13ok Privacy
Policy

Data We Collect

When you interact with the 13ok platform — whether by creating an account, making a deposit, placing a bet, or simply browsing the site — we may collect certain categories of personal data. We collect only what is genuinely necessary to provide you with a safe, functional, and personalised gaming experience. The categories of data we collect are described below.

Account & Identity Data

When you register a 13ok account, we collect the information you provide directly, including your full name, date of birth, email address, mobile phone number, and the username and password you choose. If you are required to complete identity verification (KYC), we will also collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, along with any supporting proof of address documentation.

Financial & Transaction Data

To process deposits and withdrawals, we collect transaction records including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (BDT), timestamps, and unique transaction reference numbers. We do not store full card numbers or mobile banking PINs — these are handled directly by your payment provider using their own secure infrastructure.

Usage & Behavioural Data

We automatically collect certain technical and behavioural data when you access the 13ok platform, including your IP address, device type and operating system, browser type and version, pages visited, time spent on each page, games played, bet amounts and outcomes, session duration, and referring URL. This data is used to operate the platform, detect fraud, personalise your experience, and improve our services.

Communications Data

If you contact our support team by email or live chat, we retain records of that correspondence including the content of your messages, the date and time of contact, and the resolution outcome. These records allow us to maintain quality assurance, resolve disputes, and identify recurring issues.

Summary of Data Categories

How We Use Your Data

13ok processes personal data only for specific, clearly defined purposes. We do not use your data in ways that go beyond what is described in this Privacy Policy. The primary purposes for which we use your personal data are as follows:

Account Management & Service Delivery

The most fundamental use of your data is to operate your 13ok account — creating it, authenticating your identity when you log in, processing deposits and withdrawals, settling bets, crediting bonuses, and sending transactional notifications such as deposit confirmations and withdrawal status updates. Without this data processing, we cannot provide you with any of our core services.

Identity Verification & Fraud Prevention

We use identity and financial data to verify that you are who you claim to be, that you meet our minimum age requirement of 18 years, and that your account is not being used for fraudulent, money laundering, or other prohibited activities. This may involve automated screening against internal risk models as well as manual review by our compliance team where flagged activity is identified.

Responsible Gaming Monitoring

13ok uses behavioural data — including betting frequency, session duration, deposit patterns, and self-exclusion history — to monitor for signs of problem gambling. Where our systems identify behaviour consistent with gambling harm, we may contact you with information about responsible gaming tools or, in some cases, apply temporary account restrictions in line with our duty of care obligations.

Platform Improvement & Personalisation

We use aggregated and anonymised usage data to analyse how players interact with the 13ok platform, identify areas for improvement, test new features, and optimise the overall user experience. At an individual level, we may use your game history and preferences to surface relevant game recommendations — you can opt out of personalisation by contacting our support team.

Marketing & Promotional Communications

Where you have provided your consent, we may send you promotional communications about 13ok offers, new game launches, seasonal promotions tied to events such as Eid, Pohela Boishakh, or major cricket tournaments like the BPL and T20 World Cup, and other relevant updates. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

• We will never send you unsolicited marketing communications if you have not opted in or if you have previously opted out.
• Transactional notifications (e.g., deposit confirmed, withdrawal processed, bonus credited) are sent regardless of marketing preferences as they relate directly to your use of our services.
• We do not use your personal data to build profiles for sale to third-party advertisers.

Legal & Regulatory Compliance

In certain circumstances, we are legally obligated to process and retain personal data to comply with applicable laws, including financial crime prevention obligations, anti-money laundering (AML) requirements, and responses to lawful requests from competent authorities. We process such data only to the minimum extent required to fulfil these obligations.

Data Sharing & Third Parties

13ok does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the specific circumstances described below, and only with parties who are contractually required to handle your data with the same standard of care we apply ourselves.

Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary financial data with our payment partners, including bKash, Nagad, Rocket, Upay, and card processing networks associated with Visa and Mastercard. These providers operate under their own privacy policies and security standards, and receive only the transaction data required to execute the specific payment you have initiated.

Identity Verification Partners

Where we use third-party KYC or identity verification services to validate the documents you submit, your identity data will be shared with those providers for the sole purpose of completing the verification check. These providers are prohibited from using your data for any other purpose.

Game Technology Providers

The 13ok platform integrates games from third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games, technical session data (such as your session token and bet history within a game) may be processed by the relevant game provider. This data is used solely to render the game correctly and record its outcomes; it is not used by providers to build independent profiles of you.

Legal & Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so or where we believe disclosure is necessary to prevent serious harm or criminal activity. We will notify you of any such disclosure where permitted by law to do so.

Cookies & Tracking Technologies

The 13ok website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to maintain your login session, and to collect anonymised analytics data that helps us improve our services. A cookie is a small text file stored on your device by your web browser when you visit a website.

Types of Cookies We Use

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may disable functional and analytics cookies by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the 13ok platform, including the ability to maintain your login state across browsing sessions. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Data Retention & Storage

13ok retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods we apply to different categories of data are summarised below.

• Account data: Retained for the duration of your account and for a minimum of five years following account closure, to satisfy AML record-keeping obligations and to resolve any post-closure disputes.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with financial crime prevention best practices.
• KYC / identity documents: Retained for the duration of your account and for five years after closure. Copies of identity documents are stored in encrypted form with access restricted to authorised compliance personnel only.
• Communications data: Support correspondence is retained for up to three years from the date of the last interaction to enable dispute resolution and quality assurance reviews.
• Technical / log data: Server access logs and fraud detection data are retained for up to 12 months, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of the consent and for up to three years after withdrawal, to demonstrate compliance if our marketing practices are audited.

All personal data stored on 13ok's servers is held within secure, access-controlled environments. Data at rest is encrypted using AES-256 encryption. Access to personal data is restricted on a strict need-to-know basis, and all staff with access to personal data undergo privacy and security training.

Where personal data is no longer required and no legal obligation requires its retention, 13ok will securely delete or irreversibly anonymise that data so it can no longer be attributed to you as an individual.

Your Privacy Rights

As a 13ok player, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and without unnecessary obstacles. To exercise any of the rights described below, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request" and include your registered account username. We will respond within 30 calendar days.

Right to Access

You have the right to request a copy of all personal data we hold about you, along with information about how it is being used, who it has been shared with, and how long it will be retained. We will provide this information in a clear, structured format.

Right to Correction

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details such as your email address and phone number directly within your account settings. For corrections to identity documents or legal name, please contact our support team.

Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to its processing and there is no overriding legitimate interest to continue. Please note that this right is subject to legal retention obligations — for example, we are required by AML regulations to retain transaction records for a minimum period and cannot erase these records earlier at your request.

Right to Restrict Processing

In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we restrict how we use your personal data. During a restriction period, we will continue to store your data but will not actively process it except where legally required.

Right to Data Portability

Where technically feasible, you have the right to receive a copy of the personal data you have provided to us in a commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.

Right to Object to Marketing

You have an absolute right to object to the use of your personal data for direct marketing purposes at any time. Once you opt out of marketing communications, we will process your request promptly and remove you from our marketing lists. You can opt out via your account settings or by emailing [email protected].

Data Security Measures

13ok implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, our layered approach significantly reduces the risk of data breaches and their potential impact.

• Transport encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). Connections over unencrypted HTTP are automatically redirected to HTTPS.
• At-rest encryption: Sensitive data stored in our databases — including identity documents and financial records — is encrypted using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted to authorised personnel only, using role-based access controls, strong password policies, and multi-factor authentication for all administrative systems.
• Password security: Account passwords are never stored in plain text. We use industry-standard one-way hashing with salting (bcrypt) so that even in the event of a data breach, your original password cannot be recovered.
• Fraud detection: Our platform uses real-time monitoring systems to detect and respond to suspicious login attempts, unusual transaction patterns, and potential account takeover activity.
• Staff training: All 13ok personnel who handle personal data receive regular privacy and security awareness training, and are contractually bound by confidentiality obligations.
• Incident response: In the event of a security incident that affects your personal data, we will assess the impact and notify affected players and relevant authorities as required by applicable law and without undue delay.

Policy Updates & Contact

13ok reviews this Privacy Policy periodically to ensure it accurately reflects our current data practices and any changes in applicable law. When we make material changes to this Policy, the updated version will be published on this page with a revised effective date shown at the top of the document. For significant changes that affect how we process your data in a material way, we will notify you directly via the email address registered to your account.

We encourage you to revisit this Privacy Policy from time to time to stay informed about how 13ok protects your data. Your continued use of the platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you may close your account by contacting our support team.

Contact Our Privacy Team

If you have any questions, concerns, or requests in relation to this Privacy Policy or how 13ok handles your personal data, please contact our dedicated privacy team using the details below. We are committed to responding to all privacy-related enquiries within 30 calendar days.

• Email: [email protected] — use subject line "Privacy Enquiry" for the fastest routing to our privacy team.
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays (Bangladesh Standard Time, UTC+6).
• Coverage: Our support team serves players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.