okyk Privacy Policy

Personal Data You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact okyk support, you provide us with personal data that may include:

• Full legal name and date of birth, as provided during the registration process and confirmed through KYC verification.
• Bangladeshi mobile number — used as your primary account identifier and to link your bKash, Nagad, or Rocket wallet for payment processing.
• Email address, used for account notifications, promotional communications (where you have opted in), and password recovery.
• Government-issued identity document details (national ID card or passport number, photograph), submitted as part of the KYC process before your first withdrawal.
• Any communication content you send to the okyk support team via email, including the contents of your query and any supporting documents attached.

Data Collected Automatically

When you access the okyk platform, our systems automatically record certain technical data, including:

• IP address and approximate geographic location (city/country level only — okyk does not track your precise GPS coordinates).
• Device type, operating system, browser type and version, and screen resolution — used to optimise the platform display for your device.
• Session data including login timestamps, pages visited, games played, bets placed, and session duration — used for account security monitoring and responsible gaming assessments.
• Cookie identifiers and similar tracking tokens — see Section 4 of this policy for full details on okyk's use of cookies.

Purposes of Processing

okyk uses your personal data for the following specific purposes:

• Account creation and management — to set up and maintain your okyk player account, verify your identity, and ensure only one account exists per player.
• Payment processing — to accept deposits via bKash, Nagad, and Rocket, and to process withdrawal requests back to your verified mobile wallet. Payment data is shared with our payment processing partners only to the extent necessary to complete the transaction.
• Fraud prevention and security — to detect and investigate suspicious account activity, prevent money laundering, and protect the integrity of the okyk platform and its players.
• Responsible gaming monitoring — to track your gameplay patterns and identify signs of problem gambling. If our systems detect behaviour consistent with gambling harm — such as rapidly escalating deposit frequency or session duration — we may contact you with responsible gaming information or temporarily restrict your account.
• Customer support — to respond to your queries, complaints, or requests submitted to the okyk support team. Support communications are retained for 12 months to enable follow-up and quality review.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates by email or mobile notification, but only where you have actively opted in to receive such communications. You may unsubscribe from marketing emails at any time by contacting support.

Permitted Disclosure Circumstances

okyk may share your personal data only in the following circumstances:

• Payment service providers — specifically bKash, Nagad, and Rocket, to the extent required to process your deposit or withdrawal transaction. These providers are bound by their own data protection obligations under Bangladeshi telecommunications and financial regulations.
• Technology and platform service providers — third-party companies that provide software infrastructure, game content (such as Pragmatic Play, Evolution Gaming, and other studios), fraud detection tools, or customer support software under strict data processing agreements with okyk.
• Law enforcement and regulatory authorities — where okyk is required by applicable law, court order, or lawful government request to disclose personal data. okyk will notify you of such a request where it is legally permitted to do so.
• Business transfers — in the event that okyk undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that arise from it.

Types of Cookies Used

okyk uses the following categories of cookies on its platform:

• Strictly necessary cookies — these are essential to the operation of the okyk platform. They enable core functions such as maintaining your login session, remembering your language preference, and keeping your account secure during a browsing session. These cookies cannot be disabled without breaking the platform.
• Analytics cookies — these collect anonymised data about how players use the okyk platform, including which pages are most visited and where players spend the most time. This data helps us improve the platform experience. Analytics cookies do not identify you personally.
• Preference cookies — these remember your platform settings such as odds format, notification preferences, and game display options so that your experience is consistent across sessions.

Managing Your Cookie Preferences

You can control non-essential cookies through your mobile browser settings. Most browsers allow you to block or delete cookies through their privacy or settings menus. Please note that disabling strictly necessary cookies will impair your ability to use the okyk platform — in particular, you will not be able to remain logged in during a session. Disabling analytics or preference cookies will not prevent you from accessing the platform but may affect your experience.

Retention Periods

okyk retains your personal data for as long as your account is active and for a period after closure as required by applicable legal and regulatory obligations. Specifically: account registration data and KYC documents are retained for a minimum of 5 years from the date of account closure, in accordance with anti-money laundering record-keeping requirements. Transaction records (deposit and withdrawal history) are retained for a minimum of 5 years from the date of each transaction. Customer support communications are retained for 12 months from the date of the final message in each support thread.

After the applicable retention period has expired, okyk will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where anonymisation is used rather than deletion, the anonymised data may be retained for statistical or analytical purposes but will not be used in any way that identifies you.

Security Measures in Place

okyk applies the following technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS encryption on all data transmissions between your device and okyk servers, ensuring that your credentials, payment details, and personal data cannot be intercepted during transit.
• Access controls — personal data held by okyk is accessible only to those employees and service partners whose role requires them to process it. Access is granted on a least-privilege basis and is reviewed regularly.
• Password hashing — account passwords are stored using a one-way cryptographic hashing algorithm. okyk staff cannot view your password in plain text; if you forget your password, it must be reset, not retrieved.
• Fraud monitoring systems — automated systems monitor account activity in real time for patterns associated with account takeover attempts, multiple account creation, and unusual payment activity.

Your Data Rights

As a player on the okyk platform you have the following rights in relation to your personal data:

• Right of access — you may request a copy of all personal data that okyk holds about you. We will provide this within a reasonable timeframe, free of charge, in a readable format.
• Right to rectification — if any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or complete it. Please contact support with documentary evidence of the correct information.
• Right to erasure — in certain circumstances (for example, where your data is no longer necessary for the purpose it was collected, or where you withdraw consent), you may request that we delete your personal data. Note that erasure may not be possible where okyk has a legal obligation to retain the data (such as anti-money laundering record-keeping).
• Right to restrict processing — you may ask us to pause the processing of your personal data in certain circumstances, such as while a rectification request is being investigated.
• Right to withdraw consent — where okyk processes your data on the basis of your consent (for example, for marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

How to Exercise Your Rights

To exercise any of the above rights, contact the okyk support team by email at [email protected]. Please identify yourself clearly and specify which right you wish to exercise and in relation to which data. We will respond within 48 hours of receipt. In some cases we may need to verify your identity before processing a rights request — this is to protect your data from being accessed or deleted by unauthorised third parties.

Third-Party Data Processing

The okyk platform integrates game content from third-party studios and payment processing from mobile wallet providers. These integrations may involve limited data sharing as follows:

• Game studios (such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming) receive anonymised session tokens that allow their game software to record your game results for fair play verification and RNG certification purposes. Game studios do not receive your name, mobile number, or payment details.
• Payment providers (bKash, Nagad, Rocket) receive the transaction amount and your mobile wallet number to execute the payment instruction. They do not receive your game history, betting records, or account balance information from okyk.
• All third-party service providers engaged by okyk are required to process data only for the specified purpose and to maintain appropriate security standards. okyk does not permit third-party providers to use your data for their own marketing purposes.

No Data Collection from Minors

The okyk platform is strictly for adults aged 21 and above. okyk does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, that account will be closed immediately, all data associated with it will be deleted in line with our legal obligations, and any balance will be forfeited in accordance with the Terms & Conditions. If you are a parent or guardian and believe that a person under 21 in your care has registered on the okyk platform, please contact our support team immediately at [email protected] so that we can take prompt action.

Policy Updates

okyk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make a material change — one that significantly affects your rights or the way we handle your data — we will post the updated policy on this page with a new effective date and, where possible, notify registered players via the email address on their account. We encourage you to review this page periodically. Continued use of the okyk platform after a policy update constitutes your acceptance of the revised policy.

Privacy Contact Information

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how okyk has handled your personal information, please contact our support team. All privacy requests are handled confidentially and we aim to respond within 48 hours during normal operating hours (Bangladesh Standard Time, UTC+6).

Email: [email protected]