ok8008 Privacy Policy

ok8008 ("we", "us", "our", "the Platform") is an online casino and sports betting platform operating at ok8008.app. This Privacy Policy describes how ok8008 collects, uses, stores, discloses, and protects the personal data of individuals ("you", "the Player", "the User") who register accounts, visit the platform, or otherwise interact with ok8008's services.

This policy applies to all data processing activities carried out by ok8008 in connection with the platform, including account registration, identity verification, financial transactions, game activity, customer support, and marketing communications. By creating an account on ok8008 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein.

This Privacy Policy must be read in conjunction with the ok8008 Terms & Conditions, which govern the overall relationship between ok8008 and its registered players. Where there is any conflict between this Privacy Policy and the Terms & Conditions on a data protection matter, this Privacy Policy takes precedence.

ok8008 is committed to handling personal data responsibly, transparently, and in a manner consistent with internationally recognised data protection principles. We continuously review and update our data handling practices to ensure they remain appropriate, proportionate, and secure.

ok8008 collects personal data in several categories. The categories of data collected and their primary purposes are summarised in the table below, followed by fuller explanations.

ok8008 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming indicators voluntarily provided), or biometric data for identification purposes. Where a player voluntarily discloses sensitive information in a support communication or responsible gaming request, it is treated with the highest level of confidentiality and used exclusively for the stated purpose.

ok8008 collects personal data through several distinct channels. Understanding how your data reaches us is an important part of informed consent.

• Direct collection — Registration: When you create an ok8008 account, you voluntarily provide your full name, date of birth, email address, and mobile number. This information is submitted through the registration form on the platform.
• Direct collection — KYC Verification: When you submit identity documents for Know Your Customer verification prior to your first withdrawal, you provide government-issued identification such as a National ID card, passport, or driving licence. This data is handled by ok8008's KYC verification process with full confidentiality.
• Direct collection — Payment Processing: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank, the financial transaction generates a record that includes your wallet or account reference, the transaction amount in BDT, and the timestamp.
• Direct collection — Support Interactions: When you contact ok8008 customer support at [email protected], the content of your messages, your email address, and any documents you attach are collected and stored as part of the support case record.
• Automatic collection — Platform Behaviour: As you browse and use the ok8008 platform, technical data including your IP address, device fingerprint, browser type, session duration, and navigation path are collected automatically by the platform's analytics and security systems.
• Automatic collection — Cookies: ok8008 uses cookies and similar tracking technologies as described in Section 7 of this policy. Cookie data is collected automatically when you visit the platform with cookies enabled in your browser.
• Third-party sources: ok8008 may receive limited personal data from third-party identity verification providers and payment processors where this is necessary to complete a KYC check or confirm the legitimacy of a transaction. ok8008 does not purchase marketing lists or receive personal data from data brokers.

ok8008 uses the personal data it collects for a defined set of purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected without obtaining your consent or another valid legal basis.

• Account management: Creating and maintaining your ok8008 player account, verifying your login credentials, and securing your account against unauthorised access.
• Identity and age verification: Conducting KYC checks to confirm that every ok8008 player is who they say they are and is at least 18 years of age, in compliance with our responsible gaming obligations.
• Payment processing: Processing your deposits and withdrawal requests to and from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank accounts held in your name.
• Gaming and platform delivery: Enabling you to access and play casino games, bet on cricket and other sports, use crash games, and access all other platform features.
• Responsible gaming enforcement: Monitoring gaming activity patterns to identify signs of problematic gambling behaviour, enforcing deposit limits and self-exclusion requests, and delivering responsible gaming interventions where appropriate.
• Anti-money laundering and fraud prevention: Analysing transaction patterns and account behaviour to detect and prevent money laundering, financial fraud, identity theft, and bonus abuse.
• Customer support: Responding to your support queries, resolving account disputes, processing complaints, and delivering the support communications you have requested.
• Marketing and promotions: Sending you personalised bonus offers, seasonal promotions tied to Eid, Pohela Boishakh, BPL, and ICC T20 tournaments, and other promotional communications — but only where you have given your consent to receive them or where we have a legitimate interest in communicating relevant offers to active players.
• Platform improvement: Using aggregated and anonymised usage data to analyse how players interact with the platform, identify areas for improvement, and develop new features.
• Legal compliance: Fulfilling our legal obligations including responding to lawful requests from regulatory or law enforcement authorities and maintaining transaction records for the legally required retention periods.

ok8008 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which ok8008 relies are as follows:

• Contract performance: The majority of ok8008's data processing is necessary for the performance of the player account contract. When you register an account and agree to the Terms & Conditions, you enter into a contract with ok8008. Processing your identity data, payment data, and gaming activity data is necessary to fulfil that contract.
• Legal obligation: ok8008 is required by applicable laws and the terms of its offshore gaming licence to conduct KYC identity verification, maintain transaction records, monitor for anti-money-laundering indicators, and report suspicious activity to the relevant authorities. Processing for these purposes is mandatory and cannot be waived.
• Legitimate interests: ok8008 processes certain technical and usage data on the basis of its legitimate interests in securing the platform, preventing fraud, improving the player experience, and communicating relevant offers to active players. We balance these legitimate interests against the privacy rights of players and only rely on this basis where the processing is proportionate and not overridden by the player's privacy interests.
• Consent: For marketing communications beyond those covered by legitimate interests, ok8008 relies on the player's explicit consent. You may withdraw consent at any time as described in Section 4. Withdrawal of marketing consent does not affect any processing that has already taken place on the basis of that consent prior to withdrawal.

ok8008 does not sell, rent, or trade your personal data to any third party for commercial, advertising, or marketing purposes. Your data is shared only where it is strictly necessary to deliver our services, comply with legal obligations, or protect the security of the platform.

The categories of third parties with whom ok8008 may share your personal data, and the basis for doing so, are as follows:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are bound by applicable financial regulation.
• KYC and identity verification providers: ok8008 works with third-party identity verification services to conduct KYC checks. These providers receive the identity documents and personal data you submit for verification purposes only. They are contractually prohibited from using your data for any other purpose.
• Game technology providers: Software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session and gameplay data necessary to deliver their game products on the ok8008 platform. This data is used solely to generate game outcomes and maintain game integrity.
• Platform infrastructure providers: ok8008 uses cloud hosting, content delivery, and cybersecurity service providers to operate the platform. These providers may process technical data as a necessary part of infrastructure operation. All such providers are bound by data processing agreements requiring them to handle personal data securely and exclusively on ok8008's instructions.
• Regulatory and law enforcement authorities: ok8008 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by a lawful order, warrant, or mandatory reporting obligation. ok8008 will not voluntarily disclose player data to government authorities beyond its legal obligations.
• Professional advisers: Legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis where this is necessary for the provision of professional services to ok8008. All such advisers are bound by confidentiality obligations.

ok8008 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate the platform effectively, maintain your session securely, and understand how players use the site. The types of cookies used by ok8008 are as follows:

• Essential cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, remember your language and currency preferences, and enable core security features. You cannot opt out of essential cookies without affecting your ability to use the platform.
• Analytics cookies: ok8008 uses analytics cookies to collect aggregated, anonymised data about how players navigate the platform — which pages are visited most frequently, where players enter and exit, and how long they spend on each section. This data is used solely to improve the platform and does not identify individual players.
• Functional cookies: Functional cookies remember choices you make on the platform — such as your preferred game category, table limits, or display settings — so that you do not need to re-enter them on every visit.
• Security cookies: ok8008 uses security-purpose cookies to detect fraudulent login attempts, identify unusual access patterns, and verify that you are a human user rather than an automated bot.

ok8008 does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on the platform. ok8008 does not engage in cross-site behavioural tracking for advertising retargeting purposes.

ok8008 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory retention requirements, and resolve any disputes that may arise. The general retention periods applied by ok8008 are as follows:

When the applicable retention period expires, ok8008 will securely delete or anonymise the relevant personal data. Anonymised and aggregated data from which individual players cannot be identified may be retained indefinitely for statistical and business intelligence purposes.

ok8008 implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes but is not limited to the following controls:

• TLS / SSL Encryption: All data transmitted between your browser or app and the ok8008 servers is encrypted using industry-standard Transport Layer Security (TLS 1.3). Sensitive data including login credentials and payment details is never transmitted in plain text.
• Encryption at rest: Personal data stored in ok8008's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and rotated on a regular schedule.
• Access controls: Access to personal data within ok8008 is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of personal data required to perform their specific role. All staff with data access are subject to confidentiality obligations and regular security training.
• Two-factor authentication: ok8008 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of security beyond the username and password.
• Intrusion detection and monitoring: ok8008's infrastructure is monitored continuously for unusual access patterns, brute-force login attempts, and other indicators of unauthorised access. Automated alerts and manual security review processes are in place to respond to potential breaches rapidly.
• Penetration testing: ok8008 commissions regular third-party penetration testing of its platform and infrastructure to identify and remediate security vulnerabilities before they can be exploited.
• Incident response: ok8008 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to players, ok8008 will notify affected players and the relevant authorities as required by applicable law, within the timeframes specified by applicable data protection regulation.

As a player on the ok8008 platform, you have a number of rights in relation to your personal data. ok8008 respects these rights and will respond to all valid requests within a reasonable timeframe, and no later than 30 days from receipt of a complete request.

• Right of Access: You have the right to request a copy of the personal data that ok8008 holds about you. This is commonly known as a Subject Access Request (SAR). ok8008 will provide a full record of your personal data in a clear, readable format at no charge.
• Right to Rectification: If any personal data ok8008 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Please contact [email protected] with the specific data you believe is incorrect and the accurate information you wish it to be updated to.
• Right to Erasure: You have the right to request deletion of your personal data ("right to be forgotten") where the data is no longer necessary for the purpose for which it was collected, you have withdrawn consent, or the processing is unlawful. Please note that ok8008 may be unable to fully delete personal data that it is legally obliged to retain under AML, financial record-keeping, or other applicable regulations.
• Right to Restriction of Processing: You may request that ok8008 temporarily restrict processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transferred to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on ok8008's legitimate interests, including profiling and direct marketing. Where you object to marketing, ok8008 will cease marketing processing immediately. Where you object to other legitimate-interest processing, ok8008 will assess the objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

ok8008 is strictly an adults-only platform. Access to ok8008's services is prohibited to any person under the age of 18 years. ok8008 does not knowingly collect, process, or retain personal data from children under the age of 18.

All registration applicants are required to confirm that they are 18 years of age or older as part of the account creation process. ok8008 conducts KYC identity verification checks on all accounts prior to processing the first withdrawal. Where a KYC check reveals or raises suspicion that an account holder is under 18, the account will be immediately suspended, all bets voided, and all funds — including deposits — withheld pending investigation in accordance with ok8008's minor protection policy.

If you are a parent or guardian and you believe that a minor has created an ok8008 account or provided personal data to the platform without your knowledge or consent, please contact ok8008 immediately at [email protected]. We will investigate promptly and take all necessary steps to close the account and securely delete the minor's data.

The ok8008 platform may contain references to or integrations with third-party services — including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — whose software runs within the ok8008 environment. While ok8008 takes care to work only with reputable, established providers, the data practices of those providers are governed by their own privacy policies, not this one.

ok8008 does not control and is not responsible for the privacy practices of any third-party software providers, payment processors, or other external services. Players are encouraged to review the privacy policies of any third-party provider they interact with through the ok8008 platform, including the mobile money operators they use for deposits and withdrawals.

This Privacy Policy applies exclusively to data collected and processed by ok8008 directly and does not extend to any third-party service, website, or application that may be accessible in connection with the platform.

ok8008 reviews this Privacy Policy on a regular basis and will update it when our data practices change, when new legal obligations arise, or when regulatory guidance requires us to revise our approach. The current version of this policy is always available at ok8008.app/privacy-policy and displays the effective date at the top of the page.

When material changes are made to this Privacy Policy, ok8008 will notify registered players by email to the address on file at least seven days before the changes take effect, and will display a prominent notice on the platform. For non-material changes — such as minor clarifications or corrections to wording that do not affect the substance of our data practices — ok8008 may update the policy without individual notification, relying on the version date displayed on this page to inform players of the latest revision.

Continued use of the ok8008 platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you may close your account before the change takes effect by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about the way ok8008 handles your personal data, please contact the ok8008 data privacy team using the details below. All privacy-related correspondence is treated with strict confidentiality.

ok8008 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.