15ok Privacy Policy

1.1 Registration Data

When you create a 15ok account, we collect the information you provide in the registration form. This includes your full legal name, date of birth, email address, mobile phone number, and the country and city of your residence within Bangladesh (for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar). This data is necessary to create and administer your account, confirm your eligibility to use the platform, and communicate with you about your account activity.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, 15ok may request copies of official identity documents from you at any stage of your account relationship. Accepted documents include a Bangladesh National Identity Card (NID), a valid passport, or a birth certificate accompanied by a government-issued photo ID. This data is collected strictly for the purposes of verifying your age, confirming your identity, and complying with applicable anti-money laundering standards.

1.3 Financial and Payment Data

When you make a deposit or request a withdrawal, 15ok collects transaction records including the payment method used (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, or Mastercard), the transaction amount in BDT, the date and time of the transaction, and a reference identifier. 15ok does not store full card numbers or mobile wallet PINs. Payment processing is handled via secure third-party payment processors who operate under their own data protection obligations.

1.4 Account Activity Data

15ok logs all in-platform activity associated with your account. This includes bets placed and their outcomes, games played (sports betting, live casino, slots, crash games), session durations, login timestamps, IP addresses, and device identifiers. This data is used to manage your account, detect fraud, investigate disputes, enforce our Terms & Conditions, and compile anonymised aggregate platform statistics.

1.5 Technical and Device Data

When you access 15ok via a web browser, our servers automatically receive certain technical information. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, referring URL, and the pages of the 15ok platform that you visit. This information is used for security monitoring, platform performance optimisation, and diagnosing technical issues.

1.6 Support Communications

When you contact 15ok through live chat, email ([email protected]), or WhatsApp (visible in your account profile after login), the content of those communications is recorded and retained. This allows us to review interaction history for quality assurance, resolve ongoing disputes, and maintain a complete record of support interactions relating to your account.

2.1 Platform Operation. The primary use of your personal data is to operate and deliver the 15ok platform to you. This includes creating and managing your account, processing your deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and other supported payment partners, recording your bets and game results, and providing you access to sports betting markets (including BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures), live casino tables, slots, and all other 15ok gaming products.

2.2 Identity Verification and Compliance. 15ok uses KYC data and financial transaction records to verify player identity, confirm minimum age requirements (18+), and comply with anti-money laundering obligations. Where unusual account activity is detected, we may use stored data to investigate the matter, freeze implicated funds pending review, and report to relevant authorities if legally required to do so.

2.3 Security and Fraud Prevention. Technical and device data — including IP addresses, login timestamps, and session records — is used continuously to detect and prevent unauthorised account access, detect duplicate account registrations, identify automated betting software, investigate collusion between players, and flag suspicious financial activity. Fraud prevention is a core use of personal data at 15ok and is considered a legitimate interest that cannot be opted out of while an account remains active.

2.4 Customer Support. Support communication records are used to review your account history when you contact 15ok with a query or complaint, to resolve disputes fairly based on documented evidence, and to train and assess the quality of the 15ok support team. Support records are linked to your account ID and are accessible to authorised support staff only.

2.5 Responsible Gaming Monitoring. 15ok uses account activity data — including session frequency, bet frequency, deposit patterns, and self-exclusion history — to monitor for signs of problem gambling behaviour. Where indicators of at-risk behaviour are identified, 15ok may proactively contact you to discuss responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion options. Visit our Responsible Gaming page for full details on the tools available.

2.6 Platform Improvement and Analytics. Anonymised and aggregated usage data — from which individual players cannot be identified — is used to analyse platform performance, understand which features and game categories are most popular among players in Bangladesh, and inform decisions about new features, promotional offers, and user experience improvements. This analysis does not involve profiling individual players for marketing purposes.

2.7 Legal Obligations. 15ok may use or disclose your personal data where required to do so by a valid legal process, court order, or applicable law. In such cases, 15ok will disclose the minimum amount of information necessary to satisfy the legal requirement and will, where legally permissible, notify you of the disclosure.

3.1 Payment Processors. To facilitate deposits and withdrawals, 15ok shares the minimum necessary transaction data with our payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each payment partner processes transaction data under their own privacy and data security policies. 15ok does not transmit full payment credentials to these partners — only the transaction reference, amount, and account holder details required to complete the transfer.

3.2 Game Providers. 15ok integrates games from internationally accredited studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game from one of these providers within the 15ok platform, a session identifier and game stake data may be shared with the provider solely for the purpose of delivering and recording the game outcome. Game providers do not receive your full registration profile.

3.3 Identity Verification Services. Where 15ok uses a third-party KYC or identity verification service to process document checks, your submitted identity documents and biographical data will be transmitted to that service provider under a strict data processing agreement. The provider is authorised to use your data only for the specific verification purpose requested by 15ok.

3.4 Legal and Regulatory Disclosure. 15ok may disclose personal data to law enforcement agencies, financial intelligence units, or other governmental authorities where required by a valid legal order or where 15ok determines in good faith that such disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. 15ok will not disclose data to government authorities beyond what is legally required.

3.5 Business Transfers. In the event that 15ok undergoes a corporate restructuring, merger, acquisition, or asset sale, your personal data may form part of the transferred assets. In such an event, 15ok will take reasonable steps to ensure that the receiving entity provides a comparable standard of data protection and that you are notified of any material change in data controller before the transfer takes effect.

3.6 No Marketing Data Sales. 15ok does not and will not sell, lease, or otherwise transfer your personal data to any advertising network, data broker, or external marketing platform. Your 15ok account activity, preferences, and personal details are not used to build profiles for third-party advertising purposes.

4.1 What Are Cookies. Cookies are small text files that a website stores on your browser or device when you visit. They allow the site to remember information about your visit — such as your preferred language, your login session status, and pages you have viewed — so that the site can function correctly and provide a consistent experience across multiple visits.

4.2 Types of Cookies Used by 15ok

4.3 Managing Cookies. You can control non-essential cookies through your browser's settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Please note that disabling essential or security cookies will prevent you from logging into your 15ok account and may impair the functionality of the platform. Instructions for managing cookies are available in the help documentation of your browser.

4.4 No Cross-Site Tracking. 15ok does not use cookies or tracking pixels to follow your activity on third-party websites outside of the 15ok platform. Our analytics data is limited to on-platform behaviour and is used in anonymised, aggregated form only.

5.1 Active Account Data. While your 15ok account remains open and active, 15ok retains all registration data, account activity records, and transaction history associated with your account. This data is necessary to deliver platform services, investigate disputes, and comply with ongoing regulatory requirements.

5.2 Post-Closure Retention. Following the closure of a 15ok account — whether voluntary or enforced — 15ok retains certain categories of personal data for a minimum period of five (5) years from the date of closure. This retention period is driven by anti-money laundering obligations and the need to maintain records sufficient to respond to regulatory enquiries, legal claims, and dispute investigations that may arise after account closure.

5.3 KYC Document Retention. Copies of identity documents submitted for KYC verification are retained for a minimum of five (5) years from the date of submission, or for five (5) years following account closure, whichever is later. This reflects the standard retention obligation applicable to identity records in the context of anti-money laundering compliance.

5.4 Support Communication Records. Records of live chat sessions, email correspondence, and other support interactions are retained for a period of three (3) years from the date of the interaction, or until account closure plus three (3) years, whichever is later.

5.5 Technical and Device Logs. Server logs containing IP addresses, session identifiers, and device data are retained for a maximum period of twelve (12) months, after which they are automatically deleted or anonymised. Logs related to specific security incidents may be retained for longer where an investigation is ongoing.

5.6 Deletion Requests. Where a player submits a valid data deletion request and no legal retention obligation prevents deletion, 15ok will delete or anonymise the relevant data within thirty (30) days of confirming the request. 15ok will notify you when the deletion has been completed or, where a legal retention obligation applies to specific data categories, explain which data must be retained and for how long.

6.1 Encryption in Transit. All data exchanged between your browser or device and the 15ok platform is encrypted using 256-bit SSL/TLS encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission over any network, including mobile data networks widely used across Bangladesh.

6.2 Encryption at Rest. Sensitive personal data stored in 15ok databases — including KYC document references, hashed account passwords, and financial records — is stored in encrypted form. Encryption keys are managed under strict access controls and are rotated on a regular schedule.

6.3 Access Controls. Access to personal data held in 15ok's systems is restricted on a strict need-to-know basis. Only authorised 15ok personnel whose roles require access to specific data categories are granted access to those records. All internal access events are logged and reviewed periodically as part of 15ok's security audit process.

6.4 Password Security. 15ok stores account passwords in hashed form using a cryptographically strong hashing algorithm. 15ok staff are never able to view your plain-text password. If you forget your password, the account recovery process will issue you a new one — it will never retrieve or display an existing password. You are strongly advised to use a unique, complex password for your 15ok account and to not reuse it on other platforms.

6.5 Security Incident Response. In the event that 15ok becomes aware of a data security incident that may have resulted in the unauthorised access to or disclosure of your personal data, 15ok will take immediate steps to contain the incident, assess its scope, and notify affected players as promptly as practicable. Notification will be provided via the email address registered to your 15ok account.

6.6 Player Responsibility. While 15ok takes all reasonable technical measures to protect your data, the security of your account also depends on the strength of your password and the care with which you protect your login credentials. 15ok will never ask you to share your full password via any channel. If you receive any communication purporting to be from 15ok that asks for your password, treat it as fraudulent and contact [email protected] immediately.

7.1 Right of Access. You have the right to request a copy of the personal data that 15ok holds about you. Upon receiving a valid subject access request, 15ok will provide you with a summary of the data categories held, the purposes for which they are used, and, where technically feasible, a structured export of the data itself. 15ok will respond to access requests within thirty (30) days of receipt.

7.2 Right to Rectification. If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. Correction requests relating to registered contact details (such as email address or mobile number) can be submitted directly through your account settings. Requests to correct identity document records must be submitted to [email protected] along with an updated copy of the relevant document.

7.3 Right to Erasure. Subject to applicable legal retention obligations, you have the right to request the deletion of your personal data from 15ok systems. This right cannot be exercised in a way that would require 15ok to delete data that it is legally obliged to retain — for example, KYC records and transaction histories that must be kept under anti-money laundering regulations. Where deletion is legally possible, 15ok will complete the deletion within thirty (30) days of confirming your request.

7.4 Right to Restriction of Processing. In certain circumstances — for example, where you have contested the accuracy of data held about you and the matter is under review — you may request that 15ok restrict the processing of your personal data while the dispute is resolved. During a restriction period, 15ok will continue to store the data but will not use it for any purpose other than storage and the administration of the restriction itself.

7.5 Right to Object. You have the right to object to the use of your personal data for any purpose that 15ok conducts on the basis of legitimate interest, where you believe your individual rights and freedoms override that interest. Objections will be reviewed by the 15ok privacy team on a case-by-case basis. Note that objections to fraud prevention and security processing cannot be accommodated while your account remains active, as these uses are essential to the safe operation of the platform.

7.6 Right to Data Portability. Where technically feasible and where the data was provided directly by you (for example, registration data), you may request that 15ok provide your data in a structured, machine-readable format suitable for transfer to another service provider. Portability requests should be submitted to [email protected] specifying the data categories required.

7.7 How to Exercise Your Rights. All privacy rights requests must be submitted in writing to [email protected] with the subject line "Privacy Rights Request". Please include your registered name and the email address associated with your 15ok account so that we can verify your identity before processing the request. 15ok may request additional verification information where the identity of the requestor cannot be confirmed from the details provided.

8.1 Privacy Support Contact. All privacy-related queries and data rights requests should be directed to the 15ok support team by email at [email protected]. Please use the subject line "Privacy Query" or "Privacy Rights Request" to ensure your message is routed to the appropriate team member. The 15ok support team operates 24 hours a day, 7 days a week, in Bangladesh Standard Time (UTC+6), including on all public holidays.

8.2 Live Chat Support. For non-sensitive privacy queries — such as questions about what data 15ok collects or how cookies work — you may also contact the support team via the live chat feature available inside your 15ok account. Please note that live chat is not a secure channel for submitting identity documents or sensitive personal information; all such submissions should be made via email.

8.3 Policy Updates. 15ok reserves the right to update this Privacy Policy at any time to reflect changes in platform functionality, data processing practices, or applicable legal requirements. Material changes to this policy will be communicated to registered players via the email address on their account at least 14 days before the change takes effect. The current version of this Privacy Policy is always available at 15ok.app/privacy-policy. Continued use of the 15ok platform following a notified policy update constitutes your acceptance of the revised policy.

8.4 Effective Date. This Privacy Policy is effective as of January 2026 and supersedes all previous versions of the 15ok Privacy Policy.