Your Privacy Matters to kopk

1 Introduction

This Privacy Policy ("Policy") describes how kopk ("we", "us", "our", "kopk") collects, uses, discloses, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the kopk platform available at kopk.io, including all associated betting markets, casino games, slot games, and support services.

By registering an account on kopk, making a deposit, placing a bet, or otherwise using any feature of kopk.io, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the kopk platform.

This Policy is to be read in conjunction with kopk's Terms and Conditions and Responsible Gaming Policy, both of which are available on kopk.io and are incorporated herein by reference. In the event of any conflict between this Policy and the Terms and Conditions on a privacy matter, this Policy shall prevail.

2 Data Controller

kopk operates as the data controller in respect of all personal data collected through kopk.io. As data controller, kopk determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All enquiries relating to data protection, privacy rights, and this Policy should be directed to kopk's support team using the contact details provided in Section 14 of this document. kopk is committed to responding to all privacy-related enquiries within 7 business days of receipt.

3 Data We Collect

kopk collects personal data that falls into the following categories. We collect only data that is necessary, adequate, and relevant to the stated purposes of processing:

Category	Examples of Data Collected	Purpose
Identity Data	Full legal name, date of birth, National Identity Card (NID) number, passport number	Account registration, KYC verification, age verification (21+ requirement)
Contact Data	Email address, mobile phone number, residential address in Bangladesh	Account communications, withdrawal notifications, support correspondence
Financial Data	bKash account number, Nagad number, Rocket number, Upay details, Visa/Mastercard last 4 digits	Processing deposits and withdrawals, fraud prevention
Transaction Data	Deposit history, withdrawal history, bet history, bonus credits and redemptions, account balance movements	Account management, regulatory compliance, dispute resolution
Technical Data	IP address, device type, browser type and version, operating system, session duration, page views	Platform security, fraud detection, service optimisation
Usage Data	Games played, betting markets accessed, time spent on platform, feature interactions	Responsible gaming monitoring, product improvement
Communications Data	Support ticket content, live chat transcripts, email correspondence with kopk	Support quality, dispute resolution, compliance records

kopk does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for identity verification purposes under applicable law, and only with your explicit consent.

4 How We Collect Your Data

kopk collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to promotional communications.
• Automated technologies: When you visit kopk.io, we automatically collect certain technical and usage data through cookies, server logs, and similar technologies. See Section 10 for full details on our cookie practices.
• Third-party verification providers: During the KYC process, kopk may receive identity verification data from approved third-party identity verification services to confirm the authenticity of documents you have submitted.
• Payment service providers: When you deposit or withdraw via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we receive transaction confirmation data from the relevant payment service provider sufficient to reconcile your account balance.
• Fraud prevention and security partners: kopk may receive flagged data from fraud detection partners to protect the platform and our players from fraudulent activity, money laundering, and account takeover attempts.

5 Purposes of Processing

kopk processes your personal data for the following clearly defined purposes:

• Account management: To create, maintain, and administer your kopk account, including processing deposits, withdrawals, and bonus credits.
• Identity and age verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our KYC obligations.
• Service delivery: To provide access to cricket betting, live casino games, slots, table games, and all other products available on kopk.io.
• Security and fraud prevention: To detect, prevent, and investigate fraudulent transactions, money laundering, account takeovers, and other prohibited activities as defined in our Terms and Conditions.
• Responsible gaming: To monitor usage patterns and identify players who may be at risk of problem gambling, and to administer self-exclusion, deposit limit, and cooling-off requests.
• Legal and regulatory compliance: To retain records as required by applicable law and to respond to lawful requests from competent authorities.
• Customer support: To respond to your enquiries, process complaints, and maintain records of support interactions.
• Platform improvement: To analyse aggregate, anonymised usage data in order to improve the performance, design, and content of kopk.io.
• Marketing communications: Where you have provided your explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw this consent at any time by contacting [email protected].

6 Legal Basis for Processing

kopk processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and kopk — including account management, payment processing, and service delivery.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including KYC/AML obligations, record-keeping requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for kopk's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

7 Data Sharing and Disclosure

kopk does not sell, rent, or trade your personal data to any third party. We may share your personal data with carefully selected third parties only in the following circumstances and only to the minimum extent necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard, solely to process your deposits and withdrawals. These providers have their own independent privacy policies.
• KYC and identity verification providers: Approved third-party verification services used to confirm your identity and age during the account verification process.
• Fraud prevention and security partners: Third-party fraud detection services used to protect the kopk platform and player accounts from criminal activity.
• Technology and hosting providers: Providers of cloud hosting, content delivery, and IT infrastructure services who process data on kopk's behalf under strict data processing agreements.
• Legal and regulatory authorities: Competent authorities, law enforcement agencies, or courts where disclosure is required by applicable law or a valid legal order. kopk will notify you of any such disclosure where permitted by law.
• Professional advisers: Legal counsel, accountants, and auditors who require access to relevant data in the course of providing professional services to kopk, subject to duties of confidentiality.

8 Data Retention

kopk retains your personal data only for as long as is necessary to fulfil the purposes set out in this Policy, or for as long as is required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your active account relationship with kopk.
• Account closure data: Following voluntary or enforced account closure, identity and transaction records are retained for a minimum of 5 years to comply with anti-money laundering and record-keeping obligations under applicable law.
• Support and communications data: Retained for 3 years following the resolution of the relevant support interaction or complaint.
• Technical and usage data: Retained in anonymised or aggregated form indefinitely for analytical purposes. Non-anonymised technical data is deleted or anonymised within 12 months.
• Marketing consent records: Retained for the duration of your account and for 2 years following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, your personal data is securely deleted or anonymised using industry-standard data destruction procedures. You may request early deletion of your personal data in accordance with your rights under Section 11, subject to kopk's legal retention obligations.

9 Security Measures

kopk takes the security of your personal data extremely seriously. We implement a comprehensive range of technical and organisational security measures to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your browser or device and kopk's servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive data stored on kopk's systems, including financial information and identity documents, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within kopk's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication: kopk supports two-factor authentication (2FA) for player account login. Players are strongly encouraged to activate this feature within their account settings.
• Regular security audits: kopk conducts regular internal security reviews and engages independent security professionals to conduct periodic penetration testing and vulnerability assessments.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, kopk will notify affected players without undue delay and will take immediate remedial action.

10 Cookies and Tracking Technologies

kopk uses cookies and similar technologies (such as local storage and session tokens) on kopk.io. A cookie is a small text file placed on your device by a website that stores certain information about your visit. kopk uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for kopk.io to function. They enable core features such as secure login sessions, account authentication, and navigation between pages. These cookies cannot be disabled without affecting your ability to use the platform.
• Functional cookies: These cookies remember your preferences and settings — such as language and display options — to provide a more personalised experience on your next visit.
• Analytics cookies: kopk uses anonymised, aggregated analytics data to understand how players navigate the platform, which pages are most visited, and where technical issues arise. This data is used solely to improve the kopk experience and is never used to identify individual users.

kopk does not use third-party advertising cookies, behavioural tracking cookies, or cross-site tracking technologies of any kind. You may disable non-essential cookies through your browser settings at any time. Note that disabling strictly necessary cookies may impair your ability to use core platform features including login and payment processing.

11 Your Data Protection Rights

As a kopk player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 7 business days.

• Right of access: You have the right to request a copy of the personal data kopk holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For account details such as name, address, and contact information, you may also update these directly within your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that this right is subject to kopk's legal obligation to retain certain records.
• Right to restriction: You have the right to request that kopk restricts the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, kopk will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12 Protection of Minors

kopk's platform is strictly intended for adults aged 21 and above. kopk does not knowingly collect, process, or retain personal data from any person under the age of 21. Registration on kopk.io by a person under 21 is a breach of our Terms and Conditions and is strictly prohibited.

If kopk becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any funds that may have been deposited, subject to verification. If you are a parent or guardian and believe that your child under the age of 21 may have registered on kopk, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

kopk strongly encourages the use of parental control tools and internet filtering software to prevent minors from accessing online gambling platforms. Information about such tools is available through your internet service provider or device manufacturer.

13 Changes to This Privacy Policy

kopk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. The date at the top of this page reflects when this Policy was last revised.

Where changes to this Policy are material — meaning they significantly affect how we use your personal data or materially reduce your rights — kopk will notify registered players by email to their registered address and will post a prominent notice on kopk.io at least 7 days before the changes take effect. For non-material changes, the updated Policy will be published on kopk.io without separate individual notice.

Your continued use of kopk.io following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must stop using the platform and contact us to close your account.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or kopk's handling of your personal data, please contact our dedicated privacy support team using the details below. We are available 24 hours a day, 7 days a week, every day of the year including all Bangladesh public holidays.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy requests: Privacy Rights Request
• Response time: Acknowledgement within 2 business days; full response within 7 business days.
• Language: Support correspondence is handled in English.