okrk Privacy Policy

This Privacy Policy ("Policy") describes how okrk ("we", "us", "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the okrk website at okrk.org and its associated services, including cricket betting, live casino, slots, crash games, and all other products on the platform.

By registering an account or using the platform, you acknowledge that you have read and understood this Policy, and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the okrk platform.

Our Privacy Commitments

okrk is built on a foundation of transparency and data respect. Here is a plain-language summary of the six core commitments that shape how we handle your data.

1. Information We Collect

okrk collects personal data in three broad categories: information you provide directly, information generated through your use of the platform, and information received from trusted third-party sources.

Information You Provide Directly

• Registration details: full name, date of birth, email address, mobile number (used as your primary account identifier), and preferred username.
• Identity verification documents submitted for KYC: National ID card, passport, driving licence, or equivalent government-issued photo identification.
• Payment method details required to process deposits and withdrawals: bKash or Nagad account number, Rocket wallet number, bank account name and number, or card details where applicable.
• Communications you send to okrk support, including emails, chat transcripts, and any documentation you attach.
• Responsible gaming preferences: deposit limits, session time limits, self-exclusion status, and cooling-off period settings that you apply to your account.

Information Generated Through Platform Use

• Transaction logs: all deposit, withdrawal, bonus, and wagering records associated with your account, including timestamps, amounts in BDT, game identifiers, and outcome data.
• Device and technical data: IP address, device type, operating system, browser version, screen resolution, and mobile network operator, collected to maintain account security and detect fraud.
• Session data: pages viewed, time spent on each section, game launch events, and navigation paths within the platform.
• Customer service interaction logs: records of support tickets, live chat sessions, and the resolution status of each enquiry.

Information from Third Parties

• Payment verification data received from bKash, Nagad, Rocket, Upay, and banking partners confirming transaction authenticity and account ownership.
• Identity verification results from KYC service providers confirming document authenticity and age verification outcomes.
• Fraud and sanctions screening results from compliance databases used to identify high-risk users or blocked jurisdictions.

2. How We Use Your Information

The table below summarises the primary purposes for which okrk processes your personal data, together with the lawful basis for each processing activity.

3. Legal Basis for Processing

okrk processes personal data only where a lawful basis exists. The primary legal grounds we rely on are:

• Contractual necessity: processing required to fulfil our obligations to you under the Terms and Conditions — for example, processing a withdrawal or verifying your identity before paying a winning.
• Legal obligation: processing necessary for us to comply with applicable laws — for example, anti-money laundering record-keeping requirements and age verification obligations.
• Legitimate interests: processing for fraud prevention, platform security, and product improvement, provided these interests are not overridden by your fundamental rights.
• Consent: processing for optional purposes such as direct marketing, where we have obtained your clear, informed, and freely given consent prior to processing.

4. Sharing Your Information

okrk does not sell your personal data. We share it only in the limited circumstances described in this section, and only with parties who are contractually bound to protect it.

Service Providers and Technology Partners

We share data with carefully selected third-party service providers who assist us in operating the platform. These include game content providers (Pragmatic Play, Evolution Gaming, Spribe, and others), payment processors (bKash, Nagad, Rocket, Upay, banking partners), KYC identity verification providers, fraud detection and anti-money laundering screening services, and platform infrastructure and cloud hosting providers. All service providers are required to process data only on okrk's documented instructions and maintain appropriate technical and organisational security measures.

Legal and Regulatory Disclosure

okrk may disclose personal data to courts, law enforcement agencies, government authorities, or regulators where we are required to do so by applicable law, court order, or lawful governmental request. We will notify you of such disclosure where we are legally permitted to do so, unless doing so would compromise an investigation.

Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or a substantial part of okrk's assets, your personal data may be transferred to the successor entity as part of that transaction. Where this occurs, we will notify affected players by email and on the platform prior to the transfer taking effect, and the successor entity will be bound by the same privacy obligations set out in this Policy.

5. Cookies and Tracking Technologies

The okrk platform uses cookies and similar local storage technologies to deliver core functionality, maintain session state, and generate anonymised analytics that help us improve the player experience. We do not use third-party advertising cookies.

Types of Cookies We Use

• Strictly necessary cookies: required for the platform to function correctly, including session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cannot be disabled without breaking the platform.
• Functional cookies: remember your language preference, responsible gaming settings, and display preferences so they persist across sessions without requiring you to reconfigure them each time you log in.
• Analytics cookies: collect anonymised, aggregated data about how players navigate the platform — such as which game categories are most visited and where players encounter errors — to help us prioritise improvements. No individual player is identifiable from this data.
• Security cookies: short-lived tokens used for two-factor authentication (SMS OTP), login attempt rate-limiting, and device fingerprint comparison to detect account takeover attempts.

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly, and you will not be able to log in or place bets until those cookies are re-enabled.

6. Data Retention

okrk retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. In practice, this means: active account data is retained for the duration of your account relationship with okrk plus a minimum of 5 years after account closure to meet anti-money laundering record-keeping obligations; transaction records are retained for a minimum of 5 years from the date of each transaction; KYC documents are retained for the same 5-year post-closure period; marketing preferences and consent records are retained until you withdraw consent plus 1 year for audit purposes; anonymised analytics data may be retained indefinitely as it cannot be linked to any individual.

When the applicable retention period expires, okrk will securely delete or anonymise your personal data. Deletion requests submitted before a mandatory retention period has expired will be acknowledged, and deletion will be completed as soon as the legal retention obligation is satisfied.

7. Your Data Rights

okrk respects your rights over your personal data. You may exercise any of the following rights at any time by contacting [email protected]. We will respond within 30 calendar days of receiving a verified request.

• Right of access: request a copy of all personal data we hold about you, in a portable and machine-readable format where technically feasible.
• Right to rectification: request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies.
• Right to restriction: request that we restrict processing of your data — for example, while you contest its accuracy or while an erasure request is being evaluated.
• Right to data portability: receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
• Right to withdraw consent: where processing is based on consent (such as marketing emails), withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please email [email protected] with the subject line "Data Rights Request" and include your registered mobile number or email address so we can verify your identity before processing the request. We do not charge a fee for data rights requests.

8. Security Measures

okrk applies a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data fields (including KYC document stores and payment credentials) at rest; role-based access controls that restrict internal staff access to personal data on a strict need-to-know basis; two-factor authentication on all internal systems; regular penetration testing and vulnerability assessments; and automated fraud and anomaly detection systems that flag unusual account behaviour in real time.

Despite these measures, no system is entirely free from risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, okrk will notify affected players without undue delay and, where feasible, within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, and the steps we are taking to address it.

9. Third-Party Links

The okrk platform may display references to game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. These providers operate their own platforms and have their own privacy policies. okrk is not responsible for the privacy practices of game content providers or any other third parties. We recommend reviewing the privacy policy of any third-party service before providing them with your personal data.

10. Children's Privacy

The okrk platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an individual under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the platform, please notify us immediately at [email protected].

11. Changes to This Privacy Policy

okrk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When material changes are made, we will provide at least 7 days' advance notice to registered players via email or a platform notification before the revised Policy takes effect.

The most current version of this Policy is always available at okrk.org/privacy-policy. We encourage you to review this page periodically. Your continued use of the platform after any posted changes constitutes your acceptance of the revised Policy.

12. Contact and Data Controller

okrk is the data controller responsible for your personal data. If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how your data is being handled, please contact our dedicated privacy team. We aim to acknowledge all privacy enquiries within 48 hours and resolve them within 30 days.

Privacy enquiries email: [email protected]