ok90 Privacy Policy

This Privacy Policy ("Policy") describes how ok90 ("ok90", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "your", "Player", "User") who access or use the ok90 platform, including its website, mobile browser interface, and all associated services. This Policy applies to all players based in Bangladesh and to all personal data processed in connection with your use of ok90's casino, sports betting, and payment services.

This Policy should be read alongside ok90's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overarching legal framework governing your relationship with ok90.

Data We Collect

ok90 collects personal data from you directly when you register an account, make a deposit or withdrawal, contact support, or use our services. We also collect certain data automatically through your interaction with the platform. The categories of personal data we collect are set out below.

Identity and Contact Data

When you create an ok90 account, we collect your full legal name, date of birth, email address, and a Bangladesh-registered mobile phone number. This information is required to open and maintain your account, to communicate with you about your account activity, and to verify your identity as part of our mandatory Know Your Customer (KYC) process.

Identity Verification Documents

Before processing your first withdrawal, ok90 requires you to submit government-issued identification documents. Accepted documents include your National Identity Card (NID), Passport, or Driver's Licence issued by Bangladeshi authorities. For withdrawals exceeding ৳50,000, a proof of address document (such as a utility bill or bank statement dated within 90 days) is also required. These documents are processed solely for identity and age verification and are stored securely in compliance with our data retention obligations.

Financial and Transaction Data

ok90 records all deposit and withdrawal transactions associated with your account, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction amounts in BDT, timestamps, and transaction reference numbers. We do not store full payment instrument credentials such as bank account PINs or mobile financial service passwords. Payment authentication is handled directly by the respective payment provider.

Gameplay and Betting Data

ok90 records all gameplay activity on your account, including game sessions, bet amounts, wager history, game outcomes, and sports betting activity across all markets including cricket (BPL, IPL, T20 World Cup) and other sports. This data is used to operate the platform, detect fraud, ensure fair play, and comply with responsible gaming obligations.

Technical and Device Data

When you access ok90, we automatically collect certain technical data about your device and connection, including your IP address, browser type and version, operating system, device type, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and session timestamps. This data is used for security monitoring, fraud prevention, and platform optimisation.

Communications Data

If you contact ok90's customer support team via email or live chat, we retain records of that correspondence, including the content of messages and any attachments. This data is used to resolve your query, improve support quality, and maintain a record of interactions for dispute resolution purposes.

How We Use Your Data

ok90 uses personal data collected from you for the following specific purposes. We process your data only where we have a lawful basis to do so — typically because processing is necessary to perform our contract with you, to comply with a legal obligation, or because we have a legitimate interest in operating a secure and compliant platform.

• Account management: Creating, maintaining, and administering your ok90 account, including processing your registration, managing your login credentials, and updating your account details.
• Transaction processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers, and reconciling your account balance.
• Identity verification (KYC): Verifying your age, identity, and address in compliance with our anti-money laundering and responsible gaming obligations.
• Fraud and security monitoring: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, collusion, and unauthorised account access.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, enforcing self-exclusion orders and deposit limits, and providing responsible gaming interventions where appropriate.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of interactions for quality assurance and compliance purposes.
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal promotions (such as Eid and BPL cricket season offers) where you have opted in to receive marketing communications. You may opt out at any time by contacting our support team.
• Platform improvement: Analysing aggregated, anonymised usage data to improve ok90's games, features, and user experience.
• Legal compliance: Complying with applicable laws, regulations, court orders, and requests from competent authorities in Bangladesh, including financial intelligence and anti-money laundering obligations.

Data Sharing & Disclosure

ok90 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose.

Technology and Service Providers

ok90 engages third-party technology providers to operate the platform, including game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), payment processing infrastructure partners, cloud hosting providers, KYC and identity verification service providers, and customer support software vendors. These providers process data on our behalf and are contractually obligated to implement appropriate data security measures and to use your data solely for the purposes specified by ok90.

Payment Partners

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, ok90 shares the minimum necessary transaction data with the relevant payment provider to facilitate that transaction. Each payment provider operates under its own privacy policy and security standards. ok90 encourages you to review the privacy policies of your chosen payment provider separately.

Legal and Regulatory Disclosure

ok90 may disclose your personal data to competent authorities, law enforcement agencies, financial intelligence units, or courts in Bangladesh where required to do so by applicable law, a valid legal order, or where we reasonably believe such disclosure is necessary to protect the rights, property, or safety of ok90, our players, or the public. In such cases, ok90 will disclose only the minimum data required to comply with the legal obligation.

Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of ok90's business, your personal data may be transferred to the acquiring entity as part of that transaction. ok90 will notify you of any such transfer and the implications for your data before it takes effect, to the extent permitted by applicable law.

Data Not Shared

ok90 will never share your personal data with third-party advertisers, data brokers, social media platforms, or any commercial entity for marketing, profiling, or resale purposes. ok90 does not share your data with other ok90 players or make any personal information publicly visible on the platform.

Cookies & Tracking

ok90 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance platform functionality, improve your experience, and gather anonymised analytics data. A cookie is a small text file stored on your device by your browser when you visit ok90.

Types of Cookies Used

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please be aware that disabling strictly necessary cookies will impair the functionality of the ok90 platform, including your ability to log in and maintain a session. Browser-level cookie controls are available in all major mobile browsers used in Bangladesh, including Chrome, Firefox, and Samsung Internet.

Data Retention

ok90 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with ok90 and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping obligations applicable in Bangladesh.
• KYC verification documents: Retained for the duration of your account and for a minimum of five (5) years after account closure.
• Gameplay and betting records: Retained for a minimum of three (3) years from the date of the relevant game session or bet, to support dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for three (3) years from the date of the last interaction in a support thread.
• Marketing consent records: Retained for three (3) years from the date of consent or the date of the most recent marketing interaction, whichever is later.

Upon expiry of the applicable retention period, ok90 will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and platform improvement purposes.

Data Security

ok90 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following core controls.

Technical Safeguards

• 256-bit SSL/TLS encryption on all data transmitted between your device and ok90's servers.
• Encryption at rest for all sensitive personal data stored in ok90's databases, including identity documents and financial records.
• Access controls restricting internal access to personal data to authorised personnel on a strict need-to-know basis, enforced through role-based access management.
• Intrusion detection and monitoring systems that continuously analyse platform traffic for anomalous patterns indicative of unauthorised access attempts.
• Regular security audits and penetration testing conducted by independent third-party security specialists.

Organisational Safeguards

• All ok90 personnel with access to personal data are subject to confidentiality obligations and receive regular data protection and security training.
• Third-party service providers with access to ok90 player data are required to comply with contractual data security standards equivalent to or exceeding ok90's own standards.
• ok90 maintains an internal data breach response procedure. In the event of a personal data breach that poses a risk to your rights, ok90 will notify affected players without undue delay.

Your Privacy Rights

As a player using the ok90 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. ok90 will respond to all verified requests within 30 days of receipt.

Please note that certain rights may be limited or subject to exceptions where ok90 is required to retain or process data in order to comply with legal obligations, including anti-money laundering record-keeping requirements, or to exercise or defend legal claims. ok90 will explain the basis for any such limitation when responding to your request.

Policy Updates & Contact

ok90 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made to this Policy, ok90 will update the "Last Updated" date at the top of this document and, where appropriate, notify registered players via the email address on record.

We encourage you to review this Policy periodically to stay informed about how ok90 protects your personal data. Your continued use of the platform after any amendment has been published constitutes acceptance of the updated Policy.

Children's Privacy

ok90 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If ok90 becomes aware that personal data has been collected from a person under 18, that account will be closed immediately and all associated data will be deleted. If you believe a minor has created an account on ok90, please notify us immediately at [email protected].

International Data Transfers

ok90 operates primarily within Bangladesh and processes most player data within the region. Where data is processed by third-party service providers whose infrastructure is located outside Bangladesh, ok90 ensures that appropriate contractual safeguards are in place to maintain a standard of data protection consistent with this Policy. ok90 does not transfer player data to jurisdictions that do not provide an adequate level of data protection without appropriate safeguards.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or ok90's data processing practices, please contact our data protection team at: