Privacy Policy

01 Introduction and Scope

95ok ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers, or interacts with our platform. This Privacy Policy sets out in clear terms how 95ok collects, stores, processes, and protects the personal information of its users, in particular those based in Bangladesh.

This policy applies to all personal data processed in connection with your use of the 95ok website (https://95ok.io), its subdomains, mobile-optimised versions, and any communications sent to or from 95ok, including email, live chat, and support ticket exchanges. It covers data collected both automatically through your use of the platform and data you provide voluntarily during registration, verification, and day-to-day account activity.

95ok operates as an offshore online gambling platform. While we serve players primarily from the Bangladesh market, we operate in accordance with data protection principles recognised internationally, including purpose limitation, data minimisation, storage limitation, and the requirement to process personal data on a lawful basis. We take our data stewardship responsibilities seriously and treat the personal information of every 95ok player with the highest standard of care.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with 95ok. In any conflict between this Privacy Policy and those documents, this Privacy Policy governs in respect of personal data matters.

02 Information We Collect

95ok collects personal data from you through several channels: information you provide directly during registration and account use, information generated automatically through your interaction with the platform, and in some cases, information received from trusted third-party partners. Below is a detailed breakdown of each category.

2.1 Information You Provide Directly

When you register an account on 95ok or interact with our support team, you may provide the following personal data:

• Identity data: Full name, date of birth, nationality, and gender;
• Contact data: Email address and mobile phone number (used for account communication and two-factor authentication);
• Address data: City and district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar);
• Identity documents: Copies of your National Identity Card (NID), passport, or driving licence submitted for KYC verification;
• Payment data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), cryptocurrency wallet addresses, and partial card details for Visa/Mastercard transactions — full card numbers are never stored by 95ok;
• Support communications: The content of messages you send to our customer support team via live chat, email, or support tickets.

2.2 Information Collected Automatically

When you visit the 95ok platform, certain technical and behavioural data is collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting;
• Usage data: Pages visited, features used, games played, bets placed, session duration, clickstream data, and navigation paths within the platform;
• Transaction data: Deposit amounts, withdrawal requests, bonus activations, game outcomes, and betting history;
• Log data: Server-side logs capturing login events, failed authentication attempts, and security-relevant platform actions;
• Cookie data: Data collected via cookies and similar technologies as described in Section 5 of this policy.

2.3 Information from Third Parties

In certain circumstances, 95ok may receive personal data about you from third-party sources, including:

• Identity verification providers used to complete KYC checks on submitted documents;
• Payment processors and mobile wallet operators (bKash, Nagad, Rocket, Upay) in connection with deposit and withdrawal transactions;
• Fraud prevention and anti-money-laundering screening services;
• Advertising and affiliate partners who referred you to the 95ok platform (referral source data only — no sensitive personal data is received from affiliates).

2.4 Data We Do Not Collect

95ok does not collect or store full payment card numbers, card CVV/security codes, or online banking passwords. Payment transactions processed via Visa and Mastercard are handled entirely by PCI DSS-compliant third-party payment processors. 95ok receives only a transaction reference and a masked card identifier (e.g., last four digits) for reconciliation purposes.

03 How We Use Your Data

95ok processes your personal data only for clearly defined, legitimate purposes. We do not sell your personal data to third parties for their own marketing purposes. The table below summarises the primary purposes for which we use your data, along with the lawful basis for each.

3.1 Marketing Communications

95ok may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal promotions (such as BPL season offers, Eid specials, and Pohela Boishakh promotions), and platform updates. We will only send you marketing communications if you have opted in during registration or subsequently through your account settings. You may withdraw your consent at any time by updating your communication preferences in your account or by contacting us at [email protected]. Withdrawing marketing consent does not affect the lawfulness of communications sent prior to withdrawal.

3.2 Automated Decision-Making

95ok uses automated systems for certain fraud detection and responsible gaming monitoring functions. For example, unusual betting patterns or account activity may trigger an automated flag that results in a temporary account review. Where an automated process results in a decision that materially affects your account (such as a withdrawal hold), you have the right to request a manual review by a human member of the 95ok compliance team by contacting [email protected].

04 Data Sharing and Disclosure

95ok does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following limited circumstances, and only to the extent necessary for the specified purpose.

4.1 Service Providers and Processors

We work with a number of carefully selected third-party service providers who process personal data on our behalf. These include:

• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — game session data (player ID, game outcomes, stake amounts) is shared to facilitate game play and resolve disputes;
• Payment processors: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and card processing partners receive transaction data necessary to process deposits and withdrawals;
• Identity verification providers: KYC and document verification partners receive copies of identity documents submitted for age and identity verification;
• Fraud prevention services: Anti-fraud and AML screening providers receive device fingerprint, IP address, and transaction data for risk-scoring purposes;
• IT and hosting providers: Cloud infrastructure and hosting partners who store and process platform data on secure servers;
• Customer support platforms: Live chat and ticketing software providers who process the content of your support communications on our behalf.

All third-party processors are bound by data processing agreements that require them to process personal data only as instructed by 95ok, to maintain appropriate security measures, and to prohibit onward transfer of data without our consent.

4.2 Legal and Regulatory Disclosure

95ok may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where we are required to do so by applicable law, court order, or regulatory instruction. Such disclosures are made on a strictly need-to-know basis and are limited to the data specifically required by the requesting authority.

4.3 Business Transfers

In the event that 95ok undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, 95ok will take reasonable steps to ensure that your privacy rights continue to be respected under any new ownership structure, and you will be notified of any material change in the data controller's identity via the email address registered to your account.

05 Cookies and Tracking Technologies

The 95ok platform uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage objects) to enhance your experience, maintain session security, and gather analytics data. This section explains the types of cookies we use and how you can manage them.

5.1 Types of Cookies We Use

5.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, and delete cookies stored by individual websites. Please note that disabling cookies beyond strictly necessary ones may affect the functionality of certain platform features. Instructions for managing cookies can typically be found in your browser's Help or Settings menu.

For analytics cookies specifically, you may also opt out of anonymised tracking by adjusting your communication preferences in your 95ok account settings. Strictly necessary cookies cannot be opted out of, as they are essential to the secure operation of your account session.

06 Data Retention

95ok retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account data and KYC documents: Retained for the duration of your account and for a minimum of 5 years following permanent account closure, to meet anti-money-laundering record-keeping obligations;
• Transaction records: Retained for a minimum of 5 years following the date of each transaction;
• Support communications: Retained for 2 years from the date of the last interaction, or longer if relevant to an ongoing dispute or investigation;
• Analytics and usage data: Retained in anonymised or aggregated form for up to 3 years for platform improvement purposes;
• Marketing consent records: Retained for the duration of your account plus 1 year following account closure, to demonstrate compliance with consent requirements;
• Fraud investigation records: Retained for up to 7 years where fraud, money laundering, or other serious misconduct is suspected or confirmed.

Where personal data is no longer required, 95ok securely deletes or anonymises it in a manner that prevents reconstruction of the original data. Anonymised aggregated data (which cannot be linked back to any individual) may be retained indefinitely for statistical and product development purposes.

07 Your Privacy Rights

95ok respects your rights as a data subject. Regardless of your location in Bangladesh, you are entitled to exercise the following rights in relation to the personal data we hold about you:

7.1 Right of Access

You have the right to request a copy of the personal data 95ok holds about you. Upon receipt of a verified access request, we will provide you with a summary of your data within 30 days. Your first access request is provided free of charge; additional requests within a 12-month period may be subject to a reasonable administrative fee.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile information (such as your email address or phone number) directly within your account settings. For corrections to identity documents or date of birth, please contact [email protected] with appropriate supporting documentation.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that this right is not absolute: where 95ok has legal or regulatory obligations to retain your data (such as AML record-keeping requirements), we will not be able to delete certain data categories even upon request.

7.4 Right to Object

You have the right to object to the processing of your personal data where that processing is based on 95ok's legitimate interest. You also have an absolute right to object to the use of your data for direct marketing purposes at any time, without needing to provide a reason. To exercise this right, contact us at [email protected] or update your marketing preferences in your account settings.

7.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. You may also request that this data be transmitted directly to another controller where technically feasible.

7.6 Right to Restrict Processing

In certain circumstances — for example, while a rectification request is being assessed, or while you contest the lawfulness of processing — you have the right to request that 95ok restrict (rather than delete) the processing of your data.

08 Data Security

95ok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes the following key controls:

• Transport Layer Security (TLS): All data transmitted between your device and the 95ok platform is encrypted using 256-bit SSL/TLS encryption, preventing interception by third parties;
• Data encryption at rest: Sensitive data fields — including identity document records and payment information — are encrypted at the database level using industry-standard encryption algorithms;
• Access controls: Personal data is accessible only to 95ok staff and systems that have a legitimate operational need to process it. Access is role-based and subject to regular review;
• Intrusion detection: Our platform is monitored continuously for unusual activity patterns, attempted intrusions, and anomalous access events;
• Two-factor authentication: All 95ok administrative accounts require multi-factor authentication; players are strongly encouraged to enable 2FA on their own accounts;
• Security testing: The platform undergoes regular penetration testing and vulnerability assessments by qualified third-party security specialists;
• Incident response: 95ok maintains a documented security incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay.

While 95ok takes every reasonable step to secure your data, no digital platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials. We strongly advise you to use a unique, strong password for your 95ok account and to enable two-factor authentication. Never share your login details with anyone — 95ok staff will never ask for your password.

09 Third-Party Services

The 95ok platform integrates third-party services to deliver its full range of features. These include game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment partners (bKash, Nagad, Rocket, Upay, USDT, BTC, Visa, Mastercard), identity verification providers, and analytics tools. When you interact with any of these integrated services, the relevant third party may collect and process personal data subject to their own privacy policies.

95ok is not responsible for the privacy practices of third-party service providers. However, we take care to select partners who maintain data protection standards consistent with those described in this policy. All third-party processors who handle personal data on our behalf are bound by contractual data processing obligations.

The 95ok platform does not contain links to external third-party websites for general browsing purposes. Any third-party integrations present on the platform (such as embedded game iframes) operate within the 95ok environment and are governed by our contractual data processing agreements with those providers.

10 Changes to This Policy

95ok reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made — for example, changes that affect what data we collect, how we use it, or with whom we share it — we will notify registered players via the email address on file and post a prominent notice on the 95ok platform at least 14 days before the change takes effect.

Minor updates (such as typographical corrections, clarifications of existing practices, or changes that are required by law with immediate effect) may be made without advance notice. The "Last updated" date at the top of this policy will always reflect the date on which the most recent changes were made.

Your continued use of the 95ok platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes to this policy, you may request account closure as described in our Terms & Conditions. Historical versions of this policy are available on request by contacting [email protected].

11 Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 95ok handles your personal data, please contact us using the details below. We take all privacy concerns seriously and aim to resolve them promptly and fairly.

• Email: [email protected] (subject line: "Privacy Enquiry" or "Privacy Rights Request")
• Response time: We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a full response within 30 calendar days.
• Language: Enquiries may be submitted in English. Our support team serves Bangladesh Standard Time (BST, UTC+6) hours.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or seek red ress through applicable legal channels in your jurisdiction. We would, however, always encourage you to contact us directly first so that we have the opportunity to address your concern before any formal escalation.