Privacy Policy — How oktk1 Collects, Uses, and Protects Your Personal Data

Data We Do Not Collect

oktk1 does not intentionally collect sensitive personal data beyond what is required for identity verification purposes. We do not collect racial or ethnic origin data, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of unique identification, or data concerning health conditions — except where a player voluntarily discloses a gambling-related health concern in the context of a responsible gaming self-exclusion request, in which case such disclosure is treated with strict confidentiality and used solely for the purpose of administering the self-exclusion.

Data Collected from Minors

The oktk1 platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that personal data belonging to a minor has been collected, we will delete it immediately and permanently close the associated account. If you believe a minor has submitted personal data to oktk1, please contact us at [email protected] without delay.

oktk1 processes your personal data only where a valid legal basis exists for doing so. The following legal bases apply to our data processing activities:

Contractual Necessity

The majority of the personal data we process is necessary for the performance of the contract between you and oktk1 — specifically, the Terms & Conditions you agreed to upon registration. This includes processing your identity data and contact data to create and maintain your account, processing your financial data to handle deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported methods, and processing your gaming activity data to settle bets and operate casino game sessions.

Legal Obligation

oktk1 is subject to legal and regulatory obligations that require us to process certain categories of your data regardless of consent. These include Know Your Customer (KYC) and anti-money laundering (AML) obligations, which require us to collect and verify your identity documents, and record-keeping obligations that require us to retain transaction histories for a defined period.

Legitimate Interests

Where it does not override your fundamental rights and freedoms, oktk1 processes certain data on the basis of legitimate interests. This includes fraud detection and prevention, platform security monitoring, responsible gaming analytics designed to identify at-risk player behaviour, and the improvement of our platform's performance and user experience. We have conducted balancing tests to confirm that our legitimate interests do not outweigh your rights in each of these processing activities.

Consent

Where neither contractual necessity, legal obligation, nor legitimate interests provides a sufficient legal basis, oktk1 will seek your explicit consent before processing your data. This applies primarily to marketing communications — including promotional emails and SMS notifications about BPL season offers, Eid bonuses, and Pohela Boishakh specials — and to the use of non-essential cookies. You may withdraw your consent to marketing communications or non-essential cookies at any time without affecting the lawfulness of processing carried out before withdrawal.

oktk1 does not sell, rent, or trade your personal data. We share your data with third parties only where it is necessary to operate the platform, comply with legal obligations, or protect the platform and its users from harm. All third parties with whom we share personal data are required to handle it securely, use it only for the specified purpose, and comply with standards consistent with this Privacy Policy.

Payment Service Providers

When you make a deposit or withdrawal, your financial data — including your bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard account reference — is shared with the relevant payment service provider solely for the purpose of processing the transaction. Payment processors are subject to their own privacy and security policies, which we encourage you to review.

Identity Verification Providers

To fulfil our KYC obligations, oktk1 may share your identity documents and personal details with a third-party identity verification service. These providers verify the authenticity of your documents and confirm your identity against public and private databases. They are engaged as data processors acting on our instructions and are contractually prohibited from using your data for any other purpose.

Game Content Providers

The casino and live dealer games on the oktk1 platform are supplied by licensed third-party studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, and Spribe. These providers may collect limited technical data — such as your session identifier and device type — for the purpose of operating game sessions. They do not receive your full identity or financial data. Game providers are independently certified and operate under their own privacy frameworks.

Legal and Regulatory Authorities

oktk1 may be required to disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where we are legally obligated to do so — for example, in connection with an investigation into suspected money laundering, fraud, or underage gambling. Such disclosures are made only to the extent required by the applicable legal obligation and, where permitted by law, we will notify you of any such disclosure.

Business Transfers

In the event that oktk1 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you by email to your registered address in advance of any such transfer and will ensure that the acquiring entity commits to honouring the terms of this Privacy Policy with respect to your data.

Fraud and AML Sharing

Where oktk1 identifies account activity that raises a reasonable suspicion of fraud or money laundering, we may share relevant account data with fraud prevention databases, inter-platform responsible gaming registries, or banking compliance bodies as permitted under applicable regulations. This sharing is conducted under strict protocols and is limited to the minimum data necessary to support the specific investigation.

At the end of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is applied, the resulting data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes. oktk1 conducts periodic data audits to ensure that data is not held beyond its designated retention period.

oktk1 operates primarily to serve users in Bangladesh. However, some of our third-party service providers — including cloud infrastructure providers, game content studios such as Evolution Gaming and Pragmatic Play, and identity verification platforms — may process or store data in jurisdictions outside Bangladesh. Where such international transfers of personal data occur, oktk1 takes steps to ensure that your data receives an adequate level of protection.

International transfers are governed by data processing agreements that impose obligations on the recipient party to maintain security standards and data handling practices consistent with this Privacy Policy. Where a transfer is made to a country or territory that does not provide a level of data protection broadly equivalent to that available in Bangladesh, oktk1 implements appropriate contractual safeguards — such as standard data protection clauses — to ensure your data remains protected.

By using the oktk1 platform and providing us with your personal data, you acknowledge that your data may be transferred to, stored in, and processed in countries other than Bangladesh. If you have questions about the specific safeguards in place for a particular international transfer, you may contact the oktk1 Data Privacy team at [email protected].

oktk1 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing activities, legal obligations, or platform features. When we make material changes to this policy, we will notify registered users by email to their registered address and by posting a prominent notice on the oktk1.app platform for a minimum of 14 days prior to the changes taking effect.

The effective date at the top of this policy reflects the date on which the current version came into force. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. The most recent version of the Privacy Policy will always be available at https://oktk1.app/privacy-policy.

Your continued use of the oktk1 platform following the effective date of any updated version of this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to the policy, you should discontinue use of the platform and contact our support team to arrange account closure and a request for data deletion where applicable.

Minor changes — such as corrections to typographical errors, clarifications that do not alter the substance of the policy, or updates to contact information — may be made without prior notice. Such minor changes will be reflected in an updated effective date.