64ok Privacy
Policy

1. Introduction

64ok is Bangladesh's trusted online casino and sports betting platform, providing players with access to 500+ games, competitive cricket betting markets, and a secure, localised payment experience. As part of delivering these services, 64ok necessarily collects and processes certain personal data relating to the individuals who register and use the platform.

This Privacy Policy sets out, in plain and transparent language, exactly what personal data 64ok collects, the purposes for which it is processed, the parties with whom it may be shared, the period for which it is retained, and the rights you hold as a data subject. This policy applies to all players who access the 64ok platform from Bangladesh or any other location, and to all services accessible at https://64ok.io and its subdomains.

This Privacy Policy should be read alongside the 64ok Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into this document. In the event of any conflict between this policy and another 64ok document regarding the treatment of personal data, this Privacy Policy shall prevail.

2. Data Controller

For the purposes of this Privacy Policy, 64ok acts as the data controller in respect of all personal data collected via the 64ok platform. As data controller, 64ok is responsible for determining the purposes and means by which your personal data is processed and for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, access requests, and formal complaints regarding 64ok's handling of personal data should be directed to our support team in writing at [email protected]. We aim to acknowledge all data-related correspondence within 5 business days and to provide a substantive response within 30 calendar days of receipt.

3. Personal Data We Collect

The table below summarises the categories of personal data that 64ok collects, together with the specific data points within each category and the primary purpose for which each category is collected.

64ok does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily shared by a player in the context of a responsible gaming self-exclusion or support request. Any such information is treated with the highest level of confidentiality and is used solely to provide appropriate player welfare support.

4. How We Collect Your Data

64ok collects personal data through the following channels:

• Direct submission. Data you provide when completing the account registration form via the 64ok Login page, submitting KYC documents, making a deposit or withdrawal request, contacting customer support, or responding to a survey or promotion.
• Automated platform systems. Technical and usage data collected automatically as you interact with the 64ok website and games, including through server logs, session tracking systems, and our platform analytics infrastructure.
• Cookies and similar technologies. Data gathered through cookies, pixel tags, and local storage objects placed on your device when you visit https://64ok.io. See Section 8 for a full description of our cookie practices.
• Payment providers. Confirmation and reference data returned by bKash, Nagad, Rocket, Upay, and other payment partners following a deposit or withdrawal transaction. We do not receive your full mobile wallet PIN or bank login credentials through this channel.
• Identity verification services. Where a third-party KYC verification provider is used to cross-reference identity documents, we receive a verification result and a risk score but do not retain a raw copy of your document beyond the period required to complete the check.
• Fraud and security services. Data from third-party fraud detection and device fingerprinting services used to protect the platform and its players from unauthorised access and financial crime.

5. Legal Basis for Processing

64ok processes your personal data under one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity. Processing required to perform the contract between 64ok and the player — for example, creating and managing your account, processing deposits and withdrawals, and settling bets.
• Legal obligation. Processing required to comply with applicable legal requirements — including KYC identity verification, anti-money-laundering record keeping, and responsible gaming obligations.
• Legitimate interests. Processing necessary for purposes that 64ok considers to be in its legitimate interests, where those interests are not overridden by your rights and interests — for example, fraud prevention, platform security, and platform performance analytics.
• Consent. Processing based on your freely given, informed, and specific consent — for example, sending you optional promotional communications about bonuses, seasonal offers, or new game releases. You may withdraw consent for marketing communications at any time by contacting [email protected].

6. How We Use Your Personal Data

64ok uses the personal data it collects for the following purposes:

• Account creation and management. To register your account, verify your identity and age (21+), maintain your account settings, and process account closure requests.
• Payment processing. To verify deposit and withdrawal transactions via bKash, Nagad, Rocket, and other supported payment methods, and to maintain accurate financial records.
• Fraud prevention and security. To detect, investigate, and prevent fraudulent activity, money laundering, multiple account creation, unauthorised access, and other forms of abuse on the platform.
• Responsible gaming. To monitor player activity for signs of problem gambling behaviour, enforce self-exclusion and deposit limit requests, and proactively reach out to players who may need support.
• Customer support. To respond to your enquiries, resolve disputes, and maintain records of support interactions as required for quality assurance and compliance purposes.
• Platform improvement. To analyse aggregated and anonymised usage data in order to improve the 64ok platform's design, performance, game selection, and user experience.
• Marketing communications. With your consent, to send you personalised promotional offers, bonus notifications, and information about new features or seasonal events relevant to the Bangladesh market such as BPL, Eid, or Pohela Boishakh promotions.
• Legal compliance. To fulfil our obligations under applicable law, respond to lawful requests from regulatory or law-enforcement authorities, and maintain records as required by anti-money-laundering regulations.

64ok does not use personal data for automated decision-making that produces legal or similarly significant effects on players, with the exception of automated fraud-risk scoring which may result in temporary deposit restrictions. Where such automated measures are applied, you have the right to request human review of the decision by contacting [email protected].

7. Data Sharing & Third Parties

64ok does not sell your personal data. We may share personal data with the following categories of third parties only to the extent necessary and under appropriate contractual protections:

• Payment service providers. bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners receive transaction reference data necessary to process your deposit or withdrawal. These providers are independently regulated financial institutions with their own privacy obligations.
• KYC and identity verification providers. Third-party identity verification services that assist with document checking and age verification. These providers process identity data solely on our instructions and are prohibited from using it for their own commercial purposes.
• Game software providers. Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your Account identifier and session token in order to deliver game content and record game outcomes. These providers do not receive your full identity or financial data.
• Fraud prevention and security services. Specialist providers of device fingerprinting, IP reputation, and fraud analytics services that help protect the 64ok platform and its players.
• IT and infrastructure providers. Cloud hosting, content delivery, and platform infrastructure providers that process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities. Competent courts, regulators, law-enforcement agencies, and financial intelligence units where disclosure is required by applicable law or is necessary to protect the legal rights of 64ok or its players.

All third-party processors are vetted for security and data protection compliance before engagement and are required to sign data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

8. Cookies & Tracking Technologies

64ok uses cookies and similar tracking technologies on the https://64ok.io website to provide a functional, secure, and personalised experience. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used:

• Strictly necessary cookies. Required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies. Used to remember your preferences such as language settings, preferred payment method display, and responsible gaming tool settings, so that you do not need to reconfigure them on each visit.
• Analytics cookies. Used to collect aggregated data on how players navigate and use the platform, enabling us to identify performance issues and improve the user experience. Analytics data is processed in anonymised or pseudonymised form wherever possible.
• Security cookies. Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts. These cookies capture technical signals such as mouse-movement patterns and keystroke timing to distinguish human users from automated agents.

You may manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will impair the functionality of the 64ok platform and may prevent you from logging in or completing transactions. Most modern browsers provide granular controls over which cookie categories to accept. Please refer to your browser's help documentation for instructions.

64ok does not use third-party advertising or retargeting cookies. We do not share cookie-derived data with advertising networks or social media platforms for the purpose of serving targeted advertisements.

9. Data Retention

64ok retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following indicative retention periods apply:

• Active account data. Retained for the full duration of your active account relationship with 64ok, plus a period of up to seven years following account closure, to meet anti-money-laundering and financial record-keeping requirements.
• KYC and identity documents. Retained for up to seven years following account closure or the date of the last regulated transaction, whichever is later, in accordance with applicable financial crime prevention obligations.
• Transaction records. Deposit, withdrawal, and wagering records are retained for seven years from the date of each transaction for financial compliance purposes.
• Customer support communications. Support chat transcripts and email correspondence are retained for up to three years from the date of the interaction to facilitate dispute resolution and quality assurance.
• Technical and usage data (server logs). Retained for up to 12 months from the date of collection, after which they are deleted or irreversibly anonymised.
• Marketing consent records. Retained for the duration of your consent and for up to three years following withdrawal of consent as evidence of the consent lifecycle.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data that can no longer be linked to an individual may be retained for statistical and analytical purposes without restriction.

10. Your Data Rights

As a player registered with 64ok, you hold the following rights in respect of your personal data. These rights are subject to applicable legal limitations and are exercised by submitting a written request to [email protected]:

• Right of Access. You have the right to request a copy of the personal data that 64ok holds about you, together with information about how it is being processed.
• Right to Rectification. You have the right to request correction of any inaccurate or incomplete personal data held about you. For account-level data such as your registered name, date of birth, or contact number, corrections must be supported by appropriate documentary evidence.
• Right to Erasure. You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful. This right does not apply where retention is required by law — for example, financial transaction records subject to AML obligations.
• Right to Restriction. You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where the accuracy of the data is contested or where you have objected to processing based on legitimate interests pending verification of our grounds.
• Right to Data Portability. Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another controller where technically feasible.
• Right to Object. You have the right to object to processing based on legitimate interests, including profiling, at any time. You also have the unconditional right to object to direct marketing communications at any time, after which we will cease all marketing contact immediately.
• Right to Withdraw Consent. Where processing is based on your consent, you have the right to withdraw that consent at any time without detriment. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

All rights requests will be acknowledged within 5 business days and responded to substantively within 30 calendar days. Where a request is particularly complex, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

64ok will not charge a fee for handling legitimate rights requests unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or to decline to act on the request.

11. Children & Underage Players

The 64ok platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account or use any service on the 64ok platform.

Where 64ok becomes aware that personal data has been collected from an individual who was under the age of 21 at the time of registration, we will take immediate steps to close the associated account, delete the collected data to the extent permissible by law, and where appropriate report the incident to relevant authorities. KYC age verification processes are in place precisely to prevent underage access to the platform.

Parents and guardians who believe that a minor under their care has registered an account with 64ok should contact our support team immediately at [email protected]. We will investigate and act on all such reports as a matter of priority.

12. International Data Transfers

64ok primarily processes player data within its platform infrastructure. Certain third-party service providers engaged by 64ok — including cloud infrastructure providers, KYC verification services, and certified game studios — may process data in jurisdictions outside Bangladesh. Where such international transfers occur, 64ok takes appropriate steps to ensure that the receiving party provides an adequate level of data protection, including through the use of contractual data transfer mechanisms and vendor security assessments.

By using the 64ok platform, you acknowledge that your personal data may be transferred to, processed in, and stored in countries outside Bangladesh where the applicable data protection laws may differ from those in your home jurisdiction. In all such cases, 64ok requires that the transferee maintains data security standards equivalent to those described in this Privacy Policy.

13. Security Measures

64ok implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmissions between your browser or device and the 64ok platform.
• Bcrypt password hashing with salted rounds — your account password is never stored in a recoverable plain-text form on our servers.
• Two-factor authentication (2FA) available to all registered players as an additional layer of login security.
• Role-based access controls limiting internal staff access to personal data strictly on a need-to-know basis, with all access events logged and audited.
• Intrusion detection and anomaly monitoring systems that alert the 64ok security team to unusual access patterns or potential data exfiltration events in real time.
• Regular penetration testing conducted by independent security specialists to identify and remediate vulnerabilities in the platform infrastructure.
• Data backup and recovery protocols ensuring that player account data can be restored in the event of a hardware failure or infrastructure incident without loss of transactional integrity.

While 64ok takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords, enable two-factor authentication on their accounts, and contact support immediately if they suspect any unauthorised access to their 64ok Account.

14. Third-Party Links

The 64ok platform does not contain links to external third-party websites. All navigation within the platform remains within the https://64ok.io domain. In the event that any game content delivered by a certified third-party game studio provider opens within an embedded frame, that content is governed by the respective provider's own terms of service. 64ok has no control over the data practices of third-party game studios operating within their own licensed infrastructure, and we encourage you to review the privacy documentation of any provider whose game content you access.

64ok is not responsible for the content, privacy practices, or security standards of any third-party systems accessed through payment processing flows operated by bKash, Nagad, Rocket, Upay, or any other payment partner. When you are redirected to a payment provider's interface to authorise a transaction, you are subject to that provider's own privacy policy for the duration of that interaction.

15. Changes to This Privacy Policy

64ok reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, platform features, data processing practices, or regulatory guidance. When material changes are made, we will notify registered players by email to their registered address and by posting a prominent notice on the 64ok platform for a period of not less than 14 days prior to the changes taking effect.

The effective date at the top of this page will be updated each time the policy is revised. We encourage you to review this Privacy Policy periodically to stay informed about how 64ok protects your personal data. Your continued use of the platform after the revised policy takes effect constitutes your acknowledgement of the updated terms.

Archived versions of previous Privacy Policy editions are available upon written request to [email protected]. If you disagree with any changes made to this policy, you are entitled to close your account and request deletion of your personal data in accordance with Section 10 above.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 64ok handles your personal data, please contact our support team using the details below. All data-related correspondence is handled by trained staff and is treated with the strictest confidentiality.

When submitting a data rights request, please include your registered username and a brief description of your request so that we can verify your identity and locate your records efficiently. For account closure requests or erasure requests, additional identity verification may be required before we can act on the request.