Privacy Policy — How ok10 Protects Your Personal Data

ok10 is the operator of the online casino and sports betting platform accessible at ok10.io. In this Privacy Policy, references to "ok10", "we", "us", or "our" refer to the platform operator. References to "you", "your", or "Player" refer to any individual who accesses, registers for, or uses the ok10 platform in any capacity.

ok10 acts as the data controller with respect to personal data collected from Players using the platform. This means ok10 determines the purposes for which personal data is collected and the manner in which it is processed. ok10's primary contact email for privacy-related inquiries is [email protected].

ok10 collects personal data that is necessary to operate the platform, verify player identity, process transactions, and comply with applicable responsibilities. The categories of personal data we collect include the following:

ok10 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data unless it is directly relevant to a responsible gaming intervention and provided voluntarily by the Player.

ok10 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical and behavioural data collected automatically via server logs, cookies, pixel tags, and similar tracking technologies whenever you visit or interact with the ok10 platform.
• Third-party payment providers: Transaction confirmation data shared by bKash, Nagad, Rocket, and Upay when you make deposits or receive withdrawals. ok10 receives only the information necessary to verify and settle each transaction.
• Game providers: Aggregated game round and outcome data shared by licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, and others whose titles are available on the platform.
• Identity verification services: Where ok10 uses a third-party identity verification service to assist with KYC processing, that service may return verification outcome data to ok10.

ok10 processes personal data for the following clearly defined purposes:

• Account creation and management: To register your account, maintain your profile, and provide access to all platform features.
• Identity and age verification (KYC): To confirm that you are at least 21 years of age and that the identity information you provided is accurate, as required before processing withdrawals and at other lifecycle points.
• Payment processing: To process deposit and withdrawal transactions via bKash, Nagad, Rocket, and Upay and to maintain accurate financial records in Bangladeshi Taka (৳).
• Customer support: To respond to your queries, resolve disputes, and handle complaints effectively and in a timely manner.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to apply Player-requested limits and self-exclusion measures, and to reach out proactively where we have genuine concern for a Player's wellbeing.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct as described in the ok10 Terms & Conditions.
• Platform improvement: To analyse aggregated, anonymised usage data and improve the platform's performance, interface, and game selection.
• Communications: To send you transactional messages (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about bonuses, seasonal offers, and new games.
• Legal compliance: To fulfil any applicable legal or regulatory obligations relating to record-keeping, anti-money laundering controls, or data protection requirements.

ok10 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between ok10 and the Player, including account registration, payment processing, and service delivery.
• Legitimate interests: Processing carried out in the legitimate interests of ok10 or its Players, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by Player rights and freedoms.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC, anti-money laundering controls, and financial record-keeping requirements.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for receiving optional marketing communications. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe option in any marketing message.

ok10 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ok10 may share your personal data with the following categories of third parties strictly for the purposes outlined in Section 4:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive only the transaction data necessary to process your deposit or withdrawal. Each provider operates under its own privacy policy and is responsible for data processed on its own systems.
• Game studios and providers: Licensed game providers (e.g., Pragmatic Play, Evolution Gaming, Spribe) receive a Player session token and account-level stake data necessary to operate each game round. They do not receive your full identity data.
• Identity verification services: Third-party KYC providers receive copies of identification documents solely for the purpose of verifying your identity and returning a verification decision to ok10.
• IT and security providers: Hosting, cloud infrastructure, cybersecurity, and anti-fraud technology partners who process data on ok10's behalf under strict data processing agreements.
• Customer support tools: Helpdesk and live support software providers who process support ticket data on ok10's behalf.
• Legal and regulatory authorities: Where required by applicable law, court order, or a competent authority's lawful request, ok10 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies.

All third-party processors engaged by ok10 are contractually required to maintain the confidentiality of your personal data and to use it only for the specified purpose for which it was shared.

ok10 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required to comply with applicable legal obligations. The general retention guidelines are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum period following account closure, to allow for dispute resolution and compliance reviews.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of account closure, consistent with standard anti-money laundering record-keeping practice.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the last interaction, unless retention is required for an ongoing investigation or dispute.
• Marketing consent records: Retained until consent is withdrawn plus a reasonable period to demonstrate compliance.
• Technical and behavioural logs: Retained for up to twelve (12) months in identifiable form; thereafter anonymised and retained in aggregated form for platform analysis.

When personal data is no longer required, it is securely deleted or anonymised in accordance with ok10's internal data management procedures.

ok10 employs a layered approach to data security to protect your personal data from unauthorised access, disclosure, alteration, and destruction. The security measures in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the ok10 platform.
• Password hashing using industry-standard one-way hashing algorithms — ok10 never stores plaintext passwords.
• OTP authentication required when logging in from an unrecognised device, providing an additional layer of identity confirmation.
• Access controls: Internal access to personal data is restricted to staff and systems with a demonstrable operational need. All internal access is logged and audited.
• Encrypted data storage for sensitive fields including payment wallet identifiers and identification document copies.
• Regular security assessments including vulnerability scans and penetration testing of the platform infrastructure.

Despite these measures, no online system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or interests, ok10 will notify affected Players promptly and take all reasonable steps to contain and remediate the incident. If you suspect any unauthorised activity on your account, contact [email protected] immediately.

ok10 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. ok10 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your login state, security tokens, and load-balancing cookies. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings and responsible gaming limit configurations.
• Analytical cookies: Used to collect anonymised data about how Players use the platform — pages visited, session duration, error rates — to help ok10 improve the user experience. These do not identify you personally.
• Security cookies: Used to support fraud detection and account security monitoring, including identifying login attempts from unusual IP addresses or device fingerprints.

ok10 does not use third-party advertising cookies or behavioural advertising tracking pixels. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent the platform from functioning correctly and you will not be able to log in or play games.

As a Player whose personal data is processed by ok10, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data ok10 holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure: You may request that ok10 delete your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires its retention.
• Right to restrict processing: You may request that ok10 restrict the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: You may request that ok10 provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of ok10's legitimate interests where you believe your rights and freedoms override those interests.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request" and your registered account details for identity verification. ok10 will respond to all valid requests within 30 days. ok10 reserves the right to decline requests where an exemption applies — for example, where retaining data is required to comply with a legal obligation or to defend a legal claim.

The ok10 platform is strictly restricted to individuals aged 21 years and above. ok10 does not knowingly collect, process, or retain any personal data relating to individuals under the age of 21. If ok10 becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately closed, all data pertaining to that individual will be deleted, and any deposited funds will be returned to the originating payment method after appropriate verification.

If you are a parent or guardian and believe a minor has accessed the ok10 platform, please contact [email protected] immediately so that ok10 can take prompt action.

The ok10 platform may contain references to third-party payment providers and game studios whose services are integrated into the platform. Each of these third parties operates under its own privacy policy and is independently responsible for the personal data it processes on its own systems. ok10 is not responsible for the privacy practices of third-party services outside the ok10 platform environment.

ok10 does not embed third-party social media widgets, advertising networks, or affiliate tracking pixels on the platform. Any personal data you choose to share directly with a third-party provider — for example, by using bKash to fund your ok10 account — is subject to that provider's own terms and privacy policy.

ok10 reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, applicable responsibilities, or data processing practices. The effective date displayed at the top of this document will be updated whenever a new version is published.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — ok10 will notify registered Players via their registered mobile number or email address prior to the changes taking effect. Continued use of the ok10 platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept a material change, you may close your account by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or ok10's data processing practices, please contact the ok10 privacy team using the details below:

• Email: [email protected]
• Subject Line for Privacy Queries: "Privacy Policy Inquiry"
• Subject Line for Data Rights Requests: "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Language: English

ok10 aims to acknowledge all privacy-related correspondence within 2 business hours and to resolve data rights requests within 30 calendar days of receipt. For complex requests, ok10 may extend this period by a further 30 days with prior notification.