ok10 Privacy Policy

1 Information We Collect

ok10 collects personal data from players through multiple channels: directly when you register and interact with the Platform, automatically through the technology that powers the Platform, and on occasion from trusted third-party sources as part of identity verification procedures.

1.1 Registration and Account Data

When you create an ok10 account, we collect the personal information you provide during the registration process. This includes:

• Full legal name as it appears on official identification documents.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address, including division, district, and city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Email address — used for account communications, security alerts, and promotional messages (where consent is given).
• Mobile phone number — used for two-factor authentication (2FA) and account recovery.
• Username and hashed password — login credentials for the Platform.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, ok10 may request and collect copies of official identity documents, including:

• Bangladesh National Identity Card (NID) or passport.
• Proof of residential address (e.g., utility bill, bank statement dated within 90 days).
• Proof of payment method ownership (e.g., screenshot of registered bKash or Nagad account).
• Selfie photograph or live video verification image for identity matching purposes.

1.3 Financial and Transaction Data

When you make deposits or withdrawals using bKash, Nagad, Rocket, Upay, SureCash, Visa, or Mastercard, ok10 records transaction-level data including:

• Transaction amounts in Bangladeshi Taka (৳).
• Payment method type and associated account reference (e.g., the last four digits of a card or the registered mobile number of a mobile wallet).
• Transaction timestamps and reference IDs issued by the payment processor.
• Transaction status (pending, completed, failed, reversed).

ok10 does not store full payment card numbers, CVV codes, or complete mobile wallet PINs on its servers. Sensitive payment credentials are handled exclusively by the respective payment processors under their own security standards.

1.4 Gameplay and Betting Data

ok10 records your activity on the Platform including:

• Games played, bets placed, wager amounts, and game outcomes.
• Sports betting selections — including cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers fixtures), football, kabaddi, and other available markets.
• Session duration, login timestamps, and logout times.
• Bonus offers claimed, wagering progress, and promotional activity.

1.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical information:

• IP address at the time of login or transaction.
• Device type, operating system, and browser version.
• Screen resolution and language settings.
• Referrer URL (the website from which you navigated to ok10.club, if applicable).
• Cookie identifiers and session tokens (see Section 4 — Cookies).

2 How We Use Your Data

ok10 uses the personal data collected from players strictly for the following purposes. We do not process your data for any purpose incompatible with those listed here without first obtaining your explicit consent.

2.1 Marketing Communications

ok10 will only send you promotional emails, SMS messages, or push notifications about bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh bonuses, BPL cricket specials), and new game launches if you have explicitly opted in to receive such communications during registration or in your account settings. You may withdraw your marketing consent at any time by updating your communication preferences within your account or by emailing [email protected]. Withdrawal of marketing consent will not affect the lawfulness of processing carried out before that withdrawal.

2.2 Automated Decision-Making

ok10 uses automated systems for fraud detection, responsible gaming monitoring, and bonus eligibility checks. These systems may result in automated decisions that affect your account (for example, a temporary account hold triggered by an unusual transaction pattern). Where such automated decisions have a significant effect on you, you have the right to request human review of the decision by contacting our support team.

3 Sharing and Disclosure

ok10 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share player data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Payment Processors

To process deposits and withdrawals, ok10 shares the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, SureCash, and international card networks (Visa, Mastercard). These partners process your payment data under their own privacy policies and security standards. ok10 shares only what is required to execute the specific transaction — we do not share your full account profile or gameplay history with payment processors.

3.2 Game Providers and Technology Partners

ok10's platform integrates casino game content from certified third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your player session identifier and bet data in order to deliver the game experience in real time. Game providers do not receive your full name, address, or payment method details unless separately required for a provider-specific account linkage that you explicitly consent to.

3.3 Identity Verification Services

For KYC verification, ok10 may engage third-party identity verification service providers. These providers process copies of your identity documents and biometric data on ok10's behalf, under data processing agreements that bind them to the same data protection standards that ok10 applies. Verification providers are prohibited from using your data for any purpose other than the specific verification task for which it was shared.

3.4 Legal and Regulatory Disclosure

ok10 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, valid legal process, or regulatory directive. In such cases, ok10 will disclose only the information specifically required by the legal demand and will notify the affected player where permitted to do so by law.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of ok10's business assets, player personal data may be transferred to the acquiring entity as part of that transaction. ok10 will provide reasonable notice to affected players via the email address registered to their account prior to any such transfer, and the acquiring entity will be required to honour the terms of this Privacy Policy.

4 Cookies and Tracking

ok10 uses cookies and similar tracking technologies (collectively "Cookies") on the Platform to ensure it functions correctly, to keep your session active and secure, and to help us understand how the Platform is being used so we can continue to improve it. This section explains what types of Cookies we use and how you can manage them.

4.1 Types of Cookies Used by ok10

• Strictly Necessary Cookies: These are required for the Platform to operate. They maintain your login session, store your game state, and protect against cross-site request forgery (CSRF) attacks. These Cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your preferences — such as your chosen language (English), your last viewed game category, or your notification settings — so you do not have to re-enter them on each visit.
• Analytics Cookies: ok10 uses anonymised analytics data to understand aggregate player behaviour — such as which pages are visited most frequently, how long players spend on each game category, and which payment methods are most commonly used. This data is collected in aggregated, anonymised form and does not identify individual players.
• Security Cookies: Used by our fraud detection systems to maintain session integrity and detect anomalous login patterns, such as a new device accessing an account from an unrecognised IP address.

4.2 Managing Cookies

You can control and manage Cookies through your browser settings. Most modern browsers allow you to view, delete, and block Cookies from specific websites. Please be aware that disabling strictly necessary Cookies will prevent you from logging in to your ok10 account or using core Platform features. Detailed instructions for managing Cookies in major browsers (Chrome, Firefox, Safari, Edge) are available on each browser provider's help pages.

4.3 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. ok10 currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how online services should respond to such signals. ok10 will update this position if an industry-wide standard is established.

5 Data Security

ok10 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no system can guarantee absolute security, ok10 takes a proactive and comprehensive approach to data protection.

5.1 Technical Safeguards

• TLS/SSL Encryption: All data transmitted between your device and ok10's servers is encrypted using Transport Layer Security (TLS) with at minimum a 256-bit key. You can verify this by the padlock icon in your browser's address bar when visiting ok10.club.
• Encryption at Rest: Sensitive personal data — including KYC documents and financial records — is encrypted at rest in ok10's database infrastructure.
• Two-Factor Authentication (2FA): ok10 offers 2FA via SMS to protect player accounts from unauthorised access. Players are strongly encouraged to enable 2FA in their account security settings.
• Access Controls: Access to player personal data within ok10's internal systems is restricted on a strict need-to-know basis. Staff who handle player data are subject to confidentiality obligations and receive regular data protection training.
• Penetration Testing: ok10's platform infrastructure undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

5.2 Incident Response

In the event of a personal data breach that poses a risk to affected players, ok10 will notify affected players via the email address registered to their account within a reasonable timeframe after the breach is identified and assessed. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps ok10 has taken or plans to take to address the breach.

6 Data Retention

ok10 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention schedule applies to the main categories of player data:

When data reaches the end of its retention period, ok10 will securely delete or anonymise it such that it can no longer be associated with an individual player. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

7 Your Privacy Rights

ok10 respects your rights over your personal data. The following rights are available to all players. To exercise any of these rights, please contact ok10 at [email protected] with the subject line "Data Rights Request" and your registered account email address. ok10 will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of all personal data ok10 holds about you, along with information about how it is used, where it came from, and who it has been shared with.
• Right to Rectification: If any personal data ok10 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request that ok10 delete your personal data. Note that this right is subject to ok10's legal retention obligations — data that must be retained under AML, financial record-keeping, or responsible gaming laws cannot be erased on request until the relevant retention period has expired.
• Right to Restriction of Processing: You may ask ok10 to pause or restrict the processing of your personal data while a dispute about its accuracy or lawfulness is being resolved.
• Right to Data Portability: You may request that ok10 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to ok10 processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interest, though ok10 may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where ok10 relies on your consent as the legal basis for processing (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

8 Third-Party Services

The ok10 Platform may contain links to, or integrate content from, third-party services including game providers, payment gateways, and analytics platforms. This Privacy Policy applies only to data collected and processed by ok10 directly. ok10 is not responsible for the privacy practices of any third-party service, and players are encouraged to review the privacy policies of those services independently.

8.1 Game Provider Data Flows

When you launch a game from a third-party provider such as Pragmatic Play, Evolution Gaming, Spribe, or Ezugi within the ok10 Platform, a session token is passed to the provider's servers to initialise your game session. Game providers receive your player ID and current balance in real time in order to facilitate game play. They do not receive your full name, address, KYC documents, or payment method details as part of this integration.

8.2 Payment Gateway Data Flows

When initiating a deposit via bKash, Nagad, Rocket, or another payment method, you will interact with the payment gateway's own interface (either embedded within ok10 or redirected to the provider's platform). The payment provider processes your financial credentials directly and returns only a transaction reference and status to ok10. ok10 never sees your full mobile wallet PIN or card CVV number.

8.3 No Third-Party Advertising

ok10 does not use third-party advertising networks or ad-tracking pixels on the Platform. ok10 does not retarget players on external websites using data collected from the Platform. Any promotional communications from ok10 are sent directly via ok10's own communication channels using your registered email address or phone number — they are not delivered via third-party ad networks.

9 Minors and Age Restriction

If ok10 becomes aware that personal data has been collected from a player who is under 18 years of age, we will take immediate steps to:

• Permanently close the account.
• Void all bets placed by the underage player.
• Return any deposited funds to the original payment source.
• Securely delete all personal data associated with the underage account, subject to any mandatory legal retention obligations.

Parents and guardians who believe their child may have registered an account on ok10 are urged to contact our support team immediately at [email protected]. ok10 also recommends the use of parental control software to restrict minors' access to online gambling platforms. Information on available parental control tools is provided on the Responsible Gaming page.

10 Changes to This Policy

ok10 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the Platform. The effective date at the top of this document will be updated whenever a revision is made.

10.1 Notification of Material Changes

When ok10 makes a material change to this Privacy Policy — for example, a change that affects the legal basis on which we process your data, introduces a new category of data collection, or changes how long we retain your data — we will notify registered players via email to the address associated with their account at least 14 days before the change takes effect. Continued use of the Platform after the effective date of the revised Policy constitutes acceptance of the changes.

10.2 Version Archive

Previous versions of this Privacy Policy are available upon request by contacting [email protected]. If you wish to know what version of the Policy was in effect at a specific date — for example, when you first registered your account — please include that date in your request.

11 Contact and Data Queries

For any privacy-related questions, data rights requests, or concerns about how ok10 handles your personal information, please contact our dedicated data support team using the details below. All enquiries are treated with strict confidentiality and handled by staff with specific data protection responsibilities.

When submitting a data rights request, please include your full name, your registered email address, and a clear description of the request (e.g., "access request", "erasure request", "marketing opt-out"). ok10 may need to verify your identity before processing certain requests to ensure that personal data is not disclosed to or actioned by an unauthorised party.

If you are not satisfied with ok10's response to your privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. ok10 will cooperate fully with any such regulatory inquiry.