09ok Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by 09ok, the online betting and casino platform accessible at https://09ok.im and all associated subdomains, mobile interfaces, and digital services (collectively, the "Platform"). This Policy explains how 09ok collects, uses, stores, discloses, and protects the personal information of individuals who register for, access, or use the Platform.

09ok is committed to handling your personal data with integrity, transparency, and care. This Policy is written in clear, plain English so that every player on the 09ok platform — regardless of their level of familiarity with data protection concepts — can understand exactly how their information is treated.

By registering an account on 09ok or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must cease using the Platform and close your account by contacting the 09ok support team.

This Policy should be read together with the 09ok Terms & Conditions, which govern the overall legal relationship between you and the Platform. In the event of a conflict between this Policy and the Terms & Conditions on a data-specific matter, this Policy prevails.

2 Data We Collect

09ok collects the following categories of personal data from players. The specific data points collected may vary depending on the services you access and the verification steps required for your account level.

3 How We Collect Data

09ok collects personal data through the following channels and mechanisms:

• Direct submission: Information you actively provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or submitting any form on the Platform.
• Automated technical collection: Technical and usage data collected automatically when you visit the Platform, including through cookies, session tokens, server logs, and analytics tools. See Section 7 for full details on cookies.
• Payment providers: Transaction confirmation data shared by bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners when you initiate a deposit or withdrawal. 09ok receives confirmation references and masked payment identifiers, not full card or wallet credentials.
• Identity verification partners: Where 09ok uses third-party document verification services to confirm the authenticity of identity documents you submit, those partners may share a verification result and confidence score with 09ok. Your raw document images are not retained by 09ok beyond the KYC review period.
• Game providers: Technical gameplay data (session results, RNG outcomes, bet settlement records) shared by game providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Habanero, Spribe, and Ezugi in order to maintain accurate account records and settle disputes fairly.
• Fraud prevention systems: Automated risk-scoring signals generated by internal fraud detection systems based on behavioural patterns, device fingerprinting, and IP geolocation data, used to protect the integrity of the Platform and all players on it.

4 Purpose & Legal Basis for Processing

09ok processes your personal data only when there is a valid and lawful reason to do so. The table below sets out the primary purposes for which we process your data and the legal basis that justifies each processing activity.

Where 09ok relies on your consent as the legal basis for processing (for example, sending promotional emails or SMS), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact the 09ok support team or use the unsubscribe mechanism included in any marketing communication.

5 Data Sharing & Disclosure

09ok does not sell your personal data. We share your data only where it is necessary to deliver our services, comply with legal obligations, or protect the safety and integrity of the Platform. The categories of recipients with whom 09ok may share your data are set out below:

• Payment processing partners: bKash, Nagad, Rocket, Upay, and card processing partners receive the payment instruction data necessary to execute your deposit and withdrawal requests. These partners operate under their own privacy policies and data security standards.
• Game technology providers: Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Habanero, Spribe, and Ezugi receive technical session identifiers necessary to deliver their game content and settle game outcomes within your 09ok account. These providers do not receive your identity documents or full contact details.
• Identity verification services: Where required for KYC compliance, a third-party document verification provider may receive copies of identity documents you submit. Such providers operate under strict contractual data processing agreements with 09ok.
• Fraud prevention and security providers: Specialist fraud detection platforms may receive behavioural, device, and IP data to assist with risk scoring and anti-fraud monitoring. These providers process data solely as directed by 09ok and may not use it for their own purposes.
• Legal and regulatory authorities: 09ok may be required by applicable law to disclose certain player data to law enforcement agencies, financial intelligence units, or regulatory bodies. In such cases, 09ok will disclose only the minimum data required to satisfy the legal obligation and will inform the player of any disclosure where legally permitted to do so.
• Professional advisors: Lawyers, auditors, and accountants retained by 09ok may access player data on a strictly need-to-know basis under professional obligations of confidentiality.

6 Payment Data & Financial Security

Financial data is treated with the highest level of protection at 09ok. The following specific practices apply to all payment-related personal data on the Platform:

• Full bank card numbers are never stored on 09ok's servers at any point. Card transactions are processed directly through PCI-DSS-compliant payment gateways. 09ok stores only a masked reference (last four digits and card type) to identify the payment method in your transaction history.
• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay numbers) are stored in encrypted form in 09ok's database. They are used solely to process withdrawal requests back to the same wallet and to verify deposit source matching.
• All financial data transmissions — including deposit initiation, withdrawal requests, and balance queries — are transmitted over 256-bit SSL/TLS encrypted connections. No financial data is transmitted over unencrypted channels under any circumstances.
• 09ok employs real-time transaction monitoring to detect unusual financial activity. Where a transaction pattern is flagged as potentially suspicious, the transaction may be held pending review. The affected player will be notified within 48 hours and given the opportunity to provide clarifying documentation.
• 09ok applies a strict name-matching policy: the name on your 09ok account must match the name on your payment method. Deposits from mismatched payment sources will be reversed and may trigger an account investigation.

7 Cookies & Tracking Technologies

09ok uses cookies and similar tracking technologies to operate the Platform, remember your session preferences, detect fraudulent activity, and analyse how the Platform is used. The following types of cookies are in use on the 09ok platform:

• Essential cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. The Platform cannot operate without these cookies. No consent is required for essential cookies.
• Functional cookies: Remember your language preference, display settings, and last-visited game category so that your experience is consistent across sessions. These cookies improve usability without tracking your behaviour across other websites.
• Analytics cookies: Used to measure aggregate platform usage — pages visited, session duration, bounce rates, and feature engagement. Analytics data is processed in aggregated, anonymised form. 09ok does not share analytics data with third-party advertising networks.
• Fraud prevention cookies: Used by 09ok's internal security systems to identify and block automated bots, detect multi-accounting behaviour, and flag suspicious login patterns. These cookies are essential for the security of the Platform and all players on it.

Most web browsers allow you to control cookies through the browser's settings. You may set your browser to refuse all cookies, to alert you when a cookie is being set, or to delete cookies after each session. Please note that disabling essential cookies will prevent you from logging into your 09ok account and using core Platform features.

09ok does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. The cookies described above are limited to operational and internal analytics purposes only.

8 Data Security

09ok implements a layered, defence-in-depth approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and 09ok's servers is encrypted using TLS 1.2 or higher with 256-bit key strength. HTTP connections are automatically redirected to HTTPS at the network perimeter.
• Encryption at rest: All personal data stored in 09ok's databases — including identity records, contact details, and financial references — is encrypted at rest using AES-256 encryption.
• Access controls: Access to production systems containing player data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication. No employee has access to unencrypted payment credentials.
• Audit logging: All access to player data by internal staff is logged with timestamps, user identifiers, and the reason for access. Audit logs are reviewed regularly as part of 09ok's internal compliance programme.
• Penetration testing: 09ok engages independent security specialists to conduct regular penetration testing of the Platform. Findings are remediated according to a risk-based prioritisation framework.
• Incident response: In the event of a confirmed personal data breach, 09ok will notify affected players within 72 hours of becoming aware of the breach, including details of the data affected, the likely consequences, and the remedial measures taken.

While 09ok takes every reasonable precaution to protect your data, no internet-based system is entirely free from the risk of unauthorised access. Players are advised to use strong, unique passwords for their 09ok accounts and to enable any additional account security features offered by the Platform.

9 Data Retention Periods

09ok retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal obligations. The following retention periods apply to the main categories of data held by 09ok:

Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with 09ok's internal data disposal procedures. Anonymised statistical data (from which no individual can be identified) may be retained indefinitely for the purposes of platform analysis and business reporting.

10 Your Data Rights

As a player on the 09ok platform, you hold the following rights in relation to your personal data. These rights can be exercised at any time by contacting the 09ok support team via live chat or email at [email protected]:

• Right of Access: You have the right to request a copy of all personal data that 09ok holds about you. 09ok will provide this in a structured, readable format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data 09ok holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most contact information directly through your account profile settings.
• Right to Erasure ("Right to be Forgotten"): You may request that 09ok delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to the processing. This right is subject to override by legal retention obligations — for example, transaction records required for AML compliance cannot be deleted before the mandatory retention period expires.
• Right to Restriction: You may request that 09ok restrict the processing of your data in certain circumstances — for example, while you are contesting the accuracy of your data, or pending the outcome of an objection you have raised.
• Right to Data Portability: You may request that 09ok provide your personal data in a structured, machine-readable format (CSV or JSON) so that you can transfer it to another service provider of your choice.
• Right to Object: You have the right to object to the processing of your data where 09ok relies on legitimate interest as the legal basis for that processing. You may also object at any time to the processing of your data for direct marketing purposes, with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

09ok will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further 60 days, in which case 09ok will notify you of the extension and the reason for it within the initial 30-day period.

11 Children & Minors

The 09ok platform is strictly for adults aged 21 and above. 09ok does not knowingly collect, store, or process personal data from any individual under the age of 21. The Platform is not designed for, directed at, or intended to be used by anyone under 21 years of age.

If 09ok discovers or is notified that personal data has been submitted by an individual under the age of 21, that data will be deleted immediately and the associated account will be permanently closed. Any winnings accrued on an account held by an underage individual will be forfeited in accordance with 09ok's Terms & Conditions.

12 Third-Party Links

The 09ok platform does not contain links to external third-party websites for browsing or commercial purposes. All links on the Platform are internal navigation links pointing to pages within the 09ok domain (https://09ok.im). As such, the risk of inadvertent data exposure through third-party links is minimised by design.

Where 09ok integrates third-party technology directly into the Platform — such as live casino game feeds from Evolution Gaming or Ezugi, slot game engines from Pragmatic Play or Microgaming, or payment processing interfaces from bKash and Nagad — these integrations involve data exchanges governed by the contractual data processing agreements between 09ok and those providers. 09ok is not responsible for the privacy practices of third-party technology providers operating within their own systems outside the 09ok Platform environment.

13 Policy Updates

09ok reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, new purposes for processing, or new third-party recipients — 09ok will notify all registered players via email to their registered address and display a prominent notice on the Platform for a minimum of 30 days following the change.

The Effective Date displayed at the top of this Policy will be updated each time a new version is published. The version of the Policy with the most recent Effective Date is the version currently in force. Older versions of the Policy are available on request by contacting the 09ok support team.

Your continued use of the 09ok Platform following a notified update to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and contact support to close your account before the revised Policy takes effect.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 09ok handles your personal data, please contact the 09ok support team using the details below. All privacy-related enquiries are handled by a dedicated member of our compliance team.

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing
• Live Chat: Available 24 hours a day, 7 days a week, directly on the 09ok platform
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Email responses within 2 business days; live chat responses under 3 minutes on average

09ok is committed to resolving all privacy-related enquiries promptly and fairly. If you are not satisfied with our response to a privacy concern, you may escalate the matter through any applicable consumer protection or data rights mechanism available to you under the laws of Bangladesh.