kotk Privacy Policy

1. Data We Collect

When you interact with the kotk platform — whether by browsing our website, registering an account, placing a bet, making a deposit, or contacting our support team — we may collect certain categories of personal data about you. This section details each category, the specific data points within it, and the circumstances in which collection occurs.

1.1 Registration & Identity Data

When you create a kotk account, we collect the information you provide during the registration process. This includes:

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you meet the 18+ age requirement);
• Email address (used for account communications, transaction alerts, and support correspondence);
• Mobile phone number (used for account verification and, where applicable, two-factor authentication);
• Residential address in Bangladesh, including city or district (e.g., Dhaka, Chittagong, Sylhet, Khulna).

1.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) requirements and to protect our players from identity fraud, kotk may request copies of the following documents at any point during your account lifecycle:

• Government-issued photo identification — National ID card, passport, or driving licence;
• Proof of current residential address dated within the last three months, such as a bank statement or utility bill;
• Proof of ownership of the payment method used for deposits — for example, a screenshot confirming the bKash, Nagad, Rocket, or Upay account is registered in your name.

KYC documents are used solely for identity and payment verification purposes. They are stored securely and are never shared with third parties except where required by law or for the specific verification service engaged by kotk.

1.3 Financial & Transaction Data

Every deposit, withdrawal, bonus claim, and bet placed through kotk is logged as a transaction record associated with your account. This data includes deposit and withdrawal amounts in Bangladeshi Taka (৳), the payment method used, transaction reference numbers, timestamps, and the outcome of each wager or casino game session. Financial transaction records are retained for a minimum period as required by applicable law and our internal anti-money laundering obligations.

1.4 Technical & Device Data

When you access kotk via a web browser or mobile device, our servers automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and the pages you visit within the kotk platform together with timestamps. This data is used for security monitoring, fraud prevention, platform optimisation, and to ensure that our services are rendered correctly across different devices and network conditions.

1.5 Behavioural & Usage Data

We collect data about how you use the kotk platform, including which games you play, how long your sessions last, which sports markets you browse, your betting patterns, and your bonus redemption activity. This data is used to improve the platform experience, personalise content where appropriate, and — importantly — to monitor for signs of problem gambling behaviour as part of our responsible gaming obligations.

1.6 Communications Data

When you contact the kotk support team by email at [email protected] or via live chat, we retain a record of the communication, including your name, contact details, the nature of your query, and the resolution provided. This data helps us maintain service quality, resolve disputes, and train our support staff.

2. How We Use Your Data

kotk uses the personal data it collects for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected without first obtaining your consent or establishing another valid legal basis. The table below summarises our primary data uses and the legal basis for each.

2.1 Marketing Communications

kotk may send you promotional emails, bonus offers, and event notifications by email or SMS if you have opted in to receive such communications during registration or via your account settings. You may withdraw your consent to marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of communications sent before the withdrawal.

2.2 Automated Decision-Making

kotk uses automated processes to assist with fraud detection, responsible gaming monitoring, and account risk assessment. Where an automated process results in a significant decision affecting your account — such as a temporary account suspension triggered by unusual activity — you have the right to request human review of that decision. Contact our support team at [email protected] to request a manual review of any automated decision.

3. Data Sharing & Disclosure

kotk does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only where it is strictly necessary to deliver our services, to comply with a legal obligation, or to protect the legitimate interests of kotk and our players. The following categories of third parties may receive limited personal data from kotk for the stated purposes.

3.1 Payment Service Providers

To process your deposits and withdrawals, kotk shares relevant financial and identity data with our payment processing partners. In Bangladesh, these include mobile financial service providers such as bKash, Nagad, Rocket, and Upay, as well as international card networks Visa and Mastercard. Data shared with payment providers is limited to what is strictly necessary to authorise and complete your transaction. All payment partners are bound by contractual obligations to handle your data securely and not to use it for any purpose other than processing the relevant transaction.

3.2 Identity Verification Services

For KYC verification, kotk may engage third-party identity verification providers to assist with document authentication and identity checking. These providers receive only the specific documents and data necessary to perform the verification check and are contractually prohibited from retaining or using that data for any other purpose.

3.3 Technology & Infrastructure Providers

kotk's platform relies on cloud hosting, database management, and security services provided by reputable technology partners. These providers may have access to certain platform data in the course of providing their services. They operate as data processors under contractual agreements that require them to handle data securely, follow our instructions, and not process data for their own purposes.

3.4 Legal & Regulatory Disclosure

kotk may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the prevention or investigation of fraud, money laundering, or other criminal activity. In such cases, kotk will disclose only the minimum data required to comply with the legal obligation and will, where legally permissible, notify the affected account holder of the disclosure.

4. Cookies & Tracking

The kotk website uses cookies and similar tracking technologies to operate correctly, improve performance, and enhance your experience as a player. A cookie is a small text file placed on your device by a website. Cookies allow the site to recognise your device on subsequent visits and to remember certain preferences or session states.

4.1 Types of Cookies Used

kotk uses the following categories of cookies:

• Essential cookies: These are required for the platform to function. They manage your login session, maintain your account state across pages, and protect against cross-site request forgery (CSRF). You cannot opt out of essential cookies without ceasing to use the platform.
• Analytical cookies: These help us understand how players navigate the kotk platform — which pages are most visited, where users spend time, and where technical issues may be occurring. Data from analytical cookies is aggregated and does not identify individual players.
• Preference cookies: These remember your platform preferences, such as language selection or display settings, so you do not need to reconfigure them on every visit.
• Security cookies: These support our fraud detection systems by helping to identify unusual login patterns, multiple account usage from a single device, or other behaviours associated with account abuse.

4.2 Managing Cookies

You can manage or disable non-essential cookies through your web browser settings. Most modern browsers provide controls that allow you to view, accept, decline, or delete cookies from specific websites. Please note that disabling certain cookies may affect the functionality of the kotk platform — for example, disabling session cookies will prevent you from remaining logged in during your visit. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

5. Data Security

The security of your personal data is a core operational priority for kotk. We implement a layered approach to data security that combines technical controls, organisational procedures, and contractual safeguards with all third-party data processors.

5.1 Technical Security Measures

All data transmitted between your browser or device and the kotk platform is encrypted using Transport Layer Security (TLS). Account passwords are stored using industry-standard one-way cryptographic hashing and are never stored in plain text. Our database infrastructure is protected by access controls that restrict data access to authorised personnel only. We conduct regular vulnerability assessments and penetration tests to identify and remediate potential security weaknesses before they can be exploited.

5.2 Organisational Security Measures

Access to player personal data within the kotk organisation is governed by a strict need-to-know principle. Staff members are granted access only to the data categories required to perform their specific role. All staff with access to personal data receive regular data protection training. Incidents involving unauthorised access to or accidental disclosure of personal data are managed through a documented incident response procedure.

5.3 Your Role in Account Security

While kotk takes extensive measures to protect your data on our side, you also play an important role in keeping your account secure. You should use a strong, unique password for your kotk account, never share your login credentials with any other person, and log out of your account when using shared or public devices. If you suspect your account has been accessed without your authorisation, contact our support team immediately at [email protected] so that protective action can be taken promptly.

6. Data Retention

kotk retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any overriding legal obligation to retain it for a longer period. The following retention periods apply to the main categories of data we hold.

After the relevant retention period expires, personal data is either securely deleted from our systems or anonymised so that it can no longer be associated with any individual player. Anonymised data may be retained for statistical and analytical purposes without further restriction.

7. Your Privacy Rights

As a kotk player, you hold a number of rights in relation to the personal data we hold about you. kotk is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team in writing at [email protected] with the subject line "Privacy Rights Request" and a clear description of the right you wish to exercise.

7.1 Right of Access

You have the right to request a copy of all personal data that kotk holds about you. Upon receipt of a valid access request, we will provide you with a summary of your data in a clear and accessible format within 30 days. There is no charge for a first access request in any 12-month period.

7.2 Right to Rectification

If any personal data that kotk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For straightforward corrections such as updating a misspelled name or an outdated email address, you may be able to make changes directly within your account settings. For corrections to identity or KYC data, please contact our support team and provide updated documentation.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. Please note that the right to erasure is not absolute — kotk may be required to retain certain data for legal compliance purposes (such as financial transaction records) even following a valid erasure request. In such cases, we will explain clearly which data we are obliged to retain and for how long.

7.4 Right to Restrict Processing

In certain circumstances, you may request that kotk restrict the processing of your personal data — for example, while a correction request is being assessed or where you have objected to processing and a determination is pending. During a period of restricted processing, kotk will continue to store the data but will not otherwise use it.

7.5 Right to Object

You have the right to object to kotk processing your personal data on the basis of legitimate interest, including for direct marketing purposes. Where you object to marketing, we will cease all marketing communications immediately. Where you object to other processing based on legitimate interest, we will assess whether our legitimate interest overrides your rights in the specific circumstances and respond accordingly.

7.6 Right to Data Portability

Where kotk processes your personal data on the basis of your consent or the performance of a contract, and the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. We will provide this in CSV or JSON format upon request.

8. Policy Updates & Contact

kotk reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. When a material change is made to this policy, we will notify registered players by email to their registered address at least 14 days before the change takes effect. The effective date at the top of this document will be updated to reflect the date the most recent version came into force.

We encourage you to review this Privacy Policy regularly. Your continued use of the kotk platform following the effective date of any updated version constitutes your acceptance of the revised policy. If you do not agree with the changes, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

8.1 Contact Our Data Team

If you have any questions about this Privacy Policy, wish to exercise a data rights request, want to report a suspected data breach, or have a general privacy concern relating to the kotk platform, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

Email: [email protected]

Please use the subject line "Privacy Enquiry" for general questions or "Privacy Rights Request" for formal data rights submissions. We aim to acknowledge all privacy-related emails within one business day and to provide a full response within the timeframes described under Section 7 above.