ok37 Privacy Policy — Your Data, Your Rights
At ok37, your privacy is taken seriously. This Privacy Policy explains exactly what personal data we collect when you use our platform, why we collect it, how it is stored and secured, who it may be shared with, and what rights you have over your own information. We are committed to full transparency.
Summary: ok37 collects only the personal data required to operate a safe and compliant gaming platform. We do not sell your personal data to third parties. We use industry-standard SSL encryption to protect your information. You have the right to access, correct, or request deletion of your personal data at any time by contacting [email protected].
1. Data We Collect
ok37 collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of the website, and from third-party sources such as identity verification providers and payment processors. The categories of personal data we may collect include the following:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Provided by you at registration or KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Provided by you at registration or account update |
| Financial Data | bKash number, Nagad number, Rocket number, Upay number, Visa/Mastercard last four digits | Provided by you when making deposits or withdrawal requests |
| Technical Data | IP address, browser type, device type, operating system, screen resolution | Collected automatically when you access ok37 |
| Usage Data | Pages visited, games played, bet amounts, session duration, click patterns | Collected automatically via server logs and analytics tools |
| Communications Data | Live chat transcripts, support emails, survey responses | Collected when you contact ok37 support or participate in surveys |
| Verification Documents | Scanned NID card, passport photo page, utility bill, selfie with ID | Provided by you during KYC verification process |
ok37 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless such data is directly volunteered by a Player in the context of a responsible gaming self-assessment. Where such data is provided, it will be used solely for the purpose of delivering appropriate player protection support and will not be used for any commercial purpose.
We do not collect personal data from individuals we know to be under the age of 18. If we become aware that a minor has submitted personal data to ok37, that data will be deleted immediately and the associated account will be closed.
2. How We Use Your Data
ok37 processes your personal data only where a lawful basis exists for doing so. The primary purposes for which we use your data are as follows:
- Account creation and management: Your identity and contact data are used to create and maintain your ok37 player account, verify your identity, and communicate essential account-related information such as password reset instructions, withdrawal confirmations, and security alerts.
- KYC and age verification: We are obligated to verify that all players are at least 18 years of age and to confirm the identity of players prior to processing withdrawals. Your identity documents are used solely for this purpose.
- Payment processing: Financial data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. ok37 does not store full card numbers. Payment data is handled through encrypted, tokenised payment channels.
- Platform operation and improvement: Technical and usage data allow ok37 to ensure the platform performs correctly across different devices and browsers, to diagnose and fix technical issues, and to improve the user experience over time.
- Fraud prevention and AML compliance: ok37 uses a combination of automated risk systems and manual review to detect suspicious activity, including potential fraud, money laundering, and bonus abuse. Your data may be analysed for these purposes as a legal obligation and a legitimate interest.
- Responsible gaming monitoring: Usage and betting pattern data may be analysed to identify players who may be exhibiting signs of problem gambling, so that ok37 can proactively reach out with support resources or apply account-level protections.
- Marketing communications: If you have opted in to receive promotional communications from ok37, your contact data will be used to send you information about bonuses, promotions, and new games. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.
- Legal compliance: ok37 may be required to process and disclose your personal data in order to comply with applicable laws, respond to lawful requests from competent authorities, or to establish, exercise, or defend legal claims.
ok37 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for such processing.
Our Privacy Commitments to You
Six core principles that guide how ok37 handles your personal information on every interaction.
SSL Encryption
All data transmitted between your browser or device and ok37's servers is protected by 256-bit SSL encryption. This applies to login sessions, deposits, withdrawals, and all account management actions.
No Data Sales
ok37 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Your data is used exclusively to operate your ok37 account and deliver our platform services.
Minimal Data Collection
We collect only the data that is strictly necessary for the stated purposes. We do not collect data speculatively or build marketing profiles beyond what is needed to personalise your gaming experience with your consent.
Strict Access Controls
Access to player personal data within ok37 is restricted on a need-to-know basis. Staff who do not require access to your data in order to perform their role will not have it. All internal access is logged and monitored.
Your Right to Erasure
Subject to our legal retention obligations, you may request the deletion of your personal data at any time. Erasure requests are reviewed within 30 days and fulfilled where no overriding legal requirement to retain the data exists.
Marketing Opt-Out
Promotional emails and SMS messages from ok37 are strictly opt-in. You can unsubscribe from marketing communications at any time through your account notification settings or by replying STOP to any SMS, with no effect on your account status.
3. Data Sharing & Disclosure
ok37 does not sell your personal data. However, in order to operate the platform effectively and meet our legal obligations, we may share your data with the following categories of third parties under strict contractual and confidentiality terms:
- Payment processors: When you make a deposit or withdrawal, your financial data is passed to the relevant payment provider — bKash, Nagad, Rocket, Upay, or the relevant card network — solely for the purpose of completing the transaction. Each provider operates under their own privacy policy and is independently responsible for data they hold.
- Identity verification providers: ok37 uses third-party KYC service providers to verify the identity and age of players. These providers receive only the minimum data necessary to perform verification and are contractually prohibited from using that data for any other purpose.
- Game studios and software providers: When you launch a game on ok37 — including titles from Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming — certain technical data such as your player session token, stake amounts, and game outcomes may be logged by the game studio's systems for fairness auditing and support purposes. Game studios do not receive your full identity data.
- Analytics and security providers: ok37 uses trusted analytics and anti-fraud technology partners to monitor platform performance and detect suspicious activity. These partners process technical and usage data only.
- Legal and regulatory authorities: ok37 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or to protect the legal rights of ok37 or other players.
- Business transfers: In the event that ok37 undergoes a merger, acquisition, or sale of all or part of its assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and the applicable privacy terms will continue to apply.
All third-party service providers engaged by ok37 are required to implement appropriate technical and organisational security measures to protect any personal data shared with them and to process that data only in accordance with ok37's instructions.
4. Cookies & Tracking
ok37 uses cookies and similar tracking technologies to operate the platform, remember your preferences, keep your session secure, and understand how players interact with the site. A cookie is a small text file placed on your device when you visit ok37. The following categories of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Keep you logged in, protect your session, remember your language and region settings, process transactions securely | No — required for basic functionality |
| Performance | Measure page load times, identify broken pages, help ok37 understand which features are used most | Yes — via browser settings |
| Functional | Remember your game preferences, display personalised content, store your bet history view settings | Yes — via account preferences |
| Analytics | Aggregate traffic analysis to help ok37 improve the platform; data is anonymised before processing | Yes — via browser settings |
You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your ok37 account and using core platform features. Disabling other cookie categories will not affect your ability to use the platform but may reduce the personalisation of your experience.
ok37 does not use cookies to serve third-party advertising on external websites. Tracking technologies are used exclusively within the ok37 platform itself.
5. Data Security
ok37 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption on all data in transit between your device and ok37's servers.
- Encrypted storage for all sensitive personal data, including identity documents and financial information, held on ok37's servers.
- Access control policies that restrict internal access to personal data on a strict need-to-know basis, with all access events logged for audit purposes.
- Two-factor authentication (2FA) available to all players and mandatory for all ok37 staff accounts with access to player data systems.
- Regular security audits and vulnerability assessments conducted on the ok37 platform and infrastructure.
- Incident response procedures that allow ok37 to detect, contain, and respond to data security incidents promptly, including notifying affected players where required.
While ok37 takes all reasonable precautions to protect your personal data, no internet-based platform can guarantee absolute security. Players are reminded to use a strong, unique password for their ok37 account, to enable 2FA, and to avoid accessing their account from shared or public devices. If you suspect your account has been compromised, contact ok37 support immediately via live chat.
Security tip: ok37 will never ask for your password via email, live chat, or SMS. If you receive a message asking for your password or payment PIN, do not respond and report it to our support team immediately. All legitimate ok37 communications come from the @ok37.club domain.
6. Data Retention
ok37 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The following retention periods apply:
- Active account data: Retained for the full duration of your ok37 account relationship, plus a minimum of five (5) years following account closure, in order to comply with anti-money-laundering record-keeping requirements.
- KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later. This retention period reflects statutory obligations related to financial crime prevention.
- Transaction records: All deposit and withdrawal records are retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
- Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, to demonstrate compliance with applicable marketing regulations.
- Support communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until that matter is fully resolved.
- Technical logs: Server logs, access logs, and security event logs are retained for twelve (12) months and then automatically deleted.
Once a retention period has expired and no overriding legal obligation requires continued storage, ok37 will securely delete or anonymise your personal data. Anonymised data — from which you cannot be individually identified — may be retained indefinitely for statistical and analytical purposes.
7. Your Privacy Rights
As a player on the ok37 platform, you have a number of rights in relation to the personal data we hold about you. ok37 is committed to honouring these rights promptly and without undue difficulty. To exercise any of the rights listed below, please contact our support team via live chat from your account dashboard, or by email at [email protected] (plain text — not a clickable link). We will respond to all valid requests within thirty (30) calendar days.
You may request a copy of the personal data ok37 holds about you, along with information about how it is being used and who it has been shared with.
If any personal data ok37 holds about you is inaccurate or incomplete, you have the right to request its correction. You may also update basic account details directly from your account settings page.
Subject to our legal retention obligations, you may request the deletion of your personal data. We will fulfil erasure requests where no overriding legal requirement to retain the data exists.
In certain circumstances — for example, while a rectification request is being assessed — you may ask ok37 to restrict the processing of your personal data rather than delete it outright.
Where processing is based on your consent or on a contract with you, you may request that ok37 provide your personal data in a structured, machine-readable format so that you can transfer it to another service.
You may object to ok37 processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ok37 demonstrating compelling grounds to continue.
ok37 will not charge a fee for handling valid rights requests. However, we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive in nature. If ok37 is unable to fulfil a request — for example, because a legal retention obligation prevents erasure — we will explain the reason clearly in our response.
8. Changes to This Policy
ok37 reserves the right to update or amend this Privacy Policy at any time. Changes may be made in response to developments in applicable law, changes in the way ok37 operates its platform, or in response to feedback from players or regulators. The updated policy will be published on this page with a revised effective date shown at the top.
Where a change to this Privacy Policy is material — meaning it significantly affects how ok37 uses your personal data or the rights available to you — ok37 will notify registered players by email to the address registered on their account, or by displaying a prominent notice on the ok37 platform at the time of next login. Your continued use of ok37 following notification of a material change constitutes your acknowledgement of the revised policy.
Players who do not wish to accept a revised Privacy Policy should cease using the ok37 platform and may request account closure by contacting support. Upon closure, data will be handled in accordance with the retention provisions described in Section 6 of this policy.
We encourage all players to review this Privacy Policy periodically so that you remain informed about how ok37 protects your data. If you have any questions, concerns, or feedback about this policy or about how ok37 handles your personal information, please contact our support team — we are available 24 hours a day, 7 days a week via live chat from your account dashboard, or by email at [email protected] (plain text — not a clickable link).
Contact for privacy matters: If you wish to exercise any of your data rights or raise a privacy concern, contact the ok37 support team via live chat from your account dashboard, or send a plain-text email to [email protected]. We aim to respond to all privacy requests within 30 calendar days.
Ready to Play on a Platform You Can Trust?
ok37 keeps your data safe so you can focus on enjoying Bangladesh's best online casino and cricket betting experience. Explore our games or review our other policies below.