koktk Privacy Policy — How We Handle Your Data

When you register and use koktk, we may collect the following categories of personal data:

• Registration data: full name, date of birth, email address, and mobile number provided when creating your account.
• Identity verification documents: national ID card, passport, or other government-issued documents submitted in response to KYC requests.
• Transaction records: deposit and withdrawal history, amounts, timestamps, and the mobile banking accounts used for each transaction.
• Gameplay and activity data: game history, betting activity, session duration, and responsible gaming tool usage.
• Technical and device data: IP address, browser type, device type, operating system, and session logs collected automatically when you access the Platform.

koktk uses the personal data we collect solely for legitimate operational purposes related to providing and improving our gaming platform. Specifically, we use your data for:

• Account creation and management: verifying your identity, activating your account, and communicating important account-related updates.
• Payment processing: facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and maintaining transaction records as required by applicable regulations.
• Fraud prevention and platform security: detecting, investigating, and preventing fraud, money laundering, and other prohibited activities on the Platform.
• Service improvement: analysing aggregated and anonymised usage data to understand how players interact with the Platform and to improve its design, features, and performance.

koktk processes your personal data on one or more of the following legal bases: (a) the performance of a contract — processing that is necessary to provide the gaming services you have requested by registering on the Platform; (b) legal obligation — processing required to comply with applicable anti-money laundering, know-your-customer, and responsible gaming regulations; (c) legitimate interests — processing that is necessary for koktk's legitimate business interests, including fraud prevention, platform security, and service improvement, provided that those interests are not overridden by your own data protection rights; and (d) consent — where you have given clear, specific consent for a particular processing activity, such as receiving promotional communications.

Where your personal data is processed on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal. Withdrawal of consent may affect your ability to use certain features of the Platform, such as receiving bonus offers and promotional notifications. You can manage your communication preferences at any time from within your account settings or by contacting support.

koktk does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we may share your personal data with carefully selected third parties in the following limited circumstances:

• Payment service providers: mobile banking operators such as bKash, Nagad, Rocket, and Upay, solely for the purpose of processing your deposit and withdrawal transactions.
• Identity and KYC verification partners: third-party services used to verify the identity and age of players as required by responsible gaming and anti-fraud obligations.
• Game software providers: licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, and others who provide the games available on koktk may receive anonymised gameplay data for game performance monitoring purposes.
• Legal and regulatory authorities: where koktk is required by law or regulation to disclose personal data to government bodies, law enforcement agencies, or regulatory authorities, we will comply with such requirements.

koktk uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, and improve your experience. Cookies are small data files stored on your device. The types of cookies used by koktk include: essential cookies that are necessary for the Platform to function correctly; performance cookies that collect anonymous data about how visitors use the Platform to help us improve its design and functionality; and functional cookies that remember your account preferences and game settings to deliver a more personalised experience.

Most web browsers accept cookies automatically. You can configure your browser to refuse cookies or to alert you when cookies are being sent. However, if you disable essential cookies, some features of the koktk Platform may not function correctly. By continuing to use the Platform after being notified of our cookie practices, you consent to the use of cookies as described in this Policy.

koktk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and operational requirements. The following general retention principles apply:

• Active account data is retained for the duration of your account's active status and for a minimum of five years after account closure to satisfy regulatory record-keeping obligations.
• Financial transaction records are retained for a minimum of seven years to comply with applicable financial regulations and anti-money laundering requirements.
• Where data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with koktk's internal data lifecycle management procedures.

koktk implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data transmitted between your device and our servers, restricted staff access to personal data on a need-to-know basis, regular security reviews of our systems and infrastructure, and secure storage of all personal data on protected servers. While we take commercially reasonable steps to safeguard your data, no method of transmission over the internet or method of electronic storage is completely secure. In the unlikely event of a data breach that may affect your rights or freedoms, koktk will notify affected users in accordance with applicable data protection requirements.

koktk staff members who have access to personal data are bound by confidentiality obligations and receive data protection awareness training. Access to player data is logged and audited periodically to ensure that it is accessed only for legitimate, authorised purposes. Any staff member found to have accessed or disclosed personal data in an unauthorised manner is subject to disciplinary action.

The koktk Platform is strictly intended for adults aged 21 years and above. koktk does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on koktk or that we may hold personal data relating to a minor, please contact us immediately at [email protected]. The following measures are in place to prevent underage use:

• Age declaration is required at registration: all players must confirm they are 21 or older before an account can be created.
• Age verification documents may be requested at any stage to confirm that the account holder meets the minimum age requirement.
• Accounts where age verification cannot be satisfactorily completed will be suspended pending resolution, with all funds held in escrow until the matter is resolved.

koktk primarily processes and stores personal data within secure server infrastructure. In some cases, personal data may be transferred to or accessed from locations outside Bangladesh — for example, when third-party service providers (such as game studios or technical support partners) are located in other countries. Where such transfers occur, koktk takes appropriate steps to ensure that your personal data continues to receive a level of protection consistent with this Privacy Policy.

koktk will not transfer your personal data to any third party located outside Bangladesh for the purpose of direct marketing without your explicit prior consent. Any transfer of personal data to third-party service providers is governed by data processing agreements that require those providers to protect your data in accordance with standards equivalent to those set out in this Policy.

If you believe that koktk has not handled your personal data in accordance with this Privacy Policy, you have the right to raise a formal complaint. In the first instance, please contact our support team at [email protected] with the subject line "Privacy Complaint" so that we can investigate and attempt to resolve the matter directly. koktk will acknowledge your complaint within 48 hours and provide a substantive response within 30 calendar days. If you are not satisfied with koktk's response, you may wish to seek further advice or escalate the matter through appropriate channels available in your jurisdiction.