Privacy Policy — How wwwok Protects Your Data

Welcome to the wwwok Privacy Policy. wwwok ("we", "us", "our", "the Platform") operates the online sportsbook and casino platform accessible at wwwok.io. This Privacy Policy describes how wwwok collects, processes, stores, shares and protects the personal data of all users ("you", "your") who access or use the Platform, including users who browse without registering and users who hold registered accounts.

This Privacy Policy applies to all wwwok services, including sports betting, live casino, slot games, fishing games, badminton markets, and all other features available on the Platform. It applies regardless of whether you access the Platform via a desktop browser, mobile browser or any other device.

By registering for an account, making a deposit, placing a bet or using any service on the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the Platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

For the purposes of applicable data protection law, wwwok acts as the data controller in respect of personal data collected through the Platform. As data controller, wwwok determines the purposes and means by which personal data is processed.

All enquiries relating to data protection, including requests to exercise your data rights, should be directed to the wwwok Data Protection contact using the details provided in Section 15 of this Policy.

wwwok collects the following categories of personal data. The specific data points collected depend on how you interact with the Platform.

3.1 Registration Data

When you create a wwwok account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (used to verify that you are 21 years of age or older)
• Gender (optional)
• Residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address
• Mobile phone number (used for account security and payment method verification)
• Username and encrypted password hash

3.2 Identity Verification (KYC) Data

When your account reaches thresholds requiring Know Your Customer (KYC) verification, or when you request a withdrawal, we may collect:

• Scanned or photographed copy of a government-issued photo ID (National ID Card, Passport or Driving Licence)
• Proof of address document (utility bill, bank statement or similar, dated within 90 days)
• Proof of ownership of the payment method used (e.g., screenshot of bKash or Nagad account registered in your name)
• Selfie photograph for biometric comparison against your ID document (where required)

3.3 Financial Data

We collect data relating to your financial transactions on the Platform, including:

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile wallet numbers or masked card numbers associated with transactions
• Deposit amounts, withdrawal amounts and transaction timestamps
• Account balance history and wagering history

wwwok does not store full card numbers or CVV codes. Card payment data is processed directly by our PCI-DSS compliant payment partners.

3.4 Usage and Behavioural Data

When you use the Platform, we automatically collect data about your interactions, including:

• IP address and approximate geographic location derived from IP
• Device type, operating system version and browser type
• Pages visited, features used, game sessions played and bet history
• Session start and end times, session duration and click-path data
• Referral source (how you arrived at the Platform)

3.5 Communications Data

If you contact our support team or respond to any Platform communication, we collect:

• The content of your support messages and our responses
• Email correspondence records
• Any documents or screenshots you attach to support requests

3.6 Responsible Gaming Data

If you use any responsible gaming tool on the Platform — including deposit limits, loss limits, session reminders or self-exclusion — we record the details of these settings and the dates on which they were applied or modified. This data is used exclusively to enforce your responsible gaming preferences and is never used for marketing or profiling purposes.

wwwok collects personal data through the following channels:

• Directly from you: When you register, complete your profile, make a deposit, place a bet, contact support or upload KYC documents.
• Automatically: Via cookies, server logs, analytics tools and device fingerprinting technologies when you access and browse the Platform.
• From payment providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay and card processors to reconcile deposits and withdrawals.
• From game providers: Game session data and outcome records from third-party game studios (Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe) to maintain accurate bet histories and resolve disputes.
• From fraud prevention partners: Risk scoring and device reputation data used to detect suspicious account activity and protect the Platform's integrity.

wwwok uses the personal data it collects for the following specific purposes:

wwwok will not use your personal data for any purpose not listed above without first obtaining your explicit consent or being required to do so by law.

wwwok processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as an account holder — including account creation, payment processing and bet settlement.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, conduct business analytics and improve our services — where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific and informed consent — primarily for promotional email communications and optional personalisation features. You may withdraw consent at any time by contacting [email protected].

wwwok may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

7.1 Payment Processors

Transaction data is shared with bKash, Nagad, Rocket, Upay and our card processing partners (Visa, Mastercard) solely for the purpose of processing deposits and withdrawals. These providers are subject to their own stringent security standards.

7.2 Game Providers

A limited set of account identifiers is shared with third-party game studios (Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe) to facilitate game sessions and maintain accurate records for dispute resolution. No sensitive personal or financial data is shared with game providers beyond what is technically necessary.

7.3 Identity Verification Partners

KYC documents may be processed by third-party identity verification service providers engaged by wwwok to carry out document authenticity checks and biometric comparison. These providers act as data processors under contract and may not use your data for any purpose other than completing the verification task assigned.

7.4 Fraud Prevention and Security

Device and behavioural data may be shared with fraud prevention partners for the purpose of risk scoring and detection of suspicious activity. This sharing is carried out on the basis of legitimate interests in protecting the Platform and its users.

7.5 Legal and Regulatory Authorities

wwwok will disclose personal data to competent law enforcement authorities, regulators or courts where required to do so by applicable law, or where such disclosure is necessary to protect the rights, property or safety of wwwok, its users or the public.

7.6 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the Platform's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity assuming the data protection obligations set out in this Privacy Policy.

wwwok uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences and collect analytical data about Platform usage. The following categories of cookies are used:

Strictly necessary cookies are essential for the Platform to function and cannot be disabled. For all other cookie categories, you may manage your preferences through your browser settings. Note that disabling functional cookies may affect your experience on the Platform.

wwwok retains personal data for the following periods:

• Active account data: Retained for the duration of your account relationship with wwwok, plus seven (7) years following account closure. The extended retention period is required for financial record-keeping and AML compliance purposes.
• KYC documents: Retained for five (5) years following the completion of the verification process, or seven (7) years from the date of last transaction, whichever is longer.
• Transaction records: Retained for seven (7) years from the date of each transaction in accordance with financial record-keeping obligations.
• Support communications: Retained for three (3) years from the date of the last communication in a given thread.
• Anonymised analytical data: May be retained indefinitely, as anonymised data no longer constitutes personal data.
• Marketing consent records: Retained until consent is withdrawn, plus two (2) years as evidence of the consent having been given.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from wwwok's systems, or anonymised such that it can no longer be attributed to an identified or identifiable individual.

wwwok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS/SSL encryption: All data transmitted between your device and the wwwok Platform is encrypted using TLS 1.2 or higher.
• AES-256 encryption at rest: Sensitive data stored in our databases — including identity documents and payment details — is encrypted at rest using AES-256.
• Password hashing: User passwords are never stored in plain text. They are hashed using bcrypt with an appropriate cost factor before storage.
• Role-based access control: Access to personal data within wwwok's systems is restricted to authorised personnel whose job function requires it, and is governed by a least-privilege access policy.
• Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication.
• Regular penetration testing: The Platform undergoes independent penetration testing on a periodic basis to identify and remediate security vulnerabilities.
• Incident response plan: wwwok maintains a documented data breach incident response plan. In the event of a breach affecting personal data, we will notify impacted users and relevant authorities in accordance with applicable law.

As a wwwok user, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request".

11.1 Right of Access

You have the right to request a copy of all personal data that wwwok holds about you. We will provide this data in a structured, commonly used and machine-readable format within thirty (30) days of receiving your verified request.

11.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data that wwwok holds about you. For most account details, you can update information directly via your Account settings. For data that cannot be self-corrected, please contact [email protected].

11.3 Right to Erasure

You have the right to request that wwwok delete your personal data. This right is subject to certain limitations — for example, we are legally required to retain financial transaction records for seven years and cannot delete these even upon request. Where deletion is not possible in full, we will explain the specific reason and delete all data that is not subject to a legal retention obligation.

11.4 Right to Restrict Processing

You have the right to request that wwwok restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while a complaint is being investigated.

11.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to request that it be transferred directly to another data controller where technically feasible.

11.6 Right to Object

You have the right to object to processing of your personal data where that processing is based on wwwok's legitimate interests. You also have the absolute right to withdraw consent for marketing communications at any time.

11.7 Response Timeframe

wwwok will acknowledge all data rights requests within forty-eight (48) hours of receipt and will fulfil the request, or provide a reasoned explanation for any refusal, within thirty (30) days. In cases of complexity, this period may be extended by a further thirty (30) days, with notification provided to you.

wwwok uses date of birth collection at registration and KYC identity document verification to enforce the 21+ age requirement. Any account found to belong to a person under 21 years of age will be immediately suspended. All deposits made by the underage user will be returned to the funding payment method and all personal data associated with the account will be deleted as soon as legally permissible.

If you are a parent or guardian and believe that a minor has registered on the wwwok Platform using your payment details or personal information, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary action.

The wwwok Platform primarily serves users in Bangladesh and stores the majority of its data within secure data centre infrastructure. However, certain service providers engaged by wwwok — including game providers (e.g., Evolution Gaming, Pragmatic Play) and fraud prevention partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, wwwok takes appropriate steps to ensure that the transfer is subject to adequate protections, including contractual obligations on the receiving party to handle data in accordance with standards consistent with this Privacy Policy. We do not transfer personal data to parties that cannot demonstrate adequate data protection standards.

wwwok reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or Platform features. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

For material changes that significantly affect how we use your personal data, wwwok will notify registered users via the email address associated with their account at least fourteen (14) days before the change takes effect. Non-material changes (such as clarifications of existing practices or corrections of typographical errors) may be made without advance notice.

Continued use of the Platform following notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should close your account and cease using the Platform.

If you have any questions, concerns or requests relating to this Privacy Policy or the way wwwok handles your personal data, please contact us using the details below. We are committed to addressing all privacy-related enquiries thoroughly and promptly.

Please include your registered username or registered email address in all privacy-related communications so that we can locate your account and respond accurately. Do not include your password or full payment method details in any correspondence.