ok90 Privacy
Policy

1. Introduction

This Privacy Policy ("Policy") is published by ok90 ("the Company", "we", "us", "our") and applies to all personal data collected through the ok90 website located at https://ok90.vu and all associated services, games, betting markets, and features (collectively, the "Platform").

ok90 respects the privacy of every player and is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy explains the types of personal information we collect from players based primarily in Bangladesh, the purposes for which that information is processed, the circumstances under which it may be shared, and the rights that players hold in relation to their data.

By registering an account with ok90, making a deposit, or otherwise accessing the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you must not use the ok90 Platform.

2. Data We Collect

2.1 Information You Provide Directly

When you register an account or interact with the ok90 Platform, we collect the following categories of personal data that you provide to us directly:

• Identity Data: Full legal name, date of birth, gender, and nationality.
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postal code).
• Account Credentials: Username and encrypted password (passwords are never stored in plain text).
• Identity Verification (KYC) Documents: Copies of government-issued photo identification (National ID Card, passport, or driving licence) and proof of address submitted during the KYC verification process.
• Payment Data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are handled by our PCI-DSS-compliant payment processors and are not stored on ok90 servers.
• Communication Data: Content of messages you send to ok90 customer support via live chat, email, or WhatsApp.

2.2 Data Collected Automatically

When you access or use the ok90 Platform, certain technical data is collected automatically by our systems:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on each page, game sessions played, bets placed, bet amounts, and navigation paths through the Platform.
• Log Data: Server-side access logs recording timestamps, request types, and response codes associated with your sessions.
• Location Data: General geographic location derived from your IP address (country and city level). ok90 does not collect precise GPS location data.

2.3 Data Collected from Third Parties

ok90 may receive personal data about you from the following third-party sources:

• Payment Processors: Transaction confirmation data, payment status, and fraud signals from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks.
• KYC Verification Providers: Identity verification results and fraud risk scores returned by our third-party identity verification partners.
• Fraud Prevention Services: Risk indicators and device fingerprint data from third-party fraud detection platforms used to protect the integrity of the ok90 Platform.

The table below summarises the categories of data collected and their primary purpose:

Data Category	Examples	Primary Purpose
Identity Data	Name, date of birth, NID number	Account registration, KYC, age verification
Contact Data	Email, phone, address	Communication, account recovery, support
Payment Data	bKash number, card last 4 digits	Processing deposits and withdrawals
KYC Documents	Passport scan, utility bill	Identity verification, fraud prevention
Technical Data	IP address, browser, device ID	Security, fraud detection, service delivery
Usage Data	Games played, bets placed, pages viewed	Platform improvement, responsible gaming monitoring
Communication Data	Support chat transcripts	Customer support, dispute resolution, quality assurance

3. How We Use Your Data

ok90 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and securing your ok90 player account, including password resets and account recovery.
• Service Delivery: Processing deposits and withdrawals, settling bets, awarding bonuses, and providing access to games and betting markets on the Platform.
• Identity & Age Verification: Conducting KYC checks to verify that you are who you say you are and that you are at least 21 years of age, as required by our operating obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account abuse, money laundering, and other unlawful activities.
• Customer Support: Responding to your enquiries, complaints, and support requests via live chat, email, and WhatsApp.
• Responsible Gaming: Monitoring player activity to identify signs of problem gambling and enforcing deposit limits, time-out periods, and self-exclusion requests in accordance with our Responsible Gaming obligations.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS — only where you have provided your consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: Analysing aggregated usage data to improve the performance, design, and content of the ok90 Platform.
• Legal Compliance: Meeting our obligations under applicable laws and regulations, responding to lawful requests from competent authorities, and maintaining records as required by law.

4. Legal Basis for Processing

ok90 processes your personal data on the following legal grounds:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you under the ok90 Terms & Conditions — including account management, payment processing, and game access.
• Legal Obligation: Processing is necessary to comply with our legal and regulatory obligations, including KYC requirements, anti-money laundering obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: For marketing communications and the use of non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

5.1 Third-Party Service Providers

ok90 shares personal data with carefully selected third-party service providers who assist in delivering the Platform and its services. These providers are contractually required to process data only on our instructions and to maintain appropriate security standards. Categories of service providers include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard processing networks
• Identity and KYC verification providers
• Fraud detection and risk management platforms
• Cloud hosting and data storage providers
• Customer support software providers
• Email and SMS communication service providers

5.2 Legal and Regulatory Disclosures

ok90 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or binding regulatory instruction. ok90 will, where legally permissible, notify affected players of such disclosures.

5.3 Business Transfers

In the event that ok90 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by ok90 may be transferred as part of that transaction. Players will be notified of any such transfer and any material change to data processing arrangements that results from it.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit the ok90 Platform. They help us recognise your browser, remember your preferences, keep your session active, and collect analytical data about how the Platform is used.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
• Analytical Cookies: Used to collect anonymised data about how players navigate and use the Platform, helping ok90 identify areas for improvement. These are subject to your consent.
• Preference Cookies: Store your language preferences, display settings, and other personalisation choices. These persist between sessions to improve your experience.
• Security & Fraud Detection Cookies: Used by our fraud prevention systems to recognise your device and detect suspicious activity patterns.

6.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the performance or availability of some features on the ok90 Platform. Guidance on managing cookies is available through the help section of your browser.

7. Data Retention

ok90 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following permanent account closure, to meet anti-money laundering, fraud investigation, and regulatory record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure (whichever is later), as required by applicable financial regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Communications: Retained for two (2) years from the date of the interaction, unless required for longer in connection with an ongoing dispute or investigation.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years to evidence compliance.
• Technical and Log Data: Typically retained for twelve (12) months on a rolling basis, unless retained longer for security investigation purposes.

8. Data Security

ok90 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive personal data and identity documents stored on our systems.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their function.
• Regular security audits and vulnerability assessments of the Platform infrastructure.
• Multi-factor authentication requirements for internal systems that process personal data.
• Incident response procedures to ensure that any data breach is identified, contained, and reported promptly.

9. Your Rights

As a player on the ok90 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]. ok90 will respond to all valid data rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data ok90 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data, subject to ok90's legal obligation to retain certain records for regulatory compliance periods.
• Right to Restriction of Processing: You have the right to request that ok90 restricts the processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: You have the right to receive personal data you have provided to ok90 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and this objection will be honoured without question.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10. Children & Minors

The ok90 Platform is strictly intended for persons aged 21 years and above. ok90 does not knowingly collect personal data from individuals under the age of 21. If ok90 becomes aware that a person under 21 has provided personal data or opened an account, that account will be immediately suspended, all funds will be forfeited, and all personal data associated with the account will be securely deleted to the extent permitted by law.

If you believe that a minor has registered an account on the ok90 Platform, please contact us immediately at [email protected] so that we may take prompt action.

11. Third-Party Links

The ok90 Platform may contain references to or integrations with third-party services, including payment gateways. While ok90 takes care to work only with reputable service providers, this Privacy Policy applies solely to data collected and processed by ok90 directly. ok90 is not responsible for the privacy practices of any third-party services, and we encourage you to review the privacy policies of any third parties whose services you access in connection with the ok90 Platform.

12. Policy Amendments

ok90 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change to the types of data we collect or the purposes for which we process it — ok90 will notify registered players by email to their registered address and will post the updated policy on this page with a revised effective date at least 7 days before the changes take effect.

For minor or administrative changes (such as corrections to contact details or clarifications of existing practices), ok90 may update the policy without prior notice beyond the revision of the effective date on this page. We encourage all players to review this page periodically to stay informed of how ok90 protects their data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ok90 processes your personal data, please contact our dedicated data support team using the details below. All enquiries are treated with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available on-site 24/7, average response time 2–5 minutes
• WhatsApp: Available on-site, average response time 5 minutes
• Response Time: ok90 aims to acknowledge all privacy-related requests within 48 hours and to provide a full response within 30 calendar days.
• Languages: English and Bengali support agents available around the clock