Privacy Policy — ok22 Data Practices

This Privacy Policy ("Policy") governs the collection, use, storage, and protection of personal data by ok22 ("we", "us", "our") in connection with the ok22 platform at https://ok22.vu. By registering an account or using the ok22 platform in any way, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

ok22 is committed to handling all personal data responsibly and in compliance with applicable data protection principles. This Policy applies to all registered players, prospective players, and visitors to the ok22 website from Bangladesh and other supported regions.

1 Data We Collect

ok22 collects personal data in the following categories, depending on the nature of your interaction with the platform:

Registration Data

When you create an ok22 account, we collect the information you provide during the sign-up process, including your full legal name, date of birth, contact email address, phone number, and preferred payment method details. This information forms the foundation of your player profile and is required for account operation, identity verification, and financial transactions.

Identity Verification Data

To comply with age verification and anti-money-laundering obligations, ok22 may request and process copies of government-issued identity documents, including your Bangladesh National ID (NID) card or valid passport. We may also collect a recent utility bill or bank statement as proof of address in certain circumstances. These documents are processed securely and retained only for the period required by applicable law.

Financial and Transaction Data

ok22 records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method references (such as your bKash or Nagad mobile number — but never your full PIN or password), and transaction timestamps. This data is essential for processing your transactions, resolving disputes, and maintaining our financial records.

Technical and Usage Data

When you visit or use the ok22 platform, we automatically collect certain technical data about your device and browsing behaviour, including your IP address, browser type and version, operating system, referring URL, pages visited, session duration, and in-game activity logs. This data helps us operate the platform securely, detect fraud, and improve the user experience.

Communication Data

If you contact ok22's support team via email or live chat, we retain records of those communications, including the content of your messages and the resolution of any support ticket. This enables our team to provide consistent, high-quality support and to identify recurring issues on the platform.

Data Category	Examples	Purpose
Registration Data	Name, email, date of birth, phone number	Account creation, identity verification
Verification Data	NID card, passport, proof of address	Age verification, AML compliance
Financial Data	Deposit/withdrawal records, bKash/Nagad references	Transaction processing, fraud prevention
Technical Data	IP address, browser, session logs	Security, platform improvement
Communication Data	Support ticket content, chat transcripts	Customer service, dispute resolution

2 How We Use Your Data

ok22 processes your personal data for clearly defined purposes only. We do not process personal data for purposes that are incompatible with those listed below:

• Account Management: To create, maintain, and administer your ok22 player account, including processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and card networks.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 18 years and to confirm that the identity you provided at registration is accurate and genuine.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account abuse, and any other prohibited conduct as defined in our Terms & Conditions.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money-laundering laws, financial reporting requirements, and any lawful requests from competent authorities.
• Platform Operation and Improvement: To monitor platform performance, identify technical errors, analyse player behaviour patterns (in aggregate and anonymised form), and improve the overall ok22 product offering.
• Customer Support: To respond to support inquiries, process complaints, and maintain a record of communications to ensure consistent service quality.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to proactively engage players who may benefit from responsible gaming tools such as deposit limits or self-exclusion.
• Marketing Communications: With your prior consent, to send you promotional offers, bonus notifications, and information about new games or features on the ok22 platform. You may withdraw this consent at any time by contacting our support team.

3 Data Sharing & Disclosure

ok22 does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

Payment Processors

To process your BDT deposits and withdrawals, ok22 shares relevant transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and international card networks (Visa, Mastercard). These partners receive only the data necessary to complete your transaction and are bound by their own data protection obligations.

Identity Verification Providers

ok22 may engage third-party identity verification service providers to assist with the processing of NID cards, passports, and other verification documents. Such providers operate under strict data processing agreements with ok22 and are not permitted to use your data for any purpose other than performing the verification service.

Game Studios

When you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — your session data (such as game rounds, bet amounts, and outcomes) may be processed by those studios' servers. ok22 ensures that all game studio integrations are governed by data processing agreements that protect your information.

Legal and Regulatory Authorities

ok22 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or where ok22 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to the platform or its users.

4 Cookies & Tracking Technologies

ok22 uses cookies and similar tracking technologies on its platform to deliver core functionality, enhance security, and improve the player experience. The following types of cookies are in use:

Essential Cookies

These cookies are strictly necessary for the ok22 platform to function. They include session authentication tokens (which keep you logged in to your ok22 account during a browser session), CSRF protection tokens (which prevent cross-site request forgery attacks), and load-balancing cookies. You cannot opt out of essential cookies while continuing to use the ok22 platform, as disabling them would prevent core features from operating.

Analytics Cookies

ok22 uses anonymised analytics cookies to understand how players navigate and interact with the platform. This data is aggregated and does not identify any individual player. Analytics data helps our product and engineering teams make informed decisions about platform improvements, new feature rollouts, and performance optimisation.

Preference Cookies

These cookies remember your platform preferences, such as your chosen language setting and any interface customisations you have applied. They improve your experience by ensuring you do not need to reconfigure your preferences on every visit.

5 Data Retention

ok22 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Active account data (registration details, transaction history, game logs): Retained for the duration of your active account relationship with ok22, plus a minimum of 5 years after account closure to satisfy anti-money-laundering record-keeping requirements.
• Identity verification documents (NID, passport copies): Retained for a minimum of 5 years from the date of submission, in line with applicable financial regulatory obligations.
• Support communications (email and live chat transcripts): Retained for 3 years from the date of the interaction, to support dispute resolution and quality monitoring.
• Technical and session logs (IP addresses, login records): Retained for 12 months from the date of collection, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of your account plus 2 years after withdrawal of consent or account closure, to demonstrate compliance with consent obligations.

At the end of the applicable retention period, ok22 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.

6 Your Privacy Rights

As an ok22 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. ok22 will respond within a reasonable timeframe and may need to verify your identity before processing the request.

• Right of Access: You have the right to request a copy of the personal data ok22 holds about you, along with information about how that data is being used.
• Right to Rectification: If any personal data ok22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you have the right to request that ok22 delete your personal data. Please note that this right is subject to limitations where ok22 is required by law to retain certain data (e.g., AML record-keeping obligations).
• Right to Restrict Processing: You may request that ok22 restrict the processing of your personal data in specific circumstances, such as when you contest the accuracy of the data or object to its use for a particular purpose.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you may request that ok22 provide your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on ok22's legitimate interests, subject to ok22 demonstrating compelling grounds that override your interests.
• Right to Withdraw Consent: Where ok22 processes your data on the basis of your consent (e.g., for marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7 Data Security

ok22 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ok22 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data — including identity verification documents and financial records — is stored in encrypted form in ok22's secure server environment.
• Access Controls: Access to personal data within ok22's organisation is strictly limited on a need-to-know basis. Staff members are granted access only to the data required to perform their specific role, and all access is logged and audited.
• Penetration Testing: ok22 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ok22 maintains a documented data breach incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, ok22 will notify affected players as soon as practicable and take immediate steps to contain and remediate the incident.

8 Policy Updates

ok22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and services we offer. When we make material changes to this Policy, we will:

• Publish the revised Policy on this page with an updated "Last Updated" date.
• Send a notification to your registered email address summarising the key changes, where those changes materially affect your rights or our obligations.
• In cases of significant changes, display a prominent notice on the ok22 platform for a reasonable period following the update.

Your continued use of the ok22 platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the ok22 platform and may request account closure by contacting [email protected].

We encourage you to review this Policy periodically to stay informed about how ok22 protects your personal data. The current version of this Policy is always accessible at https://ok22.vu/privacy-policy.