Privacy Policy — oktk0

1. Data Controller

oktk0 ("we", "us", "our") is the data controller responsible for the personal information collected through the oktk0.app website and all associated services. As data controller, we determine the purposes and means by which your personal data is processed and are accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how your personal data is handled, or wish to exercise any of the rights described in this policy, you may contact our dedicated privacy support team at: [email protected]

2. Information We Collect

oktk0 collects personal data through several channels: directly from you when you register an account, make deposits or withdrawals, contact support, or participate in promotions; automatically when you use the platform via cookies and technical logs; and from third-party verification partners during the KYC process.

2.1 Registration & Account Data

When you create an oktk0 account, we collect the following information:

• Full legal name
• Date of birth
• Email address
• Bangladesh mobile number
• Residential address
• Username and encrypted password
• Preferred currency (Bangladeshi Taka / BDT)

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to verify that all players are aged 18 or over, we may collect copies of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport (biographical data page)
• Driving licence
• Proof of address (utility bill, bank statement, or government correspondence dated within 90 days)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account matching your registered name)

2.3 Financial & Transaction Data

We record all deposit and withdrawal transactions associated with your account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), transaction amounts in BDT, timestamps, and transaction reference numbers. We do not store full card numbers or mobile banking PINs — these are handled directly by the relevant payment processor.

2.4 Betting & Gaming Activity Data

oktk0 maintains a complete record of all bets placed, games played, stakes wagered, and winnings or losses recorded on your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data

When you access the oktk0 platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This data is used to maintain platform security, prevent fraud, and improve user experience.

2.6 Communications Data

When you contact the oktk0 support team via live chat, email, or any other channel, we retain records of those communications for quality assurance, training, and dispute resolution purposes.

Data Category	Examples	Primary Purpose
Identity Data	Name, date of birth, NID, passport	Account registration, KYC/AML compliance, age verification
Contact Data	Email address, mobile number, address	Account communications, support, notifications
Financial Data	bKash/Nagad account reference, transaction history	Payment processing, withdrawal verification, fraud prevention
Gaming Activity	Bets placed, games played, win/loss records	Account management, responsible gaming, dispute resolution
Technical Data	IP address, device type, browser, session logs	Security, fraud prevention, platform optimisation
Communications	Live chat transcripts, email correspondence	Quality assurance, dispute resolution, compliance

3. Legal Basis for Processing

oktk0 processes your personal data only where we have a valid legal basis to do so. The primary legal bases we rely on are as follows:

• Contract Performance: Processing your registration data, managing your account, and facilitating deposits and withdrawals are necessary to perform the contract between you and oktk0 when you register an account.
• Legal Obligation: KYC identity verification, AML transaction monitoring, and age verification are carried out to comply with applicable anti-money-laundering, counter-terrorism-financing, and responsible gaming obligations.
• Legitimate Interests: We process technical and device data, gaming activity records, and communications data on the basis of our legitimate interests in maintaining platform security, preventing fraud, resolving disputes, and improving service quality. These interests are balanced against your right to privacy.
• Consent: Where we send you marketing communications by email or SMS, we do so on the basis of your explicit consent given at registration or subsequently. You may withdraw this consent at any time by contacting support or using the unsubscribe link in any marketing email.

4. How We Use Your Data

The personal data collected by oktk0 is used for the following purposes:

• Creating and managing your player account on the oktk0 platform
• Verifying your identity and age to satisfy KYC and responsible gaming obligations
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks
• Crediting bonuses and managing wagering requirements associated with promotional offers
• Monitoring gaming activity to identify patterns that may indicate problem gambling, and contacting at-risk players proactively
• Detecting and preventing fraudulent activity, collusion, money laundering, and other prohibited conduct
• Responding to customer support enquiries via live chat and email
• Sending account-related transactional notifications (deposit confirmations, withdrawal updates, security alerts)
• Sending promotional communications where you have provided consent
• Improving the platform through anonymised analytics on user behaviour and game performance
• Complying with legal and regulatory requirements and responding to lawful requests from authorities

5. Cookies & Tracking Technologies

The oktk0 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens that prevent cross-site request forgery (CSRF), and cookies that remember your language preference. These cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data on how players use the oktk0 platform, including which pages are visited most frequently, how long sessions last, and where errors occur. This data helps us improve the platform for all users.
• Functional Cookies: Used to remember your preferences, such as your preferred deposit method, favourite game categories, and display settings, so you do not need to re-enter them on each visit.
• Marketing Cookies: Used where you have consented to receive personalised promotional content. These cookies help us measure the effectiveness of our campaigns and ensure you see relevant offers based on your activity on the platform.

5.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary cookies will prevent you from logging into your oktk0 account. Detailed guidance on managing cookies is available in your browser's help documentation.

6. Data Sharing & Third Parties

oktk0 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

6.1 Payment Service Providers

To process deposits and withdrawals, we share relevant transaction data with payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and City Bank. Each payment partner operates under its own privacy policy and data protection obligations. We share only the minimum data necessary to complete the transaction.

6.2 Identity Verification Partners

We use third-party KYC and AML compliance services to verify the identity and age of registered players. These partners process your identity documents and return a verification result to oktk0. They are contractually prohibited from using your data for any purpose other than completing the verification on our behalf.

6.3 Game Software Providers

The games available on the oktk0 platform are provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable gameplay, certain technical data (such as a session token and your account currency) is shared with the relevant game provider's servers. These providers do not receive your name, contact details, or payment information.

6.4 Legal & Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, or where disclosure is necessary to prevent, detect, or prosecute criminal activity including fraud and money laundering.

6.5 Business Transfers

In the event that oktk0 or any part of its business is acquired by, merged with, or transferred to another entity, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and the privacy terms that will apply to your data following the transfer.

7. Data Retention

oktk0 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

• Account Data: Retained for the lifetime of your account and for a minimum of five years following account closure, in accordance with standard AML record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five years following account closure or the last transaction date, whichever is later.
• Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Support Communications: Retained for three years from the date of the communication, unless the communication relates to an ongoing dispute or legal matter.
• Analytics & Technical Logs: Retained in anonymised or aggregated form for up to 24 months. Raw server logs containing IP addresses are retained for up to 90 days.
• Marketing Consent Records: Retained for as long as you remain opted in, plus three years following withdrawal of consent as evidence of the consent history.

When personal data is no longer required and no legal retention obligation applies, it is securely deleted or anonymised so that it can no longer be attributed to an individual.

8. Data Security

oktk0 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the oktk0 platform is encrypted in transit using current TLS protocols.
• Encryption at Rest: Sensitive personal data, including identity documents and payment references, is stored using AES-256 encryption.
• Access Controls: Access to personal data held in our systems is restricted to authorised personnel on a need-to-know basis. All access is logged and subject to regular audit.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for player accounts and mandate it for all internal administrative access to player data.
• Penetration Testing: Our platform undergoes regular independent security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: oktk0 maintains a formal data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay.

9. Your Privacy Rights

As an oktk0 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the support team at [email protected]. We will acknowledge your request within 48 hours and respond substantively within 30 calendar days.

• Right of Access: You may request a copy of all personal data oktk0 holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations (such as AML record-keeping requirements).
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You may request a copy of the personal data you provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, and where your particular circumstances justify an objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10. Minors & Age Verification

The oktk0 platform is strictly for adults aged 18 years and above. 18+ We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the account registration and KYC process. Where we become aware that personal data has been collected from a person under 18, we will suspend the account immediately, delete the relevant data, and return any deposited funds following identity confirmation from the account holder.

If you are a parent or guardian and believe that your child has registered an account with oktk0, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11. Changes to This Policy

oktk0 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made, we will notify registered players by email and display a prominent notice on the platform for a minimum of 14 days before the revised policy takes effect.

The date of the most recent revision is always shown at the top of this document. Your continued use of the oktk0 platform after the effective date of any revision constitutes your acknowledgement of the updated policy. We encourage you to review this page periodically to stay informed.

12. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the way oktk0 handles your personal data, please contact our privacy support team:

Email: [email protected]
Support hours: 24 hours a day, 7 days a week
Response time: Acknowledgement within 48 hours; substantive response within 30 calendar days

All privacy-related communications must be submitted in English. If you are not satisfied with the response you receive, you have the right to escalate your complaint to the relevant data protection authority or seek resolution through applicable legal channels.