nkok Privacy Policy

1. Introduction

nkok ("we", "us", "our") operates the online betting and casino platform accessible at https://nkok.lat and through the official nkok mobile application. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered users, prospective users who browse the site, and individuals who contact our support team.

This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom data may be shared, the safeguards we apply to protect your data, and the rights available to you as a data subject. This Policy should be read alongside the nkok Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with the platform.

By registering an account on the nkok platform or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease use of the platform and contact nkok support to request account closure.

2. Data We Collect

nkok collects personal data in several categories depending on the nature of your interaction with the platform. The table below outlines the primary categories of data we process:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where health-related data is voluntarily provided in the context of a responsible gaming request (for example, if a user discloses a gambling-related health condition when requesting self-exclusion).

3. How We Collect Data

nkok collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC (Know Your Customer) verification, submitting a support request, or participating in a promotion. This includes your name, email, date of birth, and payment method details.
• Automated collection: Technical and usage data collected automatically when you access the nkok platform through your browser or mobile application. This includes IP address logging, cookie-based session tracking, and device fingerprinting for fraud prevention purposes.
• Payment providers: Transaction confirmation data received from mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners when you make a deposit or withdrawal. nkok receives transaction reference data but does not store full mobile wallet PINs or banking passwords.
• Identity verification partners: Where nkok uses third-party KYC service providers to assist with document verification, those providers may supply us with verification outcome data (confirmed, rejected, pending) alongside the identity data you submitted.
• Game providers: Game session data (game launched, stake, outcome, session duration) transmitted by certified game studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in the course of normal gameplay.

4. Purpose of Processing

nkok processes your personal data for the following clearly defined purposes:

• Account management: Creating, maintaining, and administering your nkok user account, including authentication, password reset, and account recovery.
• Identity verification (KYC/AML): Verifying your identity and age (minimum 21 years) to comply with responsible gaming obligations and to prevent fraudulent account creation and money laundering activity.
• Payment processing: Processing deposits and withdrawals through your registered payment methods (bKash, Nagad, Rocket, Upay, and bank transfers), and maintaining an accurate transaction ledger on your account.
• Platform security: Detecting, investigating, and preventing fraudulent activity, cheating, bonus abuse, account takeover attempts, and other prohibited conduct as defined in the nkok Terms & Conditions.
• Responsible gaming: Monitoring usage patterns to identify potential problem gambling behaviours, administering self-exclusion requests, enforcing deposit limits, and maintaining cooling-off period records.
• Customer support: Responding to support queries, resolving account disputes, and maintaining records of communications for quality assurance and compliance purposes.
• Marketing and promotions: Sending promotional offers, bonus notifications, and platform updates to users who have not opted out of marketing communications. You may opt out at any time by contacting [email protected].
• Platform improvement: Analysing aggregated usage data to improve platform performance, game selection, payment flow, and user experience. Aggregated data used for this purpose does not identify individual users.
• Legal compliance: Retaining records as required to comply with applicable financial reporting, anti-money laundering, and data retention obligations.

5. Legal Basis for Processing

nkok processes personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and nkok — including account creation, payment processing, KYC verification, and support services. Without this processing, nkok cannot provide the services you have registered to use.
• Legitimate interests: Processing necessary for nkok's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics. nkok has assessed that these interests do not override your fundamental privacy rights.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering record-keeping and identity verification obligations.
• Consent: Processing of data for optional purposes — such as marketing communications and the use of non-essential cookies — where consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing & Disclosure

nkok does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared with third parties only in the following circumstances and under strict data processing controls:

• Payment processors: Your payment method details and transaction data are shared with the relevant mobile wallet or banking partner (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) solely to execute the payment you have requested.
• Identity verification providers: Your identity documents and personal data may be transmitted to a certified third-party KYC provider for the purpose of verifying your identity and age. These providers are contractually bound to process your data only for the stated KYC purpose.
• Game providers: Game session data including your username, stake amounts, and game outcomes is shared with the relevant game studio (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) as required to operate the game and resolve any game-related disputes.
• Technology service providers: nkok engages third-party technology partners for hosting, infrastructure, analytics, and security services. These partners process data on nkok's behalf under data processing agreements that prohibit unauthorised use of your data.
• Legal and regulatory disclosure: nkok may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by law, or where nkok reasonably believes disclosure is necessary to prevent fraud, protect the safety of users, or enforce its Terms & Conditions.

7. Data Retention

nkok retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active accounts: Personal data associated with an active nkok account is retained for the lifetime of the account plus a minimum of 5 years following account closure, in accordance with standard financial record-keeping and AML compliance obligations.
• Transaction records: Financial transaction data — including deposit and withdrawal records — is retained for a minimum of 7 years following the date of the transaction to comply with applicable financial reporting standards.
• KYC documents: Identity verification documents (national ID, passport copies, photograph) are retained for the duration of the account relationship plus 5 years following account closure. After this period, physical and digital copies are securely destroyed.
• Support communications: Records of support chat and email interactions are retained for 3 years from the date of the communication for quality assurance and dispute resolution purposes.
• Responsible gaming records: Self-exclusion records, deposit limit histories, and cooling-off period logs are retained for a minimum of 5 years to prevent the circumvention of responsible gaming restrictions by previously excluded users attempting to re-register.
• Marketing preferences: Opt-out records are retained indefinitely to ensure that users who have unsubscribed from marketing communications are not contacted again without fresh consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual user.

8. Data Security

nkok implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the nkok platform is encrypted in transit using industry-standard TLS protocols. The nkok website and application are served exclusively over HTTPS.
• Password hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm. nkok staff cannot view your password in plaintext; the stored value is a hash that cannot be reversed to recover the original password.
• Access controls: Access to personal data within nkok's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories necessary to perform their specific role.
• Session management: Authenticated sessions expire automatically after a period of inactivity to reduce exposure on shared or unattended devices. Users are advised to log out after each session on public or shared devices.
• Fraud detection systems: nkok operates automated monitoring systems that flag unusual account activity — including login attempts from unfamiliar locations, abnormal withdrawal patterns, and rapid account changes — for review by the security team.
• Data breach response: In the event of a confirmed data breach affecting user personal data, nkok will notify affected users and, where required, the relevant authorities within a reasonable timeframe, providing details of the nature of the breach and the steps taken to contain it.

9. Cookies & Tracking Technologies

nkok uses cookies and similar tracking technologies on its website and mobile application. Cookies are small data files stored on your device that help the platform function correctly and allow us to understand how users interact with the site. The following categories of cookies are used by nkok:

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your authenticated session, maintain your account state across page loads, and enable core features such as the game lobby and the account dashboard. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how users navigate the platform — which pages are visited most frequently, how long users spend in different sections, and where users encounter errors. This data is used exclusively to improve platform performance and user experience.
• Fraud prevention cookies: Device fingerprinting and session integrity cookies are used to detect and prevent account takeover attempts, multi-account abuse, and bonus fraud. These cookies are part of nkok's security infrastructure.
• Preference cookies: These cookies remember your platform preferences — such as your preferred language setting and display options — so that you do not need to reconfigure them on each visit.

nkok does not use third-party advertising cookies or serve targeted advertising based on your browsing behaviour. If you wish to manage or disable non-essential cookies, you may do so through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of the nkok platform.

10. Your Data Rights

As a user of the nkok platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact nkok support at [email protected] with the subject line "Data Rights Request" and your registered account email address.

• Right of access: You have the right to request a copy of the personal data nkok holds about you. We will provide this information within 30 days of receiving a valid request.
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data held by nkok. Where data forms part of a regulated financial record, corrections may be subject to audit controls.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to nkok's legal retention obligations. Data subject to mandatory financial retention periods cannot be deleted until those periods have elapsed.
• Right to restrict processing: You have the right to request that nkok restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing pending verification of legitimate grounds.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) where technically feasible, and to request that this data be transmitted to another service provider where applicable.
• Right to object: You have the right to object to the processing of your personal data for marketing purposes at any time. You also have the right to object to processing based on nkok's legitimate interests, subject to nkok demonstrating compelling grounds for continued processing.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

nkok will respond to all data rights requests within 30 calendar days. In complex or high-volume cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

11. Protection of Minors

The nkok platform is strictly intended for adults aged 21 years and above. nkok does not knowingly collect personal data from individuals under the age of 21. If nkok becomes aware that personal data belonging to a minor has been collected — whether through a fraudulent registration or any other means — that data will be deleted and the associated account will be closed immediately.

Parents and guardians who believe that a minor in their care has registered an account on the nkok platform are encouraged to contact nkok support immediately at [email protected]. nkok will act on all such reports as a matter of priority. We also recommend that parents and guardians use parental control software to restrict access to gambling platforms on shared or family devices.

12. Third-Party Services & Links

The nkok platform may reference or integrate services provided by certified third-party game studios and payment providers. These third parties operate under their own privacy policies, and nkok is not responsible for the data practices of any third party beyond the contractual data processing obligations described in Section 6 of this Policy.

Game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — operate game engines on servers maintained by those studios. When you play a game on the nkok platform, certain technical session data is transmitted to the relevant game provider's servers as an operational necessity. This data sharing is governed by data processing agreements between nkok and each provider.

Payment providers — including bKash, Nagad, Rocket, and Upay — process your payment transaction data under their own terms and privacy policies. nkok recommends that you review the privacy policy of your chosen payment provider independently. nkok does not control and is not responsible for the data handling practices of these providers beyond the point of transaction initiation.

13. Changes to This Privacy Policy

nkok may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. Where changes are material — for example, a change in the categories of data we collect or a new purpose for processing — nkok will notify registered users by email to their registered address or by a prominent notice displayed upon login, with a minimum of 7 days' advance notice before the changes take effect.

Minor updates — such as corrections of typographical errors, clarification of existing provisions, or updates to contact information — may be made without advance notice. The "Effective" date displayed in the hero section of this page and the version number in the table of contents sidebar will be updated each time a revision is published.

Your continued use of the nkok platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated Policy. If you do not agree with any changes to this Policy, you should cease use of the platform and contact nkok support to request account closure.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about nkok's data handling practices, please contact the nkok data support team using the details below. All communications should be in English and should include your registered account email address to assist with identification.

nkok takes all privacy complaints seriously. Upon receipt of a complaint, nkok will acknowledge it within 48 hours and provide a substantive response within 14 calendar days. If you are not satisfied with nkok's response to a privacy complaint, you retain the right to seek further recourse through applicable legal channels available in your jurisdiction.