okrk Privacy Policy

This Privacy Policy is issued by okrk and governs the collection, storage, use, and disclosure of personal data in connection with your use of the okrk platform, accessible at okrk.io. okrk operates as an online gaming and sports betting platform serving players across Bangladesh, and as such handles personal data in accordance with applicable data protection principles, including transparency, purpose limitation, data minimisation, and security.

By registering an account with okrk or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this policy, you must not use the okrk platform. This Privacy Policy should be read alongside the okrk Terms & Conditions, which are available at okrk.io/terms-conditions.

okrk acts as the data controller in respect of all personal data collected through the platform. This means okrk determines the purposes for which, and the manner in which, your personal data is processed. Where okrk engages third-party service providers to process data on its behalf, those parties act as data processors and are bound by contractual obligations to handle your data only as instructed by okrk and in accordance with applicable data protection standards.

okrk collects several categories of personal data in the course of operating the platform. The specific data collected depends on your level of engagement with okrk — for example, a visitor who has not registered will have less data collected than a fully verified account holder. The categories of personal data we collect are set out below.

okrk does not collect sensitive personal data such as health information, religious beliefs, or political opinions, except where this is strictly necessary for responsible gaming purposes (for example, if you voluntarily disclose a gambling-related health concern when requesting self-exclusion).

okrk collects your personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, participate in a promotion, or contact our support team.
• Automated technologies: Data collected automatically as you navigate the platform, including cookies, server logs, and analytics tools that record your device information, IP address, session duration, and interaction patterns.
• Third-party sources: Data received from identity verification partners, payment processors (including bKash, Nagad, Rocket, Upay, and banking partners), fraud prevention agencies, and credit reference bodies to verify your identity and protect against financial crime.
• Publicly available sources: In limited circumstances, information that is publicly available and relevant to legal compliance or fraud prevention, such as sanctions lists maintained by Bangladeshi authorities or international regulatory bodies.

okrk uses your personal data only for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected. The primary purposes for which we process personal data are as follows:

• Account management: To create, maintain, and administer your okrk account, including identity verification, authentication, and account security.
• Payment processing: To process deposits and withdrawals in BDT through your chosen payment method, including bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks.
• Platform delivery: To provide access to the games, betting markets, promotions, and other features of the okrk platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance in connection with your account or transactions.
• Legal compliance: To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) checks, know-your-customer (KYC) requirements, and reporting obligations to competent authorities.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other conduct that may harm the platform or its users.
• Responsible gaming: To identify patterns of potentially problematic gambling behaviour, to administer self-exclusion requests and deposit limits, and to direct players to appropriate support resources.
• Marketing and promotions: To send you information about okrk promotions, bonuses, and offers that may be of interest to you, subject to your marketing preferences and applicable consent requirements.
• Platform improvement: To analyse usage patterns and platform performance in order to improve our products, fix technical issues, and develop new features.

okrk processes your personal data on the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and okrk, including operating your account, processing payments, and delivering gaming services.
• Legal obligation: Processing necessary to comply with legal requirements applicable to okrk, including AML regulations, KYC obligations, and lawful requests from regulatory authorities.
• Legitimate interests: Processing necessary for okrk's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and product improvement, provided these interests are not overridden by your rights and interests.
• Consent: Where you have given explicit consent to processing, such as for the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

okrk does not sell, rent, or trade your personal data with any third party for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary to fulfil the purposes described in this Privacy Policy:

• Payment service providers: Including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, for the processing of deposits and withdrawals.
• Identity verification partners: Third-party KYC and AML screening services that assist okrk in verifying the identity of account holders and detecting financial crime.
• Technology and infrastructure providers: Cloud hosting, database management, and platform infrastructure providers who process data on okrk's behalf under strict data processing agreements.
• Game content providers: Third-party game studios and content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose games are made available on the okrk platform. These providers receive limited technical data necessary for game delivery and fairness certification.
• Legal and regulatory authorities: Competent courts, law enforcement agencies, financial intelligence units, and regulatory bodies in Bangladesh or other applicable jurisdictions, where disclosure is required by law or a valid legal order.
• Professional advisers: Lawyers, auditors, accountants, and other professional advisers acting in the course of their engagement with okrk, subject to appropriate confidentiality obligations.

All third-party data processors engaged by okrk are required to handle your personal data in accordance with applicable data protection standards and are prohibited from using your data for any purpose beyond the specific service they provide to okrk. okrk maintains written data processing agreements with all such processors.

okrk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum period of five (5) years following account closure, to comply with AML, KYC, and financial record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial regulatory requirements applicable in Bangladesh.
• Gaming activity data: Retained for three (3) years from the date of the activity, or longer where required for dispute resolution or regulatory purposes.
• Support communications: Retained for two (2) years from the date of the last communication, unless the matter relates to a dispute or investigation that requires longer retention.
• Technical and usage data: Retained for up to twelve (12) months in standard log form, after which it is aggregated or anonymised.

Where retention is based solely on your consent and you withdraw that consent, or where data is no longer required for any lawful purpose, okrk will securely delete or anonymise your personal data within a reasonable period. Requests for earlier deletion will be assessed in accordance with your data rights, as described in Section 10 below.

okrk takes the security of your personal data seriously and implements a comprehensive range of technical and organisational measures to protect it against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okrk platform.
• Encryption of sensitive data at rest, including payment details and identity documents, using industry-standard encryption algorithms.
• Strict role-based access controls ensuring that okrk staff members can access personal data only to the extent necessary for their specific job function.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Two-factor authentication options available to all account holders to protect against unauthorised access.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity in real time.
• Staff data protection training to ensure all employees handling personal data understand their obligations.

While okrk employs robust security practices, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for taking reasonable precautions on your own devices and network connections.

okrk uses cookies and similar tracking technologies on the platform to enable essential functionality, improve the user experience, analyse usage patterns, and support security measures. A cookie is a small text file placed on your device by the okrk platform that allows the platform to recognise your browser or device on subsequent visits.

The types of cookies used by okrk include:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during an active session. These cookies cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised data about how visitors use the platform, including which pages are visited most frequently and how users navigate between sections. This data helps okrk improve platform performance.
• Functionality cookies: Used to remember your preferences, such as language settings, preferred payment method, and display options, to personalise your experience on subsequent visits.
• Security cookies: Used to support fraud detection and prevention measures, including identifying unusual login patterns or suspicious activity.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the okrk platform. Strictly necessary cookies cannot be disabled via browser settings as they are essential for platform operation.

As an individual whose personal data is processed by okrk, you hold the following rights in respect of that data. To exercise any of these rights, please contact our support team at [email protected] from the email address registered to your okrk account.