93ok Privacy Policy — How We Protect Your Data

Introduction

This Privacy Policy ("Policy") describes how 93ok ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal information of individuals ("you", "the Player", "the User") who access or use the services available at https://93ok.io and any associated mobile or web applications operated under the 93ok brand.

93ok is committed to handling your personal data with integrity, transparency, and care. We recognise that the players who trust us with their information — including the many players based in Bangladesh who use the platform for cricket betting, live casino, slots, racing, and Plinko — deserve a clear and honest account of exactly how that information is managed from the moment it is collected to the moment it is deleted.

By accessing the 93ok platform, completing the registration process, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and 93ok.

Data We Collect

93ok collects personal data across several categories. The table below provides a clear overview of the data types we collect, the specific data points within each category, and the primary reason for collection.

How We Collect Your Data

93ok collects personal data through a combination of direct collection, automated collection, and — in limited circumstances — from third-party sources. The primary collection channels are described below.

• Account Registration: When you create a 93ok account via the registration form on the 93ok Login page, you directly provide identity and contact data including your name, date of birth, mobile number, and preferred payment method.
• KYC Verification: When you submit identity documents to complete our Know Your Customer process — whether proactively or upon our request before processing a withdrawal — we collect the document images and the information contained within them.
• Deposits and Withdrawals: When you initiate a financial transaction through bKash, Nagad, Rocket, Upay, or a bank transfer, our payment processing systems record the transaction details, including the sending/receiving account reference and the amount.
• Platform Usage: As you use the 93ok platform — navigating between games, placing bets, using the sports betting interface — our systems automatically log usage and technical data including your IP address, device identifiers, session timestamps, and gameplay activity.
• Customer Support: When you contact our support team via live chat or email, the content of your communications is recorded and associated with your account record.
• Cookies and Tracking Technologies: We collect technical and usage data automatically via cookies and similar technologies as described in Section 8 of this Policy.
• Third-Party Sources: In limited circumstances, we may receive data about you from third-party fraud prevention services or payment processors in order to verify your identity or to conduct enhanced due diligence on a transaction.

How We Use Your Data

93ok uses the personal data we collect for defined, specific purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The primary uses of your data are as follows:

• Account Management: Creating, maintaining, and managing your 93ok account, including processing your registration, verifying your identity and age, and enabling you to log in securely.
• Service Delivery: Providing access to the full range of 93ok services, including cricket betting, live casino, slots, racing, Plinko, and any future products introduced on the platform.
• Payment Processing: Processing deposits and withdrawals via your chosen payment method, verifying payment accounts, and maintaining accurate financial records of all transactions on your account.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• KYC and AML Compliance: Fulfilling our obligations under our internal Know Your Customer and Anti-Money Laundering frameworks, which require us to verify the identity of players and monitor transaction patterns.
• Responsible Gaming: Monitoring your usage patterns to identify potential signs of problem gambling behaviour and administering self-exclusion, deposit limits, cooling-off periods, and other responsible gaming tools you may activate.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and providing technical assistance.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and improve the overall user experience.
• Promotional Communications: Sending you information about promotions, bonuses, and platform updates — but only where you have actively consented to receive such communications. You may withdraw this consent at any time by contacting support.
• Legal and Regulatory Obligations: Retaining records and cooperating with any lawful request from competent authorities where we are legally required to do so.

Legal Basis for Processing

93ok processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual Necessity: Much of the data processing we carry out is necessary for the performance of the contract between you and 93ok — specifically, the Terms & Conditions you agreed to when registering your account. Without this processing, we would be unable to provide the services you have signed up for.
• Legitimate Interests: We process certain data — including technical and usage data for fraud prevention and security monitoring — on the basis of our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, transaction record-keeping, and cooperation with lawful authority requests — are carried out to comply with legal obligations applicable to our operations.
• Consent: Where we send you promotional communications or use non-essential cookies, we do so only on the basis of your freely given, informed, and specific consent. You have the right to withdraw this consent at any time without penalty.

Data Sharing & Disclosure

93ok does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. We share your data only in the following limited and defined circumstances:

• Payment Processors: We share necessary financial data with our payment processing partners — including the operators of bKash, Nagad, Rocket, Upay, and our banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank) — solely for the purpose of processing your deposit and withdrawal transactions. These partners are bound by their own data protection obligations.
• Game and Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive limited technical session data necessary to deliver their games within the 93ok platform environment. These providers do not receive personally identifiable information beyond what is technically required for game delivery.
• Identity Verification Services: We may share identity data with third-party KYC and fraud prevention service providers in order to verify the accuracy of documents submitted during the account verification process.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by applicable law, by court order, or where we determine in good faith that such disclosure is necessary to prevent fraud, protect the safety of persons, or enforce our Terms & Conditions.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of 93ok, personal data held by the platform may be transferred to the acquiring entity. We will notify affected players of any such transfer and the data protection implications.

Data Retention

93ok retains personal data only for as long as it is necessary for the purposes for which it was collected, or for as long as required by applicable legal or compliance obligations. The general retention principles we apply are as follows:

• Active Accounts: While your account remains active, we retain all data associated with your account — including identity, contact, financial, and usage data — for the purpose of delivering our services, managing your account, and fulfilling our compliance obligations.
• Closed Accounts: Following the closure of your account — whether at your request or as a result of a breach of our Terms — we retain your account data for a minimum period of five (5) years from the date of closure. This retention period is required for Anti-Money Laundering compliance, fraud investigation, and the resolution of any disputes that may arise after closure.
• Financial Transaction Records: Records of all financial transactions (deposits, withdrawals, and in-platform wagers) are retained for a minimum of seven (7) years from the date of the transaction, in line with standard financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for as long as required by our AML framework, and for no less than five (5) years following account closure.
• Support Communications: Customer support chat transcripts and email correspondence are retained for up to three (3) years from the date of the interaction, unless they form part of an ongoing dispute or investigation, in which case they are retained until that matter is fully resolved.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that permanently prevents re-identification. Where anonymisation is not technically feasible for a particular data type, the data is deleted.

Cookies & Tracking Technologies

93ok uses cookies and similar browser-based tracking technologies to ensure the platform functions correctly, to maintain your login session, and to collect aggregate analytics data that helps us improve the service. We do not use third-party advertising cookies or cross-site tracking technologies.

The categories of cookies used on the 93ok platform are described below:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as user authentication (keeping you logged in during a session), security token management, and load balancing across our servers. These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, chosen display settings, and last-visited game category — to provide a more personalised experience across sessions. Disabling these cookies may reduce the personalisation of your experience but will not prevent you from using the platform.
• Analytics Cookies: We use first-party analytics cookies to collect anonymised, aggregated data about how players navigate and interact with the 93ok platform. This data is used internally to identify performance issues, popular game categories, and areas of the platform that need improvement. No personally identifiable information is shared with third-party analytics providers.

You can manage and delete cookies at any time through your browser's privacy or settings menu. Most modern browsers allow you to block all cookies, accept only first-party cookies, or clear cookies between sessions. Please be aware that blocking strictly necessary cookies will prevent you from logging in to your account and using the platform.

Data Security

93ok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes the following key controls:

• Encryption in Transit: All data transmitted between your device and the 93ok platform is encrypted using 256-bit TLS/SSL encryption. This includes all login activity, financial transactions, and support communications.
• Encryption at Rest: Sensitive personal data — including identity documents, payment account references, and authentication credentials — is encrypted when stored on our servers using industry-standard encryption algorithms.
• Password Security: User passwords are never stored in plaintext. We use a robust cryptographic hashing algorithm (with per-account salting) to store password credentials, ensuring that even in the event of a data breach, passwords cannot be recovered in their original form.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Only authorised personnel whose roles require access to specific data categories are permitted to view that data, and all such access is logged and audited.
• Firewall and Intrusion Detection: Our platform infrastructure is protected by multi-layer firewalls and continuous intrusion detection and prevention systems that monitor for anomalous activity in real time.
• Regular Security Audits: We conduct periodic security reviews and penetration testing of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that poses a risk to the rights and freedoms of affected players, 93ok will notify impacted players promptly and take all reasonably available steps to contain and remediate the breach.

Your Rights Over Your Data

As a player on the 93ok platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise. We will respond to all verified requests within thirty (30) days.

• Right of Access: You have the right to request a copy of all personal data we hold about you, along with information about how and why it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For certain data fields (such as contact details), you may be able to update these directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent is the sole legal basis for processing), or where the data has been processed unlawfully. Please note that this right is subject to overriding legal retention obligations — for example, financial and KYC records must be retained for the periods described in Section 7.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are reviewing that objection.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contractual obligation, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where we process your data on the basis of your consent — for example, for the purposes of sending promotional communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Children & Minors

The 93ok platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the account registration process, and we reserve the right to request documentary proof of age at any time.

If we become aware — through any means, including a parental or guardian complaint, an internal audit, or information provided during KYC review — that personal data has been collected from an individual under the age of 21, we will take the following immediate steps:

• Permanently close the account in question.
• Return any real-money deposits made to the originating payment account.
• Permanently delete all personal data associated with the underage account from our active systems, subject only to any retention obligations that may arise from the investigation of the underage registration itself.

International Data Transfers

93ok operates as an offshore online gaming platform. As a result, personal data collected from players in Bangladesh may be stored and processed on servers located in jurisdictions outside of Bangladesh. Where such international transfers of personal data occur, 93ok takes steps to ensure that the receiving environment provides an adequate level of protection for the data in question.

Specifically, where personal data is transferred to our hosting infrastructure, technology providers, or game delivery partners in other jurisdictions, we ensure that such transfers are carried out under one or more of the following safeguards:

• Contractual data protection clauses that impose obligations on the receiving party equivalent to those we observe ourselves.
• Transfer to jurisdictions that maintain data protection standards recognised as adequate for the protection of personal data.
• Technical security measures — including end-to-end encryption — that protect the data regardless of the jurisdiction in which it is processed or stored.

By using the 93ok platform, you acknowledge and consent to the transfer of your personal data to our offshore infrastructure under the safeguards described above. If you have concerns about international data transfers, please contact our support team for further information.

Third-Party Links

The 93ok platform may, from time to time, contain references or informational links to third-party websites, resources, or services — for example, links to game provider information pages or payment method help centres. This Privacy Policy applies solely to the 93ok platform and does not govern the privacy practices of any third-party website or service.

When you click on a link to a third-party website, you leave the 93ok platform and your interaction with that site is governed entirely by the privacy policy and terms of service of that third party. 93ok has no control over, and accepts no responsibility for, the content, privacy practices, or data processing activities of any third-party website or service.

We strongly encourage you to review the privacy policy of any third-party website you visit before submitting any personal information to that site. The presence of a reference to a third-party service on the 93ok platform does not constitute an endorsement of that service's privacy practices or data handling standards.

Policy Updates

93ok reserves the right to update, amend, or replace this Privacy Policy at any time in order to reflect changes in our data processing practices, changes in applicable legal requirements, or improvements to the platform. The most current version of this Policy will always be published at https://93ok.io/privacy-policy and will display the effective date of the current version at the top of the page.

Where we make material changes to this Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players via email to the address associated with their account, or via a prominent notice on the platform, at least fourteen (14) days before the changes take effect. Your continued use of the 93ok platform after the effective date of an updated Policy constitutes your acceptance of the updated terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 93ok handles your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

When submitting a data rights request, please include your registered account username, the specific right you wish to exercise (for example, "Right of Access" or "Right to Erasure"), and any supporting information that will help us locate and verify your account. We may ask you to provide proof of identity before processing your request in order to protect the security of your account data.