Privacy Policy
for 38ok Casino Bangladesh
At 38ok, your privacy is taken seriously. This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and the rights you have over your information as a player on Bangladesh's trusted online casino and sports betting platform.
Overview & Scope
This Privacy Policy applies to all personal data processed by 38ok in connection with the operation of the 38ok platform at 38ok.club and any associated applications or services available to players in Bangladesh and elsewhere.
38ok ("we", "us", "our", or "the Platform") is committed to protecting the personal data of every player who registers an account, places a bet, or interacts with the 38ok platform in any way. This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of personal information in a transparent and legally compliant manner.
This policy applies to all individuals who access the 38ok website and platform, whether as registered account holders, guests browsing the site, or individuals who contact 38ok via our support channels. By registering an account or continuing to use the 38ok platform, you confirm that you have read and understood this Privacy Policy and that you consent to the practices described herein.
This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, which together form the complete framework governing your relationship with the 38ok platform. In the event of any conflict between this Privacy Policy and any other document, this Privacy Policy shall govern with respect to personal data handling.
38ok processes personal data with respect for the privacy principles of purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. We collect only the data that is necessary to operate the platform, comply with legal obligations, and provide you with a safe and enjoyable gaming experience. We do not sell, rent, or commercially trade your personal data to third parties for their own marketing purposes.
Who This Policy Covers
- Registered 38ok account holders
- Prospective players browsing the platform
- Individuals contacting 38ok support
- Players across Bangladesh using bKash, Nagad, Rocket, and local banks
Language of This Policy
This Privacy Policy is written in English. In the event of any interpretive ambiguity, the English-language version of this document is the authoritative version. Contact our support team if you need clarification on any section.
Data We Collect
38ok collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the site, and from trusted third-party partners where necessary to verify your identity and process payments.
Data You Provide Directly
When you register an account or use 38ok services, you provide us with information that includes:
- Identity data: Full legal name, date of birth, gender, and national identification number (National ID card or passport number) collected during account registration and KYC verification.
- Contact data: Email address, mobile phone number (including mobile financial service numbers for bKash, Nagad, Rocket, or Upay), and residential address.
- Financial data: Payment method details necessary to process deposits and withdrawals, including mobile banking account references, bank account numbers, and Visa or Mastercard details where applicable. 38ok does not store full card numbers — card data is tokenised by our payment processor.
- Account credentials: Username and encrypted password. 38ok never stores passwords in plain text.
- Support communications: Any information you share with 38ok's support team via live chat, email, or any other channel, including the content of your messages and any documents or screenshots you attach.
- KYC documents: Copies of government-issued identification, proof of address documents, and payment method ownership verification documents submitted as part of the account verification process.
Data Collected Automatically
When you access the 38ok platform, certain technical and behavioural data is collected automatically through our systems and third-party analytics tools:
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
- Usage data: Pages visited, games accessed, time spent on platform sections, clickstream data, search queries within the platform, and session duration.
- Transaction data: Records of all deposits, withdrawals, bets placed, game sessions, bonus claims, and account balance changes, including timestamps and amounts in BDT.
- Geolocation data: Approximate location derived from your IP address to ensure platform eligibility and to serve location-relevant content. Precise GPS location is not collected unless you explicitly grant permission via a mobile device.
- Cookie and tracking data: Data collected via cookies and similar tracking technologies as described in the Cookies section of this policy.
Data From Third Parties
38ok may receive personal data about you from third-party identity verification partners, payment processors, fraud prevention services, and responsible gaming tools. This data is used solely to fulfil the purposes described in this policy and is handled with the same level of care as data collected directly.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, NID / passport number | Account registration, KYC age & identity verification, regulatory compliance |
| Contact Data | Email address, mobile number, home address | Account communication, two-factor authentication, withdrawal notifications |
| Financial Data | bKash/Nagad number, bank account reference, tokenised card data | Processing deposits and withdrawals, fraud prevention, AML compliance |
| Transaction Data | Bet history, deposit/withdrawal records, bonus usage logs | Account management, dispute resolution, responsible gaming monitoring |
| Technical Data | IP address, device type, browser, OS, session data | Platform security, fraud detection, performance optimisation |
| Usage Data | Pages visited, games played, session duration, click patterns | Platform improvement, personalised experience, analytics |
| KYC Documents | NID scan, utility bill, selfie with ID | Identity verification, age verification, payment method ownership confirmation |
How We Use Your Data
38ok uses personal data for specific, lawful, and legitimate purposes. We do not use your data for purposes beyond those described here without first seeking your explicit consent.
Platform Operation
The primary purpose for which we process your personal data is to operate and deliver the 38ok platform services. This includes creating and maintaining your account, processing deposits and withdrawals, settling bets, awarding bonuses, providing customer support, and delivering account notifications and transaction records. Without this processing, we cannot provide you with access to the 38ok platform's services.
Identity Verification & KYC
38ok processes identity and document data to verify your age (confirming you are 18 or older), confirm your identity, and verify ownership of the payment methods you use on the platform. KYC processing is a mandatory requirement for withdrawal processing and is conducted using encrypted document handling systems. KYC data is retained in accordance with the Data Retention section of this policy.
Fraud Prevention & Security
We analyse transaction data, device data, IP addresses, and behavioural patterns to detect and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other security threats. This processing is conducted in 38ok's legitimate interest to protect the platform and all its players. Accounts flagged for suspicious activity may be suspended pending investigation as described in the Terms & Conditions.
Legal & Regulatory Compliance
38ok processes personal data to comply with applicable legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) regulations, and obligations to cooperate with lawful requests from government authorities, law enforcement, and financial regulators. In cases of legal obligation, data processing is non-negotiable and does not require your consent.
Responsible Gaming
38ok uses transaction data, session data, and account activity patterns to power our responsible gaming tools, including deposit limit monitoring, loss limit enforcement, self-exclusion management, and early warning systems that identify accounts showing potential signs of problem gambling behaviour. This processing is conducted in both your interest and in 38ok's legitimate interest to promote a safe gaming environment.
Marketing & Promotions
With your consent, 38ok may use your contact data to send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, seasonal promotions (such as BPL, IPL, Eid, and Pohela Boishakh offers), and other 38ok news. You may withdraw your consent to marketing communications at any time by updating your preferences in your account dashboard or by contacting support. Withdrawing marketing consent does not affect our right to send you essential account communications (such as deposit confirmations and withdrawal notifications).
Platform Improvement & Analytics
We use aggregated and anonymised usage data to analyse platform performance, understand player preferences, improve the user interface, optimise game loading speeds, and enhance the overall experience for players across Bangladesh — including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Where analytics are conducted using third-party tools, these tools process anonymised or pseudonymised data and are bound by data processing agreements with 38ok.
Personalisation
38ok may use your game history, preferences, and account activity to personalise the platform experience — for example, surfacing game categories you have previously enjoyed, or showing promotions relevant to sports you have bet on in the past. Personalisation is always subject to your privacy preferences and can be adjusted via your account settings.
Data Sharing & Disclosure
38ok does not sell or rent your personal data to third parties. We share data only where necessary to operate the platform, comply with legal obligations, or protect the security of the platform and its players.
Service Providers & Processors
To deliver the 38ok platform services, we engage third-party service providers who process personal data on our behalf under strict data processing agreements. These providers include:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the purpose of processing player deposits and withdrawals in BDT.
- KYC & identity verification providers: Third-party services used to verify the authenticity of identity documents and confirm player age during the KYC process.
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified providers, who receive minimal session data (such as player ID and wager amounts) necessary to deliver and settle games correctly.
- Analytics providers: Anonymised or pseudonymised usage data shared with analytics platforms to help us understand and improve platform performance.
- Fraud prevention services: Third-party fraud detection and AML screening tools that analyse transaction patterns and device fingerprints to protect the platform from financial crime.
- Customer support infrastructure: Live chat and communication tools used to deliver 38ok's 24/7 support service, which may process conversation content and account details shared during support interactions.
All third-party service providers engaged by 38ok are contractually required to process personal data only in accordance with 38ok's instructions and this Privacy Policy, and to implement appropriate technical and organisational security measures.
Legal Disclosure
38ok may disclose personal data to law enforcement authorities, financial intelligence units, regulatory bodies, or courts when required to do so by a lawful order, subpoena, or legal process. In such cases, 38ok will disclose the minimum amount of data necessary to satisfy the legal requirement and will not notify the subject of the disclosure where prohibited from doing so by the relevant legal process.
We NEVER Share Your Data For:
- Sale or rental to third-party marketers
- Commercial data brokerage of any kind
- Advertising networks unrelated to 38ok
- Sharing with other gambling platforms without your consent
- Any purpose not described in this Privacy Policy
Business Transfers
In the event that 38ok undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. Players will be notified via email prior to any such transfer and the acquiring entity will be bound by this Privacy Policy or a materially equivalent policy.
International Data Transfers
Some of our third-party service providers operate internationally. Where personal data is transferred outside of Bangladesh, 38ok ensures that appropriate safeguards are in place — including contractual data protection clauses — to protect your data to at least the standard described in this policy.
Data Retention
38ok retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or accounting obligations.
The retention periods applied by 38ok are designed to balance your privacy interests against legitimate operational and legal requirements. The following general retention guidelines apply to the main categories of personal data held by 38ok:
- Account data (registration information): Retained for the lifetime of the account plus 5 years following permanent account closure to meet anti-money laundering record-keeping obligations.
- KYC documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later, in accordance with AML compliance requirements.
- Transaction records (deposits, withdrawals, bets): Retained for 7 years from the transaction date to satisfy financial record-keeping obligations and to support dispute resolution.
- Support communications: Retained for 3 years from the date of the last communication in a given support thread, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until that matter is fully resolved.
- Marketing preferences and consent records: Retained for the lifetime of the account to enable you to review and update your preferences, and for up to 3 years after account closure as evidence of consent history.
- Analytics and usage data: Retained in anonymised or aggregated form indefinitely for platform improvement purposes. Identifiable usage data is retained for no more than 24 months before being anonymised.
- Security logs and fraud-detection data: Retained for up to 3 years from the date of the relevant event or detection flag, or longer if required for an ongoing investigation or legal proceeding.
When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Deletion is conducted as part of 38ok's regular data lifecycle management processes.
Retention at a Glance
- Account data: Account lifetime + 5 years
- KYC documents: 5 years minimum
- Transaction records: 7 years
- Support communications: 3 years
- Marketing consent: 3 years post-closure
- Security logs: Up to 3 years
- Analytics data: Anonymised after 24 months
Right to Erasure
You may request deletion of your personal data where there is no longer a legal or legitimate basis for 38ok to retain it. Requests are assessed individually. Data subject to legal retention obligations (such as AML records) cannot be deleted before the mandatory retention period expires. See the Your Privacy Rights section for full details on how to submit a deletion request.
Six Privacy Commitments We Make to Every Player
These six commitments summarise how 38ok approaches privacy in practice — what you can count on as a player on Bangladesh's trusted online casino and sports betting platform.
End-to-End SSL Encryption
All data transmitted between your device and the 38ok platform is encrypted using industry-standard SSL/TLS protocols. This ensures that your personal details, financial data, and account credentials are protected in transit at all times.
SecurityNo Data Selling — Ever
38ok does not sell, rent, or commercially share your personal data with third-party advertisers, data brokers, or unrelated businesses. Your data is used solely to operate the platform and deliver the services you have requested.
PrivacySecure Data Storage
All personal data held by 38ok is stored on secured servers with access controls, encryption at rest, and regular security audits. KYC documents and financial records are stored in isolated, access-restricted environments with strict internal access logging.
StorageConsent-Based Marketing
38ok only sends promotional communications — including bonus offers, BPL and IPL betting promotions, and seasonal Eid or Pohela Boishakh offers — to players who have explicitly opted in. You can withdraw your marketing consent at any time via your account dashboard with immediate effect.
ConsentTransparent Data Practices
This Privacy Policy is written in clear, plain English so that every player in Bangladesh can understand exactly what data 38ok collects and why. We update this policy whenever our practices change and notify registered players of material updates in advance.
TransparencyPurpose-Limited Processing
38ok collects only the data that is genuinely necessary to deliver the service, verify identities, process payments, and comply with legal requirements. We do not collect data speculatively or for undefined future purposes — every data point has a clearly documented reason for being collected.
MinimisationYour Privacy Rights
As a player on the 38ok platform, you have meaningful rights over your personal data. 38ok is committed to respecting and facilitating these rights promptly and without unnecessary barriers.
Right of Access
You have the right to request a copy of all personal data 38ok holds about you, including your account information, transaction history, KYC status, and support communication records. We will respond to access requests within 30 days.
Right to Rectification
If any personal data held by 38ok is inaccurate or incomplete, you have the right to request that it be corrected. Identity data corrections may require re-submission of KYC documents to ensure the accuracy of our records.
Right to Erasure
You may request deletion of your personal data where there is no longer a legitimate legal basis for retention. Erasure requests are assessed individually and may be declined where data must be retained to fulfil legal obligations, such as AML record-keeping requirements.
Right to Restriction
You may request that 38ok restricts the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved, or where you have objected to processing and a decision is pending.
Right to Data Portability
Where personal data is processed based on your consent or for the performance of a contract, you have the right to receive that data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case 38ok will assess whether its interests override your objection on a case-by-case basis.
How to Exercise Your Rights
To exercise any of the privacy rights described above, please contact the 38ok support team via the 24/7 live chat available in your account dashboard, or by sending a written request to . To protect your privacy, all rights requests require identity verification before they are processed — this ensures that personal data is only disclosed or modified in response to legitimate requests from the account holder.
38ok aims to respond to all privacy rights requests within 30 calendar days of receipt. In cases where a request is complex or where a high volume of requests is being processed simultaneously, we may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it within the initial 30-day window.
Withdrawing Consent
Where 38ok processes your personal data based on your consent — for example, for marketing communications or optional personalisation features — you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing that took place prior to withdrawal. To withdraw consent, update your preferences in the account settings panel or contact the support team directly.
Complaints
If you believe that 38ok has handled your personal data in a manner that does not comply with this Privacy Policy or applicable data protection principles, you are entitled to raise a complaint directly with 38ok by contacting our support team. We take all privacy complaints seriously and will investigate and respond to every complaint received. If you remain dissatisfied after our response, you may escalate the matter to the relevant data protection authority in your jurisdiction.
Contact & Data Requests
For any question, concern, or formal request relating to this Privacy Policy or the personal data 38ok holds about you, please use one of the contact channels below.
Live Chat Support
The fastest way to reach us for privacy queries or data requests is via the 24/7 live chat feature inside your 38ok account dashboard.
Average response time: 2–5 minutes
Availability: 24 hours a day, 7 days a week, including Bangladesh public holidays.
Live chat is the recommended channel for urgent matters such as account data freezes or suspected unauthorised access to your account.
Email for Formal Requests
For formal privacy rights requests — including access requests, erasure requests, rectification requests, and data portability requests — please send a written request to:
Email:
Please include your registered username, the email address on your account, and a clear description of your request. Identity verification will be required before the request is processed.
Response time: Within 30 calendar days of receipt.
Privacy Policy Updates
38ok reviews this Privacy Policy regularly and updates it whenever our data practices change in a material way. When material updates are made, registered players are notified via their registered email address at least 7 days before the updated policy takes effect.
Current version effective: January 2026
The most current version of this Privacy Policy is always available at 38ok.club/privacy-policy. It is your responsibility to review this page periodically to stay informed of any changes.
Play with Confidence at 38ok
Your privacy is protected. Your data is secure. Now explore Bangladesh's trusted online casino — cricket betting, live casino, slots, and more — all in one place.