okotk Privacy Policy — Your Data, Protected

okotk ("the Platform", "we", "us", or "our") is committed to protecting the privacy and personal data of every player who interacts with our services. This Privacy Policy describes our data practices in connection with the okotk website at okotk.org, including our sportsbook, live casino, slot games, crash games, and all associated account, payment, and support services.

This policy applies to personal data collected from players located in Bangladesh and elsewhere who access the okotk platform. It covers data collected through the website, through mobile browsers, through customer support interactions (including email and live chat), and through technical systems such as cookies, server logs, and analytics tools.

This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy. Where a conflict exists between this policy and those documents on a matter of data privacy specifically, this Privacy Policy takes precedence.

We may update this Privacy Policy from time to time in response to changes in applicable law, our business practices, or the services we offer. The date of the most recent revision is shown at the top of this document. Continued use of the platform after a policy update constitutes your acceptance of the revised terms.

okotk collects personal data from players through several channels: directly from you when you register and use the platform, automatically through technical systems as you browse and interact with our services, and in some cases from trusted third parties for verification and fraud prevention purposes.

The categories of personal data we collect are set out in the table below:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data unless you voluntarily provide such information in a support communication, in which case it is handled with the highest level of care and used solely to resolve your query.

Data from minors: okotk does not knowingly collect personal data from individuals under the age of 18. If we become aware that an account has been created by or for a minor, we will close the account immediately and delete or anonymise all associated data. If you believe a minor has accessed okotk, please contact us at [email protected] immediately.

okotk uses the personal data we collect for specific, legitimate purposes directly related to delivering and improving our platform services. We do not process your data in ways that are incompatible with the purposes for which it was collected. The primary purposes are:

• Account creation and management: To register your okotk account, verify your identity, maintain your account profile, and communicate with you about account-specific matters such as verification requests, balance changes, and security alerts.
• Payment processing: To facilitate deposits and withdrawals in ৳ BDT via bKash, Nagad, Rocket, and Upay; to match incoming transactions to the correct account; and to maintain accurate financial records.
• Service delivery: To make available the full range of okotk products including sports betting on cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers fixtures), live casino games, slot titles, and crash game products.
• Compliance and fraud prevention: To fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations; to detect and investigate suspicious account behaviour; to prevent bonus abuse, multi-accounting, and other forms of fraud.
• Responsible gaming: To monitor betting patterns for signs of problem gambling behaviour; to enforce self-exclusion and account limits where requested; and to fulfil our obligations under our Responsible Gaming Policy.
• Customer support: To respond to your queries, complaints, and dispute submissions; to maintain records of communications for quality assurance and training purposes.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, test new features, and optimise the performance and layout of the okotk platform for players in Bangladesh.
• Marketing communications (opt-in only): If you have expressly opted in to receive promotional communications, we may use your contact details to send you information about bonuses, seasonal promotions (e.g., Eid, Pohela Boishakh, Victory Day offers), and relevant platform updates. You may withdraw your consent to marketing communications at any time by contacting support.

Where the legal basis for processing is your consent (e.g., marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Where processing is necessary for the performance of our contract with you (account and payment services), withdrawal of consent does not apply — that processing is carried out on a contractual basis.

okotk may share your personal data with the following categories of third parties, strictly on a need-to-know basis:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive only the minimum transaction information required to process your deposit or withdrawal — specifically the amount and the reference needed to match the transaction to your account. These providers operate under their own privacy policies and data protection obligations.
• Game software providers: Third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive a session token and anonymised game interaction data necessary to power the live game feeds and slot engines. These providers do not receive your name, contact details, or payment information.
• Identity verification services: We may use third-party KYC and document verification services to validate the identity documents you submit. These services process your identity data in accordance with their own certified data protection frameworks.
• Fraud and risk management services: Anonymised or pseudonymised behavioural and device data may be shared with specialised fraud detection providers to identify patterns associated with bonus abuse, multi-accounting, or money laundering. No personally identifiable data beyond what is strictly necessary is shared for this purpose.
• Legal and regulatory authorities: okotk will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or binding regulatory direction. We will notify you of such disclosures wherever legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of the okotk business, player data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

All third-party data processors engaged by okotk are contractually obligated to implement appropriate technical and organisational security measures to protect player data and to process it only in accordance with our documented instructions.

okotk uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate essential platform functions, remember your preferences, maintain your login session, and gather aggregated analytics data that helps us improve the platform experience for players across Bangladesh.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the okotk platform to function. They maintain your login session, store your account preferences, and enable secure navigation between pages. These cookies cannot be disabled without rendering the platform non-functional.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the okotk website — which pages are visited most frequently, how long sessions last, and where errors occur. This information is used solely to improve platform performance and is not linked to individual player identities.
• Functional Cookies: These cookies remember your platform preferences, such as your preferred language display settings, notification preferences, and last-accessed game categories. They enhance usability but are not required for core functionality.
• Security Cookies: Short-lived cookies used to validate the authenticity of requests, prevent cross-site request forgery (CSRF), and detect suspicious login behaviour. These are essential to the platform's security infrastructure.

okotk does not deploy third-party advertising cookies or tracking pixels that follow players across external websites. We do not participate in cross-site behavioural advertising networks.

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may impair certain platform features. Strictly necessary and security cookies are exempt from cookie opt-out controls as they are required for platform operation and player account security.

okotk retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, including any applicable legal, accounting, or regulatory retention obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data is either permanently deleted from our systems or irreversibly anonymised such that it can no longer be linked to any individual player. Anonymised, aggregated data (e.g., platform usage statistics) may be retained indefinitely for internal research and service development purposes.

Player data is stored on secure servers. okotk applies access controls, encryption at rest, and regular security audits to protect stored data from unauthorised access, disclosure, alteration, or destruction.

As a player on the okotk platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with sufficient information to verify your identity. We will respond to all verified requests within a reasonable period, and in any event within 30 days.

• Right of Access: You have the right to request a copy of the personal data okotk holds about you, along with information about the purposes for which it is processed, who it has been shared with, and how long it will be retained.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain account details directly via your okotk account dashboard.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that we delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that this right is subject to override where retention is required by legal obligation.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in specific circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, we will cease processing your data for marketing purposes without requiring you to provide justification.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

okotk takes the security of player data seriously and maintains a layered technical and organisational security framework to protect personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction.

Our security measures include:

• SSL/TLS Encryption in Transit: All data exchanged between your browser and the okotk platform is encrypted using TLS 1.2 or TLS 1.3. This applies to login sessions, account activity, payment operations, and support communications.
• Encryption at Rest: Sensitive player data stored on okotk's servers — including identity documents, payment references, and account credentials — is encrypted at rest using industry-standard symmetric encryption algorithms.
• Access Controls: Access to personal data within the okotk organisation is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data required for their specific operational role, and access is logged and audited regularly.
• Intrusion Detection and Monitoring: okotk maintains automated intrusion detection systems and real-time security monitoring across its infrastructure. Anomalous access patterns and potential breach indicators trigger immediate investigation protocols.
• Account Security: Player accounts are protected by password hashing (industry-standard algorithms), session token management, and automated suspicious activity alerts. Players are encouraged to use strong, unique passwords for their okotk accounts.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to player rights, okotk will notify affected players and, where required, relevant authorities, without undue delay. Notification will include the nature of the breach, data categories affected, and the steps being taken to address it.

While okotk implements robust security measures, no online platform can guarantee absolute security. Players are encouraged to protect their own account security by maintaining the confidentiality of their login credentials and immediately reporting any suspected unauthorised access to [email protected].

The okotk platform integrates with a number of third-party services to deliver the full suite of games and payment options available to Bangladeshi players. These include game content providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, as well as payment processors including bKash, Nagad, Rocket, and Upay.

Each of these third-party providers operates under its own privacy policy and data protection framework. When you interact with a live casino game powered by Evolution Gaming, for example, a session token is passed to that provider to enable the live feed — but your full identity and financial data remain within the okotk system. Similarly, when you initiate a bKash transaction, bKash processes that transaction under its own privacy terms, and okotk receives only the confirmation reference and amount.

okotk is not responsible for the privacy practices of third-party providers. We encourage players to review the privacy policies of any third-party services they interact with. Our own data sharing obligations in relation to these providers are set out in Section 4 of this policy.

The okotk platform does not contain links to external third-party websites outside of those required for operational payment processing and game content delivery. We do not embed social media tracking widgets, external advertising networks, or affiliate tracking pixels that transmit your browsing behaviour to external parties.

okotk reviews this Privacy Policy on a regular basis and reserves the right to update it at any time to reflect changes in applicable law, data protection best practices, or the services we offer on the platform. The date at the top of this document indicates when the current version became effective.

For material changes — those that significantly affect your privacy rights or the way we process your data — we will provide advance notice to registered players via the email address associated with their account, or via a prominent notice on the okotk platform, with a minimum of 7 days' notice before the revised policy takes effect.

For minor or administrative changes (such as corrections of typographical errors, clarifications of existing descriptions, or formatting updates that do not alter the substance of our data practices), updates may be published immediately without direct notification. In all cases, the most current version of this Privacy Policy is always available at okotk.org/privacy-policy.

Your continued use of the okotk platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this policy, you should discontinue use of the platform and contact support at [email protected] to arrange account closure and the return of any verified real-money balance.