ok66 Privacy Policy

1 Introduction

ok66 ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers with, or uses the ok66 platform at https://ok66.bar. This Privacy Policy sets out in clear terms what personal information we collect, the purposes for which we use it, the circumstances under which it may be disclosed to third parties, and the rights available to you as a data subject.

This Privacy Policy applies to all players registered on ok66, all visitors to the ok66 website, and any individual who contacts ok66 through any channel including email, live chat, or customer support. It covers all services offered through the ok66 platform including sports betting, live casino, slots, Lucky Bingo, swimming betting, and any future products or features introduced on the platform.

By registering an account on ok66 or by continuing to use the platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. This Privacy Policy should be read alongside the ok66 Terms & Conditions and the Responsible Gaming policy, which together form the complete agreement between you and ok66.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the ok66 platform is the ok66 operating entity. As an offshore platform, ok66 is incorporated and operates outside Bangladesh. All data protection enquiries, access requests, correction requests, and deletion requests should be directed to the ok66 data protection contact at [email protected].

ok66 has appointed an internal data protection point of contact who is responsible for overseeing compliance with this Privacy Policy and for handling data subject requests. This individual can be reached through the same support email address above. ok66 will make reasonable efforts to respond to all data-related enquiries within thirty (30) calendar days of receipt.

3 Personal Data We Collect

ok66 collects only the personal data that is strictly necessary to provide a safe, fair, and legally compliant gaming service. The categories of personal data we collect include the following:

ok66 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless you voluntarily disclose such information in a support communication, in which case it is treated with the highest level of confidentiality and is not processed for any purpose other than resolving your specific enquiry.

4 How We Collect Personal Data

ok66 collects personal data through the following channels and mechanisms:

• Direct submission by you: Information you provide when completing the registration form, submitting a KYC verification request, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated technical collection: Technical and usage data collected automatically by our web servers and analytics systems each time you access the platform, including data gathered via cookies and similar tracking technologies (see Section 9 for full details).
• Payment processors: Confirmation data returned by payment providers such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank following a transaction. This includes transaction reference numbers, status codes, and timestamps — not your full payment credentials, which are processed and held by the payment provider directly.
• Identity verification partners: Where ok66 uses a third-party identity verification service to assist with KYC document checks, that partner may return verification status data to ok66 indicating whether a submitted document is valid. ok66 does not receive raw biometric data from these partners.
• Fraud and security monitoring systems: Automated systems that monitor platform activity for indicators of fraud, money laundering, multi-accounting, or other prohibited conduct may generate data points associated with your account as a by-product of routine monitoring.

5 Purpose & Legal Basis for Processing

ok66 processes personal data only where there is a clear, documented purpose and a legitimate legal basis for doing so. The table below sets out the primary purposes for which ok66 processes personal data and the corresponding legal basis for each:

ok66 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, other than fraud and multi-accounting detection systems that may flag an account for human review. Any account action arising from such a flag is ultimately reviewed and decided by an authorised ok66 team member.

6 Disclosure & Data Sharing

ok66 does not sell, rent, or otherwise commercially disclose your personal data to third parties. Personal data may be shared with the following categories of recipients only where necessary and proportionate to the purposes outlined in Section 5:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive only the transaction data necessary to process your deposit or withdrawal request. These partners operate under their own privacy policies and data security obligations.
• Identity verification service providers: Third-party KYC and anti-fraud service providers who assist ok66 in verifying player identity documents and confirming age eligibility. These providers are contractually bound to process data only for the purposes specified by ok66 and to maintain appropriate data security standards.
• IT infrastructure and hosting providers: Cloud hosting and data centre providers who store ok66's platform data on secure, encrypted servers. All hosting providers are bound by data processing agreements that restrict their use of your data to storage and infrastructure services only.
• Legal, regulatory, and law-enforcement authorities: ok66 may be required by law, court order, or competent regulatory authority to disclose personal data relating to a player. ok66 will comply with such requirements to the extent legally mandated and will notify the affected player where legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and compliance advisers engaged by ok66 on a confidential basis may have access to personal data where necessary to provide their professional services to ok66.

All third parties to whom ok66 discloses personal data are required to maintain the confidentiality of that data and to process it only in accordance with ok66's documented instructions. ok66 does not permit third-party service providers to use your personal data for their own independent marketing, analytics, or commercial purposes.

7 International Data Transfers

ok66 operates as an offshore platform and its server infrastructure may be located in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to and stored in countries that have different data protection laws from those in your country of residence.

Where personal data is transferred internationally, ok66 takes reasonable steps to ensure that an adequate level of protection is maintained for your data throughout the transfer and storage process. These steps include contractual obligations imposed on receiving entities, encryption of data in transit and at rest, and access controls limiting who may view or process your data in the destination jurisdiction.

By registering an account on ok66, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh where ok66's operational infrastructure is located, subject to the protections described in this section.

8 Data Retention

ok66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, anti-money laundering, or dispute-resolution obligations. The following general retention periods apply:

• Active account data (identity, contact, financial, and account data): Retained throughout the period your account remains active on ok66.
• Closed account data: Following account closure, ok66 retains identity, transaction, and KYC documentation records for a minimum of five (5) years to comply with anti-money laundering and fraud-prevention record-keeping requirements. This retention period may be extended where an active investigation, dispute, or legal proceeding is ongoing.
• Communications data (support chat logs, emails): Retained for two (2) years from the date of the last communication, after which they are archived or deleted.
• Technical and usage data: Retained in identifiable form for up to twelve (12) months from collection, after which it is anonymised for aggregated platform analytics or permanently deleted.
• Self-exclusion records: Where a player has self-excluded from ok66, a record of the self-exclusion is retained indefinitely to prevent re-registration in breach of the exclusion period, even if all other account data has been deleted.

Once the applicable retention period expires, ok66 will securely delete or permanently anonymise your personal data in a manner that prevents reconstruction of the original information.

9 Cookies & Tracking Technologies

ok66 uses cookies and similar client-side tracking technologies to provide a functional, secure, and personalised platform experience. A cookie is a small data file placed on your device by a web server when you visit the platform. ok66 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential to the operation of the ok66 platform and cannot be disabled without impairing platform functionality. They include session management cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and load-balancing cookies that route your connection to the correct server.
• Functional Cookies: These cookies remember your preferences such as your chosen language setting, preferred game categories, and notification preferences. They improve your experience by saving settings between visits so you do not need to re-enter them each time.
• Analytical Cookies: ok66 uses internal analytics tools that set cookies to collect aggregated, anonymised data about how players navigate and use the platform. This data helps ok66 identify performance bottlenecks, popular features, and areas where the platform experience can be improved. Analytics cookies do not identify you personally.

ok66 does not use third-party advertising cookies, retargeting cookies, or any cookies that track your activity across websites other than https://ok66.bar. You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect platform functionality and may prevent you from logging in or completing transactions.

10 Security Measures

ok66 implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our core security measures include the following:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ok66 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that data in transit cannot be intercepted or read by unauthorised parties.
• Encrypted Data Storage: Personal and financial data stored on ok66 servers is encrypted at rest. Encryption keys are managed through a secure key management system with strict access controls.
• Access Controls: Access to player personal data within ok66's internal systems is restricted to authorised personnel only, on a need-to-know basis. Access is authenticated via multi-factor authentication and is logged for audit purposes.
• Intrusion Detection and Monitoring: ok66's infrastructure is monitored continuously for signs of unauthorised access, unusual activity, or security incidents. Automated alerts are configured to notify the security team of potential threats in real time.
• Password Security: Player passwords are never stored in plain text. All passwords are hashed using a strong one-way cryptographic algorithm before storage. ok66 support staff cannot view your password and will never ask you to reveal it.
• Regular Security Reviews: ok66 conducts periodic internal security reviews and vulnerability assessments to identify and address potential weaknesses in the platform's security posture before they can be exploited.

While ok66 takes comprehensive steps to protect your personal data, no system connected to the internet is entirely immune from risk. Players are strongly advised to use a strong, unique password for their ok66 account, to enable two-factor authentication where available, and to ensure that their own device and network are secure. If you suspect your account security has been compromised, contact ok66 support immediately at [email protected].

11 Your Data Rights

As a player on ok66, you hold the following rights in relation to your personal data. These rights may be exercised at any time by submitting a written request to [email protected] with the subject line "Data Rights Request" and your registered account username:

• Right of Access: You have the right to request a copy of all personal data that ok66 holds about you. ok66 will provide this data in a structured, commonly used electronic format within thirty (30) calendar days of receiving a verified request.
• Right to Rectification: If any personal data held by ok66 about you is inaccurate, incomplete, or out of date, you have the right to request that it be corrected. You may update basic contact and preference information directly through your account settings dashboard. For identity and financial data corrections, please contact support.
• Right to Erasure ("Right to Be Forgotten"): You may request that ok66 delete your personal data. Please note that this right is subject to ok66's legal retention obligations — we are required by anti-money laundering regulations to retain transaction and identity records for a minimum of five years following account closure, and we cannot delete self-exclusion records during an active exclusion period.
• Right to Restriction of Processing: You may request that ok66 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being investigated or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where ok66 processes your personal data on the basis of contract or consent, you have the right to receive that data in a machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to ok66 processing your personal data on the basis of legitimate interest, including profiling for fraud-prevention purposes. ok66 will assess such objections on a case-by-case basis, balancing your interests against ok66's legal and operational obligations.
• Right to Withdraw Consent: Where ok66 processes your personal data on the basis of your consent (for example, to receive promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before the withdrawal.

12 Minors & Age Verification

ok66 is strictly a 21+ platform. The collection or processing of personal data from individuals under the age of 21 is not permitted under any circumstances. ok66 employs age verification checks during the registration process and as part of the KYC documentation review to enforce this requirement.

If ok66 becomes aware that personal data has been submitted by or on behalf of an individual under the age of 21, we will immediately suspend the associated account, delete all personal data submitted by the underage individual, and return any funds deposited to the payment method from which they originated, pending the outcome of an identity review.

Parents and guardians who believe a minor may have registered on ok66 are strongly encouraged to contact us immediately at [email protected] so that the account can be closed and all associated data permanently removed. ok66 will treat such reports as a priority and will respond within twenty-four (24) hours.

13 Third-Party Links & Services

The ok66 platform may contain references to third-party payment providers such as bKash, Nagad, and Rocket. Interactions with these payment platforms — including logging into your mobile banking app to authorise a transaction — are governed by the respective privacy policies of those third-party providers. ok66 is not responsible for the privacy practices or data security of third-party platforms.

ok66's game content is provided under licence by third-party game studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These game studios may collect limited technical data (such as your device type and session information) as part of normal game operation. Such data collection is governed by the game studios' own privacy documentation. ok66 does not share your identity or financial data with game studios.

Players are advised to review the privacy policies of any third-party service they interact with in connection with their ok66 account, as ok66 cannot accept responsibility for third-party data practices.

14 Updates to This Privacy Policy

ok66 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform services. When a material change is made to this Privacy Policy, ok66 will provide advance notice to registered players via the email address on file and/or by displaying a prominent notice on the platform for a period of no less than seven (7) days prior to the updated policy taking effect.

The version of this Privacy Policy currently published at https://ok66.bar/privacy-policy is the definitive and current version governing the relationship between ok66 and all registered players. The effective date at the top of this document reflects when the current version was last reviewed and updated. Players who do not accept the terms of a revised Privacy Policy should contact ok66 support to arrange account closure before the revised policy takes effect.

ok66 recommends that all players review this Privacy Policy periodically to remain informed about how their personal data is being handled. Previous versions of this Privacy Policy are available upon written request to [email protected].

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to ok66's handling of your personal data, please contact the ok66 data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed to the correct team.
• Response Time: ok66 aims to respond to all privacy-related enquiries within 30 calendar days. Urgent data security matters such as suspected unauthorised account access will be treated as priority and responded to within 24 hours.
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).

ok66 does not provide a telephone line for privacy enquiries. All formal data rights requests must be submitted in writing via email to ensure a clear audit trail and to allow ok66 to verify the identity of the requesting party before processing the request.