kotk Privacy Policy

01 Introduction

This Privacy Policy applies to all users of the kotk platform, accessible at kotk.io, including visitors who browse without a registered account and registered players who use the full range of kotk's services. By accessing or using the kotk platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

kotk is operated with a commitment to fair play, responsible gaming, and respect for the privacy of all players. We collect only the data necessary to provide a secure, reliable, and enjoyable platform for players across Bangladesh. We do not sell, rent, or trade personal data with third parties for their own commercial marketing purposes.

This Privacy Policy should be read alongside the kotk Terms & Conditions, which govern your use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall take precedence in relation to matters of platform use, and this Privacy Policy shall take precedence in relation to data handling practices.

02 Data Controller

For the purposes of this Privacy Policy, kotk acts as the data controller in respect of all personal data collected from players using the kotk platform. As data controller, kotk determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

All enquiries relating to this Privacy Policy, or to the personal data kotk holds about you, should be directed to the kotk data team via email at [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line of your email to ensure it is directed to the appropriate team member.

03 Data We Collect

Registration and Identity Data

When you create a kotk account, we collect the personal information you provide during the registration process. This includes:

• Full legal name
• Date of birth (used to verify the 21+ age requirement)
• Mobile phone number (used as the primary account identifier and for two-factor authentication)
• Residential address in Bangladesh (city, district, or division — e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address (where provided)
• Username and hashed password

Identity Verification Documents

kotk may request documentary proof of identity and age as part of the account verification process. Documents collected may include a copy of your National Identity Card (NID), passport, or other government-issued identification. These documents are processed and stored securely and are used solely for the purpose of verifying your identity in accordance with our legal obligations.

Financial and Transaction Data

All financial transactions on the kotk platform are conducted in Bangladeshi Taka (৳) via mobile wallet services. We collect and retain records of:

• Mobile wallet numbers associated with deposits and withdrawals (bKash, Nagad, Rocket, Upay)
• Deposit and withdrawal amounts and timestamps
• Transaction reference numbers issued by the payment provider
• Account balance history

Gaming and Betting Activity Data

We collect records of your activity on the kotk platform, including:

• Games played, bet amounts, and outcomes
• Sports betting markets accessed and wagers placed (e.g., BPL, IPL, T20 World Cup, football, kabaddi)
• Session durations and login timestamps
• Bonus activity and wagering requirement progress

Technical and Device Data

When you access kotk.io, our servers automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, screen resolution, and referring URL. This data is used to maintain platform security, diagnose technical issues, and improve the platform experience for players in Bangladesh.

Communications Data

If you contact the kotk support team via live chat or email, we retain records of that correspondence, including the content of messages exchanged, timestamps, and any resolutions reached. This data is used to handle your enquiry, maintain quality standards, and provide a reference in the event of a follow-up enquiry.

04 How We Use Your Data

The personal data collected by kotk is used for the following purposes:

05 Legal Basis for Processing

kotk processes your personal data on the following legal bases:

• Contractual necessity: Processing that is required to fulfil our obligations under the Terms & Conditions, including operating your account, processing transactions, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, age verification requirements, and responses to lawful requests from law enforcement or regulatory bodies.
• Legitimate interests: Processing carried out to protect the security and integrity of the kotk platform, prevent fraud and multi-accounting, improve platform performance, and maintain accurate records — where those interests are not overridden by your own privacy rights.
• Consent: Where we send you promotional communications about kotk bonuses, new games, or special offers, we do so on the basis of your consent. You may withdraw consent for marketing communications at any time by contacting [email protected].

06 Sharing Your Data

Payment Processors

To process deposits and withdrawals, kotk shares the minimum necessary transaction data with mobile wallet providers including bKash, Nagad, Rocket, and Upay. These providers operate under their own privacy policies and are responsible for data handling within their own systems. kotk is not responsible for the privacy practices of third-party payment providers.

Game Providers

Casino games available on the kotk platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, limited session and gameplay data may be transmitted to the provider's systems for the purposes of game operation, outcome certification, and RTP auditing.

Identity Verification Services

kotk may use third-party identity verification services to assist with the verification of account holder identity and age. Personal data shared with these services is limited to the information required for verification and is not retained by the verification provider beyond the period necessary to complete the check.

Law Enforcement and Regulatory Bodies

kotk will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where kotk has a good-faith belief that disclosure is necessary to protect the rights, property, or safety of kotk, its players, or the public.

Business Transfers

In the event that kotk undergoes a merger, acquisition, or transfer of assets, personal data held by kotk may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer that materially affects the handling of their personal data.

07 Cookies & Tracking Technologies

kotk uses cookies and similar tracking technologies to maintain session state, remember your preferences, and collect technical usage data that helps us improve the platform. The categories of cookies used on kotk.io are as follows:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in while you navigate the site. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, between sessions.
• Analytics cookies: Used to collect anonymised, aggregated data about how players use the kotk platform — including which pages are visited most frequently and how long sessions last. This data is used solely to improve platform performance and does not identify individual users.
• Security cookies: Used to detect and prevent fraudulent activity, multi-accounting, and unauthorised access attempts.

Most web browsers allow you to control cookies through their settings. You may choose to block or delete cookies; however, doing so may affect the functionality of the kotk platform. By continuing to use kotk.io with cookies enabled, you consent to the use of cookies as described above.

08 Data Retention

kotk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account and for a minimum of five years following account closure or the date of the last transaction, whichever is later.
• Identity verification documents: Retained for a minimum of five years from the date of verification, in line with standard AML record-keeping practice.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for a minimum of two years from the date of the last communication in a given enquiry thread.
• Technical and device data: Retained for up to 12 months in identifiable form. Aggregated, anonymised versions of this data may be retained indefinitely for platform analytics purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised. Where deletion is not immediately possible due to technical constraints, data will be isolated and protected from any further active processing until deletion can be completed.

09 Data Security

kotk implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kotk.io.
• Encryption of sensitive data fields (including passwords and payment identifiers) at rest.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role.
• Regular security reviews and vulnerability assessments of platform infrastructure.
• Two-factor authentication options for player accounts to prevent unauthorised access.
• Automated monitoring systems to detect and flag suspicious account activity in real time.

While kotk takes all reasonable steps to protect your personal data, no electronic transmission or storage system is completely immune to risk. In the event of a data breach that is likely to result in a risk to your rights or freedoms, kotk will notify affected players without undue delay and will take all reasonable steps to contain the breach and prevent further harm.

10 Your Rights

As a kotk player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact the kotk support team at [email protected] with the subject line "Privacy Request":

• Right of access: You may request a copy of the personal data kotk holds about you, along with information about how it is used.
• Right to rectification: You may request that inaccurate or incomplete personal data held about you be corrected or updated.
• Right to erasure: You may request that kotk delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations (such as AML record-keeping requirements).
• Right to restriction: You may request that kotk restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to object: You may object to the processing of your personal data where kotk relies on legitimate interests as the legal basis, and you believe your own privacy rights override those interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: Where technically feasible, you may request that kotk provide your personal data in a structured, commonly used, machine-readable format.

kotk will respond to all privacy rights requests within a reasonable period and in any case within 30 days of receipt. We may request proof of identity before fulfilling a request to ensure that data is not disclosed to an unauthorised person.

11 Children & Minors

The kotk platform is strictly for individuals aged 21 and above. kotk does not knowingly collect or process personal data from individuals under the age of 21. The registration process includes a date-of-birth field and an age declaration, both of which are designed to prevent underage access. If kotk discovers or has reasonable grounds to believe that an account has been registered by a person under 21, the account will be suspended immediately, all personal data associated with the account will be reviewed, and the matter may be referred to the appropriate authorities.

If you are a parent or guardian and believe that a minor under your care has registered an account on the kotk platform, please contact the support team at [email protected] immediately so that the account can be investigated and closed without delay.

12 Third-Party Links

The kotk platform may contain references to, or integrations with, third-party services — including game providers, payment processors, and identity verification services. This Privacy Policy applies solely to personal data collected and processed by kotk directly. It does not cover the data practices of any third-party service providers, each of which operates under its own privacy policy. kotk is not responsible for the privacy practices of third parties and encourages you to review their policies independently where relevant.

13 Policy Updates

kotk reserves the right to update or amend this Privacy Policy at any time. Revised versions will be published on this page with an updated effective date. Where changes are material — for example, where we significantly alter the way we use your personal data — kotk will make reasonable efforts to notify registered players via the mobile number or email address associated with their account. Your continued use of the kotk platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

We recommend reviewing this page periodically to stay informed of how kotk handles your personal data. If you do not agree with the revised Privacy Policy, you should stop using the platform and may request account closure in accordance with the Terms & Conditions.

14 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to the personal data kotk holds about you, please get in touch using the details below:

• Email: [email protected] — please include "Privacy Request" in the subject line
• Live Chat: Available 24 hours a day, 7 days a week, via the kotk platform at kotk.io
• Response Time: Privacy requests are typically acknowledged within 24 hours and resolved within 30 days

For questions about responsible gaming, self-exclusion, or deposit limits, please visit the Responsible Gaming page or contact the support team directly. For a full overview of the rules governing your use of kotk, please review the Terms & Conditions.