0tk10 Privacy Policy

1 Introduction

0tk10 ("we", "us", "our") operates the online casino and sports betting platform available at https://0tk10.io. We are committed to protecting and respecting the privacy of all individuals who interact with the 0tk10 platform, whether as registered players, visitors, or prospective users.

This Privacy Policy ("Policy") sets out in clear and formal terms the basis on which any personal data we collect from you, or that you provide to us, will be processed by 0tk10. It covers all data collected through the 0tk10 website, mobile-compatible platform, customer support channels, and any associated services.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy. All three documents together constitute the full agreement between you and 0tk10 with respect to your use of the platform.

2 Personal Data We Collect

0tk10 collects personal data in the following categories. We limit collection to data that is genuinely necessary for the purposes described in this Policy.

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify compliance with the 21+ age requirement).
• Residential address, including city, district, and postcode.
• Valid email address used as the primary communication channel.
• Mobile phone number, where provided during registration or account verification.

2.2 Account & Transactional Data

• Username, encrypted password, and account security settings.
• Deposit and withdrawal records, including payment method references (e.g., bKash wallet number, Nagad account reference, Rocket account reference).
• Betting history, game session records, wager amounts, and game outcomes.
• Bonus claims, wagering progress, and promotional participation history.
• Account balance history and currency (BDT / ৳) transaction logs.

2.3 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of address documents (utility bills, bank statements dated within three months).
• Selfie photographs or liveness check data when required by our KYC verification process.
• Source of funds documentation, where required by anti-money-laundering obligations.

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, browser type and version.
• Session timestamps, pages visited, features used, and click-stream data.
• Error logs and crash reports generated during your use of the platform.

2.5 Communications Data

• Content of messages exchanged with the 0tk10 support team via email.
• Records of support tickets, complaint submissions, and their resolutions.

3 How We Collect Your Data

0tk10 collects personal data through the following channels:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical and usage data collected automatically as you interact with the 0tk10 platform via cookies, server logs, and analytics tools.
• Third-party providers: Identity and payment verification data received from payment partners such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard, or from KYC service providers, when you initiate a transaction or verification request.
• Publicly available sources: In limited circumstances, we may cross-reference publicly available sources to verify the accuracy of information you have provided, particularly in the context of anti-money-laundering checks.

4 Why We Use Your Personal Data

The table below sets out the primary purposes for which 0tk10 processes your personal data and the corresponding data categories involved.

0tk10 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects on you, except where it is strictly necessary for fraud prevention or AML compliance, in which case you may request human review of any automated decision.

5 Legal Basis for Processing

0tk10 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is required to perform the contract between you and 0tk10 — specifically, to provide the gaming and betting services you have registered to use, to process your financial transactions, and to manage your account.
• Legal obligation: Processing is required for 0tk10 to comply with applicable legal obligations, including KYC/AML requirements and age verification obligations.
• Legitimate interests: Processing is necessary for the legitimate interests of 0tk10, including fraud detection, platform security, responsible gaming monitoring, and analytics — provided those interests are not overridden by your own rights and interests.
• Consent: Where processing is based on your consent (for example, optional marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6 Sharing Your Personal Data

0tk10 does not sell, rent, or trade your personal data to any third party. We share your data only in the following strictly defined circumstances:

6.1 Payment Service Providers

To process deposits and withdrawals, we share necessary transactional data with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers act as data processors and are contractually bound to handle your data securely and only for the specified payment purpose.

6.2 Identity Verification Providers

To fulfil our KYC and AML obligations, we may share identity documentation with accredited third-party verification service providers. These providers are carefully vetted and are contractually prohibited from using your data for any purpose other than verification.

6.3 Technology & Infrastructure Providers

0tk10 uses third-party cloud hosting, analytics, and security service providers to operate the platform. These providers may process technical and usage data as part of their service delivery. All such providers are contractually bound by confidentiality and data protection obligations.

6.4 Legal & Regulatory Disclosure

0tk10 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of 0tk10, its users, or the public.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 0tk10 platform. They allow the platform to recognise your device across pages and sessions, and to store certain preferences and session state information.

7.2 Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. You cannot opt out of these without disabling platform functionality entirely.
• Functional cookies: Used to remember your preferences such as language setting and display options. These improve your experience but are not essential.
• Analytics cookies: Used in anonymised or aggregated form to understand how players navigate the platform, which features are most used, and where technical errors occur. This data helps us improve 0tk10.

7.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair your ability to log in or use core features of the 0tk10 platform. 0tk10 does not use third-party advertising cookies or cross-site tracking pixels.

8 Data Retention

0tk10 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account and for a period of five (5) years after account closure, in order to satisfy legal and regulatory obligations including AML record-keeping requirements.
• KYC and identity documents: Retained for five (5) years from the date of verification, or longer where required by applicable law.
• Transaction records: Retained for five (5) years from the date of the transaction, consistent with standard financial record-keeping obligations.
• Support communications: Retained for two (2) years from the resolution of the support interaction, or longer if the interaction relates to an ongoing legal matter.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it is aggregated or anonymised for analytical purposes.

When personal data is no longer required within the above retention periods, 0tk10 will securely delete or irreversibly anonymise it.

9 Data Security

0tk10 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 0tk10 servers.
• Bcrypt password hashing to ensure that account credentials are never stored in recoverable plain-text form.
• Role-based access controls that limit internal access to personal data to those employees or contractors with a genuine operational need.
• Regular security assessments including vulnerability scanning and penetration testing of the 0tk10 platform infrastructure.
• Incident response procedures that enable 0tk10 to detect, contain, and report data breaches in a timely manner.

Despite these measures, no system connected to the internet can be guaranteed to be 100% secure. You use the 0tk10 platform at your own risk with respect to the inherent limitations of internet-based data transmission. If you suspect that your 0tk10 account has been compromised, please contact [email protected] immediately.

10 Your Rights Over Your Data

Subject to applicable law, you have the following rights with respect to the personal data 0tk10 holds about you:

• Right of access: You may request a copy of the personal data 0tk10 holds about you, along with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.
• Right to erasure: You may request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Right to restriction of processing: You may request that we restrict processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of 0tk10's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. We will respond within 30 days of receipt. We may need to verify your identity before processing certain requests.

11 Children & Minors

The 0tk10 platform is strictly intended for adults aged 21 years and above. 0tk10 does not knowingly collect personal data from any person under the age of 21. If you have reason to believe that a person under 21 has registered an account or provided personal data to 0tk10, please notify us immediately at [email protected]. Upon receiving such notification, 0tk10 will promptly investigate, close the relevant account, and securely delete any personal data associated with it.

0tk10 employs age verification measures during account registration to minimise the risk of underage access. However, as an adult platform, we expect all users to accurately represent their age at the point of registration.

12 International Data Transfers

The 0tk10 platform serves users primarily in Bangladesh. However, as a digital platform, some of the third-party service providers we work with — including cloud infrastructure and KYC verification partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, 0tk10 ensures that appropriate safeguards are in place consistent with applicable data protection standards. These safeguards include contractual data processing agreements that impose equivalent protections to those applicable under Bangladeshi law and international best practice frameworks.

By using the 0tk10 platform, you acknowledge that your data may be transferred to and processed in countries other than Bangladesh, subject to the protections described above.

13 Changes to This Privacy Policy

0tk10 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date displayed at the top of this page and, where reasonably practicable, notify registered players via the email address associated with their account.

We encourage you to review this Privacy Policy periodically to stay informed about how 0tk10 handles your data. Your continued use of the 0tk10 platform following the publication of any revised Policy constitutes your acceptance of that revised version. If you do not agree with the changes, you must cease using the platform and may request account closure by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 0tk10 processes your personal data, please contact our data support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Language: English
• Response Time: We aim to respond to all privacy-related enquiries within 30 days of receipt (Bangladesh Standard Time, UTC+6).