Casino, browse our game categories, or log in to manage your privacy settings and responsible gaming tools.