bok333 Privacy Policy

bok333 collects personal data in several ways: directly from you when you register an account or contact support, automatically as you use the platform, and occasionally from trusted third-party sources such as payment processors and identity verification services. Below is a detailed breakdown of each category of data we collect.

1.1 Registration Data

When you create a bok333 account, we collect the following information:

• Full legal name — required to verify your identity and process withdrawals.
• Date of birth — required to confirm that you meet the minimum age requirement of 18 years.
• Email address — used for account communications, security alerts, and optional marketing with your consent.
• Mobile number — used for two-step account verification and, where relevant, bKash or Nagad payment processing.
• Residential address — collected during KYC (Know Your Customer) verification as part of our anti-fraud and responsible gaming obligations.
• Username and encrypted password — used to secure and identify your account.

1.2 Payment and Transaction Data

When you make a deposit or withdrawal, we collect transaction-related data including:

• The payment method used (bKash, Nagad, Rocket, Upay, or cryptocurrency wallet address).
• Transaction reference numbers, amounts in BDT or crypto equivalent, and timestamps.
• Partial payment identifiers (e.g., the last four digits of a linked mobile wallet number) retained for verification and dispute resolution purposes.

bok333 does not store full card numbers, full bank account numbers, or full MFS PINs on our systems. Payment processing is handled through PCI-compliant third-party processors where applicable.

1.3 Identity Verification (KYC) Data

To comply with responsible gaming, anti-money laundering, and age verification requirements, we may request copies of:

• National Identity Card (NID) or passport.
• Proof of address documents (utility bill, bank statement).
• Selfie photographs or video verification where required.

KYC documents are processed and stored in a secure, access-controlled environment. They are retained for as long as your account is active and for a period thereafter as described in Section 6 of this policy.

1.4 Usage and Technical Data

When you access bok333, our systems automatically log technical and behavioural data including:

Data Type	Purpose
IP address	Fraud detection, geolocation compliance, security monitoring
Device type and operating system	Platform optimisation and technical support
Browser type and version	Compatibility and user experience improvement
Session timestamps and duration	Responsible gaming monitoring, session limit tools
Pages visited and features accessed	Analytics, product improvement, fraud pattern detection
Betting and gaming activity logs	Account history, dispute resolution, responsible gaming
Referral source (if applicable)	Affiliate tracking, marketing attribution

1.5 Communications Data

If you contact bok333 via email, live chat, or any other support channel, we retain records of those communications including the content of messages, support ticket reference numbers, and resolution outcomes. This data is used to provide consistent support, train our team, and resolve any subsequent disputes.

We use the personal data we collect for the following purposes:

2.1 Account Operation

The primary use of your personal data is to create, manage, and operate your bok333 account. This includes processing deposits and withdrawals, recording your betting and gaming history, communicating security alerts, and enabling you to use all platform features you have chosen to access.

2.2 Identity Verification and Age Confirmation

bok333 is legally and ethically obligated to confirm that all players are at least 18 years of age and that accounts are operated by the person who registered them. We use your registration data and KYC documents for this purpose. Where we are unable to verify your identity or age to a satisfactory standard, your account may be restricted or closed.

2.3 Payment Processing

Your payment method details and transaction history are used to process deposits credited to your bok333 wallet and to execute withdrawal requests to your registered payment method. Transaction records are also retained for accounting, tax compliance, and dispute resolution purposes.

2.4 Fraud Prevention and Security

bok333 uses automated and manual monitoring tools to detect, investigate, and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited conduct. Technical data such as IP addresses, device fingerprints, and behavioural patterns form the basis of this monitoring. Where fraud is detected, we may share relevant data with law enforcement or fraud prevention organisations as described in Section 3.

2.5 Responsible Gaming

Your gaming activity data — including session length, betting frequency, deposit patterns, and loss history — is used to power bok333's responsible gaming tools. This includes automated alerts for signs of excessive play, enforcement of voluntary deposit and time limits you have set, and assessment of self-exclusion requests. Responsible gaming use of your data is always in your interest and is never used for commercial profiling.

2.6 Customer Support

Communications data and account history are used by our support team to resolve your queries, investigate complaints, and provide the best possible service. Support agents access only the data necessary to handle the relevant enquiry.

2.7 Platform Improvement and Analytics

Aggregated and anonymised usage data is analysed to understand how players interact with the bok333 platform, identify areas for improvement, optimise game selection, and enhance the overall user experience. Analytics insights are derived at a population level and do not involve profiling of individual players for non-operational purposes.

2.8 Marketing Communications (Consent-Based Only)

With your explicit consent at registration or via your account preferences, bok333 may send you promotional emails or notifications about new games, seasonal cricket promotions (such as BPL or T20 World Cup offers), deposit bonuses, and platform updates. You may withdraw marketing consent at any time and your withdrawal will take effect within 48 hours. Withdrawal of marketing consent does not affect your ability to use the platform.

bok333 does not sell your personal data. We share it only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose. All third parties with whom we share data are bound by contractual data protection obligations that require them to handle your information with equivalent care.

3.1 Payment Service Providers

To process deposits and withdrawals, we share relevant transaction data with your chosen payment service provider — including bKash, Nagad, Rocket, Upay, and cryptocurrency network operators. The data shared is limited to what each provider needs to execute the transaction. These providers are independent data controllers for the purposes of the transaction and their own privacy policies apply to data they hold.

3.2 Identity Verification and KYC Providers

Where we use a third-party identity verification service to process KYC documents, your identity data (name, date of birth, document images) is shared with that provider solely for the purpose of verification. The provider is prohibited from using your data for any other purpose.

3.3 Game Technology Providers

bok333's casino games are supplied by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive your account identifier and gaming session data to deliver the game experience, enforce game rules, and calculate RTP outcomes. They do not receive your full personal profile, payment details, or identity documents.

3.4 Fraud Prevention and Law Enforcement

Where required by applicable law, court order, or regulatory authority, bok333 will disclose personal data to relevant authorities. We may also proactively share data with fraud prevention agencies or law enforcement bodies where we have reasonable grounds to suspect criminal activity, including money laundering or identity fraud, associated with your account.

3.5 Business Transfers

In the event that bok333 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. Where this occurs, we will notify affected players and ensure that the acquiring entity is bound by privacy obligations at least equivalent to those in this policy before the transfer takes place.

3.6 What We Will Never Do

• Sell your personal data to advertisers, data brokers, or marketing networks.
• Share your data with any third party for their own independent commercial marketing purposes.
• Transfer your data to a country with weaker data protection standards without implementing appropriate safeguards.
• Disclose your data to government bodies without a lawful basis for doing so.

bok333 uses cookies and similar tracking technologies to keep you logged in, remember your preferences, protect your account from unauthorised access, and understand how the platform is used. This section explains what cookies we use, why, and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They are widely used across the internet to make websites work efficiently, remember user preferences, and provide website owners with information about how their site is being used. Cookies cannot execute code or deliver malware.

4.2 Types of Cookies Used by bok333

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, security tokens, CSRF protection	Session / up to 24 hours
Functional	Language preferences, game display settings, responsible gaming tool states	Up to 12 months
Analytics	Aggregated usage statistics, page performance, feature adoption (no personal profiling)	Up to 24 months
Affiliate Tracking	Recording the referral source that led to your registration, for affiliate commission purposes	30 days from first visit

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse all cookies, accept only certain types, or delete cookies already stored on your device. Note that disabling strictly necessary cookies will prevent you from logging in to your bok333 account, as session cookies are essential for authentication. Disabling functional cookies may cause certain preferences to reset between visits.

For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation or visit a privacy-focused browser guidance resource.

Our security infrastructure includes the following measures:

• TLS 1.3 Encryption in Transit — all data exchanged between your device and our servers is encrypted using Transport Layer Security. Our SSL certificate is maintained current and verified.
• Encrypted Data at Rest — sensitive fields in our database, including passwords (hashed with bcrypt), payment identifiers, and identity documents, are stored in encrypted form. Unencrypted plaintext copies of sensitive data are never retained.
• Access Controls — access to player personal data by bok333 staff is granted on a strict need-to-know basis. All staff access is authenticated, logged, and subject to regular audit.
• Two-Factor Authentication (2FA) — bok333 supports 2FA on player accounts and requires it for all staff accounts with access to personal data systems.
• Intrusion Detection and Monitoring — our platform is monitored 24/7 for anomalous activity, unauthorised access attempts, and indicators of compromise. Automated alerts trigger immediate investigation by our security team.
• Penetration Testing — bok333 conducts regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan — in the event of a data breach, bok333 has a documented incident response plan. Affected players will be notified promptly and without undue delay if a breach is likely to result in a risk to their rights or interests.

While we take all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials. If you believe your account has been compromised, contact us immediately at [email protected].

bok333 retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with our legal obligations and legitimate operational interests. We do not retain data longer than necessary for the purposes for which it was collected.

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	Legal / anti-money laundering compliance
Transaction records	Duration of account + 7 years after closure	Financial record-keeping obligations
KYC / identity documents	Duration of account + 5 years after closure	Anti-fraud / AML regulatory requirements
Gaming and betting activity logs	Duration of account + 3 years after closure	Dispute resolution, responsible gaming audit
Support communications	3 years from last interaction	Dispute resolution, service quality
Marketing consent records	Duration of consent + 3 years	Consent audit trail
Analytics / usage data (anonymised)	Up to 24 months on a rolling basis	Platform improvement (anonymised, no personal link)

When data reaches the end of its retention period, it is securely deleted or anonymised in a manner that prevents re-identification. Dormant accounts — those with no login activity for 12 or more consecutive months — will be flagged for closure in accordance with our dormant account policy, and players will be notified in advance via their registered email address.

As a player on bok333, you have a number of rights with respect to your personal data. These rights are described below, along with guidance on how to exercise each one. bok333 will respond to all valid privacy rights requests within 30 days of receipt. There is no charge for exercising your rights in ordinary circumstances.

• Right of Access — you have the right to request a copy of the personal data bok333 holds about you. We will provide this in a clear, structured format within 30 days.
• Right to Rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For minor corrections such as address updates, this can be done directly within your account settings.
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. Note that certain data (e.g., transaction records, KYC documents) must be retained for defined legal periods and cannot be deleted on request within those periods.
• Right to Restrict Processing — you may request that we limit how we use your data in certain circumstances, such as while you contest its accuracy or while an objection is being assessed.
• Right to Data Portability — where bok333 processes your data on the basis of your consent or to fulfil a contract, you have the right to receive a structured, machine-readable copy of that data to transfer to another service provider if you wish.
• Right to Object — you have the right to object to processing of your personal data where that processing is based on bok333's legitimate interests, including profiling for fraud prevention. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — where bok333 processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please contact our privacy team by email at [email protected] with the subject line "Privacy Rights Request". Please include your registered username and a brief description of the right you wish to exercise. We may need to verify your identity before processing the request.

If you have any questions, concerns, or complaints about how bok333 handles your personal data, we encourage you to contact us directly in the first instance. Our team aims to resolve all privacy-related enquiries promptly and transparently.

You can reach our privacy team at: [email protected] — please use the subject line "Privacy Enquiry" so your message is routed correctly. We aim to acknowledge all privacy enquiries within 2 business days and to provide a full response within 30 days.

8.1 Policy Updates

bok333 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes to this policy, we will notify registered players via their registered email address and display a prominent notice on the bok333 platform for at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the bok333 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting support.

8.2 Children and Minors

bok333 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has created a bok333 account or provided us with personal data, please contact us immediately at [email protected] and we will take immediate steps to close the account and delete the associated data. Our age verification procedures are designed to prevent minors from accessing the platform.

8.3 Links to Third-Party Sites

The bok333 platform may display references to third-party game providers and payment services. This Privacy Policy applies only to data processed directly by bok333. Third-party services operate under their own privacy policies, which we encourage you to review independently. bok333 is not responsible for the privacy practices of any third-party provider.