ok678 Privacy Policy

1. Who We Are and How to Contact Us

ok678 operates the online casino and sports betting platform available at ok678.club. ok678 is the data controller for all personal data collected through this website. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us at: [email protected]. We aim to respond to all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6).

ok678 takes its obligations as a data controller seriously. We have implemented technical and organisational measures to ensure that personal data is processed lawfully, fairly, and transparently. All staff members and third-party processors who handle personal data on behalf of ok678 are bound by confidentiality obligations and data-handling standards consistent with this Privacy Policy.

2. Personal Data We Collect

ok678 collects personal data through your registration, account activity, payment transactions, and your general use of the platform. The categories of personal data we collect include:

• Identity data: your full name, date of birth, and copies of identity documents submitted for KYC verification.
• Contact data: your mobile phone number and email address as provided at registration or subsequently updated in your account settings.
• Financial data: transaction records including deposit amounts, withdrawal requests, bonus usage, and the identifiers of payment methods used, such as bKash, Nagad, Rocket, or Upay accounts.
• Technical data: your IP address, device type, operating system, browser type, and session timestamps collected automatically when you access ok678.
• Usage data: your betting history, game activity, session duration, pages visited within ok678, and interactions with promotions or bonus offers.
• Communications data: records of messages sent between you and ok678 support, including emails, live chat transcripts, and support ticket content.

3. How We Use Your Personal Data

ok678 processes your personal data only for specific, lawful purposes. We will never use your data for purposes incompatible with those stated at the time of collection. The primary purposes for which we process personal data are:

• Account management: to create, maintain, and administer your ok678 account, including processing your deposits and withdrawals via bKash, Nagad, Rocket, and Upay.
• Identity verification: to fulfil our KYC obligations, confirm that players are aged 21 or over, and prevent duplicate account registration.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other prohibited activities.
• Service communications: to send you important service-related notifications such as deposit confirmations, withdrawal updates, account security alerts, and changes to our Terms or this Privacy Policy.
• Platform improvement: to analyse aggregated, anonymised usage data that helps us improve game performance, fix technical issues, and personalise your experience within ok678.

4. Legal Basis for Processing

ok678 processes personal data on the following legal bases: (a) Contract performance — processing necessary to provide the gaming and betting services you have requested, including account creation, bet settlement, and payment processing; (b) Legitimate interests — processing for fraud detection, security monitoring, and platform improvement, where those interests are not overridden by your privacy rights; (c) Legal obligation — processing required to comply with applicable law, such as anti-money laundering checks and age verification requirements; (d) Consent — where you have given explicit consent, for example to receive marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ok678 does not process any special categories of personal data (such as health data, racial or ethnic origin, or biometric data) in the ordinary course of providing its services. If such data is ever required for a specific lawful purpose, you will be notified and asked to provide explicit consent before processing begins.

5. Sharing Your Personal Data

ok678 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and only to the extent strictly necessary:

• Payment processors: we share transaction data with our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely to facilitate deposits and withdrawals on your account.
• Identity verification providers: we share identity documents and related data with third-party KYC service providers who are contractually bound to process such data solely for age and identity verification on behalf of ok678.
• Regulatory authorities and law enforcement: we may disclose personal data to government bodies, regulators, or law enforcement agencies where we are required to do so by applicable law or a valid legal order, including for anti-money laundering compliance and fraud investigation purposes.

All third parties with whom ok678 shares personal data are required to maintain appropriate security measures and to process personal data only for the specified purpose. ok678 does not permit third-party processors to use your personal data for their own commercial purposes or for any purpose beyond the specific task performed on ok678's behalf.

6. Data Retention

ok678 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data and transaction records are retained for a minimum of five years after account closure to meet anti-money laundering and financial record-keeping obligations. KYC documentation is retained for the period required by applicable identity verification regulations. Communications data is retained for up to three years after the relevant enquiry is resolved.

When personal data is no longer required, ok678 will securely delete or anonymise it in a manner that prevents reconstruction of the original data. Anonymised aggregated data that can no longer identify any individual may be retained indefinitely for statistical analysis and platform improvement purposes.

7. Cookies and Tracking Technologies

ok678 uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyse usage patterns to improve the service. The types of cookies we use are:

• Essential cookies: strictly necessary to deliver core platform functionality, including session authentication, bet slip management, and account security. These cannot be disabled without breaking core features.
• Analytics cookies: used to collect aggregated, anonymised data about how players use ok678, including which pages are visited most frequently and session lengths. This data helps us improve the platform experience.
• Functional cookies: used to remember your preferences such as language settings and display options, so you do not need to reconfigure them each time you visit.

You may disable non-essential cookies at any time through your browser settings. Note that disabling essential cookies will impair platform functionality and may prevent you from logging in or placing bets.

8. Your Privacy Rights

As a player and data subject, you have the following rights with respect to your personal data held by ok678. To exercise any of these rights, contact us at [email protected] with your full name, registered mobile number, and a description of your request. We will respond within 30 days.

• Right of access: you may request a copy of all personal data ok678 holds about you, along with information about how it is being processed.
• Right to rectification: if any personal data we hold is inaccurate or incomplete, you may request that it be corrected or completed. Identity and contact data corrections may require supporting documentation.
• Right to erasure: subject to our legal data-retention obligations, you may request that ok678 delete your personal data. Requests to erase data that ok678 is legally required to retain will be declined with an explanation.
• Right to restrict processing: you may request that ok678 temporarily suspend the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to object: you may object to the processing of your personal data where ok678 relies on legitimate interests as the legal basis. ok678 will assess your objection and cease processing unless there are compelling legitimate grounds that override your interests.

9. Data Security

ok678 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, access controls ensuring personal data is accessible only to authorised staff and systems, regular security reviews of the ok678 platform infrastructure, and secure disposal procedures for physical and digital records containing personal data.

While ok678 employs industry-standard security practices, no online platform can guarantee absolute security against all threats. In the event of a personal data breach likely to result in a risk to your rights and freedoms, ok678 will notify affected players without undue delay and take immediate steps to contain and remediate the breach. You can help protect your account by choosing a strong, unique password and never sharing your login credentials with any third party.

10. Marketing Communications

ok678 may send you promotional communications about bonuses, new games, and special offers via SMS or email, but only where you have provided consent to receive such communications. You may withdraw your consent and opt out of marketing communications at any time by:

• Using the unsubscribe link included in any marketing email sent by ok678.
• Updating your communication preferences directly within your ok678 account settings.
• Contacting ok678 support at [email protected] with a request to opt out of all marketing communications.

11. Changes to This Privacy Policy

ok678 reviews this Privacy Policy at least once per calendar year and whenever there is a material change in how we collect or process personal data. The effective date at the top of this page will be updated whenever a new version is published. Where a change is material, ok678 will notify registered players via SMS or email before the change takes effect, giving you the opportunity to review the updated policy and, where applicable, withdraw consent.

If you disagree with any material change to this Privacy Policy and do not wish to continue using ok678 under the revised terms, you may close your account by contacting support at [email protected]. Account closure does not affect ok678's right to retain personal data for the period required by applicable law.

12. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how ok678 has handled your personal data, please contact our support team at [email protected]. Please include your full name, registered mobile number, and a clear description of your enquiry so we can respond efficiently. We aim to acknowledge all privacy-related contacts within 24 hours and to provide a full response within 30 days (Bangladesh Standard Time, UTC+6).