0kok Privacy
Policy

0kok is an online betting and casino platform accessible at https://0kok.io, operated for players across Bangladesh and the broader region. When this Privacy Policy refers to "0kok", "we", "us", or "our", it refers to the operator of this platform in its capacity as the data controller — the entity that determines the purposes and means of processing your personal data.

As the data controller, 0kok is responsible for ensuring that personal data is collected, stored, and processed in accordance with this policy. If you have any questions about how we handle your data, or wish to exercise any of your data rights, please contact us directly using the details provided in Section 13.

Our platform is designed for and directed at users aged 21 and above. We do not knowingly collect data from individuals below this age. If you are under 21, you must not use this platform or provide us with any personal information.

0kok collects the following categories of personal data in connection with the operation of the platform and the provision of services to players:

2.1 Identity Data

• Full legal name as it appears on official government-issued identification.
• Date of birth (used primarily to verify that you meet the 21+ age requirement).
• National ID (NID) number or passport number, collected when identity verification is required.
• A copy of your government-issued identity document (NID card, passport, or driving licence) where enhanced verification is triggered.

2.2 Contact Data

• Email address registered at account creation or updated subsequently in your account settings.
• Mobile phone number, used for account security notifications, two-step verification, and support communication.

2.3 Financial Data

• Mobile financial service account identifiers associated with bKash, Nagad, Rocket, or Upay accounts used to make deposits or receive withdrawals.
• Bank account details where bank transfer is used as a payment method (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other accepted institutions).
• Transaction records including deposit amounts, withdrawal amounts, dates, and payment method references.
• Note: 0kok does not store full card numbers or full mobile financial account credentials. Payment identifiers are tokenised by the payment provider before being shared with us.

2.4 Gaming & Betting Activity Data

• Sports bets placed, including market, stake, odds, outcome, and settlement amount.
• Casino and slot game sessions, including game titles, stake amounts, win/loss outcomes, and session duration.
• Account balance history and bonus claim history.
• Self-exclusion requests, deposit limit settings, and other responsible gaming tool activations.

2.5 Technical & Device Data

• IP address at the time of each login and each significant account action.
• Device type, operating system, and browser version.
• Mobile device identifiers (where the platform is accessed via a mobile browser).
• Cookie identifiers and session tokens.

2.6 Usage Data

• Pages and features accessed within the platform.
• Navigation patterns, search queries within the platform, and feature interaction data.
• Session timestamps and duration.

2.7 Communications Data

• Content of live chat sessions with our support team.
• Email correspondence sent to or received from [email protected].
• Formal complaint submissions and our responses to them.

0kok collects personal data through the following channels:

• Directly from you: When you register an account, complete identity verification, make a deposit, request a withdrawal, contact support, or submit a complaint, you provide personal data to us directly.
• Automatically during platform use: When you access and navigate the 0kok platform, technical and usage data is collected automatically via server logs, cookies, and session tracking mechanisms. See Section 7 for detail on cookies.
• From payment providers: When you initiate a deposit via bKash, Nagad, Rocket, or Upay, the payment provider shares transaction confirmation data with us including the amount, timestamp, and a tokenised reference to your payment account.
• From identity verification services: Where enhanced KYC (Know Your Customer) verification is required, we may use a third-party identity verification service to cross-reference the identity documents you provide against independent data sources. These services return a verification result to us; we do not retain raw third-party database records.
• From game providers: Our Game Provider partners (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Hacksaw Gaming, Spribe) may share game session metadata with us for the purpose of account management, dispute resolution, and responsible gaming monitoring.

0kok uses your personal data for the following purposes:

• Account management: Creating and maintaining your player account, processing login requests, and managing account settings and preferences.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that the identity you have provided is authentic. This is a mandatory compliance step.
• Payment processing: Facilitating deposits to your account balance and processing withdrawal requests to your registered payment method.
• Anti-money-laundering (AML) and fraud prevention: Monitoring transaction patterns to detect and prevent fraudulent activity, money laundering, and the funding of accounts from illicit sources. This is a legal obligation.
• Responsible gaming monitoring: Analysing gaming activity to identify behavioural patterns that may indicate problem gambling, and to action any responsible gaming tools you have activated (deposit limits, self-exclusion, time-out).
• Customer support: Responding to your support queries, resolving disputes, and addressing complaints.
• Security and abuse prevention: Detecting and investigating unauthorised account access, bot activity, multi-account abuse, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and product offerings.
• Marketing communications (with consent): Sending promotional emails or in-platform notifications about bonuses, new games, and special offers — only where you have opted in to receive such communications. You may withdraw consent at any time.
• Legal and regulatory compliance: Retaining records and responding to lawful requests from competent authorities in connection with our legal and regulatory obligations.

Every processing activity carried out by 0kok rests on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 0kok — specifically, to operate your account, process transactions, and deliver the services you have signed up for. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, age verification requirements, and record-keeping obligations. We are obliged to carry out this processing regardless of your preferences.
• Legitimate interest: Processing carried out for purposes that serve 0kok's legitimate business interests or the interests of our players, provided those interests are not overridden by your data protection rights. Legitimate interest grounds are used for fraud prevention, security monitoring, and platform analytics.
• Consent: Where we rely on your consent — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

0kok does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data security obligations.
• Game providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Hacksaw Gaming, Spribe, and other game software suppliers receive session data necessary to deliver game content to your account and to resolve game-related disputes.
• Identity verification services: Where enhanced KYC is required, a third-party identity verification provider receives the identity documents and data you supply for cross-referencing purposes. We use only reputable, industry-standard providers for this function.
• Analytics providers: Anonymised and aggregated usage data may be shared with analytics platforms to help us understand how the platform is used. No personally identifiable information is included in such data transfers.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 0kok, our players, or the public.
• Business transfers: In the event that 0kok or its platform is acquired, merged, or transferred to another entity, personal data held by 0kok may form part of the transferred assets. Affected users will be notified prior to any such transfer, and the receiving entity will be bound by privacy commitments no less protective than those in this policy.

All third-party service providers that process personal data on our behalf are bound by contractual data processing agreements that require them to process data solely on our instructions and to maintain appropriate security standards.

0kok uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember choices you make — such as your preferred language or display settings — to provide a more personalised experience. They are not essential but improve usability.
• Analytics cookies: These cookies collect anonymised data about how the platform is used — which pages are visited most frequently, where users navigate from, and how long sessions last. This data is used to improve the platform. Analytics cookies do not identify you personally.
• Security cookies: These cookies support our fraud detection and security monitoring systems by tracking login patterns and detecting anomalous activity associated with your session.

You may manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the platform, including logging in to your account.

0kok does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on other websites.

0kok takes the security of your personal data seriously and has implemented the following technical and organisational measures to protect it:

• SSL/TLS encryption: All data transmitted between your device and the 0kok platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar to confirm the connection is secure.
• Password hashing: Your account password is never stored in plain text. We use a strong cryptographic hashing algorithm (with salt) so that even in the unlikely event of a data breach, your password cannot be read directly from stored data.
• Access controls: Access to personal data within 0kok's systems is restricted on a strict need-to-know basis. Staff members who do not require access to personal data for their job function are not granted it. All access is logged and periodically audited.
• Two-step verification: Players are encouraged to enable two-step verification on their accounts for an additional layer of login security. Where suspicious login activity is detected, we may require additional verification before granting access.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to players, 0kok will notify affected players without undue delay, providing a clear description of the nature of the breach, the categories of data affected, and the steps we are taking to address it.

While we apply robust security measures, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect unauthorised access to your account.

0kok retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account's active life, plus a minimum of five (5) years after account closure. This retention period is driven by anti-money-laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• Gaming and betting activity: Retained for the duration of your account's active life, plus three (3) years after account closure, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for three (3) years from the date of the last interaction in a support thread, or for the duration of any open dispute.
• Technical and usage data (cookies, logs): Session logs are retained for up to 12 months. Aggregated anonymised analytics data may be retained indefinitely.

When personal data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised. Anonymised data — data from which all identifying information has been stripped and from which re-identification is not reasonably possible — may be retained indefinitely for statistical and analytical purposes.

Subject to applicable law, you have the following rights in respect of the personal data 0kok holds about you:

• Right of access: The right to obtain a copy of your personal data and information about how it is processed.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction: The right to request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: The right to receive your personal data in a structured, machine-readable format and to have it transmitted to another controller where technically feasible.
• Right to object: The right to object to processing based on legitimate interest, including profiling, and to withdraw consent for marketing communications at any time.

To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link). We will respond to all verified requests within 30 calendar days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or to decline to act on the request.

The 0kok platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process.

If we become aware that a person under the age of 21 has provided personal data to us and created an account, we will immediately suspend the account, delete the personal data, and refund any deposits made minus any amounts required to be retained under applicable law. If you have reason to believe that a minor has registered on the platform, please notify us immediately at [email protected] (plain text — not a clickable link).

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. For further guidance, see our Responsible Gaming page.

0kok reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing activities, new product features, or improvements to our privacy practices.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you by email to the address registered on your account and via an in-platform notification, at least seven (7) days before the changes take effect. Your continued use of the platform after the effective date of updated terms constitutes your acceptance of the revised policy.

For non-material changes (such as corrections to typographical errors, clarifications that do not alter the substance of the policy, or administrative updates), we will update the effective date at the top of this document without issuing a separate notification.

We recommend reviewing this Privacy Policy periodically to stay informed about how 0kok protects your data. The current version is always available at https://0kok.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 0kok handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Privacy Request — [Your Account Username]"
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Response time: Within 1 hour via live chat; within 12 hours via email for general queries; within 30 calendar days for formal data rights requests
• Language: English

All formal data rights requests must be submitted in writing (email) and must include sufficient information to verify your identity before we can act on the request. This is to protect your data from being disclosed to or altered by unauthorised persons.

This Privacy Policy is governed by and construed in accordance with applicable law. Any disputes arising in connection with this policy that cannot be resolved through our internal complaints process will be subject to the jurisdiction of competent courts.