ok90 Privacy Policy

1. Who We Are

ok90 (accessible at ok90.today) is an online casino and sports betting platform serving players in Bangladesh and internationally. References to "ok90", "we", "us", or "our" in this Privacy Policy refer to the operators of the ok90.today platform. ok90 acts as the data controller in respect of personal data collected through the platform. If you have any questions about our identity or our data practices, please contact us at [email protected].

ok90 is committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy describes the types of information we collect, why we collect it, how we use it, who we share it with, and how long we retain it. It also explains the rights available to you in relation to your personal data and how to exercise them.

2. Information We Collect

ok90 collects personal data in several ways: directly from you when you register an account, make a deposit or withdrawal, contact support, or use features of the platform; automatically when you interact with the platform through your browser or mobile device; and from third-party service providers where this is necessary to verify your identity or process payments. The categories of personal data we collect include the following.

• Identity data: full name, date of birth, nationality, and government-issued identification details collected during account registration or KYC verification.
• Contact data: mobile number, email address, and correspondence address associated with your ok90 account.
• Financial data: payment method details (bKash or Nagad mobile wallet identifiers, bank account references where applicable), transaction amounts, deposit and withdrawal history.
• Technical data: IP address, device type, browser type and version, operating system, time zone, session duration, pages visited, and platform interaction logs.
• Responsible gaming data: self-imposed limits, cooling-off periods, self-exclusion requests, and any correspondence with our responsible gaming support team.

3. How We Use Your Information

ok90 uses your personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes for which it was collected. The primary purposes for which we process your personal data are as follows.

• Account management: to create, maintain, and manage your ok90 account, including processing registrations, verifying identity, handling login sessions, and administering account closures.
• Payment processing: to handle deposits, withdrawals, refunds, and transaction records securely through bKash, Nagad, Rocket, and other supported payment channels.
• Legal compliance: to meet know-your-customer (KYC), anti-money laundering (AML), and other regulatory obligations, including identity verification and transaction monitoring.
• Customer support: to respond to your enquiries, resolve disputes, investigate complaints, and communicate with you about your account and platform activity.
• Platform improvement: to analyse usage patterns, identify technical issues, improve game offerings, and personalise your platform experience in a privacy-respecting manner.

4. Legal Basis for Processing

ok90 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity.

• Contractual necessity: processing required to provide you with ok90 platform services pursuant to the agreement formed when you accept our Terms and Conditions.
• Legal obligation: processing necessary to comply with applicable laws and regulations, including KYC, AML, and financial reporting requirements.
• Legitimate interests: processing for purposes such as fraud prevention, platform security, and service improvement, where such processing does not override your fundamental privacy rights.
• Consent: where you have expressly consented to a specific type of processing, such as receiving promotional communications. You may withdraw consent at any time by contacting support.

5. Sharing Your Information

ok90 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of third parties, only to the extent necessary to fulfil the purposes described in this Privacy Policy.

Payment processors: bKash, Nagad, Rocket, Upay, and bank partners receive the transaction data necessary to process deposits and withdrawals. These providers have their own privacy obligations and are contractually prohibited from using your data for any other purpose. Game providers: Pragmatic Play, Evolution Gaming, Spribe, and other licensed game studios may receive technical session identifiers to facilitate game delivery; they do not receive your full personal profile. Identity verification services: third-party KYC providers may process your identity documents to confirm eligibility. Regulatory authorities: where required by law, we may disclose personal data to regulatory or law enforcement bodies.

6. Cookies and Tracking Technologies

ok90 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow our platform to recognise your browser, maintain your session state, and remember your preferences across visits. The types of cookies we use are described below.

• Essential cookies: required for the platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that help protect against fraud. These cookies cannot be disabled without affecting core platform functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how users interact with the ok90 platform. This helps us understand which pages are most visited, how users navigate the site, and where we can make improvements. Analytics data is not linked to your personal identity.
• Preference cookies: used to remember your platform settings such as language preference and display options, so you do not need to re-enter them each time you visit ok90.
• You can control and delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ok90 platform, including the ability to stay logged in or access certain features.

7. Data Retention

ok90 retains your personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law or regulation. The retention periods we apply vary depending on the category of data and the reason it was collected.

Account data and financial records are generally retained for a minimum of five years following account closure to meet applicable legal and regulatory requirements. Technical and analytics data is retained in aggregated or anonymised form and does not identify individual users after a short processing window. Responsible gaming records, including self-exclusion requests, are retained for a minimum of five years to prevent re-registration during any active exclusion period and to comply with applicable obligations. Where you request deletion of your personal data, ok90 will honour that request to the extent permitted by law; data that is required to be retained for legal or regulatory compliance purposes cannot be deleted at your request.

8. Your Data Rights

ok90 recognises and respects the rights you hold in relation to your personal data. You may exercise any of the following rights at any time by contacting our support team at [email protected]. We will respond to all valid data rights requests within 10 business days. In some cases, we may need to verify your identity before fulfilling a request.

• Right of access: you may request a copy of the personal data ok90 holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: if any personal data held by ok90 is inaccurate or incomplete, you may request that we correct or update it without undue delay.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that override this right.
• Right to restriction: you may request that we restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to erasure.
• Right to object: you may object to processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for marketing purposes. On receipt of a valid objection, ok90 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

9. Data Security

ok90 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, access controls limiting data access to authorised personnel only, regular security assessments and platform vulnerability reviews, and secure data storage practices.

While ok90 takes all reasonable steps to secure your personal data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for promptly reporting any suspected unauthorised access to [email protected]. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ok90 will notify affected users as required by applicable law.

10. Children and Minors

The ok90 platform is strictly intended for adults aged 21 years and above. ok90 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to ok90, please contact us immediately at [email protected].

ok90 actively supports responsible gaming and child protection principles. We may periodically request age verification documentation from any account holder where we have reasonable cause to question eligibility. We encourage parents and guardians to use available parental control software to prevent minors from accessing online gambling platforms.

11. Changes to This Privacy Policy

ok90 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. When we make changes, we will update the "Last Updated" date at the top of this page. Where changes are material — meaning they significantly affect how we collect or use your personal data — we will notify you in advance via your registered email address or through an in-platform notification.

• Access request: write to us at [email protected] with the subject line "Data Access Request" and include your registered username. We will provide a copy of your data within 10 business days.
• Correction request: if any of your personal data is inaccurate, contact support with the specific details you wish to correct. We will update your records promptly.
• Deletion request: to request erasure of your personal data, contact support with the subject line "Data Deletion Request". We will process your request subject to any legal retention obligations that apply.
• Objection or restriction: to object to or request restriction of any processing activity, contact support describing the specific processing you wish to object to or restrict. We will review your request and respond within 10 business days.

12. Third-Party Links

The ok90 platform may contain references to or integrations with third-party services, including game providers and payment processors. This Privacy Policy applies only to data collected and processed by ok90 directly. Third-party services have their own privacy policies, and ok90 is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you use in connection with your ok90 account.

ok90 does not endorse the data practices of any third-party service provider. Where third-party game software is embedded within the ok90 platform, those providers operate under their own data agreements with ok90 and are contractually required to maintain appropriate security standards and to use any shared data only for the purposes of game delivery and fraud prevention.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how ok90 handles your personal data, please contact our support team. All privacy-related enquiries are handled with priority and confidentiality.

Contact email: [email protected]. Please include "Privacy Enquiry" in the subject line of your message and provide your registered account username so we can locate your records efficiently. ok90 aims to respond to all privacy-related requests within 10 business days of receipt.

14. How to Exercise Your Rights

To exercise any of the data rights described in Section 8 of this Privacy Policy, please follow the relevant process below. ok90 will not charge a fee for any data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable fee may be applied or the request may be refused.