ok33 Privacy Policy

Introduction

ok33 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who uses the ok33 online casino and sports betting platform at https://ok33.top. This Privacy Policy sets out in clear, plain English how we handle the personal information you provide to us — from the moment you register an account through to the point at which your account is closed.

This policy has been prepared in accordance with internationally recognised data protection principles and reflects ok33's commitment to transparency, data minimisation, and responsible data governance. We collect only the information we genuinely need to deliver our services, and we never sell your personal data to third parties for marketing purposes under any circumstances.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are published on the ok33 website. Where this policy uses terms defined in the Terms & Conditions (such as "Account", "Player", or "Platform"), those definitions apply equally here.

If you are accessing ok33 from Bangladesh — whether from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or any other location across the country — this Privacy Policy governs the processing of your personal data in full.

Information We Collect

ok33 collects personal information through several distinct channels. The categories of data we collect, and the circumstances in which each category is gathered, are described in detail below.

2.1 Information You Provide Directly

When you register for an ok33 account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and a copy of a valid government-issued identity document (National ID card, passport, or driving licence).
• Contact Data: Mobile phone number, email address, and residential address including district and division within Bangladesh.
• Financial Data: bKash or Nagad mobile wallet number, Rocket or Upay account reference, bank account name and number (for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other supported institutions), and records of deposits and withdrawals in BDT (৳).
• Account Credentials: Username and encrypted password hash. We never store your plaintext password.
• Support Communications: The content of any live chat conversations, email correspondence, or dispute submissions you send to the ok33 support team.
• Responsible Gaming Preferences: Any deposit limits, session time limits, cooling-off requests, or self-exclusion elections you configure within your account.

2.2 Information Collected Automatically

When you access the ok33 platform — whether via a desktop browser, mobile browser, or any other compatible device — we automatically collect certain technical data to ensure the platform functions correctly and securely:

• Device & Browser Data: IP address, device type, operating system version, browser type and version, screen resolution, and device language settings.
• Session Data: Login timestamps, session duration, pages visited, features accessed, game titles launched, and bet histories.
• Geolocation Data: Approximate geographic location derived from your IP address, used solely for jurisdiction verification and fraud prevention. We do not access precise GPS-level location without your explicit consent.
• Network Data: Mobile network operator (where detectable — e.g., GP, Robi, Banglalink, Teletalk), connection type (mobile data or Wi-Fi), and connection latency indicators.

2.3 Information from Third Parties

In certain circumstances, ok33 may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers, who confirm the authenticity of documents submitted during the verification process.
• Payment processing partners (bKash, Nagad, Rocket, Upay, and supported banks), who confirm the outcome of deposit and withdrawal transactions.
• Fraud detection and anti-money-laundering (AML) screening services, which may flag patterns associated with suspicious financial activity.
• Game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), who may share technical session data necessary for game integrity validation.

How We Use Your Data

ok33 processes your personal data only for the specific, legitimate purposes described below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

ok33 will never use your personal data to make fully automated decisions that produce significant legal effects on you without first providing you with the opportunity to request human review of that decision.

Legal Basis for Processing

ok33 relies on the following legal bases when processing your personal data, each of which is described below in plain terms:

• Contractual Necessity: Processing that is required to fulfil ok33's obligations under the Terms & Conditions you accepted at registration — such as processing your deposits, crediting winnings, and providing access to games.
• Legal Obligation: Processing that ok33 is required to perform in order to comply with applicable legal and regulatory obligations — including KYC verification, age verification (21+), and anti-money-laundering checks.
• Legitimate Interests: Processing that serves ok33's reasonable business interests, provided those interests are not overridden by your rights — such as fraud prevention, platform security monitoring, and responsible gaming behavioural analysis.
• Consent: Processing for which ok33 asks for your explicit, freely given, informed, and specific agreement — such as sending you promotional emails or SMS messages about Bangladesh-specific offers, BPL cricket season bonuses, Eid cashback promotions, or Pohela Boishakh free spin packages. You may withdraw consent at any time without penalty by updating your communication preferences in the account dashboard.

Data Sharing

5.1 Service Providers

ok33 shares personal data with carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These providers are permitted to use your data only for the specific purpose for which it was shared and must apply appropriate technical and organisational security measures. Current categories of service provider include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, and supported banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), who process BDT deposit and withdrawal transactions.
• KYC and identity verification providers, who authenticate government-issued identity documents.
• AML screening and fraud prevention services, who analyse transaction patterns against known risk indicators.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), who receive session tokens and game round data necessary to deliver certified gaming outcomes.
• Cloud hosting and infrastructure providers, who store platform data in secure, access-controlled data centre environments.
• Customer support platform providers, who power the 24/7 English-language live chat service.

5.2 Legal Disclosures

ok33 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where we are required to do so by applicable law, court order, or enforceable governmental request. In such cases, we will disclose only the minimum amount of data necessary to satisfy the legal requirement and will notify the affected player where legally permissible to do so.

5.3 Business Transfers

In the event that ok33 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by ok33 may be transferred to the acquiring or successor entity as part of that transaction. Where such a transfer occurs, ok33 will ensure that the successor entity is bound by data protection obligations no less protective than those set out in this Privacy Policy. Players will be notified of any material change in the identity of the data controller resulting from such a transaction.

Data Retention

ok33 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or legitimate business need. The retention periods applicable to the principal categories of personal data are summarised below:

Once a retention period expires, personal data is securely deleted or anonymised in accordance with ok33's internal data destruction procedures. Anonymised aggregate data (which cannot be used to identify any individual player) may be retained indefinitely for platform analytics and improvement purposes.

Security Measures

ok33 takes the security of your personal data seriously and implements a comprehensive range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and ok33's servers is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. This applies to all pages of the ok33 platform, including login, account management, deposit, and withdrawal flows.
• Password Hashing: Account passwords are never stored in plaintext. ok33 uses strong one-way cryptographic hashing algorithms with per-account salting to store credential data securely. ok33 support staff cannot retrieve or view your password — only a reset can be initiated.
• Access Controls: Access to personal data within ok33's internal systems is restricted on a strict need-to-know basis. Staff are granted the minimum level of data access required to perform their role. All internal access is logged and auditable.
• Fraud Detection Systems: Automated systems monitor account activity in real time to detect login anomalies, unusual transaction patterns, and potential account takeover attempts, triggering security alerts and temporary account locks where risk thresholds are exceeded.
• Regular Security Audits: ok33 conducts periodic internal security reviews and engages qualified third-party security professionals to perform penetration testing and vulnerability assessments of the platform infrastructure.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to affected players, ok33 will notify those players without undue delay, providing information on the nature of the breach, the data affected, and the steps taken to mitigate harm.

Cookies & Tracking Technologies

ok33 uses cookies and similar tracking technologies to enable core platform functionality, improve the user experience, and gather anonymised analytics data. A cookie is a small text file placed on your device by your browser when you visit ok33. Cookies do not contain executable code and cannot access other data stored on your device.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the ok33 platform to function and cannot be disabled. They include session authentication tokens, security cookies that prevent cross-site request forgery (CSRF), and user preference cookies that remember your language and currency settings.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players navigate the ok33 platform — which pages are visited most frequently, how long sessions last, and which games generate the highest engagement. This data is used solely to improve platform performance and content relevance.
• Functional Cookies: These cookies enable enhanced features such as remembering your preferred deposit method (e.g., bKash or Nagad), your responsible gaming settings, and any display preferences you have configured within the account dashboard.
• Fraud Prevention Cookies: These cookies help ok33 identify unusual patterns that may indicate account fraud, bot activity, or multiple-account abuse. They do not contain personally identifiable information beyond a pseudonymous device identifier.

8.2 Managing Cookies

You may adjust your browser's cookie settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your ok33 account and using core platform features. Instructions for managing cookies in the most common browsers used in Bangladesh are available from the browser provider's help pages. ok33 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving advertisements on external websites.

Your Rights

ok33 respects your rights in relation to your personal data. The following rights are available to all players and may be exercised at any time by contacting ok33 through the channels listed in Section 13 of this policy:

• Right of Access: You have the right to request a copy of all personal data ok33 holds about you, together with information about how that data is being used and on what legal basis.
• Right to Rectification: If any personal data ok33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: In certain circumstances — such as where your data is no longer needed for the purpose for which it was collected, or where you withdraw consent for consent-based processing — you have the right to request the deletion of your personal data. This right does not apply where retention is required by law (e.g., KYC records and financial transaction logs subject to mandatory retention periods).
• Right to Restriction: You may request that ok33 restrict the processing of your personal data in certain circumstances, such as while a disputed data accuracy issue is being investigated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests at any time. ok33 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

ok33 will respond to all data rights requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, ok33 may extend this period by a further thirty (30) days, in which case you will be notified of the extension and the reasons for it within the initial thirty-day window.

Third-Party Services

The ok33 platform integrates with third-party services to deliver its core gaming and payment functionality. While ok33 selects its third-party partners carefully and requires them to maintain appropriate data protection standards, ok33 is not responsible for the independent privacy practices of those third parties in their own capacity as data controllers.

Key third-party services integrated with the ok33 platform include:

• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi each operate independent platforms that deliver game content to ok33. When you launch a game, your session data is transmitted to the relevant provider's servers. Each provider publishes its own privacy policy governing the use of that session data.
• Payment Partners: bKash, Nagad, Rocket, Upay, and supported banks operate their own platforms. When you initiate a deposit or withdrawal, your transaction is processed through the relevant partner's infrastructure under that partner's own terms and privacy policy. ok33 receives only the transaction confirmation outcome and the registered account name — not your full financial account credentials.
• Analytics Services: ok33 may use anonymised web analytics tools to understand platform usage patterns at an aggregate level. These tools do not receive your name, email address, or any directly identifying personal data.

ok33 does not embed third-party social media widgets, advertising networks, or external content frames on its platform that would allow those third parties to track your browsing activity across unrelated websites.

Minors & Age Verification

ok33 employs a multi-layered age verification process. At registration, players are required to declare their date of birth and confirm they are 21 years of age or older. This declaration is subsequently verified through mandatory KYC document submission, during which ok33 confirms the date of birth against a valid government-issued identity document.

If ok33 identifies or has reason to believe that a player is under the age of 21, the account will be immediately suspended pending investigation. Any balance held in an underage account will be handled in accordance with applicable legal requirements. The personal data of any confirmed underage player will be securely deleted except where retention is required for the purpose of preventing future registration attempts by that individual.

If you are a parent or guardian and believe that a person under 21 in your care has registered an ok33 account, please contact the support team immediately via the 24/7 English-language live chat service so that appropriate action can be taken without delay.

Policy Changes

ok33 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When material changes are made to this policy, ok33 will update the "Last Updated" date displayed at the top of this page.

Where a change is particularly significant — such as a change to the categories of data we collect, the third parties with whom we share data, or your rights as a data subject — ok33 will additionally notify active players via the email address or mobile number registered to their account, providing a reasonable period for review before the changes take effect.

Your continued use of the ok33 platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with a revised Privacy Policy, you should cease using the platform and contact support to initiate account closure and any applicable data deletion request.

Historical versions of this Privacy Policy are available on request by contacting the ok33 support team. ok33 maintains an internal version history log of all policy revisions.

Contact & Data Protection

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how ok33 has handled your personal data, please contact us through the following channels:

ok33 takes all privacy concerns seriously and is committed to resolving data-related queries promptly and transparently. If you are not satisfied with ok33's response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.