opkok Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data opkok collects, how it is used, who it is shared with, and how you can exercise your rights as a data subject. We are committed to handling your information with transparency, care, and respect.
Our Commitment to You
How opkok Protects Your Privacy
The six principles below summarise how opkok approaches data privacy. The full legal text of each principle follows in the detailed policy sections below.
Minimal Data Collection
opkok collects only the data that is strictly necessary to operate your account, process transactions, verify your identity, and comply with legal obligations. We do not collect data speculatively or beyond what is required.
No Sale of Personal Data
opkok does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or any commercial entity. Your information is used solely to deliver and improve the opkok service.
Industry-Standard Security
All data transmitted between your device and opkok's servers is encrypted using TLS/SSL protocols. Sensitive data at rest is stored using AES-256 encryption. Access to personal data is restricted to authorised personnel only.
Your Rights as a Data Subject
You have the right to access, correct, and request deletion of your personal data held by opkok. You may also request a portable copy of your data or object to specific types of processing at any time.
Clear Retention Periods
opkok retains personal data only for as long as it is necessary to fulfil the purposes described in this policy, or as required by applicable law. Once the retention period expires, data is securely deleted or anonymised.
Transparent Cookie Use
opkok uses cookies and similar technologies only for essential platform operation, analytics, and security purposes. Third-party tracking cookies for advertising are not deployed on the opkok platform.
Contents
1 Introduction
opkok ("we", "us", "our") operates an online casino and sports betting platform accessible at opkok.io, serving players based in Bangladesh. We are committed to protecting the privacy and personal data of everyone who uses our platform, whether as a registered account holder, a visitor browsing the site, or a person interacting with our support team.
This Privacy Policy ("Policy") describes in plain, accessible English how opkok collects, uses, stores, discloses, and protects personal information in connection with the opkok platform and all associated services. It applies to all opkok users regardless of the device or access method used.
This Policy should be read together with opkok's Terms & Conditions, which are incorporated by reference. By registering an account or otherwise using the opkok platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.
Note: If you have any questions about this Policy or how opkok handles your data, you can contact us at any time at [email protected]. We aim to respond to all privacy-related enquiries within five (5) business days.
2 Personal Data We Collect
opkok collects personal data across several categories depending on how you interact with the platform. The specific data collected is described in the table below.
| Category | Examples of Data Collected | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport number | Account registration, KYC verification, age verification |
| Contact Data | Mobile phone number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Account communication, support, notifications |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet number, bank account details (where applicable), transaction history | Processing deposits and withdrawals, AML checks |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Platform security, fraud detection, technical optimisation |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions | Service improvement, responsible gaming monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support, dispute resolution, quality assurance |
| Verification Documents | Scanned copies of NID card, passport, utility bills, payment account screenshots | KYC compliance, identity verification for withdrawals |
Data Minimisation: opkok adheres to a strict data minimisation principle. We collect only what is necessary for the specific purpose stated. We do not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data.
3 How We Collect Your Data
opkok collects personal data through the following channels:
3.1 Direct Interactions
When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, submit a complaint or feedback form, or interact with any other feature of the opkok platform that requires you to input information, you provide data directly to us.
3.2 Automated Technologies
When you visit or use the opkok platform, certain technical data is collected automatically through your browser or device. This includes IP address, device identifiers, browser type, referring URLs, pages viewed, and session duration. This collection is performed via server logs, cookies, and similar technologies described in Section 7.
3.3 Third-Party Sources
opkok may receive personal data about you from third-party sources in the following limited circumstances:
- Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank to verify the status of deposits and withdrawals.
- KYC / identity verification providers: Verification results (pass/fail determinations) from third-party identity verification services used to confirm the authenticity of documents you submit.
- Fraud prevention services: Risk scores or flags from third-party fraud detection providers used to protect the integrity of the opkok platform.
4 How We Use Your Personal Data
opkok uses your personal data for the following specific purposes:
- Account management: To create, maintain, and administer your opkok account, including processing registration, managing your profile settings, and responding to account-related queries.
- Transaction processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or linked bank account), to maintain accurate financial records, and to issue transaction confirmations.
- Identity and age verification: To verify that you are at least 21 years of age and to confirm your identity in accordance with our Know Your Customer (KYC) obligations. opkok strictly enforces its 21+ policy.
- Fraud and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, collusion, and any other conduct that may compromise the integrity of the platform or the safety of other users.
- Regulatory compliance: To comply with applicable legal and regulatory obligations, including record-keeping requirements and cooperation with lawful requests from authorities.
- Customer support: To respond to your support queries, process complaints, and resolve disputes in a timely and effective manner.
- Responsible gaming: To monitor gameplay patterns for signs of problem gambling, to enforce deposit limits, cooling-off periods, and self-exclusion measures that you have requested, and to proactively reach out where our responsible gaming systems flag a concern.
- Platform improvement: To analyse usage data in aggregate to understand how players interact with the platform and to improve the quality, reliability, and features of the opkok service.
- Communications: To send you transactional communications (e.g., deposit confirmations, withdrawal approvals, security alerts) and, where you have opted in, promotional communications about bonuses, new games, and seasonal offers.
Marketing opt-out: You may withdraw your consent to receive promotional communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of prior processing and does not prevent opkok from sending you essential transactional communications related to your account.
5 Legal Basis for Processing
opkok processes your personal data on the following legal bases:
- Contract performance: Processing that is necessary to perform the contract between you and opkok — for example, processing transactions, managing your account, and delivering the gaming service you have signed up for.
- Legal obligation: Processing that is required for opkok to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and responses to lawful authority requests.
- Legitimate interests: Processing carried out for opkok's legitimate business interests where those interests are not overridden by your rights and interests — for example, fraud prevention, platform security, and aggregate analytics for service improvement.
- Consent: Where processing is based on your freely given, specific, and informed consent — for example, sending you promotional emails or SMS notifications about bonuses and offers. You may withdraw consent at any time.
6 Sharing Your Personal Data
opkok does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for each stated purpose.
6.1 Service Providers
opkok engages carefully selected third-party service providers to assist with the operation of the platform. These providers act as data processors on our behalf and are contractually required to handle your data in accordance with our instructions and applicable data protection standards. Categories of service providers include: payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners); identity verification and KYC providers; fraud detection and risk management services; cloud hosting and IT infrastructure providers; and customer support platform providers.
6.2 Game Providers
When you play games delivered by third-party game providers on the opkok platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), certain technical and gameplay data is transmitted to those providers to render the game. This data transfer is limited to what is technically necessary and is governed by the respective provider's data handling terms.
6.3 Legal and Regulatory Authorities
opkok may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or where opkok reasonably believes that disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
6.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of opkok's business assets, personal data held by opkok may be transferred to the acquiring entity as part of that transaction. In such circumstances, opkok will take reasonable steps to ensure that the acquiring entity provides a level of data protection consistent with this Policy, and will notify affected users in advance where practicable.
No cross-border transfers without safeguards: Where personal data is transferred to service providers located outside Bangladesh, opkok ensures that appropriate data transfer safeguards are in place — including contractual clauses that obligate the recipient to protect your data to the same standard as opkok.
7 Cookies & Tracking Technologies
opkok uses cookies and similar technologies (such as local storage objects and session tokens) to operate and improve the platform. The types of cookies used by opkok are described below.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential Cookies | Required for core platform functions: maintaining your logged-in session, remembering your account preferences, and enabling secure page navigation. | No — disabling essential cookies will prevent the platform from functioning correctly. |
| Analytics Cookies | Used to collect aggregated, anonymised data about how users interact with the platform — pages visited, session duration, error events. Helps opkok identify and fix usability issues. | Yes — you may opt out by contacting [email protected]. |
| Security Cookies | Used to detect and prevent fraudulent or automated access attempts, including CSRF tokens and rate-limiting identifiers. | No — security cookies are essential for platform integrity. |
opkok does not deploy third-party advertising cookies, social media tracking pixels, or behavioural targeting technologies. Your browsing activity on opkok is not shared with advertising networks.
Most browsers allow you to manage cookie preferences through the browser's settings menu. Please note that restricting essential cookies may impair your ability to use core platform features.
8 Data Security
opkok takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure.
8.1 Technical Measures
- TLS/SSL encryption: All data transmitted between your device and opkok's servers is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
- Data-at-rest encryption: Sensitive personal data stored on opkok's servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256.
- Access controls: Access to personal data is restricted to authorised opkok personnel and contractors on a strict need-to-know basis, enforced through role-based access control systems and multi-factor authentication.
- Intrusion detection: opkok's infrastructure is monitored continuously for signs of unauthorised access, unusual activity, or potential security incidents.
8.2 Organisational Measures
- All staff with access to personal data are trained in data protection obligations and confidentiality requirements.
- opkok conducts periodic reviews of its data security posture and updates its technical controls in response to emerging threats.
- Third-party service providers with access to personal data are required to maintain equivalent security standards and are subject to regular review.
Security incidents: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, opkok will notify affected users without undue delay and will take immediate steps to contain and remediate the breach. Please contact [email protected] immediately if you suspect your account has been compromised.
9 Data Retention
opkok retains personal data for no longer than is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The retention periods applied by opkok are summarised below.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account & identity data | Duration of account plus 5 years after closure | AML / regulatory record-keeping obligations |
| Financial transaction records | 7 years from the date of the transaction | Legal and audit requirements |
| KYC verification documents | 5 years after account closure | AML compliance and regulatory audit |
| Support communications | 3 years from the date of the interaction | Dispute resolution and quality assurance |
| Technical / server logs | 90 days from generation | Security monitoring and fraud investigation |
| Analytics data (aggregated) | 24 months on a rolling basis | Platform performance analysis |
When a retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to you as an individual. Where deletion is not immediately possible due to backup or archival cycles, the data is isolated from active processing until deletion can be completed.
10 Your Data Subject Rights
As a user of the opkok platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. opkok will respond to verified rights requests within thirty (30) days.
- Right of Access: You have the right to request a copy of the personal data opkok holds about you, together with information about how that data is being used and on what legal basis.
- Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you is corrected or completed without undue delay.
- Right to Erasure ("Right to be Forgotten"): You have the right to request that opkok deletes your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to opkok's legal retention obligations — we cannot delete data that we are required by law to retain.
- Right to Restriction of Processing: You have the right to request that opkok restricts the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
- Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that this copy be transmitted to another data controller where technically feasible.
- Right to Object: You have the right to object to processing of your personal data where that processing is based on opkok's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
Identity verification for rights requests: To protect your data, opkok will require you to verify your identity before processing any data subject rights request. This is to prevent unauthorised disclosure or deletion of personal data. Requests from unverified individuals will not be actioned.
11 Children & Minors
The opkok platform is strictly restricted to individuals who are 21 years of age or older. opkok does not knowingly collect personal data from anyone under the age of 21. The 21+ minimum age requirement is enforced through age verification checks at the point of registration and at the point of any withdrawal request.
If opkok becomes aware that personal data has been collected from a person under the age of 21 — whether through our own monitoring, a parental report, or any other means — that account will be immediately suspended, all personal data associated with the account will be deleted, and any deposited funds will be returned to the payment source after identity verification.
If you have reason to believe that a minor has registered an account on opkok, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will investigate all reports promptly.
Parental controls: opkok encourages parents and guardians to use available parental control software to prevent minors from accessing gambling websites. For information on filtering tools available in Bangladesh, please contact your internet service provider.
12 Third-Party Links
The opkok platform may, from time to time, contain links or references to third-party websites, content, or services — for example, game provider websites or payment partner information pages. These third-party destinations operate under their own privacy policies, which are entirely independent of this Policy.
opkok is not responsible for the privacy practices, data collection methods, or content of any third-party website or service. We recommend that you review the privacy policy of any third-party website you visit before providing any personal information. The presence of a link on the opkok platform does not constitute an endorsement of the linked site or its privacy practices.
13 Updates to This Policy
opkok reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When a material change is made to this Policy, opkok will provide reasonable advance notice to registered account holders via email or platform notification, and will update the "Last Updated" date displayed at the top of this document.
Your continued use of the opkok platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the platform and request account closure in accordance with the procedure described in our Terms & Conditions.
opkok recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being handled. The most current version of this Policy will always be available at opkok.io/privacy-policy.
14 Contact & Complaints
If you have any questions, concerns, or complaints about this Privacy Policy or the way in which opkok handles your personal data, please contact our privacy team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.
14.1 Privacy Contact
Email: [email protected]
Response time: opkok aims to acknowledge all privacy enquiries within two (2) business days and to provide a full response within thirty (30) calendar days of receiving a verified request.
14.2 Complaint Process
If you are dissatisfied with opkok's response to a privacy concern, you may escalate your complaint through the following steps:
- Submit your complaint in writing to [email protected] with the subject line "Privacy Complaint — Escalation".
- A senior member of opkok's privacy team will review your complaint and provide a written response within fifteen (15) business days.
- If you remain dissatisfied after this escalation process, you retain the right to seek independent legal advice or to refer the matter to the relevant data protection authority in your jurisdiction.
We value your trust. opkok is built on a foundation of transparency and respect for our players. Your privacy is not an afterthought — it is integral to how we operate. We welcome all feedback on our data practices and are continuously working to improve the protection we provide to every opkok user.
Ready to Play?
Explore Everything opkok Has to Offer
Now that you know how opkok protects your data, dive into our full range of games and sports betting markets. Cricket, slots, crash, esports — it's all here, built for Bangladeshi players.