Privacy Policy — How okpok Protects Your Personal Data

1 Introduction

okpok ("okpok", "we", "us", "our") is committed to protecting the privacy and personal data of all users who access and use the okpok Platform at https://okpok.io (the "Platform"). This Privacy Policy sets out in clear and transparent terms what personal data we collect from players and visitors, the purposes for which that data is used, how long we retain it, with whom we may share it, and the rights you hold in relation to your own data.

This Privacy Policy applies to all persons who access the Platform, including registered players, prospective players, and visitors who browse the Platform without creating an account. By using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to okpok's collection and use of your personal data as described herein.

This Privacy Policy should be read alongside okpok's Terms & Conditions and our Responsible Gaming Policy, both of which form part of the agreement between you and okpok.

2 Data Controller

For the purposes of this Privacy Policy, okpok acts as the data controller in respect of all personal data collected through the Platform. As data controller, okpok determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in a lawful, fair, and transparent manner.

All data protection enquiries, access requests, erasure requests, and complaints should be directed to our support team at support at okpok.io. We aim to respond to all data-related requests within 30 calendar days of receipt.

3 Data We Collect

okpok collects the following categories of personal data in the ordinary course of operating the Platform and providing services to registered players:

Data Category	Specific Data Points	Mandatory?
Identity Data	Full legal name, date of birth, gender, nationality, NID / passport number	Yes (KYC)
Contact Data	Email address, mobile phone number, residential address	Yes
Financial Data	bKash / Nagad / Rocket / Upay account numbers, Visa / Mastercard last 4 digits, transaction history	Yes (payments)
Account Data	Username, hashed password, account balance, bonus history, betting history, login timestamps	Yes
Technical Data	IP address, device type, browser type and version, operating system, session duration, referring URL	Automatic
Usage Data	Pages visited, games played, bets placed, features used, click paths	Automatic
Communications Data	Live chat transcripts, support email correspondence, feedback submissions	When applicable
KYC Documents	Scanned copies or photographs of national ID card, passport, driving licence, proof of address documents	Yes (withdrawals)

We do not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where explicitly required by applicable law or regulation and where you have provided explicit consent.

4 How We Collect Your Data

okpok collects your personal data through the following means:

• Direct Submission: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or submit any form on the Platform.
• Automated Collection: Technical and usage data collected automatically when you visit or interact with the Platform, including via cookies, web beacons, server logs, and session tracking technology.
• Payment Providers: Transaction confirmation data received from payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you make deposits or initiate withdrawals.
• Game Providers: Game session data including bet amounts, game outcomes, session duration, and round identifiers, received from third-party game studios whose games are integrated into the Platform (such as Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, and Ezugi).
• Identity Verification Services: Verification status and risk-scoring data received from third-party KYC and fraud prevention service providers where these are used to supplement our internal verification processes.

5 Purposes & Legal Basis for Processing

okpok processes your personal data only where there is a lawful basis to do so. The following table summarises the primary purposes for which we process your data and the corresponding legal basis for each:

Purpose	Legal Basis
Account registration and management	Contract performance
Age verification (21+ compliance)	Legal obligation / Contract performance
Processing deposits and withdrawals	Contract performance
KYC identity verification	Legal obligation (AML compliance)
Fraud detection and prevention	Legitimate interests
Customer support delivery	Contract performance
Responsible gaming monitoring	Legal obligation / Legitimate interests
Platform analytics and improvement	Legitimate interests
Sending transactional communications	Contract performance
Sending promotional communications	Consent
Compliance with applicable law	Legal obligation

Where we rely on your consent as the legal basis for processing (for example, for sending promotional emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact our support team or use the unsubscribe mechanism included in each marketing communication.

6 Data Retention

okpok retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, to comply with anti-money-laundering record-keeping requirements.
• Transaction and Betting Records: Retained for five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• KYC Documents: Retained for five (5) years following the conclusion of the business relationship, or longer if required by applicable law.
• Customer Support Communications: Retained for three (3) years from the date of the final communication in each support thread.
• Technical and Usage Logs: Typically retained for twelve (12) months, after which they are aggregated or anonymised.
• Marketing Consent Records: Retained for the period during which consent is active, plus three (3) years following any withdrawal of consent.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual.

7 Sharing Your Personal Data

okpok does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only where strictly necessary and only for the purposes described in this Privacy Policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process your deposits and withdrawals. Each provider operates under its own privacy policy and data protection framework.
• Game Technology Providers: Pragmatic Play, NetEnt, Microgaming, Play'n GO, Evolution Gaming, Ezugi, and Spribe — to deliver game content and maintain game integrity. Data shared is limited to session identifiers and game-relevant parameters; personally identifiable information is not shared beyond what is necessary for game delivery.
• KYC and Fraud Prevention Services: Third-party identity verification and fraud risk-scoring providers used to supplement our internal AML and KYC processes. These providers are contractually bound to handle data in accordance with applicable data protection law.
• Analytics Providers: Anonymised or aggregated usage data may be shared with analytics providers to help us understand Platform performance and player behaviour. No personally identifiable data is shared in this context.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory demand, okpok may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. okpok will notify you of such a disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and insurers operating under professional confidentiality obligations, where necessary for the operation and protection of our business.

All third parties with whom okpok shares personal data are required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection obligations. okpok does not permit third parties to use your data for their own independent marketing purposes.

8 Cookies & Tracking Technologies

okpok uses cookies and similar technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They serve a variety of functions as described below:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without materially affecting your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations. Disabling these cookies may reduce the quality of your experience.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform, which pages are most visited, and how long sessions last. This data helps okpok identify areas for improvement. We use this data in aggregate form only.
• Performance Cookies: Monitor Platform load times, identify errors, and track the performance of individual pages and features to help our technical team resolve issues quickly.

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain parts of the Platform. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.

9 Security Measures

okpok takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, loss, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the okpok Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including KYC documents and financial records, is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. okpok's internal administrative systems also require multi-factor authentication for all privileged access.
• Regular Security Audits: okpok conducts periodic security reviews and vulnerability assessments of the Platform and its supporting infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, okpok will notify affected players as soon as reasonably practicable and will take immediate remedial action.

While okpok takes all reasonable precautions to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security and accept no liability for breaches that are beyond our reasonable control.

10 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by okpok. To exercise any of these rights, please contact our support team at support at okpok.io. We will respond to all valid requests within 30 calendar days. We may need to verify your identity before processing a request.

• Right of Access: You have the right to request a copy of the personal data okpok holds about you, together with information about how that data is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where okpok no longer has a lawful basis to retain it. This right is subject to our legal obligations to retain certain records (for example, AML record-keeping requirements).
• Right to Restrict Processing: You have the right to request that okpok restricts the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on okpok's legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11 Children & Minors

The okpok Platform is strictly intended for adults aged 21 years and above. okpok does not knowingly collect, process, or store personal data relating to any person under the age of 21. If you are under 21, you must not use the Platform or provide any personal data to okpok under any circumstances.

If okpok becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data from our systems, close the associated account, and return any deposits made to the original payment source where technically possible.

Parents and guardians are encouraged to make use of parental control software and internet filtering tools to prevent minors from accessing online gambling platforms. If you believe a minor in your care has accessed or registered on the okpok Platform, please contact our support team immediately.

12 Third-Party Links

The okpok Platform may contain references or informational mentions of third-party services such as payment providers and game studios. This Privacy Policy applies solely to data processed by okpok on the Platform. okpok is not responsible for the privacy practices of any third party and does not control how those parties collect, use, or protect your data.

We recommend that you review the privacy policies of all third-party services with which you interact in connection with your use of the okpok Platform, including your chosen payment service provider (bKash, Nagad, Rocket, Upay, Visa, or Mastercard).

13 Changes to This Privacy Policy

okpok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform functionality. Where a material change is made, we will notify registered players via email or via a prominent notice on the Platform prior to the change taking effect. The effective date displayed at the top of this document will be updated each time a new version is published.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree to the revised policy, you must stop using the Platform and may request account closure by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way okpok processes your personal data, please contact our data protection team using the details below. We take all privacy enquiries seriously and commit to responding within 30 calendar days.

• Email: support at okpok.io (plain text — not a clickable link)
• Live Chat: Available 24/7 from within your okpok Account dashboard (requires login).
• Response Time: Email responses within 24–48 hours for general enquiries; up to 30 days for formal data subject rights requests.

By continuing to use the okpok Platform, you confirm that you have read this Privacy Policy in full, that you understand how your personal data will be collected and processed, and that you consent to such processing as described in this document. This Privacy Policy constitutes part of the agreement between you and okpok and should be read alongside the full Terms & Conditions.