Your Privacy Matters
to oktk9

This Privacy Policy ("Policy") sets out how oktk9 ("we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your") who access or use the oktk9 online casino and sports betting platform available at https://oktk9.io and its mobile-optimised versions (collectively, the "Platform").

oktk9 is committed to handling your personal data with the highest standards of transparency, integrity, and security. We recognise that players based in Bangladesh place significant trust in us when they register an account and provide payment details, and we take that responsibility seriously.

This Policy should be read together with the oktk9 Terms & Conditions and Responsible Gaming Policy, both of which are accessible via the footer of this website and are incorporated by reference into this Policy.

By registering an account on the Platform, making a deposit, or continuing to use any feature of the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein.

For the purposes of this Privacy Policy, oktk9 acts as the data controller in respect of personal data collected from users of the Platform. As data controller, oktk9 determines the purposes for which and the means by which personal data is processed.

All enquiries relating to this Policy, requests to exercise data subject rights, or concerns regarding the handling of your personal data should be directed to our support team. Contact details are provided in Section 14 of this Policy.

oktk9 collects the following categories of personal data from users of the Platform. Collection occurs at the point of registration, during the ongoing use of the Platform, and through the technical operation of our systems.

Where you decline to provide data that is marked as mandatory during registration (such as your full name and date of birth), oktk9 may not be able to create or maintain your account, process transactions, or provide access to certain features of the Platform.

oktk9 collects personal data through the following channels and mechanisms:

• Direct submission: Data you voluntarily provide when completing the registration form, submitting identity verification documents, updating your account profile, making a deposit or withdrawal request, or contacting the support team.
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser information, and session activity logs. This data is collected via server logs, cookies, and similar technologies described in Section 9.
• Payment service providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment processing partners transmit relevant transaction confirmation data to oktk9 to facilitate account crediting and withdrawal processing.
• Third-party identity verification services: Where required for KYC compliance, oktk9 may use third-party identity verification providers to cross-check the documents you submit. These providers may confirm the validity of identity documents against authoritative data sources.
• Fraud and risk analytics providers: Technical data about your session and device may be processed by anti-fraud systems to identify patterns associated with suspicious account activity, multi-accounting, or unauthorised access attempts.

The table below summarises the specific purposes for which oktk9 processes your personal data and the corresponding legal basis relied upon for each purpose:

Where processing is based on your consent (for example, receiving promotional messages about new games, bonuses, or seasonal offers such as Eid specials or Pohela Boishakh promotions), you have the right to withdraw that consent at any time by contacting [email protected] or updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

oktk9 does not sell, rent, or trade your personal data. We share your data only with the categories of third parties described below, and only to the extent necessary for each party to perform their designated function:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard) receive transaction data necessary to execute deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and document verification services receive your identity documents and personal details solely for the purpose of verifying your age and identity in compliance with our user eligibility requirements.
• Game studio providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Ezugi, and Spribe may receive a session token and account tier data necessary to load games within the Platform. No personally identifiable financial data is transmitted to game studios.
• Anti-fraud and security vendors: Technical session data (IP address, device fingerprint, behavioural patterns) may be processed by specialist fraud detection partners to protect the integrity of the Platform and your account.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally required or compelled to do so, including in response to a valid court order or regulatory directive.
• Professional advisers: Lawyers, auditors, and accountants engaged by oktk9 may access personal data on a strictly need-to-know basis and under binding confidentiality obligations.

oktk9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, tax, or accounting obligations. The general retention guidelines we apply are as follows:

• Active account data: Retained for the duration of your registered account relationship with oktk9, plus a minimum period of five (5) years following account closure to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping standards.
• Identity verification documents: KYC documents (NID copies, passport scans) are retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Customer support tickets and correspondence are retained for three (3) years from the date of resolution.
• Technical and usage data: Server logs and session data are retained for up to twelve (12) months for security and fraud investigation purposes, after which they are anonymised or deleted.
• Marketing consent records: Records of your consent or opt-out for marketing communications are retained for as long as your account is active and for one (1) year following account closure.

When personal data is no longer required for any of the above purposes, oktk9 will securely delete or irreversibly anonymise it in accordance with our internal data lifecycle management procedures.

oktk9 implements a layered, defence-in-depth approach to data security. The technical and organisational measures we employ include, but are not limited to, the following:

• Transport encryption: All communications between your browser or mobile device and oktk9 servers are encrypted using TLS 1.2 / TLS 1.3 with 256-bit AES cipher suites. Our SSL certificate is maintained and renewed continuously.
• Storage encryption: Sensitive personal data stored on our servers — including identity documents, payment account identifiers, and hashed passwords — is encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and are bound by confidentiality obligations.
• Password security: User passwords are never stored in plaintext. They are hashed using industry-standard one-way hashing algorithms with per-user salts before storage.
• Intrusion detection: Our infrastructure is monitored continuously for anomalous activity. Automated alerting systems are in place to flag and respond to potential security incidents in real time.
• Regular security reviews: Our technical infrastructure and data handling procedures are reviewed periodically to ensure compliance with current best practices and to address newly identified threats.

No method of internet transmission or electronic storage is 100% secure. While we make every effort to protect your personal data, oktk9 cannot guarantee absolute security against all possible threats. In the event of a security breach that is likely to result in a risk to your rights and freedoms, we will notify affected users promptly and take all reasonable steps to mitigate the impact.

oktk9 uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform effectively, remember your preferences, maintain your login session, and understand how users interact with the site. The cookies we use fall into the following categories:

Strictly essential cookies are necessary for the Platform to function and cannot be disabled without preventing you from using core features such as logging in or making deposits. Functional and analytical cookies may be managed through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or be alerted when cookies are being set. Note that disabling functional cookies may affect your experience on the Platform (for example, your preferences may not be saved between sessions).

oktk9 does not use advertising-network cookies or cross-site tracking pixels for the purpose of serving targeted advertisements to you on third-party websites. Analytical data collected via cookies is used solely for internal platform optimisation and is not shared with advertising networks.

As a user of the oktk9 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days, subject to identity verification and any applicable legal exceptions.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to our legal obligation to retain certain records under applicable financial and anti-money laundering regulations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on oktk9's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The oktk9 Platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

During the registration process, oktk9 requires all applicants to confirm their date of birth and consent to the 21+ age restriction. Where there is reasonable suspicion that a registered user is under the age of 21, oktk9 reserves the right to suspend the account and request additional identity verification documents before reinstating access. Any deposits made by a user who is subsequently found to be under 21 will be returned in full, and the account will be permanently closed.

If you are a parent or guardian and believe that your child may have registered on the Platform or submitted personal data without your consent, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary steps, including deleting the relevant data and closing the account.

oktk9 primarily stores and processes personal data on servers located in secure data centre facilities. In the course of operating the Platform and delivering our services, certain personal data may be transferred to, stored in, or processed by systems located outside of Bangladesh — for example, when data is processed by our game studio partners, KYC verification providers, or anti-fraud systems that operate globally.

Wherever such international transfers occur, oktk9 takes appropriate steps to ensure that your personal data receives an equivalent level of protection to that described in this Policy. These steps may include entering into data processing agreements with receiving parties, ensuring that service providers operate under privacy frameworks that offer comparable protections, or applying technical safeguards such as encryption to data transmitted across borders.

By registering an account with oktk9 and using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh as described above. If you have questions about the safeguards applied to international data transfers, please contact us at [email protected].

oktk9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When we make material changes to this Policy, we will take reasonable steps to notify you — for example, by displaying a prominent notice on the Platform or by sending a notification to the email address associated with your account.

The "Last Updated" date at the top of this Policy will always reflect the date on which the most recent version took effect. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which oktk9 handles your personal data, please contact our support team using the details below. Our English-speaking support team operates 24 hours a day, 7 days a week, in Bangladesh Standard Time (UTC+6).

When contacting us regarding a data rights request (see Section 10), please include your registered account username and the email address associated with your oktk9 account so that we can locate your records efficiently and respond accurately. We may ask you to verify your identity before processing certain requests in order to protect against unauthorised access to your personal data.

We are committed to resolving all privacy-related enquiries fairly, transparently, and within a reasonable timeframe. If you are dissatisfied with our response to your enquiry, you retain the right to escalate your concern to an appropriate data protection authority or legal adviser in your jurisdiction.