ukok Privacy Policy —
Your Data, Our Responsibility

1 Introduction

Welcome to the ukok Privacy Policy. ukok ("we", "us", "our") operates the online betting and casino platform accessible at ukok.io, serving registered players primarily located in Bangladesh. We are committed to handling the personal data of every player — and every visitor to our platform — with transparency, integrity, and the highest practical standard of security.

This Privacy Policy sets out in clear English what personal information ukok collects from you, the purposes for which we process it, the legal grounds on which we rely, how long we retain it, who we may share it with, and the rights you hold in relation to your own data. It applies to all data processing activities conducted by ukok in connection with the platform, including the website at ukok.io, any mobile-optimised version of the platform, live chat and support communications, payment processing, and marketing communications where you have opted in.

This Privacy Policy should be read together with the ukok Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. By creating a ukok account or by continuing to use the platform after this policy has been published or updated, you acknowledge that you have read and understood the practices described herein.

2 Data Controller

For the purposes of this Privacy Policy, ukok is the data controller in respect of all personal data collected and processed through the ukok platform. As data controller, ukok determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data-related enquiries, subject access requests, deletion requests, and other exercises of data rights should be directed to the ukok Privacy team using the contact details provided in Section 15 of this policy. ukok will respond to all verified data rights requests within a reasonable period, and in any event within 30 calendar days of receipt of a valid request.

3 Data We Collect

ukok collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarises the main categories of personal data we collect, along with examples of the specific data items within each category:

3.1 Special Category Data

ukok does not intentionally collect special category personal data (also known as sensitive personal data), such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than for identity verification purposes where you submit a selfie as part of KYC), health data, or data concerning sexual orientation. If you voluntarily disclose special category data to us — for example, by disclosing a health condition when requesting a responsible gaming accommodation — we will treat such data with the highest degree of confidentiality and will process it solely for the purpose for which it was disclosed.

3.2 Data We Do Not Collect

For the avoidance of doubt, ukok does not collect or store your full bKash PIN, Nagad PIN, Rocket PIN, or online banking passwords at any point in the payment process. All mobile financial service (MFS) transactions are processed through encrypted, tokenised payment gateway connections. ukok servers receive only a transaction reference and confirmation status — never your full MFS credentials.

4 How We Collect Your Data

ukok collects personal data through the following channels and mechanisms:

4.1 Directly From You

The majority of personal data held by ukok is provided directly by you in the course of using the platform. This includes data you submit during account registration, data you provide when completing KYC verification, information you supply when making a deposit or withdrawal request, and communications you send to the ukok support team via live chat, email, or WhatsApp.

4.2 Automatically Via the Platform

When you visit ukok.io or use the platform, certain technical and behavioural data is collected automatically by our servers and through cookies and similar tracking technologies. This data includes your IP address, device identifiers, session timestamps, pages visited, features used, and in-platform navigation patterns. This automatic data collection helps ukok maintain platform security, detect fraud, and improve the overall user experience for Bangladesh players.

4.3 From Third-Party Service Providers

ukok may receive personal data about you from third-party service providers in limited circumstances, including:

• Identity Verification Partners: Third-party KYC and document verification services may return verification results, risk scores, and identity confirmation statuses to ukok after processing documents you submit.
• Payment Processors: Payment gateway providers transmit transaction status data (success, failure, reference number) to ukok after processing your deposit or withdrawal request.
• Fraud & AML Screening Providers: Anti-money laundering and fraud detection services may provide risk assessments or sanctions screening results associated with your identity data to ukok as part of our compliance obligations.
• Analytics Providers: Aggregated, anonymised behavioural analytics may be received from analytics platforms to help ukok understand broad usage trends. ukok does not receive individually identified data from analytics providers.

5 How We Use Your Data

ukok processes your personal data for the following specific purposes. We only use your data where we have a valid legal basis for doing so (see Section 6).

• Account Management: Creating and maintaining your ukok account, verifying your identity, processing login authentication, and managing account settings and preferences.
• Service Delivery: Enabling you to place bets, play casino games, use live streaming features (W Live), and access all other platform services available to registered Bangladesh players.
• Transaction Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels; maintaining accurate transaction records; and resolving payment disputes.
• KYC & Identity Verification: Fulfilling our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements, including verifying your age (21+), identity, and source of funds where required.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, bonus abuse, and other forms of prohibited conduct on the platform.
• Responsible Gaming: Monitoring gaming behaviour for signs of potential problem gambling, enforcing deposit and loss limits you have set, processing cooling-off and self-exclusion requests, and complying with responsible gaming obligations.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregated usage data to improve platform features, fix technical issues, optimise performance, and develop new services for Bangladesh players.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time via your account settings.
• Legal Compliance: Meeting our obligations under applicable laws and regulations, including responding to lawful requests from regulatory or law enforcement authorities.

6 Legal Basis for Processing

ukok relies on the following legal bases for processing your personal data, depending on the specific processing activity:

Where ukok relies on legitimate interests as the legal basis for processing, we have conducted an assessment to confirm that our legitimate interests are not overridden by your interests, rights, or freedoms. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to the withdrawal.

7 Data Sharing & Third Parties

ukok does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your personal data may be shared with third parties only in the specific and limited circumstances described below.

7.1 Service Providers

ukok works with carefully selected third-party service providers who process personal data on our behalf, under strict data processing agreements, solely for the purposes of delivering the services described in this policy. These include payment gateway providers (for processing bKash, Nagad, Rocket, Upay, and bank transactions), identity verification and KYC partners, fraud detection and AML screening services, cloud infrastructure and hosting providers, customer support platform operators, and email and SMS communication delivery services.

7.2 Gaming Content Providers

Casino game and live dealer content on the ukok platform is provided by third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive limited technical session data (such as a session token and game round ID) necessary to render and settle game rounds. They do not receive your full personal profile or financial data.

7.3 Legal & Regulatory Disclosure

ukok may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of ukok, its players, or third parties. ukok will always seek to minimise the scope of any such disclosure to what is strictly necessary.

7.4 Business Transfers

In the event that ukok undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change in data controller identity prior to the transfer taking effect, to the extent practicable.

8 Cookies & Tracking Technologies

ukok uses cookies and similar technologies (such as web beacons and local storage objects) to operate the platform, maintain your logged-in session, remember your preferences, and collect analytics data. Cookies are small text files stored on your device when you visit ukok.io.

8.1 Types of Cookies We Use

You can control cookie settings via your browser's built-in privacy controls. Disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling analytics cookies will not affect your ability to use the platform but may reduce our ability to improve features based on usage data. ukok does not use third-party advertising cookies or cross-site tracking cookies.

9 Data Retention

ukok retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Where a legal hold is in place — for example, where an account is under investigation for fraud or AML concerns — the relevant data will be retained beyond the standard retention periods stated above until the matter is fully resolved. After the applicable retention period expires, personal data is securely deleted or anonymised in accordance with ukok's internal data disposal procedures.

10 Data Security

ukok takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ukok servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to login sessions, payment transactions, form submissions, and support communications.
• Encrypted Data Storage: Sensitive data fields — including identity document information and payment references — are encrypted at rest in ukok's database systems using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. ukok staff can only access the specific data categories relevant to their role. All data access is logged and subject to audit.
• Two-Factor Authentication (2FA): ukok offers SMS-based 2FA for all player accounts and requires 2FA for all internal administrative access to production systems.
• Regular Security Audits: ukok conducts periodic vulnerability assessments and penetration testing of the platform to identify and remediate security weaknesses before they can be exploited.
• Incident Response: ukok maintains an internal data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, ukok will notify affected Players without undue delay and take immediate containment measures.

11 Your Data Rights

As a ukok platform user, you hold the following rights in relation to your personal data. ukok will respond to all verified rights requests within 30 calendar days. To exercise any of the rights listed below, contact the ukok Privacy team at [email protected] with your registered account username and a description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data ukok holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update most account details directly through your account profile settings after login.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal obligations such as AML data retention requirements.
• Right to Restriction: You have the right to request that processing of your personal data be restricted in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where ukok relies on legitimate interests as the legal basis, including for profiling purposes. You may also object to direct marketing communications at any time via your account marketing preferences.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

12 Children and Minors

The ukok platform is strictly intended for adults aged 21 and above. ukok does not knowingly collect personal data from individuals under the age of 21. If ukok discovers — through KYC verification, age verification checks, or any other means — that personal data has been submitted by a person under the age of 21, that account will be immediately suspended, all associated data will be reviewed, and winnings generated during the underage period will be voided in accordance with the ukok Terms & Conditions.

If you are a parent or guardian and believe that a person under the age of 21 in your household has created a ukok account or submitted personal data to the platform, please contact us immediately at [email protected]. We will take immediate action to investigate the matter and delete any data collected from the underage individual.

ukok strongly encourages parents and guardians to use device-level parental control software to restrict access to online gambling platforms for minors in their households. A range of free parental control tools are available for Android and iOS devices commonly used in Bangladesh.

13 Third-Party Links

The ukok platform may, from time to time, contain references to third-party game providers or payment partners. While ukok takes care to work only with reputable third parties, this Privacy Policy applies solely to data processed by ukok and does not govern the privacy practices of any third party. ukok is not responsible for the privacy policies or data handling practices of any external entity, including game studios, payment processors, or identity verification partners operating under their own separate privacy frameworks.

ukok does not embed third-party advertising networks, social media tracking pixels, or external analytics scripts that transmit your personal data to unrelated platforms. All analytics carried out by ukok are conducted using first-party data collected within the ukok platform environment.

14 Changes to This Privacy Policy

ukok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer to Bangladesh players. When we make material changes to this policy, we will notify you by posting a prominent notice on the ukok platform and, where we hold a valid email address for your account, by sending a notification to that address at least 14 days before the changes take effect.

The "Effective Date" shown at the top of this Privacy Policy indicates when the current version came into force. We encourage you to review this policy periodically to stay informed about how ukok protects your personal data. Your continued use of the ukok platform after a revised Privacy Policy has taken effect constitutes your acknowledgement of the updated terms.

If you do not agree with any material change to this Privacy Policy, you have the right to close your ukok account before the change takes effect by contacting the support team. Any data collected prior to account closure will continue to be held in accordance with the retention periods described in Section 9, as required by applicable law.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ukok processes your personal data, please contact the ukok Privacy team through any of the following channels. All communications should be in English. Our team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

For formal data rights requests — including subject access requests, erasure requests, and data portability requests — please use the email channel above and include your registered account username, the nature of your request, and a copy of a government-issued ID for identity verification purposes. ukok will acknowledge receipt of all formal data rights requests within 5 business days and will aim to provide a full response within 30 calendar days.

If you are not satisfied with ukok's response to a data rights request or privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.