38ok Privacy Policy

1. Introduction

38ok operates the online casino and sports betting platform accessible at https://38ok.ws. This Privacy Policy describes the types of personal information that 38ok collects from users of this platform, the purposes for which that information is processed, the conditions under which it may be shared with third parties, and the rights and choices available to you as a data subject. By creating an account or continuing to use the 38ok platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to all users of 38ok regardless of whether they are registered account holders, visitors browsing the platform without an account, or individuals who have contacted 38ok's customer support team. 38ok is committed to processing personal data in a secure, transparent, and lawful manner consistent with applicable data protection standards.

2. Information We Collect

38ok collects personal data from you in several ways: directly when you provide it during registration or when you contact support, automatically when you use the platform, and in some cases from third-party verification and payment providers. The categories of personal data we may collect include the following.

• Identity Data: Full legal name, date of birth, gender, and copies of government-issued identity documents submitted during the KYC verification process. This data is required to verify your age and identity as mandated by our responsible gaming commitments.
• Contact Data: Email address, mobile phone number, and residential address. This data is used for account communication, promotional notifications (where consented), transaction receipts, and support correspondence.
• Financial Data: Payment method details, transaction history, deposit and withdrawal records, and wallet identifiers (e.g. bKash account number, Nagad account number, Rocket account number). Full payment credentials are handled by our payment providers and are not stored by 38ok.
• Usage and Technical Data: IP address, device type, operating system, browser type, session duration, pages visited, game activity logs, and betting history. This data is collected automatically to maintain platform security, detect fraud, and improve the user experience.
• Communications Data: Records of messages, emails, live chat transcripts, and any correspondence you have sent to or received from 38ok. These records are retained for regulatory compliance and dispute resolution purposes.

3. How We Use Your Information

38ok processes personal data only for lawful purposes directly connected to the operation of our platform and our obligations to users and regulatory bodies. We do not process your data for any purpose that is incompatible with the purposes listed below.

• Account Management: To create, verify, maintain, and close your 38ok user account, including identity verification, age confirmation, and KYC compliance checks required before deposits and withdrawals are processed.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and other accepted payment methods, and to maintain accurate financial records associated with your account.
• Legal and Regulatory Compliance: To fulfil 38ok's obligations under applicable anti-money laundering (AML) regulations, responsible gaming requirements, and any lawful requests received from competent authorities.
• Platform Security and Fraud Prevention: To monitor account activity for suspicious behaviour, detect and prevent fraud, and enforce our Terms & Conditions — including identifying and closing duplicate accounts or accounts engaged in prohibited activities.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and provide ongoing support in English and Bengali through our 24/7 support channels.
• Marketing Communications: To send you promotional offers, bonus announcements, and platform updates where you have explicitly consented to receive marketing communications. You may withdraw this consent at any time by contacting support or updating your account preferences.

Your Privacy at a Glance

4. Sharing Your Information

38ok does not sell, rent, or trade your personal data to third parties for any marketing or commercial purpose. We may share your personal data in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: We share necessary financial data with payment processing partners including bKash, Nagad, Rocket, Upay, and banking institutions solely to execute deposit and withdrawal transactions authorised by you. These providers process your data under their own privacy policies and are not permitted to use it for any other purpose.
• Identity Verification Providers: To fulfil our KYC obligations, we may share identity documents with accredited third-party identity verification services. These services are bound by strict confidentiality obligations and may only use your data for verification purposes.
• Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so or where disclosure is necessary to protect the rights, safety, or property of 38ok, its users, or the public.
• Technology and Analytics Partners: We use trusted technology vendors to support platform operation, analytics, and security. These vendors act as data processors under our instruction and are contractually prohibited from using your data for their own purposes.

5. Cookies and Tracking Technologies

The 38ok platform uses cookies and similar tracking technologies to maintain session state, remember your preferences, analyse platform usage patterns, and support fraud detection. A cookie is a small text file stored on your device by your web browser. You can configure your browser to block or delete cookies, but doing so may impair certain features of the 38ok platform.

• Essential Cookies: These cookies are necessary for the platform to function correctly. They manage your login session, remember your language preference, and maintain security tokens. These cookies cannot be disabled without breaking core platform functionality.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how users interact with the 38ok platform — including which pages are visited most frequently and how long users spend on different sections. This data helps us improve the platform experience. No individually identifiable data is collected through analytical cookies.
• Fraud Detection Technologies: 38ok uses device fingerprinting and behavioural analysis tools to identify suspicious account activity and prevent unauthorised access. These technologies process technical device data and do not directly identify you by name.
• Managing Cookies: Most modern browsers allow you to view, manage, block, and delete cookies through the browser's privacy or security settings. Please note that blocking essential cookies will prevent you from logging into your 38ok account. For detailed guidance on managing cookies, refer to your browser's official help documentation.

6. Data Retention

38ok retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The specific retention period depends on the category of data and the legal basis for its processing. As a general principle, account data and financial records are retained for a minimum of five years following account closure to comply with anti-money laundering and tax record-keeping requirements.

When personal data is no longer required, 38ok will securely delete or anonymise it in a manner that prevents recovery or re-identification. Analytical and usage data that has been fully anonymised may be retained indefinitely for statistical and platform improvement purposes, as anonymised data no longer constitutes personal data.

7. Your Rights Over Your Personal Data

As a user of the 38ok platform, you hold a number of rights in relation to the personal data we process about you. 38ok is committed to honouring these rights promptly and without undue delay. To exercise any of the rights listed below, please contact us at [email protected] with your registered account email address and a description of your request.

• Right of Access: You have the right to request a copy of the personal data that 38ok holds about you, together with information about how and why it is being processed. We will provide this information within 30 days of receiving a verified request.
• Right to Rectification: If you believe that any personal data 38ok holds about you is inaccurate or incomplete, you have the right to request its correction. We will review and update your data within a reasonable timeframe following a verified request.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected, or where you withdraw consent — you may request that 38ok delete your personal data. Requests are subject to our legal retention obligations; some data cannot be deleted while a regulatory retention period remains active.
• Right to Restrict Processing: You have the right to request that 38ok restrict the processing of your personal data in specific circumstances, such as while a dispute about its accuracy is being resolved. During a restriction period, we will store your data but will not actively process it.
• Right to Object to Marketing: You have the absolute right to object at any time to the processing of your personal data for direct marketing purposes. Once you notify us of your objection, we will cease sending you marketing communications immediately.

8. Data Security

38ok takes the security of your personal data seriously and applies a multi-layered approach to protecting it. All data transmitted between your device and our platform is encrypted using 256-bit SSL/TLS protocols. Sensitive account credentials are stored using industry-standard hashing algorithms. Access to personal data within 38ok is restricted to staff who require it to perform their job functions, and all staff with data access are subject to confidentiality obligations.

Despite these measures, no online platform can guarantee absolute security against all threats. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, 38ok will notify affected users without undue delay and will take immediate steps to contain and remediate the incident. We conduct periodic security reviews and penetration testing to identify and address potential vulnerabilities before they can be exploited.

9. Third-Party Links

The 38ok platform does not include links to external third-party websites for commercial purposes. In the event that any third-party content or reference is ever displayed on the platform, 38ok is not responsible for the privacy practices or content policies of those third parties. We encourage you to review the privacy policy of any external service before providing your personal data to them. This Privacy Policy applies exclusively to data collected and processed by 38ok through the 38ok.ws platform.

10. Changes to This Policy and Contact Information

38ok reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made to this policy, we will notify registered users by email and display a prominent notice on the platform for a reasonable period before the changes take effect. Your continued use of the 38ok platform after notification of a policy update constitutes your acknowledgement of the revised Privacy Policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about how 38ok handles your personal data, please contact our privacy support team. We are committed to resolving all privacy-related enquiries fairly and transparently. Our support team is available 24 hours a day, 7 days a week, in both English and Bengali.