96ok Privacy Policy — How We Collect, Use, and Protect Your Data

96ok operates an online casino and sports betting platform accessible at https://96ok.io, serving players primarily based in Bangladesh. In the course of providing our services, we collect and process certain personal data about our players. We recognise that your personal information is sensitive and we take our responsibilities as a data controller seriously.

This Privacy Policy sets out, in clear and accessible language, precisely what personal data 96ok collects, the purposes for which it is processed, the legal grounds that justify that processing, how long we retain it, and the rights you may exercise in respect of your personal data at any time. This policy should be read together with the 96ok Terms & Conditions, which are incorporated by reference.

96ok is committed to processing personal data in a manner that is lawful, fair, and transparent. We do not engage in practices designed to obscure how your data is used, and we will never use your personal information in ways that you would not reasonably expect.

96ok collects the following categories of personal data in connection with the operation of the platform and the provision of its services:

96ok collects personal data through the following channels and mechanisms:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, participate in a promotion, or update your account profile, you provide us with personal data directly.
• Automatically during platform use: When you access and interact with the 96ok platform, our servers automatically record technical data including your IP address, session timestamps, pages visited, game interactions, and device information. This data is collected via server logs, cookies, and similar tracking technologies (see Section 6 for full details on our use of cookies).
• From payment providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, City Bank, or BRAC Bank, the payment provider shares transaction confirmation data with 96ok to enable crediting of your account balance. We receive only the data necessary to confirm and record the transaction.
• From KYC and identity verification partners: Where we engage a regulated third-party verification service to confirm your identity, that partner may return verification outcomes, risk scores, or document authentication results to 96ok. We do not receive raw document data beyond what is strictly necessary for compliance purposes.
• From fraud prevention and analytics services: We may receive aggregated or pseudonymised data from third-party fraud detection and analytics partners that helps us identify unusual betting patterns, potential multi-accounting, or security risks on the platform.

96ok processes your personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual necessity: The majority of data processing carried out by 96ok is necessary to perform the contract between us — that is, to operate your account, process deposits and withdrawals, record game activity, and deliver the services you have signed up for. Without this processing, we could not provide the platform services.
• Legal obligation: 96ok is required to retain certain categories of data — particularly identity, financial transaction, and KYC records — to comply with anti-money-laundering (AML) obligations and other applicable regulatory requirements. This processing is mandatory and cannot be opted out of.
• Legitimate interests: 96ok processes certain technical and behavioural data under its legitimate interest in operating a secure platform, preventing fraud, detecting multi-accounting, ensuring platform stability, and improving game performance. We have assessed that these legitimate interests are not outweighed by the privacy interests of our players.
• Consent: Where we send you promotional communications about bonuses, new games, or seasonal offers — such as Eid promotions or BPL betting markets — we do so only where you have given your explicit consent. You may withdraw this consent at any time by contacting support or updating your communication preferences in your account settings.

The personal data collected by 96ok is used for the following specific and documented purposes:

• To create, verify, manage, and maintain your player account, including processing your registration details and keeping your profile information up to date.
• To process deposits and withdrawals via your chosen payment method, reconcile transaction records, and maintain an accurate account balance history.
• To conduct identity verification (KYC) checks as required to confirm your age, identity, and place of residence, and to meet our anti-money-laundering compliance obligations.
• To detect, investigate, and prevent fraudulent activity, including the use of multiple accounts, bonus abuse, money laundering, and any other conduct that violates our Terms & Conditions.
• To administer responsible gaming tools on your account, including deposit limits, loss limits, session reminders, and self-exclusion periods, in accordance with your instructions.
• To provide player support through our live chat and email channels, including recording and reviewing support interactions to improve service quality.
• To send you transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — that are necessary for the operation of your account.
• To send you promotional communications about bonuses, new game releases, and seasonal offers, where you have consented to receive such communications.
• To analyse aggregated, anonymised platform usage data for the purposes of improving game selection, user experience, and platform performance.
• To comply with any legal or regulatory obligation to which 96ok is subject, including responding to lawful requests from competent authorities.

96ok uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate and improve the platform. A cookie is a small text file placed on your device by your web browser when you visit a website. Cookies allow the platform to remember your preferences, maintain your logged-in session, and understand how different areas of the site are used.

The cookies used by 96ok fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your session authentication, remember your account state between pages, and enable security features such as CSRF protection. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming configuration — so that you do not need to re-enter them on each visit.
• Analytics cookies: 96ok uses pseudonymised analytics data to understand which pages are visited most frequently, how players navigate between games, and where technical issues occur. This data is aggregated and does not identify individual players by name.
• Security and fraud-prevention cookies: These cookies help 96ok identify unusual behaviour patterns — such as login attempts from multiple geographic locations — that may indicate a security threat or attempted account takeover.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair or prevent your ability to use the 96ok platform. Blocking analytics or functional cookies will not affect your access but may reduce the quality of your experience. Please refer to your browser's help documentation for guidance on managing cookies.

96ok does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their independent commercial purposes. Personal data is shared with third parties only in the following limited and documented circumstances:

• Payment processors: Transactional data is shared with bKash, Nagad, Rocket, Upay, City Bank, and BRAC Bank solely to the extent necessary to process your deposit and withdrawal requests. Each of these providers operates under its own privacy and data security obligations.
• KYC and identity verification providers: Your identity documents and personal details may be shared with our regulated KYC partner to complete the identity verification process required for account activation and withdrawal authorisation.
• Fraud prevention and security services: Pseudonymised technical data — including device fingerprints, IP addresses, and behavioural patterns — may be shared with fraud prevention service providers to help identify and prevent fraudulent activity on the platform.
• Game providers: Technical session data is shared with game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi in real time as part of the game operation process. This data includes your account identifier, bet amounts, and game outcomes. It does not include your full identity details unless required for the provider's own regulatory compliance.
• Legal and regulatory authorities: 96ok will disclose personal data to competent legal or regulatory authorities where required to do so by applicable law, court order, or regulatory directive. We will, where legally permitted, notify you of such disclosure.

96ok retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply to the principal categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where anonymisation is not technically feasible, data is destroyed using secure erasure methods.

As a data subject whose personal information is processed by 96ok, you hold the following rights. These rights are not absolute and are subject to applicable legal limitations, but 96ok will honour all valid requests promptly and transparently.

96ok will respond to all valid data subject requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your rights unless requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply.

To submit any of the requests listed above, please email [email protected] (plain text — not a clickable link) with the relevant subject line. You will be required to verify your identity before the request is processed, to ensure that data is not disclosed or modified in response to unauthorised requests.

96ok implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to, the following measures:

• Transport Layer Security (TLS): All data transmitted between your browser or app and the 96ok platform is encrypted in transit using TLS 1.2 or higher. Our servers are configured to reject connections using outdated, insecure protocol versions.
• Data encryption at rest: Sensitive data fields — including hashed passwords, identity document references, and financial transaction records — are encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within 96ok's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required for their role. All access to sensitive data is logged and subject to periodic audit.
• Password hashing: Player account passwords are stored as salted cryptographic hashes. 96ok staff cannot read or recover your password in plain text. If you forget your password, a reset link is issued rather than the original password being disclosed.
• Intrusion detection and monitoring: Our infrastructure is monitored around the clock for signs of unusual activity, potential intrusion attempts, and data exfiltration patterns. Automated alerts trigger immediate investigation by our security team.
• Third-party security assessments: 96ok engages independent security professionals to conduct periodic vulnerability assessments and penetration testing of the platform infrastructure.

If 96ok discovers or is notified that personal data has been collected from an individual who is under the age of 21, we will take immediate steps to delete that data from our systems, close the associated account, and return any funds deposited by that account to the payment method used for the initial deposit, subject to our verification processes.

Parents and guardians who are concerned that a minor may have registered on the 96ok platform or accessed its services should contact the support team immediately at [email protected]. We take all such reports seriously and will investigate and act promptly. We strongly encourage parents and guardians in Bangladesh to use parental control software to restrict access to gambling platforms on shared or family devices.

96ok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or operational developments on the platform. The "Last Updated" date at the top of this document will be revised each time a material change is made.

Where changes are material — meaning they substantially affect your privacy rights or how your data is used — 96ok will provide advance notice of the changes by publishing a prominent notice on the platform homepage or by sending an email notification to your registered address at least 7 days before the revised policy takes effect.

For minor, non-material amendments — such as clarifications of existing language, corrections to typographical errors, or updates to contact information — changes may take effect immediately upon posting without prior notice. We encourage you to review this Privacy Policy periodically to remain informed of how 96ok protects your data.

Your continued use of the 96ok platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised policy, you should cease using the platform and may contact support to request account closure and withdrawal of your available balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 96ok processes your personal data, please do not hesitate to get in touch with our dedicated privacy support team. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

You may contact us by email at: [email protected]

Please include your registered account username or email address in your message so that we can identify your account and respond accurately. For formal data subject rights requests, please refer to the subject line conventions listed in Section 9 above.

Our support team is available 24 hours a day, 7 days a week, and operates in English. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 5 business days of receipt, except where a request triggers the full 30-day response window described in Section 9.