Bdok Privacy Notice and Personal Data Management

Bdok collects, uses and safeguards personal data in connection with its online gambling services. This notice describes the data we process, the purposes for which we process it, the lawful bases we rely on, and the rights you may exercise.

1. Data controller and contact details

Bdok is the data controller for the personal data processed under this notice. For privacy inquiries or to exercise your rights, contact our Data Protection Officer at privacy@bdok.

2. What personal data we collect

  • Identifying and contact information: full name, date of birth, residential address, nationality, email address, telephone number.
  • Account information: username, authentication credentials, password management preferences, profile settings.
  • Financial and verification data: payment method details used for deposits and withdrawals, transaction histories, and information from identity checks (KYC) and anti-money laundering screening.
  • Device and usage data: IP address, device type, operating system, browser, language, pages visited, time stamps, and interactions with the Services.
  • Communication data: messages you send to customer support or via in-service chat, and responses to surveys or promotional offers you accept.
  • Marketing preferences: consent status and opt-out choices for promotional communications.
  • Supplementary data from third parties: information from verification partners or publicly available sources used for identity verification, age checks, and fraud prevention.

3. How we collect your data

  • Direct collection: data you provide when creating an account, funding your account, or communicating with us.
  • Automatic collection: technical and usage data generated by your device and interactions with the Services.
  • Cookies and similar technologies: cookies and equivalents used to operate the Services, remember preferences, and analyze performance. See our Cookies policy for details.
  • Third-party sources: data obtained from verification providers, AML screening services, credit reference or affordability checks, and other partners where necessary to provide Services or comply with legal obligations.

4. How we use your data

  • Contractual performance: to establish and administer your account, provide gambling services, process deposits and withdrawals, and manage your bets and rewards. (Legal basis: performance of a contract.)
  • Identity and compliance: to verify age and identity, meet regulatory obligations including AML and customer due diligence. (Legal basis: legal obligation.)
  • Security and integrity: to detect and prevent fraud, unauthorized access, and other criminal activity. (Legal basis: legitimate interest.)
  • Provision of services: to maintain and improve the Services, resolve issues, and support operations. (Legal basis: legitimate interest/contract.)
  • Personalization and communications: to tailor features, recommendations, and communications with your consent or for legitimate interests where applicable. (Legal bases: consent or legitimate interest.)
  • Analytics and research: to understand usage patterns, optimize the product, and conduct risk assessments. (Legal basis: consent or legitimate interest.)
  • Legal and regulatory reporting: to comply with lawful requests, investigations, and regulatory reporting requirements. (Legal basis: legal obligation.)

5. Sharing and international transfers

  • Recipients: regulatory authorities, payment processors, IT service providers, fraud prevention services, and other trusted partners that support our operations.
  • Affiliates and corporate services: entities within the Bdok group may access data to perform services or provide support.
  • Law enforcement and legal processes: when required by applicable law or to protect rights and safety.
  • Cross-border transfers: where data is shared outside your jurisdiction, we implement safeguards such as contractual agreements and other measures to protect your data.

6. Data retention

We retain personal data only as long as necessary to fulfil the purposes described in this notice and to comply with applicable legal, regulatory, and business record requirements. Retention periods may vary by data type and jurisdiction; for specific periods, contact the Data Protection Officer.

7. Your rights

You may exercise the following rights in relation to your personal data:

  • Access and obtain a copy of your data.
  • Rectify inaccurate or incomplete data.
  • Delete data where justified or applicable (subject to legal retention requirements).
  • Restrict or object to processing (including profiling) in certain circumstances.
  • Port data to another controller where technically feasible.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with a supervisory authority if you believe your rights are violated.

8. Data security

We implement appropriate technical and organizational measures to protect personal data from accidental loss, alteration, disclosure or unauthorized access. Security measures include encryption in transit, access controls, ongoing monitoring, and regular audits. We maintain an incident response framework to detect, report, and remediate data breaches promptly.

9. Cookies and tracking technologies

We use cookies and similar technologies to operate the Services, analyze usage, and tailor content. Essential cookies are required for service delivery; other cookies require your consent. You may manage cookie preferences in the settings interface, subject to the functionality necessary to provide the Services.

10. Updates to this notice

We may update this privacy notice to reflect changes in our data practices or legal requirements. Material changes will be communicated through the Services or via the contact details we hold for you.

11. How to contact us and exercise rights

To exercise any data subject rights, request information about how we process your data, or raise concerns, contact the Data Protection Officer at privacy@bdok. We will respond within a reasonable timeframe and in accordance with applicable law. If you are not satisfied with our response, you may lodge a complaint with the competent supervisory authority in your jurisdiction.