Privacy Policy — qk0k Data Protection & Your Rights

1. Information We Collect

When you use the qk0k platform, we collect personal data in several ways — directly from you during registration and account use, automatically through your interactions with the platform, and occasionally from trusted third-party sources such as payment processors. Below is a detailed breakdown of the categories of data we collect.

1.1 Registration & Account Data

When you create a qk0k account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (for age verification — players must be 18 years of age or older).
• Email address (used for account communications and login).
• Mobile phone number (used for two-factor authentication and support communications).
• Residential address in Bangladesh (city, postal code).
• Chosen username and encrypted password.
• Preferred payment method and associated account identifiers (e.g., your bKash or Nagad registered number).

1.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering (AML) obligations and to protect our players, qk0k may request the following documentation at any stage of your account lifecycle:

• A copy of a valid government-issued photo ID (National Identity Card, passport, or driving licence).
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days).
• Proof of payment method ownership (a screenshot or confirmation showing your name associated with the bKash, Nagad, or bank account you use for transactions).
• Source-of-funds documentation for high-value accounts, where required by our compliance framework.

1.3 Transactional Data

Every deposit, withdrawal, wager, bonus claim, and game outcome associated with your account is recorded. This transactional history is essential for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance. Records include the amount (in BDT), the payment method used, the date and time (Bangladesh Standard Time), and the game or event involved.

1.4 Technical & Device Data

When you access qk0k through a browser or mobile device, we automatically collect:

• IP address and approximate geographic location (country/city level).
• Browser type and version, operating system, and device type.
• Session start and end times, pages visited, and features interacted with.
• Referring URL (the website you navigated from, if applicable).
• Cookie identifiers and local storage data (see Section 4 for full details).

1.5 Communications Data

If you contact our support team via live chat or email, we retain a record of that communication, including the content of messages, the date and time, and the support agent who assisted you. These records are used to improve service quality, resolve disputes, and protect both parties in the event of a disagreement.

2. How We Use Your Data

qk0k uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose that has not been disclosed in this policy.

We do not use automated decision-making processes that produce legal or similarly significant effects on individual players without human oversight. Where automated systems flag an account (for example, for potential bonus abuse or unusual betting patterns), a trained compliance team member will review the case before any account action is taken.

3. Legal Basis for Processing

qk0k processes personal data under one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contract Performance: Processing is necessary to fulfil our obligations to you as a registered player — for example, to process your deposits, settle winning bets, and maintain your account.
• Legal Obligation: Certain processing activities are required by applicable law or regulation, including anti-money-laundering (AML) compliance, age verification, and fraud reporting obligations.
• Legitimate Interest: We process some data where we have a legitimate business interest that is not overridden by your privacy rights — for example, monitoring for fraudulent activity, conducting platform analytics to improve the user experience, and securing our IT infrastructure.
• Consent: Where processing is based on your consent (such as receiving promotional emails or SMS offers), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. Withdrawing consent to marketing communications will not affect your ability to use the platform.

If you wish to understand which legal basis applies to a specific processing activity not listed above, please contact our support team at [email protected].

4. Cookies & Tracking Technologies

qk0k uses cookies and similar technologies (such as local storage and session storage) to operate the platform effectively and to understand how players interact with our site. The following table describes the types of cookies we use.

qk0k does not use third-party advertising cookies or cross-site tracking pixels that share your behavioural data with external advertisers. Analytics data is processed in aggregated, anonymised form and is not linked back to individual player accounts.

You may configure your browser to block or delete cookies at any time. Please be aware that disabling essential cookies may prevent the platform from functioning correctly — for example, you may be unable to remain logged in or complete financial transactions if session cookies are blocked.

5. Data Sharing & Disclosure

qk0k takes a conservative approach to sharing your personal data. We do not sell, lease, or trade your data to any third party for commercial purposes. The following circumstances represent the only situations in which your data may be shared with external parties:

5.1 Payment Processors

To process your deposits and withdrawals, we share the minimum necessary transaction data with your chosen payment provider — for example, bKash, Nagad, Rocket, Upay, or your selected Bangladeshi bank. This sharing is strictly limited to what is required to execute the transaction. Payment providers are bound by their own privacy policies and applicable financial regulations.

5.2 Game Providers

When you play a game hosted by a third-party studio such as Evolution Gaming, Pragmatic Play, NetEnt, or Spribe, a session token and anonymised player identifier are transmitted to that provider's server to load and operate the game. No personally identifiable information (such as your name, email, or phone number) is transmitted to game providers.

5.3 Identity Verification Services

qk0k may use a trusted third-party KYC verification service to validate the identity documents you submit. These providers are contractually required to process your data solely for the purposes of identity verification and to delete their copies of documents once verification is complete.

5.4 Legal & Regulatory Disclosure

We may be legally obligated to disclose your personal data to law enforcement agencies, financial intelligence units, or regulatory bodies in response to a valid legal order, court order, or statutory obligation. In such circumstances, qk0k will disclose only the data that is strictly required by the applicable legal instrument and will notify you where we are legally permitted to do so.

5.5 Business Transfers

In the event that qk0k undergoes a merger, acquisition, restructuring, or sale of assets, player data may form part of the transferred assets. In such an event, we will notify affected players via the email address on file and will ensure that any successor entity is bound by privacy obligations at least equivalent to those set out in this policy.

6. Data Retention

qk0k retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

• Account registration data: Retained for the lifetime of the active account, plus a minimum of 5 years following permanent account closure, in order to satisfy AML and audit requirements.
• KYC / identity documents: Retained for a minimum of 5 years from the date of verification or the date of account closure, whichever is later, as required by financial regulations.
• Transactional records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the most recent communication in a given support case.
• Technical and session data (non-anonymised): Retained for up to 12 months, after which logs are anonymised or deleted.
• Promotional consent records: Retained for the duration of consent plus 2 years, to demonstrate compliance in the event of a regulatory enquiry.

When data is no longer required, it is securely deleted or permanently anonymised so that it can no longer be associated with any individual. Where technical constraints prevent immediate deletion, data is rendered inaccessible pending scheduled deletion cycles.

7. Your Privacy Rights

As a qk0k player, you hold the following rights with respect to the personal data we hold about you. You may exercise any of these rights at any time by contacting our support team via live chat or by emailing [email protected]. We will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, readable format within 30 days of your verified request.
• Right to Rectification: If any of the personal data we hold is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations that require us to retain it (such as AML record-keeping requirements).
• Right to Restriction of Processing: You may request that we temporarily restrict the processing of your data while a correction or objection is being assessed.
• Right to Data Portability: You have the right to receive your personal data in a commonly used, machine-readable format so that you can transfer it to another service provider if you wish.
• Right to Object: Where processing is based on legitimate interest, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

8. Data Security

qk0k implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following safeguards:

• Transport Encryption: All data in transit between your browser or app and our servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys.
• Data at Rest: Sensitive data fields — including passwords, payment identifiers, and identity document references — are encrypted or hashed at rest using industry-standard algorithms. Plaintext passwords are never stored.
• Access Controls: Internal access to personal data is strictly role-based. Staff members can only access the categories of data required for their specific function. All internal data access is logged and regularly audited.
• Network Security: Our platform infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning. Security patches are applied promptly in accordance with a formal patch management process.
• Incident Response: qk0k maintains a formal data breach response plan. In the event of a security incident that is likely to result in a risk to players' rights, we will notify affected individuals promptly and take all reasonable steps to contain and remediate the breach.

While we apply rigorous security measures, no digital platform can guarantee absolute security. You play an important role in protecting your account by choosing a strong, unique password, not sharing your login credentials with any third party, and promptly reporting any suspicious account activity to our support team.

9. Third-Party Services

The qk0k platform integrates with a number of trusted third-party service providers to deliver a complete and reliable gaming experience. These include game studios (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi), payment processors (including bKash, Nagad, Rocket, and Upay), and infrastructure providers. Each of these third parties operates under its own privacy policy, and qk0k is not responsible for their data practices beyond the contractual obligations we impose on them as data processors.

Where third-party providers act as data processors on our behalf — meaning they process data according to qk0k's instructions rather than for their own purposes — we maintain data processing agreements that contractually bind them to appropriate data protection standards, including restrictions on further disclosure and requirements for data security.

Where third-party providers act as independent data controllers — for example, when a payment provider processes your transaction data to comply with their own regulatory obligations — their use of your data is governed by their own privacy policies, and we recommend reviewing those policies when you use their services.

The qk0k website does not contain links to external third-party websites. This policy applies solely to the qk0k platform at qk0k.net.

10. Changes to This Policy

qk0k reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date at the top of this page indicates when the policy was last reviewed. Where changes are material — meaning they could significantly affect how your personal data is used or your rights as a player — we will provide advance notice via a prominent notice on the platform or via email to your registered address.

Minor changes, such as clarifications that do not alter the substance of the policy, may be made without specific prior notice. We encourage you to review this page periodically to remain informed of how qk0k handles your personal data.

Your continued use of the qk0k platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the revised version. If you disagree with any changes to this policy, you should cease using the platform and may request account closure by contacting our support team.