Privacy Policy — 300ok Platform

01 Who We Are

300ok ("we", "us", "our") operates the online casino and sports betting platform accessible at https://300ok.io. The 300ok platform is operated for the benefit of players based in Bangladesh and is designed to provide a safe, trusted, and entertaining gambling environment for adults aged 21 and over.

For the purposes of this Privacy Policy, 300ok is the data controller — meaning we are the entity that determines the purposes and means by which your personal data is processed. Any questions about how we handle your data should be directed to [email protected].

02 Data We Collect

We collect and process the following categories of personal data in connection with your use of the 300ok platform:

Identity and Contact Data

• Full legal name, date of birth, nationality, and gender.
• Government-issued identification number (National ID, passport number, or equivalent).
• Email address, mobile phone number, and residential address (including city — whether Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or elsewhere).

Financial Data

• Mobile financial service account identifiers for bKash, Nagad, Rocket, Upay, and SureCash.
• Bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and any other bank used for deposits or withdrawals.
• Complete transaction history: deposit amounts in Bangladeshi Taka (৳), withdrawal amounts, dates, and reference numbers.

Technical and Usage Data

• IP address, device identifiers, browser type and version, operating system, and screen resolution.
• Session start and end times, pages visited, games accessed, bets placed, wager amounts, and game outcomes.
• Responsible gaming tool usage: deposit limit settings, self-exclusion requests, and session timer activations.

Communications Data

• Content of support enquiries submitted by email or live chat.
• Records of any dispute submissions and the correspondence related to their resolution.
• Marketing consent records: whether you have opted in or out of promotional communications, and the date of each preference change.

03 How We Collect Your Data

300ok collects your personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical and usage data collected automatically when you access the platform, including data gathered through cookies, server logs, and session analytics tools.
• Third-party verification services: Identity and age verification data received from KYC/AML service providers when they confirm or supplement the information you have submitted directly.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, SureCash, and our partner banking institutions when a deposit or withdrawal is processed.
• Game providers: Aggregated gameplay and session data transmitted by certified game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi in the course of delivering their games on the 300ok platform.

04 How We Use Your Data

300ok uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your player account, verifying your identity and age (21+ requirement), and processing your login credentials securely.
• Transaction processing: Handling deposits and withdrawals in Bangladeshi Taka (৳), communicating transaction confirmations, and resolving payment queries.
• Legal and regulatory compliance: Meeting anti-money laundering (AML) obligations, conducting Know Your Customer (KYC) checks, and retaining records as required by applicable law.
• Responsible gaming: Monitoring player activity to identify signs of problematic gambling behaviour, enforcing deposit and loss limits, administering self-exclusion requests, and proactively reaching out to players who may need support.
• Fraud prevention and security: Detecting and investigating suspicious account activity, preventing unauthorised account access, and protecting the platform from abuse.
• Platform improvement: Analysing aggregated usage data to identify bugs, improve game loading performance, and optimise the user experience across desktop and mobile devices.
• Marketing communications: Sending personalised bonus offers, promotional updates, and platform news to players who have opted in to receive marketing communications. You may withdraw this consent at any time.
• Customer support: Responding to enquiries, resolving disputes, and maintaining a record of communications for quality assurance and audit purposes.

05 Legal Bases for Processing

Under applicable data protection law, every processing activity must have a recognised lawful basis. 300ok relies on the following legal bases:

• Contractual necessity: Processing required to fulfil our contract with you as a registered player — including account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, and other statutory obligations applicable to online gambling platforms.
• Legitimate interest: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided this interest is not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications, where we rely on your explicit opt-in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Sharing Your Data

300ok does not sell, rent, or trade your personal data. We share data with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, SureCash, and partner banks receive the minimum financial data required to execute your transactions.
• Identity verification providers: KYC and AML service providers receive identity and document data to verify your age and identity as required by our compliance obligations.
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and other certified providers receive a player session token to authenticate your session within their game environments. They do not receive your full identity or financial profile.
• Technology infrastructure providers: Cloud hosting and security service providers that process data on our behalf under strict data processing agreements that prohibit them from using your data for any purpose other than delivering their services to 300ok.
• Law enforcement and regulatory bodies: Where we are legally required to disclose personal data in response to a lawful request from a competent authority, a court order, or to prevent or investigate a suspected crime.

All third-party processors are contractually bound to maintain the confidentiality and security of your data and to process it only for the purposes we specify.

07 Cookies and Tracking

The 300ok platform uses cookies and similar tracking technologies to operate core platform functions and improve the player experience. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits you have configured, and your last visited game category.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform. This helps us identify performance issues and prioritise improvements. No individual player is identified through analytics data.
• Marketing cookies: Used only if you have consented to receive personalised promotional communications. These track which offers you have viewed so we can avoid sending duplicate messages.

You can manage your cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the platform but may affect certain personalisation features.

08 Data Security

300ok applies a multi-layered security architecture to protect your personal data at every stage of its lifecycle:

• In transit: All data exchanged between your browser or device and the 300ok platform is encrypted using TLS 1.3 with 256-bit SSL certificates. This protects your data from interception on any network, including mobile networks commonly used in Bangladesh.
• At rest: Personal and financial data stored on our servers is encrypted using AES-256. Database access is restricted by role-based permissions and all access events are logged to an immutable audit trail.
• Access controls: Only a small number of authorised 300ok personnel — whose roles genuinely require it — can access identifiable player records. All such access is logged, monitored, and subject to regular review.
• Penetration testing: The platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights, 300ok will notify affected players without undue delay and will describe the nature of the breach, the data affected, and the steps we have taken in response.

09 Data Retention

300ok retains personal data for the shortest period necessary to fulfil the purpose for which it was collected, subject to any legal retention obligations. Our standard retention schedule is as follows:

• Active account data: Retained for the full duration of your account's active status.
• Transaction and financial records: Retained for a minimum of 7 years following the date of the transaction, in compliance with financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years following account closure.
• Support and communications records: Retained for 3 years from the date of the most recent communication, to support dispute resolution and audit requirements.
• Marketing preference records: Retained for the duration of your account plus 1 year following closure, to document the basis on which communications were sent.
• Self-exclusion records: Retained indefinitely to prevent re-registration by a previously self-excluded player. This is a responsible gaming safeguard, not a punitive measure.

Upon expiry of the applicable retention period, data is securely and irreversibly deleted or fully anonymised so that it can no longer be associated with any individual player.

10 International Transfers

The 300ok platform is operated primarily for players in Bangladesh. However, some of our technology infrastructure providers and game providers are headquartered or operate servers outside of Bangladesh. Where personal data is transferred outside Bangladesh, 300ok ensures that appropriate safeguards are in place, including:

• Data processing agreements that contractually bind the recipient to data protection standards equivalent to those described in this Policy.
• Transfers only to jurisdictions or organisations that maintain demonstrably adequate security and privacy controls.

You may request details of the specific safeguards applied to any international transfer of your data by contacting [email protected].

11 Your Rights

As a 300ok player, you hold the following rights in relation to your personal data. To exercise any right, contact us at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We will verify your identity before processing the request and will respond within 30 calendar days.

• Right of Access: Receive a copy of all personal data we hold about you in a portable electronic format.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where no overriding legal obligation requires us to retain it.
• Right to Restrict Processing: Request a pause on processing activities in defined circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format for transfer to another service.
• Right to Object: Object to processing based on legitimate interest, and opt out of direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without penalty.

We will not charge a fee for exercising any of the above rights in ordinary circumstances. We reserve the right to charge a reasonable administrative fee or decline clearly excessive or repetitive requests.

12 Changes to This Policy

300ok reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new services we introduce, or changes in applicable law. When we make material changes, we will:

• Post the updated Policy on this page with a revised "Last Updated" date.
• Send an email notification to all registered players at the email address associated with their account, at least 7 days before the changes take effect.

Your continued use of the 300ok platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the platform and may request account closure by contacting our support team.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 300ok handles your personal data, please reach out to our dedicated privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request"
• Response time: Within 30 calendar days of a verified request
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

For questions specifically about responsible gaming tools — deposit limits, self-exclusion, or session reminders — please visit our Responsible Gaming page or mention "Responsible Gaming" in your email subject line to be routed to our specialist team.