okotk Privacy Policy: How We Handle Your Personal Data
At okotk, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains in plain terms what personal data we collect from players in Bangladesh, why we collect it, how it is used, and the rights you hold over your own information. We encourage you to read it alongside our Terms & Conditions.
All data transmitted between your device and the okotk platform is protected by industry-standard SSL encryption. Your personal details, payment information, and account credentials are never sent in plain text.
okotk does not sell, rent, or trade your personal data to third-party marketers. Your information is used solely for the purposes described in this policy — operating the platform and improving your experience.
You hold meaningful rights over your personal data at okotk — including the right to access, correct, export, or request deletion of your information. Contact our support team at any time to exercise these rights.
Payment method details used for bKash, Nagad, Rocket, and Upay transactions are processed through encrypted payment gateways. okotk does not store your full mobile banking PIN or card number on its servers.
Identity documents submitted for KYC verification — including National Identity Cards (NID) and passports — are stored in an access-restricted, encrypted document vault. Only authorised compliance personnel may access them.
okotk retains your personal data only for as long as is necessary for the purposes set out in this policy and to meet applicable legal obligations. Data that is no longer required is securely deleted or anonymised.
Section 1
Data We Collect
When you interact with okotk, we collect several categories of personal data. The information we collect depends on how you use the platform — some data is provided directly by you during registration or when you contact support, while other data is collected automatically as you browse and play.
We collect only the minimum data necessary to deliver our services effectively and to meet our legal and operational obligations. Below is a detailed breakdown of the categories of data we collect and the typical source of each category.
| Data Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National Identity Card (NID) number | Provided by you at registration or during KYC verification |
| Contact Data | Mobile phone number (Bangladesh), email address, residential address in Bangladesh | Provided by you at registration or during account updates |
| Financial Data | bKash / Nagad / Rocket account number (masked), transaction history, deposit and withdrawal amounts in BDT | Collected during financial transactions via our payment gateway |
| Technical Data | IP address, device type, browser type, operating system, screen resolution, time zone (BST UTC+6) | Collected automatically when you access the platform |
| Usage Data | Pages visited, games played, session duration, bet history, game outcomes, bonus usage | Collected automatically via session tracking and platform logs |
| Communications Data | Support ticket content, live chat transcripts, emails sent to [email protected] | Provided by you when contacting okotk support |
| Verification Documents | Scanned or photographed NID, passport, proof of address, payment method screenshot | Provided by you during KYC verification at okotk's request |
We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided their personal information to okotk, please contact our support team at [email protected] immediately so we can take appropriate action, including account closure and data deletion.
Section 2
How We Use Your Data
okotk uses the personal data we collect for clearly defined purposes. We rely on a number of legal bases to process your data, including: the performance of a contract with you (operating your account and delivering our services), compliance with legal obligations (KYC, anti-money laundering, fraud prevention), legitimate interests (platform security, fraud detection, service improvement), and your consent (where processing is optional, such as marketing communications).
- Account Management: We use your identity and contact data to create, maintain, and manage your okotk player account — including processing your registration, verifying your identity, and handling account security requests.
- Service Delivery: Your usage data and financial data enable us to process bets, manage your game sessions, credit winnings, and facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer to your registered Bangladesh account.
- Identity and Age Verification: We process identity documents to verify that you meet the minimum age requirement of 18 years and to confirm that your registration details match your official records. This is a legal obligation we are required to fulfil.
- Fraud and Security: Technical data and usage patterns are analysed by our security systems to detect unauthorised access, suspicious wagering patterns, and potential fraud or money laundering activity. This processing protects both you and the platform.
- Responsible Gaming: We monitor betting frequency, session duration, and deposit patterns to identify signs of problem gambling. Where our responsible gaming triggers are met, we may contact you with information about available tools such as deposit limits and self-exclusion.
- Customer Support: Communications data — including your support messages and chat history — is retained to manage your support queries effectively, ensure quality, and maintain an accurate record of actions taken on your account.
- Marketing Communications (with consent): Where you have opted in, we may use your contact data to send you information about promotions, bonuses, new games, and seasonal offers relevant to the Bangladesh market. You may withdraw this consent at any time by contacting [email protected].
- Platform Improvement: Aggregated, anonymised usage data helps us understand how players interact with okotk — which games are most popular, where technical issues arise, and how the platform can be improved for all users.
Section 3
Data Sharing and Third Parties
okotk does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in order to operate our platform and comply with legal obligations, we do share limited personal data with a defined set of trusted partners and service providers. All third parties with whom we share data are contractually obligated to process it only for the purposes specified and in accordance with applicable data protection standards.
We share necessary financial data with our payment gateway partners to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. These partners receive only the minimum data required to complete each transaction.
Live casino and slot game providers such as Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and Spribe receive session tokens and anonymised player identifiers necessary to deliver their games on the okotk platform. They do not receive your full identity or payment details.
To meet identity verification obligations, we work with specialist KYC and anti-money-laundering compliance service providers. These partners process your identity documents and may cross-reference data against sanctions lists and other regulatory databases.
Where required by law, court order, or legitimate regulatory request, okotk may disclose personal data to relevant authorities. We will always seek to limit the scope of such disclosures to the minimum information required and, where legally permitted, will notify you of such requests.
Section 5
Data Security Measures
Protecting the security of your personal data is a core operational responsibility at okotk. We implement a layered security architecture that combines technical controls, access management policies, and ongoing monitoring to guard against unauthorised access, accidental loss, disclosure, or destruction of your personal information.
While no digital system can guarantee absolute security, okotk's security programme is designed to meet the expectations of a responsible online gaming platform serving the Bangladesh market. We review and update our security measures regularly in response to emerging threats and best-practice guidance.
- TLS/SSL Encryption in Transit: All data transmitted between your device and the okotk platform is encrypted using TLS 1.2 or TLS 1.3 protocols. This means that even if network traffic were intercepted, the content would be unreadable to any unauthorised party.
- Encryption at Rest: Sensitive personal data stored in okotk's databases — including identity data, KYC documents, and financial records — is encrypted at rest using AES-256 or equivalent encryption standards.
- Password Hashing: Player passwords are stored exclusively as salted cryptographic hashes using a modern, computationally intensive algorithm. okotk's staff cannot view your actual password at any time. If you forget your password, a reset link is sent to your registered email — passwords are never sent in plain text.
- Access Controls: Access to systems that hold personal data is restricted on a strict need-to-know basis. okotk employees only access player data when it is necessary for them to fulfil their specific job function. All internal access events are logged and audited.
- Two-Factor Authentication: Players are strongly encouraged to enable 2FA on their okotk account via SMS to their registered Bangladesh mobile number. okotk staff accounts that can access player data are required to use 2FA.
- Security Incident Response: okotk maintains a formal incident response procedure. In the event of a data breach that is likely to result in risk to affected individuals, okotk will notify relevant parties and take immediate remedial action. Affected players will be informed as soon as is practicable.
Section 6
Data Retention Policy
okotk retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal, regulatory, or contractual obligations. The specific retention period varies depending on the type of data and the purpose for which it is held.
| Data Type | Retention Period | Reason for Retention |
|---|---|---|
| Account and Identity Data | Duration of active account + 5 years after closure | Contractual obligation, fraud prevention, AML compliance |
| KYC Verification Documents | 5 years from submission or account closure (whichever is later) | Regulatory anti-money laundering requirements |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Betting and Game History | 3 years from the date of each transaction | Dispute resolution, responsible gaming monitoring |
| Support Communications | 2 years from the date of last interaction | Quality assurance, dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of consent, regulatory compliance |
| Technical and Usage Logs | 90 days from collection (anonymised aggregates retained indefinitely) | Security monitoring, platform analytics |
When the retention period for a particular category of data expires, okotk will securely delete or irreversibly anonymise that data so that it can no longer be associated with any individual player. You may request early deletion of your personal data by contacting [email protected] — however, please note that where okotk is legally required to retain data for a minimum period, we are unable to fulfil deletion requests that conflict with those obligations.
Section 7
Your Privacy Rights
As an okotk player, you have meaningful rights over your personal data. We are committed to making it straightforward for you to exercise these rights. To make any request listed below, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within a reasonable timeframe — typically within 14 working days.
Section 8
Policy Updates and Contact
okotk reviews this Privacy Policy periodically and updates it as necessary to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this document indicates when the current version was last updated. For material changes — those that significantly affect how we process your data or the rights available to you — we will provide reasonable advance notice by displaying a prominent notice on the okotk platform homepage and, where we have your contact details, by emailing your registered address.
Your continued use of the okotk platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you may close your account and request deletion of your personal data by contacting our support team before the updated policy takes effect.
For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data, please contact the okotk data team at the address below. We are available on Bangladesh Standard Time (BST, UTC+6) around the clock, every day of the year.
For all privacy-related questions, data access requests, or consent withdrawals, contact us at: [email protected]Subject line: "Privacy Rights Request"
General privacy queries: within 3 working days.
Formal rights requests: within 14 working days.
Complex requests: up to 30 days with prior notification.
All times are measured in Bangladesh Standard Time (BST, UTC+6).
Your Privacy Matters at okotk
Your data is protected, your rights are respected, and your gaming experience is secure. Explore okotk with confidence.
Explore okotk Casino Login to Your Account Read Our FAQ