13ok Privacy Policy

1 Introduction

13ok is committed to protecting the privacy and personal data of all users of the Platform. We operate as an online sports betting and casino entertainment service primarily serving players based in Bangladesh. All natural-language communications with users — including this Policy — are conducted in English.

This Policy applies to all personal data we process in connection with your use of the 13ok Platform, including data collected during account registration, during gameplay, during financial transactions, and through customer support interactions. It applies regardless of the device or browser you use to access the Platform.

We review and update this Policy periodically to reflect changes in our data practices, legal requirements, and the services we offer. The most current version of this Policy is always available at https://13ok.io/privacy-policy. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

2 Data Controller

For the purposes of this Policy, the data controller — the entity that determines the purposes and means of processing your personal data — is the 13ok Platform operating at https://13ok.io. All data-related enquiries, requests, and complaints should be directed to our support team at [email protected].

Where 13ok engages third-party service providers (such as game providers, payment processors, or identity verification services) to process personal data on our behalf, those providers act as data processors and are contractually bound to process your data only on our documented instructions, to maintain appropriate security measures, and not to use your data for their own independent purposes.

3 Data We Collect

The following table summarises the categories of personal data that 13ok may collect from or about you, together with examples of the specific data points within each category:

4 How Data Is Collected

13ok collects personal data through the following channels:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or setting responsible gaming preferences.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, via server logs, session cookies, and similar tracking technologies (see Section 7 for details on cookies).
• Payment providers: Confirmation data returned by payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) when a transaction is initiated or completed, including transaction reference numbers and status codes. 13ok does not receive full card or wallet credentials through this channel.
• Identity verification services: Where 13ok uses a third-party KYC provider to verify your identity documents, that provider returns a verification result (pass/fail and reason code) and may share document metadata with us as part of that process.
• Game providers: Gameplay event data (bet placed, game result, session start/end) generated by third-party game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe is transmitted to 13ok in real time to populate your account history and calculate your balance.

5 Purposes & Legal Basis

13ok processes your personal data for the following purposes. For each purpose, we have identified the legal basis on which we rely:

Where we rely on your consent as the legal basis for processing (for example, sending promotional emails or SMS about bonus offers), you have the right to withdraw that consent at any time by contacting [email protected] or adjusting your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

13ok does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their respective banking partners, to facilitate the processing of your deposits and withdrawals.
• Game providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other licensed software suppliers, to the extent necessary to provide you with access to their games and to settle the outcomes of wagers placed on their platforms.
• Identity verification services: Third-party KYC providers engaged to verify the authenticity of identity documents and confirm that users meet the minimum age requirement of 21 years.
• IT and hosting providers: Cloud infrastructure and hosting providers who store and serve the 13ok Platform on our behalf, operating under data processing agreements that bind them to appropriate security standards.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, or courts of competent jurisdiction, where 13ok is required by law or lawful order to disclose personal data.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by 13ok, subject to confidentiality obligations.

All third parties with whom 13ok shares personal data are contractually required to maintain appropriate technical and organisational security measures and to process that data only for the specific purpose for which it was shared.

7 Cookies & Tracking

13ok uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the Platform to recognise your device across sessions, maintain your login state, remember your preferences, and collect aggregate analytics about how users interact with the site.

The types of cookies used by 13ok include:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without severely disrupting your use of the Platform.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method, and responsible gaming limits you have configured.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — for example, which pages are most visited, how long sessions last, and where users exit the site. This data helps us improve the user experience.
• Security cookies: Used to detect and prevent fraudulent login attempts, identify unusual activity patterns, and protect the integrity of account sessions.

13ok does not use advertising or behavioural tracking cookies that build profiles of your browsing behaviour across third-party websites for the purpose of serving targeted advertisements.

Most web browsers allow you to control cookies through their settings. You may configure your browser to refuse all cookies, accept only first-party cookies, or alert you when a cookie is being placed. Please note that disabling strictly necessary cookies may prevent you from using certain features of the Platform, including maintaining a logged-in session.

8 Data Security

13ok implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• SSL/TLS encryption: All data in transit between your browser and the 13ok Platform is encrypted using industry-standard SSL/TLS protocols.
• Password hashing: Account passwords are stored using a one-way cryptographic hash function. 13ok staff cannot read your password in plain text at any time.
• Access controls: Access to personal data within 13ok's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the permissions necessary to perform their specific job functions.
• Audit logging: All access to personal data by internal systems and staff is logged and subject to periodic review.
• Payment data isolation: Financial transaction data processed through bKash, Nagad, Rocket, Upay, and card networks is handled within those providers' PCI-compliant environments. 13ok does not store full payment credentials on its own servers.
• Security monitoring: The Platform is monitored continuously for signs of intrusion, unusual access patterns, and potential data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 13ok will notify affected users without undue delay via the email address registered to their account, and will take immediate steps to contain and remediate the breach.

9 Data Retention

13ok retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's existence and for a period of 5 years following permanent account closure, to satisfy potential legal and compliance obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in line with standard anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the most recent communication in a support thread, after which they are securely deleted or anonymised.
• Analytics and usage data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data. Raw session logs containing IP addresses are retained for no more than 12 months.
• Responsible gaming records: Self-exclusion records and deposit limit histories are retained for a minimum of 5 years to prevent re-registration by excluded players and to support responsible gaming audits.

When a retention period expires, personal data is either securely and permanently deleted from our systems, or anonymised in a manner that prevents it from being re-linked to an identifiable individual.

10 International Transfers

13ok primarily serves players based in Bangladesh, and our core data processing operations are designed to reflect the needs of that market. However, some of our third-party service providers — including cloud hosting infrastructure, certain game providers such as Pragmatic Play and Evolution Gaming, and identity verification services — operate data centres or processing facilities outside Bangladesh.

Where personal data is transferred internationally, 13ok takes steps to ensure that appropriate safeguards are in place to protect that data, including by entering into data processing agreements with the relevant providers that incorporate recognised contractual protections for cross-border data transfers.

If you have questions about the specific countries to which your data may be transferred, or the safeguards applied to such transfers, please contact us at [email protected].

11 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 13ok:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to rectification: You may request that we correct any personal data we hold about you that is inaccurate or incomplete.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no other overriding legal basis for retaining it. Note that legal record-keeping obligations may prevent immediate erasure in some cases.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability: You may request that we provide your personal data to you in a structured, commonly used, and machine-readable format, where processing is based on your consent or on a contract with you.
• Right to object: You may object to processing based on legitimate interests where you believe your individual rights and interests override those legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected]. Please include your registered username or account ID in your request to allow us to identify you efficiently. We aim to respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension.

12 Minors

The 13ok Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age , you are not permitted to register an account, use the Platform, or provide any personal data to 13ok.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data from our systems and close the associated account. If you believe that a minor has registered an account on the 13ok Platform, please notify us immediately at [email protected] so that we can investigate and act accordingly.

Our KYC identity verification process is designed, in part, to detect and prevent underage registration. All users are required to confirm their date of birth during registration and to provide government-issued identity documentation confirming that they meet the minimum age requirement of 21 years before being permitted to deposit funds or place wagers.

13 Third-Party Links

The 13ok Platform may contain references to or integrations with third-party services, including licensed game providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. While these providers supply the games you play through the 13ok interface, they operate their own software environments and may independently collect certain technical data (such as game session data) in accordance with their own privacy policies.

13ok is not responsible for the privacy practices of third-party game providers or payment processors. We encourage you to review the privacy policies of any third-party service with which you interact. This Policy applies solely to personal data collected and processed directly by 13ok in connection with the operation of the Platform at https://13ok.io.

14 Policy Changes

13ok reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates to our services, changes in applicable law, or improvements to our data practices. When we make material changes to this Policy, we will notify registered users by sending a notification to the email address associated with their account and by posting a prominent notice on the Platform.

The updated Policy will take effect from the date indicated in the "Last Updated" field at the top of this page. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you should stop using the Platform and contact us at [email protected] to request account closure.

We recommend that you review this page periodically to stay informed of how 13ok handles your personal data. The current version of this Policy supersedes all prior versions.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 13ok processes your personal data, please contact our support team using the details below. Our support team is available 24 hours a day, 7 days a week, and responds in English.

We take all privacy-related enquiries seriously and aim to respond to every message within 30 calendar days. For urgent data protection concerns — such as suspected unauthorised access to your account — please mark your email with the subject line "URGENT: Data Protection" and we will prioritise your request.