qk0k Privacy Policy — Your Data, Handled With Care

qk0k ("we", "us", "our") operates the online casino and sports betting platform accessible at https://qk0k.io (the "Platform"). We are committed to protecting and respecting the privacy of every individual who interacts with the Platform, whether as a registered player, a visitor browsing our pages, or a support contact.

This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed. Please read this policy carefully to understand our practices regarding your personal data. By registering an account, making a deposit, placing a bet, or continuing to use the Platform after this policy's effective date, you confirm that you have read and understood its contents.

This Privacy Policy should be read alongside our Terms & Conditions, which are published at qk0k.io/terms-conditions. In the event of a conflict between this policy and the Terms & Conditions on a data-privacy matter, this Privacy Policy prevails.

For the purposes of applicable data protection legislation, qk0k is the data controller in respect of the personal data of its registered players and Platform visitors. As data controller, qk0k determines the purposes for which, and the means by which, your personal data is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our dedicated data privacy contact:

• Contact name: Data Privacy Team, qk0k
• Contact email: [email protected] (subject line: "Data Privacy Request")
• Response window: Within 30 calendar days of receipt of a valid request
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

When submitting a data request, please include your registered username, the email address associated with your account, and a clear description of your request. This allows our team to locate your records promptly and respond accurately within the required timeframe.

qk0k collects personal data in the following categories, depending on your level of interaction with the Platform:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or health data, except where the collection of health-related information is strictly necessary to honour a self-exclusion or responsible gaming request.

qk0k collects personal data through the following channels:

• Direct interactions: When you complete the registration form, submit identity verification documents, make a deposit, request a withdrawal, contact support, submit a complaint, or configure your account settings — you are providing data to us directly.
• Automated technologies: As you navigate the Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies (see Section 8 for full cookie details).
• Payment providers: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a card network, the relevant payment provider shares transaction confirmation data with qk0k to allow us to credit your account and reconcile our financial records.
• Identity verification providers: Where we engage a third-party identity verification service to confirm your age and identity, that provider may share the results of its verification checks with qk0k. The raw identity documents you submit are handled directly by the verification provider under their own privacy policy.
• Fraud prevention and analytics services: We receive aggregated and anonymised risk signals from fraud detection partners based on your device fingerprint, IP address, and behavioural patterns. These signals inform our anti-fraud decisions but are not used to profile you for advertising.

qk0k processes your personal data under the following legal bases:

• Performance of a contract: The majority of our data processing activities are necessary to perform the contract we have with you as a registered player — including account creation, payment processing, game delivery, and customer support.
• Compliance with a legal obligation: Certain processing activities — including identity verification, anti-money laundering checks, and the retention of transaction records — are required by applicable law and cannot be waived by either party.
• Legitimate interests: qk0k processes Technical Data, Usage Data, and fraud prevention data on the basis of its legitimate interest in operating a secure, fair, and commercially viable platform. We have assessed that this processing does not override your fundamental privacy rights.
• Consent: Where processing is not covered by the above bases — for example, sending you promotional emails about bonuses, seasonal offers (Eid, Pohela Boishakh, BPL season), and new game launches — we rely on your explicit consent, which you may withdraw at any time.

The personal data we collect is used for the following purposes:

• Account management: Creating, maintaining, and securing your qk0k account; verifying your identity; managing password resets and SMS OTP authentication.
• Payment processing: Processing deposits from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard; processing withdrawal requests to verified payment methods; maintaining transaction records.
• Game delivery: Providing access to cricket betting (BPL, Bangladesh Tigers, IPL, T20 World Cup), live casino (Teen Patti, Andar Bahar, Roulette, Baccarat, Blackjack), slots, crash games (Mines, Lucky Dragons), and all other Platform content.
• Responsible gaming: Monitoring gameplay data to identify patterns consistent with problem gambling; enforcing deposit limits, cooling-off periods, and self-exclusion requests; sending responsible gaming alerts and session time notifications.
• Fraud and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Platform improvement: Analysing aggregated usage patterns to identify technical issues, optimise the user interface, and develop new features that improve the overall experience for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
• Customer support: Responding to enquiries, resolving disputes, investigating complaints, and maintaining records of support interactions for quality assurance purposes.
• Marketing (with consent): Sending promotional communications about bonuses, new game launches, seasonal offers, and platform updates to users who have opted in to receive such communications.
• Legal compliance: Meeting obligations imposed by applicable law, including retaining financial records, responding to lawful requests from regulatory or law enforcement authorities, and complying with anti-money laundering requirements.

qk0k does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only with parties who are contractually required to handle it securely and in accordance with applicable data protection law:

• Payment service providers: bKash, Nagad, Rocket (Dutch-Bangla Mobile Banking), Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data necessary to process your transactions. Each provider operates under its own privacy policy, which we recommend you review.
• Identity verification providers: Third-party providers engaged to verify your National Identity Card (NID), passport, or date of birth receive identity document data solely for verification purposes. They are prohibited from using this data for any other purpose.
• Fraud detection and risk management partners: We share Technical Data and transaction metadata with fraud prevention services to assess the risk profile of transactions. These providers process data on our behalf under data processing agreements and cannot use the data independently.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers to deliver game content. They do not receive your name, contact details, or payment information.
• Analytics and performance monitoring: Aggregated, anonymised usage data is shared with analytics providers to help us understand Platform performance. No personally identifiable information is included in these data transfers.
• Legal and regulatory authorities: Where required by applicable law, court order, or the lawful request of a regulatory or law enforcement authority, qk0k will disclose personal data to the relevant authority. We will notify you of any such disclosure where permitted by law.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of qk0k's business, personal data held by qk0k may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new controller before the transfer takes effect.

qk0k uses cookies and similar technologies (collectively "cookies") to ensure the Platform functions correctly, to improve your experience, and to understand how our pages are used. A cookie is a small text file stored on your device by your browser when you visit a website.

qk0k does not use third-party advertising cookies or behavioural targeting cookies. You may manage cookie preferences through your browser settings at any time. Please note that restricting essential cookies may impair your ability to log in, make deposits, or access games on the Platform.

qk0k retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with qk0k, and for a period of five (5) years following permanent account closure, to meet anti-money laundering and regulatory record-keeping obligations.
• Transaction and financial data: Retained for seven (7) years following the date of each transaction, in accordance with standard financial record-keeping requirements.
• Gameplay data: Retained for three (3) years following the date of each gaming session, for the purposes of dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Customer support communications: Retained for three (3) years following the closure of the relevant support ticket or complaint, for quality assurance and dispute resolution purposes.
• Cookies and usage data: Session cookies are deleted automatically when you close your browser. Persistent cookies expire at the intervals specified in their settings, typically between 30 days and 12 months.
• Self-exclusion records: Retained indefinitely to ensure that a self-excluded player cannot inadvertently or deliberately re-register during their exclusion period.

When data is no longer required for any of the above purposes, qk0k will securely delete or anonymise it in accordance with our internal data destruction procedures.

qk0k employs a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• Transport encryption: All data transmitted between your device and the qk0k Platform is protected by TLS 1.3 / 256-bit SSL encryption. This protects your login credentials, payment details, and game interactions from interception during transit.
• Data-at-rest encryption: Personal data stored in qk0k's databases is encrypted using AES-256, an industry-standard symmetric encryption algorithm. Encryption keys are managed separately from the encrypted data and rotated on a regular schedule.
• Password security: Passwords are never stored in plain text. qk0k uses a strong one-way hashing algorithm with individually generated salts for each account, ensuring that a breach of the password database cannot expose usable credentials.
• Two-factor authentication: All registered players are encouraged to enable SMS OTP-based two-factor authentication. Staff accounts with access to personal data are required to use multi-factor authentication as a mandatory security control.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access necessary to perform their role. Access permissions are reviewed quarterly and revoked promptly upon role change or departure.
• Anomaly detection: Our security systems monitor login patterns, transaction activity, and API usage in real time to detect and respond to unusual behaviour that may indicate a data security incident.
• Incident response: In the event of a confirmed personal data breach that poses a risk to your rights and interests, qk0k will notify affected users and relevant authorities within the timeframes required by applicable law.

As a data subject, you have the following rights in relation to the personal data qk0k holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Privacy Request". We will respond within 30 calendar days of receiving a valid and verifiable request.

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed, the legal basis for processing, and the categories of recipients with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal retention obligations described in Section 9.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

With your consent, qk0k may send you marketing communications about promotions, bonuses, new game launches, seasonal offers (including Eid, Pohela Boishakh, BPL season, Victory Day, and Independence Day promotions), and platform news via email and SMS to your registered Bangladeshi mobile number.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email.
• Replying "STOP" to any marketing SMS received from qk0k.
• Updating your communication preferences within the Account settings panel.
• Contacting [email protected] with a request to opt out of all marketing communications.

Opting out of marketing communications does not affect transactional communications — you will continue to receive account security alerts, deposit and withdrawal confirmations, identity verification requests, responsible gaming notifications, and other service-critical messages that are necessary for the operation of your account.

The qk0k Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, store, or process personal data relating to individuals under the age of 21. If you are under 21 years of age, you must not register an account, access the Platform, or provide any personal data to qk0k.

If qk0k becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and permanently close the associated account. Any balance in the account will be handled in accordance with our Terms & Conditions and applicable law.

We urge all registered players to take reasonable steps to prevent minors in their household from accessing the Platform or their qk 0k account credentials. If you suspect that a minor has accessed your account or the Platform, please contact us immediately at [email protected] so we can assist you in securing your account.

The qk0k Platform may contain references to third-party payment providers and game studios. While we strive to ensure that all referenced services maintain high privacy and security standards, qk0k is not responsible for the privacy practices or content of any third-party website, application, or service.

This Privacy Policy applies solely to data collected and processed by qk0k in connection with the Platform. We strongly recommend that you review the privacy policies of any third-party services you interact with — including bKash, Nagad, Rocket, Upay, and your chosen bank — before providing them with your personal data.

The inclusion of a reference to a third-party payment provider or game studio on the Platform does not constitute an endorsement of that party's privacy practices by qk0k.

qk0k reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, or applicable law. When we make material changes to this policy, we will notify registered players by email to their registered address and/or by displaying a prominent notice on the Platform for a minimum of 14 days before the changes take effect.

The "Last Updated" date at the top of this policy reflects the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how qk0k protects your personal data. Your continued use of the Platform after a revised policy has taken effect constitutes your acceptance of the updated terms.

For changes that materially affect how we process data that was previously collected on the basis of your consent, we will seek fresh consent from you before applying the new processing purposes to your existing data.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way qk0k handles your personal data, please contact our Data Privacy Team in the first instance:

• Email: [email protected] (subject line: "Privacy Policy Enquiry" or "Data Privacy Complaint")
• Response time: Within 30 calendar days of receipt of a valid request
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

We are committed to resolving all data privacy concerns promptly, fairly, and transparently. When submitting a complaint, please provide as much detail as possible about the nature of your concern, including your registered username, the relevant dates, and any reference numbers you hold. This will help us investigate and respond to your complaint as efficiently as possible.

All privacy-related communications are handled in English. Our Data Privacy Team is trained to handle sensitive data requests with discretion and professionalism, and all team members operate under strict confidentiality obligations.