ookk Privacy Policy

ookk collects personal data from you in several ways: directly when you register an account or interact with the platform, automatically through your use of the Service, and occasionally from third-party sources such as payment providers and identity verification agencies. The categories of personal data we collect are described in detail below.

Registration & Account Data

When you create an ookk account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number. You may also be asked to provide a username and password of your choosing. This data is required to create and maintain your account and to verify your eligibility to use the Service.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, ookk may request copies of identity documents including your Bangladesh National Identity Card (NID), passport, or driving licence. We may also request proof of address documents such as a utility bill or bank statement. Where required, we may request a photograph or selfie for facial verification purposes. KYC documents are processed securely and retained only for as long as required by applicable compliance obligations.

Financial & Transaction Data

We collect records of all deposits, withdrawals, and betting transactions made on your account. This includes transaction amounts in Bangladeshi Taka (৳), timestamps, payment method references (for example, a masked bKash or Nagad number), and transaction status. We do not store complete payment instrument details such as full card numbers or mobile banking PINs.

Usage & Technical Data

When you use the ookk platform, we automatically collect certain technical information. This includes your IP address, device type and operating system, browser type and version, session duration, pages visited, games played, bet amounts, and click-stream data. This information is used to ensure the security and stability of the platform, to detect fraud, and to improve the user experience.

Communications Data

If you contact our support team via email or live chat, we retain records of those communications, including the content of your messages and our responses. This data is used to resolve your query, to improve our support services, and where necessary, to document compliance with regulatory requirements.

Marketing Preferences

Where you have opted in to receive marketing communications from ookk, we retain a record of that consent together with your preferred contact channel (email or SMS). You may withdraw consent for marketing communications at any time by updating your account preferences or by contacting support.

ookk does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

Payment Service Providers

To process your deposits and withdrawals, ookk shares the minimum necessary transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and City Bank. These providers act as independent data controllers for their own payment processing operations and are subject to their own privacy policies and applicable financial regulations. ookk does not receive or store your full payment credentials from these providers.

Identity Verification Partners

Where automated KYC checks are used, ookk may share identity document data with a certified third-party identity verification provider. These providers are bound by strict data processing agreements and may not use your data for any purpose other than completing the verification request submitted by ookk.

Game Studio Providers

When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, those providers receive a session token and game-level interaction data. They do not receive your full name, NID, or financial account data. Game studios are contractually prohibited from using session data for any purpose other than delivering the game and reporting the outcome to ookk.

Legal & Regulatory Authorities

ookk may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other government bodies where required to do so by law, court order, or binding regulatory directive. We will notify affected players of such disclosures wherever we are legally permitted to do so.

Business Transfers

In the event that ookk or a material part of its business is transferred to a third party through a merger, acquisition, or asset sale, player personal data may be transferred as part of that transaction. We will notify affected players via the email address registered on their account prior to any such transfer taking effect, and will ensure that the receiving entity is bound by privacy commitments no less protective than those in this policy.

ookk implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme is reviewed and updated on a regular basis to address evolving threats.

Technical Measures

• All data in transit is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Account passwords are stored using a strong cryptographic hashing algorithm with unique per-account salting. ookk staff cannot view your password in plain text.
• Access to production systems containing personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication.
• Regular vulnerability assessments and penetration tests are conducted on all customer-facing systems.
• Database backups are encrypted and stored in geographically separated locations.

Organisational Measures

• All ookk staff who handle personal data receive mandatory data protection training before being granted access to production systems.
• Access to personal data is granted on a strict need-to-know basis. Customer support agents, for example, can view account status and transaction references but cannot view KYC document images without specific authorisation.
• Data processing agreements are in place with all third-party service providers who handle personal data on ookk's behalf.

Incident Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, ookk will notify affected players without undue delay and will take all reasonable steps to contain the breach and prevent recurrence. Players can report suspected security incidents or unauthorised account access to [email protected] at any time.

As a player on the ookk platform, you hold a number of rights in respect of the personal data we hold about you. These rights can be exercised at any time by contacting our support team at [email protected] with the subject line "Privacy Rights Request". We will respond to all rights requests within 30 days of receipt. There is no charge for exercising any of the rights listed below.

• Right of Access: You have the right to request a copy of the personal data ookk holds about you, together with information about how it is used and with whom it is shared. We will provide this information in a clear, portable format.
• Right to Rectification: If any personal data held by ookk about you is inaccurate or incomplete, you have the right to request that it be corrected. Many account details can be updated directly through your account settings without needing to contact support.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Please note that erasure requests may not always be fulfilled in full where retention is required by law (for example, AML record-keeping obligations).
• Right to Restrict Processing: You may request that ookk restricts the processing of your personal data in certain circumstances, for example while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive the personal data you provided to ookk in a structured, commonly used, machine-readable format.
• Right to Object to Marketing: You have an absolute right to object to your personal data being used for direct marketing purposes at any time. We will action all marketing opt-out requests promptly and without requiring justification.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.