00ok Privacy Policy — How We Protect Your Data

1. Introduction

This Privacy Policy ("Policy") describes how 00ok ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("you", "your") who access or use the 00ok online casino and sports betting platform, including the 00ok website and any mobile-optimised version thereof. This Policy forms part of the 00ok Terms and Conditions and should be read alongside them.

By accessing the 00ok platform or registering an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the 00ok platform. We encourage you to review this Policy periodically, as it may be updated from time to time. The date of the most recent update is shown at the top of this page.

2. Personal Data We Collect

We collect personal data that you provide to us directly, data we collect automatically when you use the platform, and data we receive from third-party service providers. The categories of personal data we may collect include:

• Identity data: full name, date of birth, gender, and government-issued identification document details (such as National ID or passport number) provided during account registration or KYC verification.
• Contact data: mobile phone number registered in Bangladesh, email address (if provided), and any communication history between you and the 00ok support team.
• Financial data: deposit and withdrawal transaction records, payment method identifiers (such as bKash or Nagad account references), transaction amounts in ৳ BDT, and transaction timestamps. We do not store full card numbers or mobile banking PINs.
• Technical data: IP address, device type, operating system, browser type and version, mobile network operator, session duration, pages visited, and clickstream data collected via cookies and similar tracking technologies.
• Gaming data: betting history, game activity, win/loss records, bonus usage, and responsible gaming tool settings (such as deposit limits and self-exclusion status).
• Communications data: the content of any messages, complaints, or feedback you submit to 00ok via email or the support system, including any attachments provided as part of a KYC submission.

3. How We Use Your Personal Data

00ok uses your personal data only for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. The primary purposes for which we process your data are:

• Account management and service delivery: to create and manage your player account, verify your identity, process deposits and withdrawals, credit bonuses, and deliver the gaming services you have requested.
• Regulatory compliance: to comply with applicable anti-money-laundering (AML) obligations, KYC requirements, and any other legal or regulatory obligations to which 00ok is subject.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security incidents affecting the 00ok platform or its players.
• Responsible gaming: to monitor player behaviour for indicators of problem gambling, enforce responsible gaming tool settings you have selected, and comply with player protection obligations.
• Customer support: to respond to your queries, complaints, and feedback, and to improve the quality of our support services based on interaction data.

4. Legal Basis for Processing

00ok processes your personal data on one or more of the following legal bases, depending on the specific processing activity: (a) Performance of a contract — processing is necessary to deliver the services you have requested and to fulfil our obligations under the 00ok Terms and Conditions; (b) Legal obligation — processing is necessary to comply with applicable law, including AML and KYC requirements; (c) Legitimate interests — processing is necessary for fraud prevention, platform security, and improvement of our services, where such interests are not overridden by your data protection rights; (d) Consent — where you have given explicit consent for a specific processing activity, such as receiving promotional communications.

Where we rely on consent as the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. To withdraw consent, please contact the 00ok support team via the email address displayed in the footer of this website.

5. Sharing Your Personal Data

00ok does not sell, rent, or trade your personal data to or with third parties for their own marketing purposes. We share your personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers used to process your deposit and withdrawal transactions. Data shared is limited to the minimum necessary to complete the requested transaction and verify payment ownership.
• Game providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, PG Soft, and other licensed game studios whose content is delivered through the 00ok platform. These providers may receive session and game activity data necessary to deliver their games and maintain fair play integrity.
• Technology and security service providers: cloud hosting providers, cybersecurity firms, fraud detection services, and analytics providers engaged by 00ok to operate and secure the platform. These providers act as data processors under our instruction and are contractually prohibited from using your data for any other purpose.
• Regulatory and law enforcement authorities: where we are required by applicable law, court order, or regulatory directive to disclose personal data to competent authorities. We will notify you of any such disclosure to the extent permitted by law.

6. Cookies and Tracking Technologies

00ok uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, maintain your session state, prevent fraud, and analyse platform usage. We use the following categories of cookies: (a) Strictly necessary cookies — required for the platform to function and cannot be disabled; (b) Functional cookies — remember your preferences and settings, such as language selection; (c) Analytical cookies — collect anonymised data about how players use the platform to help us identify improvements.

00ok does not use advertising or marketing cookies. We do not share cookie data with advertising networks. You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 00ok platform, particularly features related to session management and personalisation.

7. Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following retention periods apply as a general guide:

• Account and identity data: retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with standard AML record-keeping requirements.
• Financial transaction data: retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations.
• Technical and gaming data: retained for up to 2 years from the date of collection, unless required to be retained for a longer period for fraud investigation or regulatory purposes.
• Support communications: retained for up to 3 years from the date of the last interaction, unless the communication relates to an unresolved complaint or legal matter.

When your personal data is no longer required, it will be securely deleted or anonymised in accordance with our internal data destruction procedures.

8. Data Security

00ok takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmitted between your browser or mobile device and the 00ok platform; industry-standard password hashing for stored account credentials; access controls limiting internal system access to authorised personnel on a need-to-know basis; regular security assessments and vulnerability testing of the platform infrastructure.

Notwithstanding these measures, no method of data transmission over the internet or method of electronic storage is completely secure. While 00ok uses commercially reasonable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.

9. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the 00ok support team via the email address displayed in the footer of this website. We will respond to all verified requests within 30 days.

• Right of access: you may request a copy of the personal data we hold about you, together with information about how we process it.
• Right to rectification: you may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: in certain circumstances, you may request the deletion of your personal data. This right is subject to legal and regulatory retention obligations that may require us to retain certain data notwithstanding your request.
• Right to restriction of processing: you may request that we restrict the processing of your personal data in certain circumstances, such as while a complaint or accuracy dispute is being resolved.
• Right to object: you may object to our processing of your personal data where we rely on legitimate interests as the legal basis for that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

10. Children and Minors

The 00ok platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not use the 00ok platform or provide any personal data to us. If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will delete that data as soon as reasonably practicable.

If you are a parent or guardian and believe that a person under the age of 21 in your care has provided personal data to 00ok, please contact our support team immediately via the email address in the footer of this website. We will investigate and take appropriate action, including deleting the relevant data, as soon as reasonably practicable.

11. Changes to This Policy

00ok reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email or a prominent notice on the platform prior to the change taking effect, where reasonably practicable. Minor changes (such as typographical corrections or clarifications that do not affect your substantive rights) may be made without prior notice. The "Last updated" date at the top of this page always reflects the date of the most recent amendment. Your continued use of the 00ok platform after any change to this Policy constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy each time you visit the 00ok platform so that you are always informed about how we collect, use, and protect your personal data. If you have any concerns about a change to this Policy, please contact our support team before continuing to use the platform.

12. Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to make a complaint about how we handle your personal data, please contact the 00ok support team using the email address displayed in the footer of this website. All privacy and data-related requests are handled in English.

• Subject access requests (SARs): we will respond to all verified SARs within 30 days of receipt. We may ask you to verify your identity before processing a SAR to ensure we disclose data only to the account holder.
• Erasure requests: we will action verified erasure requests within 30 days, subject to any legal or regulatory retention obligations that may prevent full erasure of certain data categories.
• Complaints: if you are dissatisfied with our response to a privacy concern, you have the right to escalate your complaint. We take all privacy complaints seriously and will investigate each one thoroughly and fairly.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with applicable law. Any disputes arising from or in connection with this Policy shall be subject to the dispute resolution provisions set out in the 00ok Terms and Conditions.

Where a conflict exists between this Privacy Policy and the 00ok Terms and Conditions, the Terms and Conditions shall prevail to the extent of that conflict, except in respect of any matter that is exclusively governed by this Privacy Policy.

14. Definitions

In this Privacy Policy: "personal data" means any information relating to an identified or identifiable natural person; "processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion; "data controller" means the entity that determines the purposes and means of processing personal data (in this context, 00ok); "data processor" means an entity that processes personal data on behalf of the data controller (such as payment processors or technology service providers engaged by 00ok); "KYC" means Know Your Customer, the process of verifying the identity and eligibility of a player; "AML" means Anti-Money Laundering, the set of legal and regulatory obligations designed to prevent the use of financial systems for money laundering or terrorist financing.