Privacy Policy — How okvk Collects, Uses & Protects Your Data

okvk ("we", "us", "our") operates the online betting and casino platform accessible at okvk.io, serving players across Bangladesh. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player, a visitor browsing our website, or a person contacting our support team.

This Privacy Policy describes the types of personal data we collect, the purposes for which we process that data, the circumstances under which we may share it with third parties, the security measures we apply to protect it, the period for which we retain it, and the rights that you, as the data subject, hold in respect of your personal information.

This policy applies to all data processing activities conducted by okvk in connection with the okvk.io platform, including account registration, payment processing, customer support interactions, marketing communications, and regulatory compliance activities.

This Privacy Policy should be read together with the okvk Terms & Conditions and the Responsible Gaming policy, both of which form part of your agreement with okvk.

okvk collects only the categories of personal data that are necessary to deliver our services, meet our legal obligations, and maintain the security and integrity of the platform. The following table outlines the categories of data we collect and examples within each category:

We do not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required by law or provided voluntarily by a player in the context of a responsible gaming support interaction.

okvk collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion.
• Automatically during platform use: Technical and usage data is collected automatically via server logs, session tracking, and platform analytics tools when you browse okvk.io or use any feature of the platform.
• Via cookies and similar technologies: As described in Section 7 of this policy, okvk uses cookies to maintain session state, remember preferences, and analyse platform performance.
• From payment service providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or other supported payment partners, those providers may share transaction confirmation data with okvk to reconcile your account.
• From identity verification partners: During the KYC process, okvk may work with third-party identity verification services that process your submitted documents and return a verification result to okvk.
• From fraud prevention services: We may receive risk signals and fraud indicators from third-party security and anti-fraud services to protect the platform and all players from financial crime.

okvk processes your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and authenticate your logins.
• Service delivery: To allow you to place bets, play casino games, fishing games, and slots, and to record your game history and wagering activity accurately.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records of all transactions.
• Identity verification (KYC): To fulfil our obligations under applicable anti-money laundering and player protection standards by verifying that you are who you say you are and that you meet our eligibility requirements.
• Customer support: To respond to your enquiries, resolve complaints, and improve the quality of our support services.
• Responsible gaming: To implement and manage deposit limits, session reminders, cooling-off periods, and self-exclusion requests at your request, and to identify patterns of play that may indicate problem gambling requiring proactive intervention.
• Security and fraud prevention: To detect and prevent fraudulent activity, money laundering, multi-accounting, collusion, and other prohibited conduct on the platform.
• Legal compliance: To meet our obligations under applicable laws and respond to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse usage patterns, optimise the player experience, identify technical issues, and develop new features and promotions.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications, as described further in Section 13.

Every data processing activity carried out by okvk is grounded in one of the following legal bases:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to operate your account and deliver the betting and gaming services you have signed up for. This basis applies to identity data, contact data, account data, financial data, and usage data required to run the platform.
• Legal obligation: okvk is required to process certain categories of data to comply with applicable laws, including anti-money laundering obligations and age verification requirements. KYC processing and the retention of financial records fall under this basis.
• Legitimate interests: okvk processes technical data, security data, and fraud-prevention data based on our legitimate interests in maintaining a safe, secure, and fair platform for all players, provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where okvk processes data for marketing communications or optional analytics, we rely on your explicit consent. You may withdraw consent at any time by contacting [email protected] or using the communication preferences settings in your account.

okvk does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited circumstances and only to the extent necessary for the relevant purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive the minimum transaction data required to process your deposits and withdrawals. Each payment partner operates under their own privacy policy.
• KYC and identity verification providers: Third-party identity verification services receive copies of your submitted identity documents to complete the verification process. These providers are contractually bound to process your data solely for verification purposes.
• Game technology providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and stake data necessary to deliver their game content within the okvk platform. These studios operate under their own certified data protection and fairness standards.
• Fraud prevention and security services: Anonymised or pseudonymised technical data may be shared with third-party security services to detect and prevent fraud, money laundering, and platform abuse.
• Legal and regulatory authorities: okvk will disclose player data to law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally required to do so by a valid legal order, warrant, or regulatory notice.
• Professional advisers: In the context of a legal dispute, audit, or compliance review, okvk may share relevant data with lawyers, auditors, or accountants who are bound by professional confidentiality obligations.

All third-party data processors engaged by okvk are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with okvk's documented instructions.

okvk uses cookies and similar tracking technologies on the okvk.io platform. Cookies are small text files placed on your device that allow the platform to recognise your browser, maintain your session, and record your preferences. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, account display options, and last-used payment method to improve your experience on return visits.
• Analytics cookies: Used to understand how players navigate the platform, which pages are visited most frequently, and where technical errors occur. Analytics data is aggregated and does not identify individual players. These cookies are activated only with your consent.
• Performance cookies: Used to monitor platform load times and identify infrastructure performance issues. These help okvk maintain a fast and reliable service for all users in Bangladesh and other supported regions.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in and using the platform. okvk does not currently use third-party advertising cookies or cross-site behavioural tracking cookies.

okvk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the okvk platform is encrypted using industry-standard SSL/TLS protocols. The okvk.io domain operates exclusively over HTTPS.
• Password hashing: Account passwords are never stored in plain text. okvk applies strong cryptographic hashing algorithms with salting to all stored passwords so that even in the event of a data breach, raw passwords are not exposed.
• Access controls: Internal access to personal data is restricted to okvk personnel and systems that have a specific operational need for that data. Role-based access controls are applied and reviewed regularly.
• Secure data storage: Personal data and financial records are stored in secure, access-controlled database environments with encryption at rest applied to sensitive data fields.
• Fraud monitoring: Automated systems monitor account activity for signs of unauthorised access, unusual login patterns, or suspicious transaction behaviour, triggering alerts and account protections where anomalies are detected.
• Incident response: okvk maintains a documented data breach response procedure. In the event of a breach affecting your personal data, okvk will notify affected players without undue delay.

okvk retains personal data for no longer than is necessary to fulfil the purposes described in this Privacy Policy, subject to the following retention guidelines:

• Active account data: Identity, contact, account, and financial data is retained for the duration of your active account relationship with okvk.
• Post-closure retention: Following account closure, okvk retains transaction records, KYC documents, and account history for a minimum of five (5) years to satisfy anti-money laundering record-keeping obligations and to respond to any regulatory enquiries or legal proceedings that may arise after closure.
• Support and communications data: Customer support records and correspondence are retained for three (3) years from the date of the relevant interaction.
• Analytics and usage data: Aggregated and anonymised usage data may be retained indefinitely for platform improvement purposes. Where usage data is identifiable, it is retained for a maximum of two (2) years from the date of collection.
• Marketing consent records: Records of your marketing consent and any consent withdrawal are retained for the duration of the limitation period for any claim that could arise from such processing.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised in accordance with okvk's data disposal procedures.

As a data subject, you hold the following rights in respect of the personal data that okvk processes about you. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of all personal data that okvk holds about you, together with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. This right is subject to our legal retention obligations described in Section 9.
• Right to restriction: You may request that okvk restricts the processing of your data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: Where processing is based on legitimate interests, you may object to that processing. okvk will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

okvk will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

The okvk platform is strictly for adults aged 21 years and above. okvk does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step during account registration and as part of the KYC process.

If okvk becomes aware that personal data has been submitted by or on behalf of an individual who is under 21 years of age, we will immediately close the relevant account, delete all associated personal data, and return any deposits made, subject to verification. If you believe that a minor has registered on the okvk platform, please notify us immediately at [email protected].

Parents and guardians are encouraged to make use of parental control software to prevent minors from accessing online gambling platforms. okvk supports responsible access to the platform and treats the protection of minors as a non-negotiable priority.

The okvk platform may contain references to third-party services, payment providers, and game studios. Where the platform interfaces with third-party services — for example, launching a game hosted by Pragmatic Play or Evolution Gaming, or initiating a bKash payment — your interaction with those third-party services is governed by their respective privacy policies and terms of service.

okvk is not responsible for the privacy practices or content of any third-party service, platform, or application that you access in connection with your use of okvk.io. We recommend that you review the privacy policy of any third-party service before sharing personal information with that service.

Where you have provided explicit consent to receive marketing communications, okvk may contact you by email or SMS with information about promotions, bonuses, new games, seasonal offers (including Eid specials, BPL season promotions, Pohela Boishakh offers, and T20 World Cup campaigns), and other platform updates relevant to Bangladesh players.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in every marketing email sent by okvk.
• Updating your communication preferences in your account settings.
• Contacting [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications will not affect transactional and service-related communications, such as account verification emails, deposit confirmations, withdrawal notifications, KYC status updates, and security alerts. These communications are necessary for the operation of your account and cannot be disabled while your account remains active.

okvk reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. When material changes are made, okvk will notify registered players by email to the address on file and will display a prominent notice on the okvk.io platform for a minimum of fourteen (14) days prior to the changes taking effect.

The "Last Updated" date at the top of this document indicates when the most recent revision was published. Players are encouraged to review this policy periodically. Your continued use of the okvk platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

If you do not accept the revised Privacy Policy, you should cease using the platform and contact [email protected] to request account closure. okvk will process any such request in accordance with the data retention obligations described in Section 9.

All privacy-related enquiries, data rights requests, and consent withdrawal notices should be directed to the okvk support team. We handle all such requests with strict confidentiality and in accordance with the timelines stated in this policy.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request"
• Subject line for consent withdrawal: "Marketing Opt-Out" or "Consent Withdrawal"
• Response time: Within 30 days of receipt for data rights requests; within 5 business days for general privacy enquiries
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Time zone: Bangladesh Standard Time (BST, UTC+6)

To protect your security and privacy, okvk will verify your identity before processing any data rights request. You may be asked to confirm account details or provide a copy of an identity document before we release or modify any personal data held in your account.