oktk2 Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by oktk2 and governs the collection, processing, storage, and use of personal data provided by players who access or use the oktk2 website and platform at https://oktk2.club. oktk2 is committed to maintaining the privacy and security of your personal information and to processing it fairly, transparently, and in accordance with applicable data protection principles.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of oktk2's Terms and Conditions and should be read alongside them. If you do not agree to this Policy, please do not use the Platform.

Information We Collect

oktk2 collects only the personal data that is necessary for the legitimate operation of the Platform. The categories of data we collect, together with examples and the purpose for which each category is processed, are set out in the table below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless strictly required by applicable regulatory obligations.

How We Use Your Data

oktk2 processes your personal data only for specific, legitimate purposes directly related to the provision and improvement of Platform services. The primary purposes are as follows:

• Account management — to create, verify, and maintain your player account; to process identity verification (KYC) in accordance with anti-money laundering obligations; and to enforce the 21+ age restriction as required under responsible gaming policy.
• Transaction processing — to process deposits made via bKash, Nagad, Rocket, and Upay; to execute and record withdrawals to your registered mobile financial account; and to maintain accurate financial records for each player account.
• Service delivery and personalisation — to provide access to sports betting markets including BPL, IPL, and T20 World Cup; live casino games; slots; and crash games; and to tailor platform content and promotional offers to your usage profile where consent is obtained.
• Security and fraud prevention — to monitor account activity for signs of fraudulent behaviour, money laundering, multi-accounting, or prohibited conduct as defined in the Terms and Conditions; and to protect both the player and the integrity of the Platform.
• Legal compliance — to fulfil obligations under applicable anti-money laundering (AML) regulations, to respond to lawful requests from competent authorities, and to resolve disputes or complaints submitted through the support process.

Legal Basis for Processing

oktk2 processes player data under one or more of the following legal bases, depending on the nature of the processing activity in question:

• Contractual necessity — processing is necessary to perform the contract between you and oktk2, including account registration, deposits and withdrawals, bonus allocation, and game result recording.
• Legal obligation — processing is necessary for oktk2 to comply with applicable legal requirements, including anti-money laundering checks, age verification, and cooperation with regulatory authorities.
• Legitimate interests — certain processing activities such as fraud detection, platform security monitoring, and responsible gaming analytics are carried out on the basis of oktk2's legitimate interest in operating a safe and fair platform, provided this interest is not overridden by your privacy rights.

Sharing Your Data

oktk2 does not sell, rent, or trade your personal data. We may share your data with trusted third parties only where necessary and only under the following specific circumstances:

• Payment processors — bKash, Nagad, Rocket, Upay, and other mobile financial service providers receive only the minimum data required to execute your deposit or withdrawal transaction. These providers are independently regulated and maintain their own data protection obligations.
• Game and platform technology providers — licensed game studios including Pragmatic Play, Evolution Gaming, and Spribe may receive anonymised or aggregated technical data necessary for game delivery and RNG certification auditing purposes.
• Fraud prevention and AML service providers — where necessary to detect or prevent fraud or money laundering, we may share data with specialist third-party screening services. All such providers are contractually bound to handle data only for the specified purpose.
• Regulatory and law enforcement authorities — where required by applicable law, we may disclose player data to competent governmental or regulatory authorities. Such disclosures are made only to the extent strictly required by law.

Cookies and Tracking Technologies

oktk2 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to improve your user experience, and to help detect and prevent fraud. A cookie is a small text file stored on your device when you visit the Platform. We use the following categories of cookies:

• Essential cookies — strictly necessary for the Platform to function, including session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without breaking core Platform functionality.
• Analytics cookies — used to understand how players navigate the Platform in aggregate so that we can improve performance, identify errors, and optimise the player journey. Analytics data is anonymised before processing.
• Security cookies — used for fraud detection, session integrity verification, and responsible gaming monitoring; for example, to detect unusual betting patterns that may indicate account compromise or automated script activity.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will impair your ability to use the Platform and may prevent login or financial transactions from completing successfully.

Data Retention

oktk2 retains your personal data only for as long as it is necessary for the purposes set out in this Policy or as required by applicable law. Active account data is retained for the duration of your account plus a minimum of five years following closure. Financial transaction records are retained for a minimum of five years in accordance with anti-money laundering record-keeping obligations. Identity verification (KYC) documents are also retained for a minimum of five years following account closure.

Where your data is no longer required for any active purpose and the applicable retention period has expired, oktk2 will securely delete or anonymise it. Anonymised data from which you cannot be identified may be retained indefinitely for statistical and platform improvement purposes.

Data Security

oktk2 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures are reviewed and updated regularly to reflect evolving best practices in data security.

• 256-bit SSL/TLS encryption for all data transmitted between your device and the oktk2 Platform, ensuring your personal and financial information cannot be intercepted in transit.
• Encrypted storage of sensitive personal data and financial records on access-controlled servers. Database access is restricted to authorised personnel only, with all access events logged for audit purposes.
• Regular security assessments, vulnerability scanning, and penetration testing conducted to identify and remediate potential weaknesses in the Platform's security architecture before they can be exploited.

Your Rights

As a player whose personal information is processed by oktk2, you have the following rights with respect to your data. To exercise any of these rights, please contact us at [email protected] with your registered mobile number and a description of your request:

• Right of access — you have the right to request a copy of the personal data that oktk2 holds about you, including information on how it is being processed and with whom it has been shared.
• Right of rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right of erasure — in certain circumstances, you have the right to request that we delete personal data we hold about you. This right is subject to our legal obligations to retain certain data for AML compliance and financial record-keeping purposes.
• Right to restrict processing — you may request that we restrict the processing of your data in certain circumstances, for example where you contest its accuracy or where you have objected to processing based on legitimate interests.
• Right to object — where processing is based on legitimate interests, you have the right to object to that processing. oktk2 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

oktk2 will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request to ensure that data is not disclosed to an unauthorised party.

Third-Party Payment Providers

When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay, or any other mobile financial service provider, your transaction data is shared with that provider to the minimum extent necessary to process the payment. These providers operate under their own independently published privacy policies and are subject to their own regulatory obligations under Bangladesh Bank and the Bangladesh Financial Intelligence Unit (BFIU).

oktk2 is not responsible for the privacy practices of third-party payment providers. We strongly recommend that you review the privacy policy of any payment service you use to understand how they handle your financial data. All payment provider integrations used by oktk2 are selected based on their security standards and regulatory standing in Bangladesh.

Children's Privacy

The oktk2 Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will immediately close the associated account and delete all related personal data without delay. If you believe that a minor has registered an account on the Platform, please notify us immediately at [email protected] so that we can take prompt action.

Changes to This Policy

oktk2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where a material change is made, we will endeavour to notify active players through a notice published on the Platform. The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed of how we handle your data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which oktk2 processes your personal data, please contact our support team. When submitting a data-related enquiry, please include your registered mobile number and a clear description of your request so that we can assist you promptly. We aim to respond to all privacy-related queries within 48 hours during normal operating periods.