Privacy Policy
How kotk collects, uses, stores, and protects the personal information of players in Bangladesh.
Introduction
What this Privacy Policy covers and who it applies to.
kotk ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses the kotk platform at kotk.ws. This Privacy Policy explains what personal information we collect, the purposes for which we use it, how long we retain it, with whom we may share it, and the rights available to you as a data subject. This Policy applies to all users of the kotk website, mobile-optimised site, and all related services, regardless of whether you access the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or anywhere else in Bangladesh.
By registering an account with kotk, making a deposit, or otherwise using any part of our platform, you confirm that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the kotk platform. We encourage you to review this Policy periodically, as it may be updated from time to time. The "Last updated" date at the top of this page indicates when the most recent revision was made.
How kotk Protects Your Data
Five core commitments that underpin our approach to player privacy.
All data transmitted between your device and the kotk platform is encrypted using industry-standard SSL (Secure Sockets Layer) technology. This protects your personal details, login credentials, and payment information from interception during transit.
kotk does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your information is used exclusively to operate and improve the kotk platform and to comply with legal obligations. We share data with partners only where necessary and under strict confidentiality agreements.
kotk will only send you promotional communications where you have given your explicit consent at registration or have opted in subsequently. You may opt out of marketing messages at any time by contacting support at [email protected]. Opting out of marketing does not affect transactional communications such as deposit confirmations or account security alerts.
You have the right to request a copy of the personal data kotk holds about you, and to request correction of any inaccurate information. Requests should be submitted in writing to [email protected]. kotk will respond within 14 days of receiving a valid request.
kotk applies data minimisation principles — we collect only the personal information that is necessary for the purposes described in this Policy. We do not retain data for longer than is required, and we review our data holdings periodically to remove or anonymise information that is no longer needed.
1. Information We Collect
The categories of personal data collected at registration, during gameplay, and through platform use.
kotk collects personal data in several ways: information you provide directly when registering or contacting support, information generated automatically through your use of the platform, and information obtained from payment providers as part of transaction processing. The table below summarises the main categories of data we collect, how we receive them, and the purpose for which they are used.
| Data Category | How Collected | Purpose |
|---|---|---|
| Identity data (name, date of birth, NID/passport) | Provided by you at registration and KYC | Account verification, age check, fraud prevention |
| Contact data (mobile number, email address) | Provided by you at registration | Account authentication, OTP delivery, support communications |
| Financial data (bKash/Nagad/Rocket wallet number, transaction history) | Provided by you and received from payment processors | Processing deposits and withdrawals, anti-money-laundering checks |
| Usage data (IP address, device type, browser, session logs, pages visited) | Collected automatically via server logs and cookies | Platform security, fraud detection, service improvement |
| Gaming behaviour data (bet history, game sessions, responsible gaming tool settings) | Generated automatically during platform use | Responsible gaming compliance, dispute resolution, personalisation |
kotk does not intentionally collect sensitive personal data such as health information, religious beliefs, political opinions, or biometric data beyond what is required for standard identity verification under KYC. If you believe we have inadvertently collected information outside these categories, please contact us at [email protected] so we can investigate and, where appropriate, delete the data concerned.
2. How We Use Your Information
The specific purposes for which kotk processes player personal data.
kotk processes personal data only for the purposes set out below. We do not use your information for any purpose that is incompatible with the reason it was originally collected, unless we have obtained your additional consent or are required to do so by law.
- To create and manage your kotk account, including verifying your identity and age in accordance with our KYC obligations and the 21+ age requirement.
- To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions on your account.
- To deliver the kotk gaming platform, including cricket betting, live casino, slots, crash games, and all other game categories offered on the site.
- To send you transactional communications, including deposit confirmations, withdrawal processing updates, OTP codes, and account security alerts via your registered mobile number.
- To enforce our responsible gaming obligations, including monitoring player activity for signs of problem gambling, applying deposit limits and self-exclusion settings, and fulfilling our 21+ age-verification duty.
- To detect and prevent fraud, money laundering, bonus abuse, and other prohibited conduct as defined in the kotk Terms and Conditions, and to co-operate with law enforcement where legally required.
3. Legal Basis for Processing
The grounds under which kotk is lawfully permitted to process your personal data.
kotk processes personal data on one or more of the following legal bases, depending on the specific processing activity involved.
Contractual Necessity
Most of the data processing described in this Policy is necessary for kotk to perform its obligations under the account agreement with you — such as creating your account, processing your deposits and withdrawals, and delivering the gaming services you have requested. Without this processing, kotk cannot provide the platform.
Legal Obligation
Certain processing activities are required to comply with applicable legal and regulatory obligations — including KYC identity verification, age verification, anti-money-laundering record-keeping, and co-operation with law enforcement requests. kotk may be legally required to retain some categories of data even after your account is closed.
Legitimate Interests
kotk processes certain data on the basis of legitimate interests — for example, fraud detection, platform security, and analysis of aggregate anonymised usage patterns to improve the service. Where we rely on legitimate interests, we balance these against your interests and fundamental rights to ensure they do not override your privacy.
Consent
Where kotk sends you marketing or promotional communications, this is done on the basis of your consent, given at registration or subsequently. You have the right to withdraw this consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.
4. Sharing of Personal Data
The third parties with whom kotk may share your data and the safeguards in place.
kotk does not sell personal data. We may share your data with the categories of third parties described below, solely to the extent necessary for the purposes set out in this Policy.
- Payment processors (bKash, Nagad, Rocket, Upay): we share transaction references and account holder names with our payment partners solely to process deposits and withdrawals. We do not share your full identity documents or gaming history with payment processors.
- Game content providers (including Pragmatic Play, Evolution Gaming, Spribe, PG Soft, Ezugi, and Jili Games): these providers may receive an anonymised session token to authenticate your game session. They do not receive your name, contact details, or financial data from kotk.
- Fraud prevention and compliance services: where kotk is required to verify the legitimacy of transactions or to comply with anti-money-laundering obligations, we may share relevant data with specialist compliance service providers who are bound by strict confidentiality obligations.
- Law enforcement and regulatory authorities: kotk will disclose personal data to law enforcement agencies or regulatory bodies where required to do so by applicable law, court order, or other legal process. We will, where legally permissible, notify you of such a disclosure request before complying.
kotk requires all third-party service providers to whom we disclose personal data to implement appropriate technical and organisational security measures to protect that data, and to use it only for the purposes for which it was disclosed. We do not permit our service providers to use your data for their own independent purposes.
5. Cookies and Tracking Technologies
How kotk uses cookies and similar technologies on its platform.
The kotk platform uses cookies and similar tracking technologies to operate core site functions, remember your session state, and analyse aggregate traffic patterns. Cookies are small text files placed on your device by the platform. The kotk platform uses the following categories of cookies.
- Strictly necessary cookies: these cookies are essential for the platform to function. They maintain your login session, store your language preference, and enable core security features such as CSRF protection. These cookies cannot be disabled without breaking the platform.
- Analytical cookies: these cookies collect anonymised information about how players use the platform — for example, which pages are visited most frequently and where errors occur. This data is used in aggregate to improve the platform experience. No individual player is identified by analytical cookies.
- Functional cookies: these cookies remember your preferences such as responsible gaming tool settings, notification preferences, and display options so that you do not need to re-enter them on each visit.
You may adjust your browser settings to refuse or delete cookies at any time. However, disabling strictly necessary cookies will prevent the kotk platform from operating correctly and you will not be able to log in to your account. kotk does not use third-party advertising cookies or cross-site tracking technologies.
6. Data Retention
How long kotk retains your personal data and why.
kotk retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and our operational needs. For active accounts, we retain all account, identity, financial, and gaming behaviour data for the lifetime of the account plus a minimum of five years following account closure. This retention period reflects common financial record-keeping requirements applicable to online payment platforms operating in Bangladesh.
Usage data such as server logs and anonymised analytical data is retained for a shorter period of up to 12 months. Marketing consent records are retained for the duration of the consent plus three years to demonstrate compliance. Where you exercise your right to erasure (see Section 7), kotk will delete or anonymise your data unless a legal obligation requires us to retain it. In such cases, we will inform you of the legal basis for continued retention.
7. Your Rights
The rights you hold over your personal data and how to exercise them.
As a data subject, you have the following rights in relation to the personal data kotk holds about you. To exercise any of these rights, please submit a written request to [email protected], including your registered mobile number so that we can verify your identity before processing the request.
- Right of access: you may request a copy of the personal data kotk holds about you, along with information about how it is used and with whom it is shared.
- Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
- Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where we have processed it unlawfully.
- Right to restriction of processing: in certain circumstances you may request that we restrict the way we process your data — for example, while a rectification request is being investigated.
- Right to data portability: where processing is based on your consent or a contract with you, and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
- Right to object: you may object to processing based on legitimate interests, including profiling, and to direct marketing at any time. Where you object to direct marketing, we will cease that processing immediately.
kotk will respond to all valid rights requests within 14 days of receipt. In complex cases, this period may be extended by a further 14 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your rights under this Policy. If you are not satisfied with kotk's response, you may submit a complaint to the relevant data protection authority in your jurisdiction.
8. Security Measures
The technical and organisational steps kotk takes to keep your data safe.
kotk implements a range of technical and organisational security measures designed to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include SSL encryption of all data in transit, secure storage of identity documents with access restricted to authorised personnel only, regular security reviews of platform infrastructure, and mandatory staff training on data handling and privacy obligations. Payment processing is handled through established mobile financial service providers (bKash, Nagad, Rocket, Upay) whose own security standards are well-recognised in Bangladesh.
Despite these measures, no internet-based platform can guarantee absolute security. If you become aware of any security vulnerability or suspect that your account has been compromised, please contact kotk support immediately at [email protected]. We will investigate and take appropriate action as quickly as possible. You can help protect your account by using a strong, unique password and by never sharing your login credentials with anyone.
9. Third-Party Links and Services
How this Policy applies to content or services provided by third parties accessible via kotk.
The kotk platform may contain game content provided by third-party studios. These studios operate their own game interfaces within the kotk platform environment and may have their own privacy practices governing data generated within their game environments. kotk takes reasonable steps to ensure that game providers operating within its platform do not access your personal data beyond what is required for session authentication. However, kotk is not responsible for the privacy practices of independent third-party game studios and encourages you to review the privacy policies of any third-party providers whose services you access. The kotk platform does not contain links to external third-party websites, and this Privacy Policy applies only to data processed by kotk and its contracted service providers.
10. Changes to This Privacy Policy
How and when this Policy may be updated and how you will be informed.
kotk reserves the right to update this Privacy Policy at any time. When we make material changes — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players via the mobile number or email address on file, and will publish the revised Policy on this page with an updated "Last updated" date. Where changes are minor (such as typographical corrections or minor restructuring with no substantive effect), we may update the Policy without specific notice but will always update the "Last updated" date. Your continued use of the kotk platform after the revised Policy is published constitutes acceptance of the updated terms. We recommend bookmarking this page and reviewing it periodically.
Contact Us About Privacy
How to reach kotk with privacy-related questions or requests.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how kotk handles your personal data, please contact us at [email protected]. Include your registered mobile number in your message so that our team can locate your account and respond accurately. All privacy-related requests are handled with strict confidentiality. kotk aims to acknowledge all privacy enquiries within two business days and to resolve them within 14 days of receipt.
Have more questions? Explore our FAQ or log in to your kotk account.
Go to kotk Login Read Our FAQ Responsible Gaming