bjok Privacy Policy

1 Introduction

This Privacy Policy (the "Policy") sets out how bjok (the "Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals who register for and use the bjok online betting and gaming platform, accessible at https://bjok.io. This Policy applies to all players based in Bangladesh and to all personal data processed in connection with your bjok account, regardless of the device or method used to access the platform.

bjok is committed to handling your personal data responsibly and transparently. We process personal data only for the specific, legitimate purposes described in this Policy, and we retain data only for as long as is necessary to fulfil those purposes or to comply with applicable legal obligations. This Policy should be read alongside the bjok Terms and Conditions and the bjok Responsible Gaming Policy, both of which are available on this website.

This Policy uses the term "personal data" to mean any information that identifies or could reasonably be used to identify you as a specific individual, including your name, mobile phone number, payment wallet details, device identifiers, and account activity records.

2 Personal Data We Collect

bjok collects the following categories of personal data in connection with the operation of your account:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify compliance with the 21+ minimum age requirement).
• Residential address in Bangladesh (if requested as part of KYC verification).
• Registered mobile phone number.

2.2 Account and Credential Data

• bjok account username.
• Hashed and salted password (bjok does not store passwords in plaintext).
• Account registration date and time, device used for registration, and IP address at registration.
• OTP two-factor authentication status and associated verification records.

2.3 Financial and Transaction Data

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank).
• Mobile wallet number or bank account identifier associated with deposits and withdrawals.
• Transaction reference numbers, amounts in BDT, timestamps, and transaction status records.
• Deposit history, withdrawal history, and account balance snapshots where relevant to dispute resolution.

2.4 KYC Verification Documents

• Scanned or photographed copies of government-issued identity documents (National ID card, passport, or driving licence) submitted for identity verification purposes.
• Proof-of-address documents where requested (utility bills, bank statements dated within 90 days).
• Verification status, review date, and reviewer notes associated with each KYC submission.

2.5 Usage and Technical Data

• IP address, device type, operating system, browser type and version, and screen resolution.
• Session start and end times, pages visited within the bjok platform, and navigation paths.
• Game play logs, bet placement records, game outcomes, and bonus activation records.
• Error logs and crash reports generated during platform sessions.

2.6 Communications Data

• Records of live chat conversations between you and bjok support agents, including timestamps and agent identifiers.
• Content of support tickets, complaint submissions, and any correspondence sent to [email protected].
• Marketing preference records, including opt-in and opt-out timestamps.

3 How We Collect Your Data

bjok collects personal data through the following channels and mechanisms:

3.1 Directly From You

The majority of personal data held by bjok is provided directly by you at the time of account registration, during KYC verification, when making a deposit or withdrawal request, or when contacting bjok support via live chat. You are in control of the information you provide and may update certain account details by contacting support.

3.2 Automatically During Platform Use

When you access the bjok platform, certain technical data is collected automatically by our servers and analytics infrastructure. This includes your IP address, device identifiers, session duration, and interaction logs. This data is collected using server-side logging, session cookies, and lightweight client-side analytics scripts. bjok does not use third-party advertising trackers or behavioural profiling technologies on the platform.

3.3 From Payment Service Providers

When you initiate a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a connected bank, the relevant payment service provider transmits a transaction confirmation — including the transaction reference number, amount, and wallet identifier — to bjok's payment processing system. bjok does not receive or store your full mobile banking PIN or password. Payment data shared with bjok by providers is governed by the provider's own privacy policy in addition to this Policy.

3.4 From Identity Verification Processes

Where bjok uses a third-party KYC verification tool to validate identity documents, that provider may process your identity document images and return a verification result to bjok. Any third-party KYC processors engaged by bjok are bound by data processing agreements that restrict their use of your data to the identity verification purpose only.

4 Purposes of Processing

bjok processes your personal data for the following specific purposes:

bjok does not use personal data for automated individual decision-making that produces legal or similarly significant effects without human oversight. Responsible gaming monitoring flags are reviewed by trained bjok support agents before any account intervention is taken.

5 Legal Basis for Processing

bjok processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil the bjok Terms and Conditions — including account creation, payment processing, KYC verification, and customer support — is carried out on the basis that it is necessary to perform the contract between you and bjok.
• Legal Obligation: Certain processing activities — including identity verification, anti-money-laundering screening, and record-keeping — are carried out because bjok is required to do so by applicable law or regulatory obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of bjok's legitimate interest in operating a safe, secure, and reliable platform. bjok has assessed that these legitimate interests are not overridden by your privacy rights in the circumstances described.
• Consent: Processing for direct marketing communications is carried out on the basis of your freely given consent at the time of account registration. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

bjok does not sell or rent your personal data to any third party. bjok may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

6.1 Payment Service Providers

Transaction data is shared with bKash, Nagad, Rocket, Upay, and connected banking partners as necessary to initiate, confirm, and reconcile deposit and withdrawal transactions. These providers receive only the minimum data required to process the specific transaction.

6.2 KYC and Identity Verification Partners

Where bjok engages a third-party KYC verification service, identity document images and basic identity data are shared with that service for the purpose of document authentication. KYC partners are engaged under written data processing agreements and are prohibited from using your data for any purpose other than identity verification for bjok.

6.3 Game Content Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate game loading and bet settlement. Full account identity data is not transmitted to game providers as part of standard game session initiation.

6.4 Legal and Regulatory Authorities

bjok may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a valid legal order, court order, or applicable regulatory obligation. bjok will, where legally permitted, notify you of such a disclosure request before complying.

6.5 Professional Advisors

bjok may share personal data with legal counsel, auditors, and financial advisors where necessary for the conduct of legal proceedings, financial audits, or regulatory compliance reviews. Such advisors are bound by professional confidentiality obligations.

7 Cookies and Tracking Technologies

bjok uses cookies and similar session-based technologies on the bjok platform. The following table describes the categories of cookies used and their purpose:

bjok does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies. Essential cookies are required for the platform to function and cannot be disabled without affecting your ability to log in and use bjok. Analytics and functional cookies may be declined by adjusting your browser settings, though doing so may affect certain platform features.

8 Data Retention

bjok retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years following permanent account closure, in order to meet anti-money-laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five years from the date of account closure or the date of the last transaction on the account, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for three years from the date of the conversation, unless the conversation relates to an unresolved dispute or regulatory inquiry, in which case it is retained until final resolution.
• Technical and usage logs: Retained in identifiable form for up to 12 months, after which log data is aggregated and anonymised for trend analysis purposes.
• Marketing preference records: Retained for the duration of your account plus one year following account closure, as evidence of consent and opt-out history.

Where bjok is required by law to retain data for a period longer than those stated above, the legal requirement takes precedence and data will be retained for the legally mandated period.

9 Data Security

bjok implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and bjok's servers.
• Encrypted storage of sensitive data fields, including KYC document files and payment wallet identifiers, at rest on bjok's servers.
• Password hashing using industry-standard algorithms — bjok never stores account passwords in plaintext.
• OTP two-factor authentication available for all accounts, strongly recommended for all players.
• Access controls restricting internal access to personal data to authorised bjok staff who require it for their specific operational role.
• Regular security reviews of platform infrastructure, including vulnerability assessments conducted on a periodic basis.

Notwithstanding the above measures, no online platform can guarantee absolute security against all potential threats. In the event of a data breach that poses a material risk to your rights and interests, bjok will notify affected account holders and take appropriate remediation action as promptly as practicable.

10 Your Data Rights

As a bjok account holder, you have the following rights in respect of your personal data. To exercise any of these rights, please contact bjok support via live chat or at [email protected]. bjok will respond to all data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of the personal data that bjok holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. bjok will action rectification requests promptly, subject to identity verification.
• Right to Erasure: You may request deletion of your personal data where bjok no longer has a legitimate operational or legal reason to retain it. Note that certain data categories — particularly KYC and transaction records — must be retained for the periods set out in Section 8 regardless of an erasure request, due to applicable legal obligations.
• Right to Restrict Processing: You may request that bjok restricts the processing of your personal data in specific circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You may request a copy of the personal data you have provided to bjok in a structured, commonly used, machine-readable format where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal.

11 Children and Minors

The bjok platform is strictly intended for adults aged 21 years and above. bjok does not knowingly collect personal data from individuals under the age of 21. If bjok becomes aware that personal data has been collected from an individual who is under the age of 21, that account will be closed immediately, all associated data will be deleted subject to any retention obligations arising from the illegal registration event, and any deposits made by the underage individual will be returned to the originating payment method.

If you are a parent or guardian and believe that a minor in your care has registered for a bjok account, please contact bjok support immediately via live chat or at [email protected]. bjok will treat all such reports as a priority and act on them within 24 hours.

12 Marketing Communications

bjok may send promotional offers, bonus notifications, tournament announcements, and seasonal campaign communications to players who have opted in to marketing at the time of account registration. These communications may be delivered via SMS to your registered mobile number or via in-platform notifications.

bjok marketing communications are always sent from identifiable bjok channels. bjok does not send unsolicited marketing messages to individuals who have not registered a bjok account. You may withdraw your marketing consent at any time by contacting bjok support via live chat and requesting removal from the marketing list. Opt-out requests are processed within 48 hours. Note that withdrawal of marketing consent does not affect transactional communications — bjok will continue to send account-relevant notifications such as deposit confirmations, withdrawal approvals, and KYC status updates regardless of your marketing preference.

13 Third-Party Links

The bjok platform does not include links to external third-party websites. In the event that bjok's game content providers display any content that contains a link to an external site within their game interface, bjok is not responsible for the privacy practices or content of those external destinations. This Privacy Policy applies exclusively to data processed by bjok in connection with the bjok platform and does not extend to any third-party website or service.

14 Changes to This Policy

bjok reserves the right to update or amend this Privacy Policy at any time to reflect changes in operational practices, applicable law, or platform features. Where amendments are material — for example, a change to the categories of data collected, a new category of data sharing recipient, or a change to retention periods — bjok will provide reasonable advance notice via a prominent notice on the bjok platform or via communication to your registered mobile number.

Your continued use of the bjok platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. The current version of this Policy, together with its effective date, will always be available at https://bjok.io/privacy-policy. bjok encourages you to review this page periodically to stay informed of how your data is handled.

15 Contact and Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or bjok's handling of your personal data, please contact the bjok support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the bjok platform. Average response time is 2–5 minutes.
• Email: [email protected] — displayed as plain text only, not a clickable link. Typical response time within 4 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

All privacy-related queries are handled by bjok's support team with the same confidentiality standards applied to account management communications. Please include your registered account username and a brief description of your query when contacting support so that your request can be directed to the appropriate team member promptly.