ok688 Privacy Policy

ok688 collects personal data from players in Bangladesh through several channels: directly from you when you register an account or contact our support team; automatically when you use our platform; and in limited circumstances from third-party service providers such as payment processors and identity verification agencies. The categories of personal data we collect are set out below.

Registration and Identity Data

When you create an ok688 account, we collect the following information: your full legal name, date of birth, gender, residential address (including city — for example Dhaka, Chittagong, Sylhet, or Khulna), email address, and mobile phone number. This information is required to open your account and is used for identity verification, fraud prevention, and responsible gaming monitoring.

Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, ok688 may collect copies of identity documents including your Bangladeshi National Identity Card (NID), passport, or driving licence. We may also request a recent utility bill or bank statement as proof of your residential address. These documents are used solely for the purpose of verifying your identity in accordance with anti-money-laundering obligations.

Financial and Payment Data

When you make a deposit or request a withdrawal, ok688 collects financial data including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a Bangladeshi bank account), the associated account or wallet number, transaction amounts, and transaction timestamps. ok688 does not store full card numbers or mobile banking PINs. Payment data is processed securely via our payment partners and is used solely for the purpose of processing your transactions.

Technical and Usage Data

ok688 automatically collects certain technical data when you access the platform, including your IP address, browser type and version, device type and operating system, screen resolution, referring URL, pages visited within ok688.app, time spent on each page, game sessions played, and session timestamps (Bangladesh Standard Time, UTC+6). This data is used for platform security, fraud detection, and service improvement purposes.

Communication Data

When you contact the ok688 support team by email or live chat, we retain a record of your communications, including the content of messages sent and received and any attachments provided. This data is used to resolve your enquiry and to improve the quality of our customer support service.

Responsible Gaming Data

If you use any of the ok688 responsible gaming tools — such as deposit limits, time-out features, or self-exclusion — we record and retain data about the limits and restrictions you have set. This data is used to enforce the restrictions you have requested and to monitor for patterns of gambling behaviour that may indicate harm.

ok688 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law or regulation. The specific retention period applicable to each category of data is determined by the nature of the data and the purpose for which it is held.

Account Data

Personal data associated with your ok688 account — including your registration details, identity documents, and account activity records — is retained for the duration of your account relationship with ok688, and for a period of 5 years following the closure of your account. This retention period reflects ok688's obligations in relation to anti-money-laundering record-keeping requirements.

Transaction Records

Records of all financial transactions conducted through your ok688 account — including deposits, withdrawals, bonus credits, and game wager history — are retained for a minimum period of 5 years from the date of the transaction. This retention period is required to support financial auditing, dispute resolution, and regulatory compliance.

Support Communications

Records of customer support interactions, including email correspondence and live chat transcripts, are retained for a period of 2 years from the date of the interaction. This enables ok688 to maintain continuity of service and to reference prior communications when resolving related enquiries.

Technical and Usage Data

Technical log data — including IP address records, session logs, and device identification data — is retained for a period of 12 months from the date of collection. After this period, log data is either permanently deleted or anonymised so that it can no longer be linked to an individual player.

Responsible Gaming Records

Data relating to responsible gaming tools you have activated — including self-exclusion records and deposit limit histories — is retained for the full duration of any active restriction, and for a minimum period of 5 years following the expiry or lifting of the restriction. This data is retained to prevent circumvention of self-exclusion and to support responsible gaming audits.

Secure Deletion

Upon expiry of the applicable retention period, ok688 permanently and securely deletes or irreversibly anonymises your personal data. ok688 uses industry-standard data deletion protocols to ensure that deleted data cannot be recovered or reconstructed. Where data must be retained for legal reasons beyond the standard retention period, ok688 will document the legal basis for the extended retention and will minimise access to that data.

ok688 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, ok688 maintains industry-standard safeguards that are regularly reviewed and updated.

Encryption

All data transmitted between your device and the ok688 platform is encrypted using 256-bit SSL (Secure Sockets Layer) technology. This ensures that your personal data, login credentials, and payment information cannot be intercepted by third parties during transmission. Data stored on ok688's servers is encrypted at rest using AES-256 encryption.

Access Controls

Access to systems and databases containing player personal data is restricted to authorised ok688 personnel who require access in order to perform their specific job functions. All staff with access to personal data are bound by confidentiality obligations and receive regular training on data protection best practices. ok688 uses role-based access controls and multi-factor authentication for all administrative systems.

Infrastructure Security

The ok688 platform is hosted on secure, dedicated server infrastructure protected by enterprise-grade firewalls, intrusion detection systems, and distributed denial-of-service (DDoS) mitigation technologies. ok688 conducts regular vulnerability assessments and penetration testing to identify and remediate potential security weaknesses before they can be exploited.

Incident Response

ok688 maintains a documented data breach response procedure. In the event of a security incident that results in, or is reasonably likely to result in, a risk to the rights and freedoms of affected players, ok688 will notify affected players without undue delay and will take all reasonable steps to contain, investigate, and remediate the incident.

Your Responsibilities

You also play an important role in keeping your ok688 account secure. ok688 strongly recommends that you: use a strong, unique password for your ok688 account; never share your login credentials with any other person; log out of your account after each session, particularly when using a shared or public device; and contact the ok688 support team immediately if you suspect that your account has been accessed without your authorisation.