ok77 Privacy Policy

1 Introduction

ok77 is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy ("Policy") describes how ok77 ("we", "us", "our") collects, processes, stores, shares, and protects personal information relating to registered players, prospective users, and website visitors (collectively "you", "your") who access ok77's online betting and gaming services at ok77.io and any associated interfaces.

This Policy forms part of ok77's broader framework of legal commitments to users, which includes the ok77 Terms and Conditions and Responsible Gaming Policy. By creating an account, accessing the Platform, or continuing to use our services, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.

ok77 operates exclusively in English and serves users located in Bangladesh. All data handling practices described in this Policy are conducted with reference to the applicable data protection framework. We do not collect data from individuals under the age of 21, and we actively implement safeguards to prevent underage access to the Platform.

2 Data Controller

For the purposes of this Privacy Policy, ok77 acts as the data controller in respect of the personal data collected through the ok77 Platform. As data controller, ok77 determines the purposes and means by which personal data is processed. ok77 is responsible for ensuring that all processing activities comply with applicable data protection obligations.

If you have any questions or concerns about the way in which ok77 processes your personal data, or if you wish to exercise any of your data subject rights as described in Section 11 of this Policy, please contact ok77's designated privacy contact using the details provided in Section 15.

Platform: ok77.io
Contact Email: [email protected]
Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

3 Data We Collect

ok77 collects and processes several categories of personal data in the course of providing its services. The specific data collected depends on how you interact with the Platform. The main categories are as follows:

3.1 Identity Data. This includes your full legal name, date of birth, gender, National Identity Card number or equivalent government-issued identification number, and any other information provided as part of the identity verification process.

3.2 Contact Data. This includes your email address, mobile phone number, and residential address (including city, district, and postal code within Bangladesh).

3.3 Account Data. This includes your chosen username, encrypted password, account registration date, account status, and your preferred language and communication settings.

3.4 Financial Data. This includes the payment methods you have registered on the Platform (such as bKash wallet number, Nagad account, Rocket account, or bank account details for City Bank, BRAC Bank, or Dutch-Bangla Bank), transaction history, deposit amounts, withdrawal requests, bonus credits, and account balance records. ok77 does not store full payment credentials — sensitive payment data is handled directly by the relevant payment service providers.

3.5 Transactional Data. This includes details of all bets placed, games played, results, wager amounts, odds accepted, and associated timestamps for all gaming activity conducted on the Platform.

3.6 Technical Data. This includes your IP address, browser type and version, operating system, device type, device identifiers, screen resolution, time zone setting, and other technical parameters automatically collected when you access the Platform.

3.7 Usage Data. This includes information about how you use the Platform, including pages visited, features used, session duration, click patterns, game preferences, and navigation paths.

3.8 Communications Data. This includes the content and metadata of any communications between you and ok77's support team, including support tickets, live chat transcripts, email correspondence, and complaint records.

3.9 Verification Documents. Where you are required to complete identity or payment verification, ok77 may collect copies of government-issued identity documents, utility bills, bank statements, or other supporting documentation.

4 How We Collect Data

ok77 collects personal data through the following means:

• Direct interactions: Data you provide voluntarily when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, participating in promotions, or otherwise communicating with ok77.
• Automated technologies: Data collected automatically when you access and navigate the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 10 for full details on cookies.
• Payment service providers: Data received from payment partners such as bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, and Dutch-Bangla Bank in connection with the processing of deposits and withdrawals.
• Identity verification services: Where ok77 uses third-party identity verification providers to assist in validating the information you provide during the KYC (Know Your Customer) process.
• Fraud prevention and security partners: Data shared with ok77 by fraud prevention services and security monitoring partners to help detect and prevent fraudulent activity on the Platform.
• Publicly available sources: In limited circumstances, ok77 may verify information against publicly available records or databases as part of its compliance obligations.

5 How We Use Your Data

ok77 uses the personal data it collects for the following purposes:

ok77 will not use your personal data for any purpose not described in this Policy without first obtaining your explicit consent or as otherwise required by applicable law.

6 Legal Basis for Processing

ok77 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ok77 — that is, to provide you with access to the Platform and to deliver the gaming and betting services you have requested, including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) regulations, fraud prevention obligations, and data retention requirements imposed by applicable law.
• Legitimate interests: Processing carried out for ok77's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, Platform security, improving our services, and internal analytics. ok77 has conducted a legitimate interests assessment in respect of all such processing activities.
• Consent: Where ok77 relies on your consent as the legal basis for processing — for example, to send you marketing communications or promotional offers — you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

7 Data Sharing

ok77 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. ok77 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, and Dutch-Bangla Bank — to facilitate the processing of deposits and withdrawals on your behalf.
• Identity verification partners: Third-party KYC service providers engaged by ok77 to assist in verifying your identity and completing the account verification process.
• Fraud prevention and security services: Specialist providers engaged by ok77 to detect, investigate, and prevent fraudulent activity, money laundering, and other security threats.
• Technology and infrastructure providers: Cloud hosting, data storage, and platform infrastructure providers who process data on ok77's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where ok77 is required by applicable law, court order, or regulatory direction to disclose personal data to a competent authority, law enforcement agency, or regulatory body.
• Professional advisers: Legal counsel, accountants, and auditors, subject to binding professional confidentiality obligations, where required for ok77's business operations.

8 Data Retention

ok77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal, regulatory, and operational retention requirements. The following general retention periods apply:

• Account data and identity records: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of the relevant transaction, as required by applicable financial regulations.
• Communications and support records: Retained for three (3) years from the date of the last relevant communication, or longer where the communication relates to a dispute or regulatory matter.
• Technical and usage data: Retained for up to twenty-four (24) months, after which time it is either deleted or anonymised for aggregate analytics purposes.
• Responsible gaming records: Self-exclusion and cooling-off records are retained for a minimum of five (5) years to prevent circumvention of exclusion arrangements.
• Marketing consent records: Retained for the duration of the consent period and for three (3) years following withdrawal of consent, as evidence of consent status.

Where personal data is no longer required for any legitimate purpose, ok77 will securely delete or anonymise it. Where deletion is not immediately practicable (for example, due to backup systems), data will be isolated from further active processing until deletion is completed.

9 Data Security

ok77 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the ok77 Platform, ensuring that your personal information, financial data, and login credentials cannot be intercepted.
• Encryption at rest for all sensitive personal data stored on ok77's servers, including identity documents, financial records, and account credentials.
• Access controls restricting access to personal data to authorised ok77 personnel on a strict need-to-know basis, enforced through role-based access permissions and multi-factor authentication.
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities in ok77's infrastructure.
• Intrusion detection systems and real-time monitoring of Platform activity to identify and respond to potential security incidents promptly.
• Staff training on data protection and information security, including regular refresher training and mandatory acknowledgement of ok77's internal data handling policies.

While ok77 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account login credentials and for ensuring that your own device and network security measures are adequate.

10 Cookies & Tracking Technologies

ok77 uses cookies and similar tracking technologies to enhance your experience on the Platform, to maintain your session, to remember your preferences, and to gather analytical data about Platform usage. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot be used to access your device beyond the limited scope of the cookie itself.

10.1 Essential Cookies. These cookies are strictly necessary for the Platform to function correctly. They enable core functionality such as maintaining your login session, storing your account preferences, and ensuring the security of your browsing session. Essential cookies cannot be disabled without significantly impairing Platform functionality.

10.2 Analytical Cookies. ok77 uses analytical cookies to collect aggregated, anonymised data about how users navigate and interact with the Platform. This data helps ok77 identify popular features, diagnose technical issues, and make informed decisions about Platform improvements. Analytical cookies do not identify you personally.

10.3 Functional Cookies. These cookies remember your preferences and personalisation choices — such as your preferred game categories or display settings — so that you do not need to re-enter them each time you visit the Platform.

10.4 Security Cookies. ok77 uses security-related cookies to authenticate users, prevent fraudulent activity, and protect the integrity of user sessions. These cookies form part of ok77's multi-layered fraud prevention infrastructure.

11 Your Data Rights

As an individual whose personal data is processed by ok77, you hold the following rights in respect of that data. These rights apply subject to applicable legal limitations and exceptions. To exercise any of these rights, please contact ok77 at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of the personal data that ok77 holds about you, along with information about how that data is being used. ok77 will respond to access requests within 30 calendar days.
• Right to Rectification: You have the right to request that ok77 correct any inaccurate or incomplete personal data held about you. Where data has been shared with third parties, ok77 will, where reasonably practicable, notify those parties of the correction.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and no other legal basis for processing applies. This right is subject to ok77's legal retention obligations described in Section 8.
• Right to Restriction: You have the right to request that ok77 restrict the processing of your personal data in certain circumstances, including where you contest the accuracy of the data or where you object to processing based on legitimate interests pending verification of those interests.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on ok77's legitimate interests. ok77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without prejudice to the lawfulness of processing carried out prior to withdrawal. To withdraw consent to marketing communications, please contact [email protected].

12 Protection of Minors

ok77 is an adults-only platform. Access to and use of all ok77 services is strictly restricted to individuals aged 21 years and above. ok77 does not knowingly collect or process personal data belonging to individuals under the age of 21.

During the account registration process, all applicants are required to confirm that they are at least 21 years of age. ok77 additionally employs age verification procedures, which may include the submission of government-issued identity documentation, to validate the age of account holders.

If ok77 becomes aware that personal data has been collected from an individual under the age of 21, ok77 will immediately take steps to close the relevant account, delete the associated personal data, and, where applicable, report the matter to the relevant authorities. No deposits made by an underage individual will be returned; they will be retained in accordance with ok77's regulatory obligations.

13 International Data Transfers

ok77's primary operations are directed toward users in Bangladesh, and the Platform is designed for use by individuals located in Bangladesh. In the course of providing its services, ok77 may transfer certain personal data to third-party service providers or infrastructure partners who operate servers or process data outside of Bangladesh, including cloud infrastructure providers and identity verification services.

Where such international transfers occur, ok77 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, or reliance on the recipient country's adequacy framework where applicable.

If you have concerns about the international transfer of your personal data , please contact ok77 at [email protected] and we will provide further information about the specific safeguards applicable to your data.

14 Changes to This Policy

ok77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business practices, or the services we offer. When material changes are made to this Policy, ok77 will notify registered users by posting a prominent notice on the Platform and, where practicable, by sending a notification to the email address associated with your account.

The updated Policy will display a revised effective date at the top of the document. Your continued use of the ok77 Platform following the publication of any revised Policy constitutes your acceptance of those changes. If you do not agree with the revised Policy, you must discontinue use of the Platform and contact us to close your account.

ok77 recommends that you review this Privacy Policy periodically to remain informed about how your personal data is being handled. Previous versions of this Policy are available upon request by contacting [email protected].

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or ok77's data handling practices, or if you wish to exercise any of your data subject rights as described in Section 11, please contact ok77's privacy team using the details below:

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: ok77 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)