ok777 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "ok777" refers to the online betting and casino platform accessible at ok777.bar and all associated sub-domains, mobile interfaces, and digital services.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, online identifiers, and factors specific to the physical, financial, or online identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, ok777.
• "Data Processor" means any third party that processes Personal Data on behalf of ok777 under a contractual data processing agreement.
• "Player" / "You" means any individual who accesses the ok777 platform or holds a registered account.
• "KYC" means Know Your Customer — the identity and age verification process applied by ok777 before processing any withdrawal or upon triggering of an internal risk threshold.
• "Consent" means any freely given, specific, informed, and unambiguous indication of agreement by which you signify acceptance of the processing of your Personal Data for a stated purpose.

2 Data Controller

2.1 Identity of the Controller. ok777, operating the platform at ok777.bar, acts as the Data Controller for all Personal Data collected through the platform. ok777 determines the purposes for which your data is collected and the means by which it is processed.

2.2 Contact. All data-related enquiries, access requests, correction requests, deletion requests, and complaints should be directed to the ok777 support team via live chat on the platform. Support is available 24 hours a day, 7 days a week, in English, at Bangladesh Standard Time (BST, UTC+6). The platform contact email address is [email protected] — please note that this email address must be used for written requests only and is not monitored for real-time support responses.

3 Data We Collect

3.1 Identity Data. When you register an account on ok777, we collect your full legal name, date of birth, nationality, and the details of any government-issued identity document you submit for KYC purposes (such as your National Identity Card, passport, or driving licence number and expiry date).

3.2 Contact Data. We collect your email address, mobile phone number, and, where provided, a physical address. These are used for account communications, OTP delivery for login security, and for reaching you in the event of account or security issues.

3.3 Financial Data. We collect the identifiers associated with the payment methods you use on ok777 — including bKash wallet numbers, Nagad account references, Rocket mobile banking numbers, Upay references, and bank account or card numbers where applicable. We do not store full payment card numbers or mobile banking PINs. Transaction amounts, timestamps, and settlement status are recorded for every deposit and withdrawal processed in BDT.

3.4 Technical Data. We automatically collect your IP address, device type and model, operating system version, browser type and version, screen resolution, time zone settings, and the referring URL from which you arrived at the ok777 platform. This data is collected through server logs and first-party cookies and is used for fraud detection, platform security, and performance monitoring.

3.5 Behavioural Data. We record your betting activity (markets bet on, stake amounts, odds accepted, settlement outcomes), gaming activity (games played, session duration, wagering volumes, game provider interactions), and navigation behaviour within the platform (pages visited, features used, time spent per section). This data informs responsible gaming monitoring, platform personalisation, and fraud detection algorithms.

3.6 Communications Data. Where you contact ok777 support via live chat or email, we retain records of those communications including the content of messages, timestamps, and the resolution status of any raised issue. These records are retained for service quality monitoring and dispute resolution purposes.

4 How We Collect Data

4.1 Directly from You. The majority of Personal Data ok777 holds about you is provided directly by you during the registration process, during KYC verification, when making deposits or withdrawal requests, when contacting support, and when updating your account preferences.

4.2 Automatically. Technical Data and Behavioural Data are collected automatically as you use the ok777 platform, through server-side logging, first-party session cookies, and analytics systems. This collection begins when you first visit the ok777 domain and continues for every subsequent authenticated session.

4.3 From Third Parties. ok777 may receive supplementary identity or fraud-risk information from third-party KYC verification providers, payment processors, and fraud intelligence services where this is necessary to complete identity verification or to assess the risk profile of a transaction. All such third-party data providers are vetted by ok777 and operate under contractual restrictions governing their data-sharing practices.

5 Legal Basis for Processing

ok777 processes your Personal Data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to create and maintain your account, process deposits and withdrawals, settle bets, and provide all platform services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, age verification obligations, and any lawful request from a competent authority.
• Legitimate interests: Processing necessary for fraud prevention, platform security monitoring, responsible gaming enforcement, service improvement analytics, and internal reporting — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, personalised promotions, and non-essential analytical cookies — where you have given clear, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

6.1 Account Operations. Your Identity Data, Contact Data, and Financial Data are used to register, maintain, and administer your ok777 account, including verifying your eligibility to play (21+ requirement), authenticating your login sessions, and enabling deposit and withdrawal processing in BDT via your chosen payment method.

6.2 KYC and Regulatory Compliance. ok777 processes Identity Data and Financial Data to comply with its Know Your Customer obligations. This includes verifying your name, age, and the source of funds used for deposits. ok777 will not process any withdrawal request from an account that has not completed the applicable level of KYC verification commensurate with that account's activity level.

6.3 Fraud and Security. Technical Data, Behavioural Data, and Financial Data are analysed by ok777's risk management systems to detect suspicious activity, prevent account takeover, identify bonus abuse patterns, and flag transactions that may indicate money laundering. Accounts that trigger risk flags will be subject to enhanced manual review and may be temporarily suspended pending investigation.

6.4 Responsible Gaming. ok777 uses Behavioural Data to monitor for indicators of problem gambling behaviour, including rapid escalation of stake amounts, extended continuous sessions, and patterns consistent with chasing losses. Players whose data triggers responsible gaming thresholds may receive automated notifications, account cooling-off interventions, or direct outreach from the ok777 support team.

6.5 Platform Personalisation. With your consent, ok777 uses Behavioural Data to personalise your platform experience, including displaying relevant cricket match markets (BPL, IPL, Bangladesh Tigers fixtures), surfacing slot game recommendations based on your historical preferences, and tailoring promotional offers to your betting interests.

6.6 Marketing Communications. Where you have opted in, ok777 will use your Contact Data to send you promotional emails and SMS messages about platform offers, new game releases, seasonal promotions (e.g., Eid, Victory Day, BPL season), and responsible gaming reminders. You may opt out of all marketing communications at any time by contacting support or using the unsubscribe mechanism provided in each communication.

6.7 Service Communications. Regardless of your marketing preferences, ok777 will use your Contact Data to send mandatory service communications including account verification emails, security alerts, withdrawal confirmations, and updates to these policies. These communications cannot be opted out of while your account remains active.

7 Data Sharing & Third Parties

7.1 Principle of Minimal Disclosure. ok777 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. Data is shared with third parties only to the extent strictly necessary to deliver the ok777 platform services, to comply with legal obligations, or to protect the legitimate interests of ok777 and its players.

7.2 Payment Processors. To facilitate BDT transactions, ok777 shares the minimum necessary financial identifiers with payment partners including bKash, Nagad, Rocket, Upay, and banking partners such as Dutch-Bangla Bank, BRAC Bank, and City Bank. These partners receive only the data required to execute the specific transaction and are prohibited from using that data for any other purpose.

7.3 Game Content Providers. ok777 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, a session token and account-level identifier are shared with the relevant provider to authenticate your session. Game providers do not receive your full name, contact details, or payment information.

7.4 KYC Verification Services. ok777 uses third-party identity verification services to automate the KYC process. These services receive the identity documents and personal details you submit during verification and return a verification result to ok777. KYC providers operate under strict data processing agreements and are required to delete submitted documents after the verification task is completed.

7.5 Fraud Prevention and AML Services. Transaction data and behavioural risk signals may be shared with specialist fraud prevention and anti-money laundering screening services. These services process data strictly to return a risk assessment to ok777 and do not retain your data beyond the period required to complete the assessment.

7.6 Legal Disclosure. ok777 may disclose Personal Data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, or where ok777 reasonably believes disclosure is necessary to prevent fraud, protect the safety of a person, or enforce these policies.

8 International Data Transfers

8.1 Cross-Border Processing. Some of ok777's third-party service providers operate servers or processing facilities outside of Bangladesh. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, ok777 implements appropriate safeguards including contractual data transfer agreements that impose data protection obligations equivalent to those described in this Privacy Policy.

8.2 Safeguards. All international data transfers by ok777 are conducted over encrypted channels (TLS 1.2 or higher). ok777 conducts due diligence on all international data processors before onboarding them and reviews their data security posture on an annual basis.

9 Data Retention

9.1 Active Accounts. ok777 retains all Personal Data associated with your account for the duration that your account remains active and open on the platform. Data retention during the active account period is necessary for the ongoing delivery of platform services and compliance with real-time regulatory obligations.

9.2 Closed Accounts. Following account closure — whether initiated by you or by ok777 — ok777 retains account records, KYC documentation, and transaction history for a minimum period of five years. This retention period is imposed by AML compliance requirements and is not waivable at your request prior to its expiry.

9.3 Marketing Data. Where you have consented to marketing communications, associated preference and engagement data is retained for 24 months from the date of your last active engagement with an ok777 marketing communication, or until you withdraw consent, whichever is sooner.

9.4 Support Communications. Records of live chat and email support interactions are retained for 36 months from the date of the interaction for quality assurance and dispute resolution purposes.

9.5 Deletion. Upon expiry of the applicable retention period, ok777 will securely delete or anonymise Personal Data so that it can no longer be linked to an identifiable individual. Anonymised aggregate data derived from player activity may be retained indefinitely for statistical and business analysis purposes.

10 Cookies & Tracking Technologies

10.1 Essential Cookies. ok777 places essential session cookies on your device when you log in to the platform. These cookies are strictly necessary to maintain your authenticated session, preserve your account settings across pages, and protect against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without preventing the platform from functioning correctly.

10.2 Analytical Cookies. With your consent, ok777 places first-party analytical cookies to collect aggregate data about how players navigate the platform. This data is used internally to identify usability issues, optimise page performance, and improve the overall player experience. Analytical cookies do not identify you personally; data collected is aggregated and anonymised before analysis.

10.3 No Third-Party Advertising Cookies. ok777 does not permit third-party advertising networks to place tracking cookies on the ok777 domain. No behavioural advertising profiles are built from your ok777 activity for use on external advertising platforms.

10.4 Managing Cookies. You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in to the ok777 platform and will interrupt your betting and gaming sessions. Instructions for managing cookies are available in the help documentation of your browser or device operating system.

11 Your Rights as a Data Subject

As an individual whose Personal Data is processed by ok777, you hold the following rights. To exercise any of these rights, contact ok777 support via live chat or email. ok777 will respond to all valid requests within 30 calendar days of receipt.

ok777 will not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive, in which case ok777 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision within 30 days.

12 Security Measures

12.1 Technical Safeguards. ok777 applies 256-bit SSL/TLS encryption to all data transmissions between your device and the ok777 platform. Personal Data stored within ok777's systems is encrypted at rest using AES-256 encryption. Access to production databases containing Personal Data is restricted to a small number of authorised personnel and requires multi-factor authentication.

12.2 Organisational Safeguards. ok777 maintains internal data handling policies that restrict access to Personal Data on a strict need-to-know basis. All team members with access to Personal Data are subject to confidentiality obligations and receive regular data protection training. ok777 conducts periodic security audits and penetration tests to identify and remediate potential vulnerabilities in the platform.

12.3 Incident Response. In the event of a data security incident that poses a risk to your Personal Data, ok777 will assess the breach within 72 hours of becoming aware of it and will notify affected players without undue delay where the breach is likely to result in a high risk to their rights and freedoms. Notifications will include the nature of the incident, the data categories affected, and the steps ok777 is taking to address the breach.

12.4 Your Responsibility. While ok777 implements robust security measures at the platform level, you are responsible for maintaining the security of your own device, browser, and ok777 login credentials. ok777 strongly recommends using a unique, complex password for your ok777 account and enabling two-factor authentication (2FA) from within your account security settings.

13 Children & Minors

13.1 Age Restriction. ok777 is strictly an adults-only platform. Access is limited to individuals aged 21 years and above. ok777 does not knowingly collect Personal Data from any individual under the age of 21. Age is verified as part of the registration process through mandatory age declaration, and may be further verified through KYC documentation at any point during the account lifecycle.

13.2 Discovery of Underage Accounts. If ok777 becomes aware that Personal Data has been collected from an individual who was under 21 years of age at the time of registration, ok777 will immediately suspend the account, void all bets placed, return any deposited funds to the verified payment source, and permanently delete all Personal Data associated with that account as soon as the return of funds has been completed.

13.3 Parental Awareness. ok777 encourages parents and guardians to use parental control software to prevent minors from accessing online gambling platforms. If you believe a minor in your care has registered an account on ok777, please contact ok777 support immediately via live chat so the account can be suspended and investigated without delay.

14 Changes to This Policy

14.1 Right to Update. ok777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform practices, applicable law, or operational requirements. The "Effective Date" displayed at the top of this page indicates when the current version took effect.

14.2 Notification of Changes. Where changes to this Privacy Policy are material — meaning they substantially affect how your data is used or your rights as a data subject — ok777 will notify registered players via the email address on file at least 14 days before the updated policy takes effect. For non-material updates (such as minor clarifications of existing practices), ok777 will update the Effective Date without separate notification.

14.3 Continued Use. Your continued use of the ok777 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement and acceptance of the revised policy. If you do not agree with any update, you should cease using the platform and contact support to request account closure.

15 Contact & Complaints

15.1 Contact ok777. For all data-related enquiries, subject access requests, complaints regarding data handling, or requests to exercise any of the rights described in Section 11, please contact the ok777 support team via live chat available 24/7 on the platform. For written requests, you may also use the platform email address: [email protected]. Please note that email responses may take up to 48 hours during peak periods.

15.2 Response Timeframe. ok777 commits to acknowledging all data-related requests within 5 business days of receipt and to providing a full response within 30 calendar days. Where a request is particularly complex or where a large volume of requests has been received simultaneously, ok777 may extend the response period by a further 30 days, in which case you will be notified of the extension and the reason for it within the initial 30-day window.

15.3 Complaints. If you are dissatisfied with how ok777 has handled your Personal Data or responded to a data subject request, you have the right to lodge a formal complaint with ok777 by contacting support in writing. ok777 will investigate all formal complaints and provide a written outcome within 30 days. If you remain dissatisfied following ok777's response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.