ok666 Privacy Policy

Who We Are

ok666 (hereinafter "ok666", "we", "us", or "the Platform") operates the online betting and gaming platform accessible at https://ok666.io. ok666 acts as the data controller in respect of all personal data collected from players and visitors in connection with the provision of its sports betting, live casino, slots, and related entertainment services.

ok666 is operated for players in Bangladesh and is directed exclusively at individuals who are 21 years of age or older. Any queries relating to the use of your personal data may be directed to our support team via the contact details provided in Section 14 of this Privacy Policy.

Data We Collect

ok666 collects and processes the following categories of personal data in connection with the operation of your account and the delivery of our services:

ok666 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where identity verification documentation incidentally contains such information (e.g., a national ID card photograph). Where such data is incidentally received, it is not stored separately or processed for any purpose other than identity verification.

How We Collect Your Data

ok666 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or responding to a survey or promotion.
• Automated technologies: Data collected automatically when you access the ok666 platform, including IP addresses, device identifiers, browser fingerprints, session cookies, and behavioural analytics generated by your use of the platform.
• Third-party sources: Data received from payment processors (such as bKash, Nagad, and Rocket) to confirm transaction status; data received from identity verification service providers to confirm the authenticity of submitted documents; and data received from fraud-prevention partners to assess account risk.
• Public sources: In limited circumstances, ok666 may cross-reference information from publicly available sources (such as sanctions lists or politically exposed persons databases) as part of its AML compliance obligations.

How We Use Your Data

ok666 processes your personal data for the following purposes. Each purpose is matched to its corresponding legal basis in Section 5 below.

1. Account management: Creating, maintaining, and closing your ok666 account; verifying your identity and age; communicating essential account information such as password resets, deposit confirmations, and withdrawal receipts.
2. Service delivery: Processing deposits and withdrawals via your nominated payment method; settling bets and casino game outcomes; crediting and debiting bonus funds in accordance with applicable promotion terms.
3. Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other prohibited conduct; monitoring for unusual transaction patterns; applying device and IP-based risk controls.
4. Responsible gaming: Monitoring play patterns to identify potentially problematic gambling behaviour; enforcing deposit limits, session time restrictions, cool-down periods, and self-exclusion requests; complying with the platform's 21+ age policy.
5. Legal compliance: Retaining transaction records and identity documentation as required by anti-money laundering obligations; responding to lawful requests from competent authorities; maintaining audit trails for dispute resolution purposes.
6. Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game offerings, and user experience design.
7. Marketing: Sending promotional communications (including details of bonuses, free bets, and seasonal offers) to players who have provided explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected] or by using the unsubscribe mechanism included in each marketing communication.

Legal Basis for Processing

ok666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between ok666 and the player — including account registration, KYC verification, deposit and withdrawal processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering record-keeping, age verification obligations, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in the legitimate interests of ok666, provided those interests are not overridden by the player's fundamental rights — including fraud detection, platform security monitoring, and aggregated analytics for service improvement.
• Consent: Processing of personal data for marketing communications, which is conducted only where the player has provided explicit, informed, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Data

ok666 does not sell, rent, or trade your personal data to third parties for commercial purposes. ok666 may share your personal data with the following categories of recipients where necessary and proportionate:

• Payment processors: bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank, Visa, and Mastercard — solely for the purpose of processing deposit and withdrawal transactions linked to your account.
• Identity verification partners: Third-party KYC and document verification service providers engaged by ok666 to confirm the authenticity of identity and address documents submitted during account registration or upon request.
• Game providers: Certified third-party game studios (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe) may receive a session token and your account reference for the purpose of delivering live casino and slot game sessions. These providers do not receive your full identity data.
• Fraud prevention and security partners: Specialist fraud-detection service providers that assist ok666 in identifying and preventing suspicious account activity, money laundering, and multi-accounting.
• Legal and regulatory authorities: ok666 may disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or regulatory obligation. ok666 will, where legally permitted, notify the affected player of such a disclosure.
• Professional advisers: Legal counsel, auditors, and financial advisers engaged by ok666 under binding confidentiality obligations, where access to personal data is necessary for them to perform their professional services.

All third-party recipients of your personal data are contractually required to process that data only for the purposes for which it was disclosed, to maintain appropriate security standards, and to handle it in accordance with applicable data protection principles.

Cookies & Tracking Technologies

ok666 uses cookies and similar tracking technologies to operate the platform, maintain your authenticated session, detect fraud, and gather aggregated analytics. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the operation of the ok666 platform. These include session authentication tokens, CSRF protection cookies, and load-balancer cookies. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as your selected language, preferred deposit method, and responsible gaming settings. Disabling these cookies may affect your platform experience.
• Analytical cookies: Used to collect aggregated, anonymised data about how players navigate the ok666 platform — including page visit frequency, session duration, and feature usage. This data is used solely to improve the platform and is not shared with advertising networks.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection, device fingerprinting, and anomalous behaviour monitoring.

Data Security

ok666 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption: All data transmitted between your device and ok666 servers is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
• Encryption at rest: Sensitive personal data and financial records stored on ok666 infrastructure are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within the ok666 organisation is strictly limited to personnel who require it to perform their job functions. All access is authenticated, role-limited, and audit-logged.
• Two-factor authentication: ok666 offers two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA to provide an additional layer of protection against unauthorised access.
• Vulnerability management: ok666 conducts periodic security assessments and maintains a vulnerability management programme to identify and remediate security weaknesses in a timely manner.
• Data breach procedures: ok666 maintains an incident response plan. In the event of a data breach that poses a risk to affected players, ok666 will notify affected users as promptly as practicable and take all reasonable steps to contain and remediate the incident.

While ok666 takes data security seriously and employs best-practice controls, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials as described in the ok666 Terms & Conditions.

Data Retention

ok666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or audit obligations. The following retention periods apply:

• Account and identity data: Retained for a minimum of 5 years following permanent account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and bet records: Retained for a minimum of 5 years following the date of each transaction, in accordance with financial record-keeping obligations.
• Support communications: Retained for 3 years from the date of the last communication, for dispute resolution and service quality purposes.
• Marketing preferences: Retained only while the player's consent remains active. Upon withdrawal of consent, marketing preference records are updated immediately; historical opt-in records are retained for 2 years for compliance audit purposes.
• Analytical and usage data: Anonymised and aggregated usage data may be retained indefinitely, as it can no longer be used to identify individual players.
• Self-exclusion records: Retained for the duration of the self-exclusion period and for 6 years thereafter, to prevent re-registration by excluded players.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised using processes that render re-identification technically infeasible.

Your Rights Over Your Personal Data

As a player on the ok666 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details in Section 14. ok666 will respond to all verified data rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data that ok666 holds about you, together with information about how that data is being processed.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data held about you. For certain data fields (such as your registered email address or mobile number), you may be able to update your information directly via your account settings.
• Right to erasure: You have the right to request the deletion of your personal data where ok666 no longer has a legitimate basis for retaining it. Please note that this right is subject to ok666's legal obligation to retain certain records for a minimum of 5 years following account closure, as described in Section 9.
• Right to restriction: You have the right to request that ok666 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of ok666's legitimate interests.
• Right to object: You have the right to object to the processing of your personal data where ok666 relies on legitimate interests as its legal basis. ok666 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where ok666 processes your data on the basis of consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format and to request that it be transmitted to another data controller where technically feasible.

Third-Party Links

The ok666 platform may contain references or links to third-party content, including game studio interfaces, payment provider portals, and informational resources. ok666 is not responsible for the privacy practices of any third-party website or service that you access via the ok666 platform.

We encourage you to review the privacy policies of any third-party service you use in connection with your ok666 account — in particular, the privacy policies of your mobile banking provider (such as bKash or Nagad) when making deposits or withdrawals. ok666 has no control over and assumes no responsibility for the content, data practices, or security of third-party platforms.

Children & Minors

ok666 operates a strict 21+ age policy and does not knowingly collect personal data from individuals under the age of 21. The ok666 platform is not directed at, and must not be used by, any individual under the age of 21.

If ok666 becomes aware that personal data has been collected from an individual under the age of 21 — whether through its own age verification processes or through a report from a third party — it will immediately suspend the account in question, forfeit all balances held therein, and permanently delete the associated personal data to the extent consistent with its legal record-keeping obligations.

If you are a parent or guardian and you believe that your child under the age of 21 has registered an account with ok666, please contact our support team immediately at [email protected]. We will investigate and take appropriate action as promptly as possible.

Amendments to This Privacy Policy

ok666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or data processing practices. Where amendments are material, ok666 will notify registered players via email or via an in-platform notification at least 14 days before the revised policy takes effect.

The date on which the current version of this Privacy Policy became effective is indicated in the "Last Updated" field displayed at the top of this page. Your continued use of the ok666 platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how ok666 collects, uses, and protects your personal data. Previous versions of this policy are available upon request by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which ok666 processes your personal data, please contact our Data Support team using any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the ok666 platform dashboard after login
• WhatsApp: Available 08:00–02:00 BST (login to your account to view the contact number)

ok666 aims to acknowledge all privacy-related enquiries within 48 hours of receipt and to provide a substantive response within 30 days. For complex data rights requests (such as a right of access or right to erasure request), ok666 may extend the response period by a further 60 days where necessary, subject to notifying the requester of the extension and the reasons for it within the initial 30-day period.