15ok Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how 15ok ("15ok", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Member", "User", "you") who visit, register on, or otherwise interact with the 15ok online platform, including its website and any associated mobile application (collectively, the "Platform").

This Policy applies to all personal data collected in connection with the use of the Platform, regardless of the device or method used to access it. It applies to registered members, visitors who browse the Platform without registering, and any individual who contacts 15ok through any channel including email or live chat.

This Policy should be read alongside the 15ok Terms & Conditions and Responsible Gaming Policy, both of which are accessible from the footer of every page on this Platform.

2 Data Controller Identity

For the purposes of this Policy, the data controller responsible for the personal data collected through the 15ok Platform is the operating entity behind the brand 15ok, reachable at the email address [email protected]. All data protection enquiries, access requests, correction requests, and deletion requests should be directed to this address.

15ok is committed to handling all personal data in a manner consistent with responsible data stewardship principles and applicable data protection standards. While Bangladesh does not yet have a fully enacted comprehensive data protection statute equivalent to the EU's GDPR, 15ok voluntarily applies principles of data minimisation, purpose limitation, storage limitation, and data subject rights as a matter of platform policy.

3 Personal Data We Collect

3.1 Registration Data

When you create a 15ok account, we collect the following information:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify you meet the minimum age requirement of 21 years)
• Mobile phone number (active Bangladeshi number)
• Email address
• Preferred username and encrypted password
• Residential address (city and district within Bangladesh)

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and protect against fraud, we may request:

• National Identity Card (NID) number and image
• Passport copy (photo page)
• Proof of address documentation (utility bill or bank statement)
• Proof of payment method ownership (bKash, Nagad, or Rocket account confirmation screenshot)
• Selfie photograph for facial verification purposes

3.3 Financial Transaction Data

All deposits and withdrawals processed through the Platform generate transaction records that include payment method type (bKash, Nagad, Rocket, Upay, bank transfer), transaction reference numbers, amounts in BDT, and timestamps. These records are retained for regulatory and fraud prevention purposes.

3.4 Platform Usage Data

We automatically collect technical and behavioural data when you use the Platform, including:

• IP address and approximate geographic location (city level)
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on the Platform
• Betting and gaming history (game types played, wager amounts, outcomes)
• Session login and logout timestamps

3.5 Communication Data

When you contact 15ok support — whether by email, live chat, or any other channel — we retain a record of the communication, including your name, contact details, and the content of the conversation, for quality assurance and dispute resolution purposes.

4 How We Use Your Data

15ok uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your member profile throughout your relationship with 15ok.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods accurately and securely.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account creation, bonus abuse, and other prohibited conduct.
• Legal compliance: To meet our obligations under applicable anti-money laundering (AML) requirements and to respond to lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: To monitor betting patterns for signs of problem gambling and to implement self-exclusion, deposit limits, or account restrictions where requested or required.
• Customer support: To respond to queries, resolve disputes, and provide account assistance to members in English.
• Platform improvement: To analyse usage data in aggregate form to identify technical issues, improve the user experience, and develop new features for Bangladeshi members.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about 15ok offers and events.

5 Legal Basis for Processing

15ok processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, KYC documents, and financial transaction data is necessary to perform the contract between you and 15ok (i.e., to provide you with the betting and gaming services you have requested).
• Legal obligation: Certain data processing activities — particularly AML checks, identity verification, and transaction record-keeping — are required by applicable law and cannot be waived.
• Legitimate interests: We process Platform usage data and communication records based on our legitimate interest in operating a secure, fair, and compliant gaming platform. This interest is balanced against your right to privacy and does not override it.
• Consent: Where processing is not covered by the above bases (for example, sending you promotional communications), we will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

6.1 Service Providers

15ok engages carefully selected third-party service providers to assist with specific operational functions. These providers may process your personal data solely on our behalf and under our instruction, and are contractually required to maintain the same standard of data protection as 15ok. Categories of service providers include:

• Payment processors and mobile financial service intermediaries (bKash, Nagad, Rocket gateway integrators)
• Identity verification and KYC technology providers
• Game software suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — limited to session identifiers necessary for game operation
• Cloud hosting and IT infrastructure providers
• Customer support platform operators

6.2 Regulatory and Law Enforcement Disclosure

15ok may disclose personal data to government bodies, regulatory agencies, or law enforcement authorities where required to do so by applicable law, or where we have a good-faith belief that such disclosure is necessary to prevent, investigate, or respond to suspected criminal activity, fraud, or money laundering connected to Platform use.

6.3 Business Transfers

In the event that 15ok undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified by email or via a prominent Platform notice if such a transfer occurs, and your data will continue to be protected in accordance with this Policy.

6.4 No Sale of Personal Data

15ok does not and will not sell, rent, lease, or otherwise commercially exploit your personal data to any third-party advertiser, data broker, or marketing organisation. Your information is an asset held in trust — not a product.

7 Cookies and Tracking Technologies

The 15ok Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. Cookies are small text files placed on your device when you visit the Platform. They serve the following purposes:

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences (such as language settings and last-visited game categories) to personalise your experience across sessions.
• Analytics cookies: Collect anonymised data about how members use the Platform — which pages are most visited, where users drop off, and which features generate the most engagement. This data is used solely to improve the Platform.
• Security cookies: Detect and prevent suspicious activity such as automated bot access, session hijacking attempts, and abnormal betting patterns.

You may adjust your browser settings to refuse or delete cookies at any time. However, disabling essential cookies will prevent you from logging into your 15ok account and using core Platform features. Analytics and functional cookies may be disabled without affecting your ability to place bets or access your account.

8 Data Retention

15ok retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

Where a legal dispute, regulatory investigation, or law enforcement inquiry is ongoing at the time a retention period would otherwise expire, the relevant data will be preserved until the matter is fully resolved.

9 Data Security

15ok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment method details
• Multi-factor authentication options for member account access
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security professionals
• Automated intrusion detection systems monitoring for suspicious access patterns around the clock
• Secure data centre infrastructure with physical access controls and environmental protections

No security system is completely impenetrable, and 15ok cannot guarantee the absolute security of your data. However, we continuously review and update our security practices to address emerging threats and vulnerabilities.

10 Your Rights as a Member

As a 15ok member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt.

• Right of access: You have the right to request a copy of all personal data that 15ok holds about you, together with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request that 15ok delete your personal data where it is no longer necessary for the purpose for which it was collected, and where no overriding legal obligation requires its retention.
• Right to restrict processing: You may request that 15ok restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that 15ok provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where 15ok processes your data based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. 15ok will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

11 Children and Minors

The 15ok Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, store, or process personal data relating to any person under the age of 21. If a parent or guardian believes that a minor has provided personal data to 15ok without their knowledge, they should contact us immediately at [email protected].

Upon verification, 15ok will delete all data associated with the minor's account and close the account without delay. Age verification checks are applied during the registration process and may be repeated during the account lifecycle as part of our KYC obligations. Any account found to belong to a person under 21 years of age will be closed and any balance forfeited in accordance with the 15ok Terms & Conditions.

12 Changes to This Policy

15ok reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered members by email to their registered address and/or by displaying a prominent notice on the Platform for a minimum of 14 days before the changes take effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of the 15ok Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should discontinue your use of the Platform and request account closure prior to the effective date.

For any questions or concerns about this Privacy Policy, or about the way in which 15ok handles your personal data, please contact our support team in English at [email protected]. We are available 24 hours a day, 7 days a week, including during Eid, Pohela Boishakh, and other Bangladeshi public holidays.