Privacy Policy

When you create an oktko account, we collect the personal information you provide at registration. This includes but is not limited to:

• Full legal name as it appears on a government-issued identification document.
• Date of birth (used to verify that you meet the minimum age requirement of 21 years).
• Mobile phone number registered in your name in Bangladesh.
• Email address (if provided during registration or account recovery).

To comply with anti-money laundering obligations and to verify player eligibility, we may request the following identity documents:

• National Identity Card (NID) or passport scan or photograph.
• A selfie photograph for biometric identity matching purposes.
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad registered account showing your name and phone number).

When you access the oktko platform, we automatically collect certain technical data about your device and browsing activity. This is used for security monitoring, fraud prevention, and platform improvement:

• IP address and approximate geolocation derived from it.
• Device type, operating system version, and browser type.
• Pages visited, session duration, game history, betting activity, and click-stream data.

oktko processes your personal data for the following specific purposes:

• Account creation, authentication, and management — to verify your identity, create and maintain your player account, and enable you to log in securely.
• Transaction processing — to process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment channels, and to maintain an accurate record of your financial activity on the platform.
• Regulatory compliance — to comply with anti-money laundering (AML) requirements, age verification obligations, and responsible gaming regulations by maintaining KYC records and transaction audit trails.
• Customer support — to respond to your queries, resolve account issues, handle disputes, and provide assistance with responsible gaming tools such as deposit limits and self-exclusion.
• Platform improvement and fraud prevention — to analyse usage patterns, detect and prevent fraudulent behaviour, improve game performance, and enhance the overall user experience on the oktko platform.

oktko processes personal data under one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity — processing is required to fulfil the contract between you and oktko (i.e., to provide the gaming and betting services you have registered to use).
• Legal obligation — processing is necessary to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial reporting standards.
• Legitimate interests — processing is carried out for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your fundamental rights.
• Consent — where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

oktko does not sell your personal data. We may share your information with the following categories of third parties strictly for the purposes stated in this policy:

• Payment service providers — bKash, Nagad, Rocket, Upay, and banking partners receive the minimum necessary transaction data required to process your deposits and withdrawals.
• Identity verification and KYC service providers — third-party verification services may process your identity documents to confirm your eligibility and comply with age verification obligations.
• Game software providers — providers such as Pragmatic Play, Evolution Gaming, and Spribe may receive session identifiers and game activity data to deliver their games and calculate results on our platform.
• Law enforcement and regulatory authorities — we may disclose your personal data where required to do so by law, court order, or legitimate regulatory request.

All third-party service providers who handle personal data on oktko's behalf are required to implement appropriate data protection measures and to process your data only for the purposes for which it was shared with them.

oktko collects and retains records of all financial transactions conducted through your account, including deposits, withdrawals, bonus credits, and wagering activity. This financial data is retained for a minimum period required by applicable financial compliance obligations and is used exclusively for account management, dispute resolution, regulatory reporting, and fraud detection purposes.

oktko does not store full mobile banking account credentials such as bKash PINs or Nagad passcodes. Payment authentication is handled directly by the respective payment provider's own secure systems. oktko retains only the transaction reference number, amount, timestamp, and your registered mobile number as the payment account identifier.

oktko uses cookies and similar tracking technologies to operate the platform and improve your experience. The categories of cookies we use are:

• Essential cookies — required for the platform to function. These include session cookies that keep you logged in during an active session and security tokens that protect against cross-site request forgery. Essential cookies cannot be disabled without breaking platform functionality.
• Analytics cookies — used to understand how players navigate the site, which pages are visited most frequently, and where users encounter errors. This data is aggregated and anonymised before analysis.
• Preference cookies — store your settings such as language preference and display options so you do not need to re-select them on each visit.

You may control or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the performance or availability of some platform features.

oktko retains your personal data for as long as your account remains active and for a further period thereafter as required by applicable law or legitimate business necessity. In general: account registration data and KYC documents are retained for a minimum of five years following account closure; financial transaction records are retained for a minimum of seven years to comply with financial reporting obligations; technical and usage logs are retained for up to 12 months for security and fraud monitoring purposes.

When the applicable retention period expires and there is no longer a legal or operational reason to retain your data, oktko will securely delete or anonymise your personal information in accordance with our internal data disposal procedures.

As a player on the oktko platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected]:

• Right of access — you may request a copy of the personal data oktko holds about you and information about how it is processed.
• Right to rectification — if any personal data we hold is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that override this right.
• Right to restriction — you may request that we restrict processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to object — where processing is based on legitimate interests, you may object to that processing. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

oktko will respond to all data rights requests within 30 days of receipt. In complex cases this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

oktko employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers, secure storage of personal data with access controls restricted to authorised personnel, regular security audits and vulnerability testing of platform infrastructure, and two-factor authentication options available to registered players.

While oktko takes reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, oktko will notify affected players without undue delay.

The oktko platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has provided personal data to us, we will promptly delete that data and close the associated account. Parents and guardians are encouraged to use available parental control software to prevent underage individuals from accessing online gambling platforms. If you believe a minor has registered on oktko, please contact us immediately at [email protected].

oktko reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will revise the "Last updated" date at the top of this page and, where practicable, provide notice to registered players via the platform or by direct communication. Your continued use of the oktko platform following publication of any updated Privacy Policy constitutes your acceptance of the revised terms.