wwok Privacy Policy
— Your Data, Your Rights, Our Commitment

1. Overview & Scope

This Privacy Policy ("Policy") describes how wwok ("wwok", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "User", "Player") who visit, register with, or otherwise use the website located at wwok.io and all associated subdomains, mobile web experiences, and digital services (collectively, the "Platform").

This Policy applies to all personal data processed by wwok in connection with:

• The creation and management of Player accounts;
• The processing of deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels;
• The delivery of sports betting, live casino, slots, fishing games, and related entertainment services;
• Customer support interactions conducted via email or live chat;
• Compliance activities including Know Your Customer ("KYC") verification and anti-money laundering ("AML") screening;
• Marketing communications where consent has been provided;
• Technical operations including website analytics and fraud prevention.

This Policy does not apply to third-party websites, payment processors, or game providers that may be accessible from or integrated with the Platform. Those parties operate under their own privacy policies, which wwok encourages you to review independently.

---

2. Data Controller

For the purposes of applicable data protection law, wwok acts as the data controller in respect of personal data collected from Players and website visitors through the Platform. As data controller, wwok determines the purposes and means of processing your personal data.

Where wwok engages third-party service providers to process data on its behalf (for example, payment processors or game studios), those parties act as data processors and are bound by contractual obligations to process your data only on wwok's documented instructions and to maintain appropriate security standards.

For all data-related enquiries, please contact our designated Data Protection contact at [email protected] with the subject line "Data Protection Enquiry".

---

3. Personal Data We Collect

3.1 Registration Data

When you create a wwok account, we collect the following personal data:

• Full legal name;
• Date of birth (used to verify the 21+ age requirement);
• Residential address (street, city, and district — e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, or Barisal);
• Email address;
• Mobile phone number (used for account verification and bKash/Nagad transaction matching);
• Username and hashed password (passwords are never stored in plaintext).

3.2 Identity Verification (KYC) Data

To comply with our AML obligations and to verify the minimum age requirement, we may request:

• A copy of a government-issued photo identification document (Bangladesh National ID card, passport, or driving licence);
• A proof of address document issued within the last three months (utility bill, bank statement, or mobile financial service statement from bKash, Nagad, Rocket, or Upay);
• A selfie or live photo for facial verification purposes, where required by our compliance team.

3.3 Financial Data

In connection with deposits and withdrawals, we collect:

• Mobile wallet account numbers (bKash, Nagad, Rocket, Upay);
• Bank account details where bank transfer methods are used;
• Transaction reference numbers, amounts, timestamps, and currencies;
• Records of bonuses claimed, wagering activity, and withdrawal requests.

We do not store full payment card numbers on our servers. Card data, where applicable, is tokenised by our PCI-DSS compliant payment processor.

3.4 Gameplay and Betting Data

As part of delivering our services, we record:

• Bet placement history, stake amounts, odds accepted, and settlement outcomes;
• Casino game sessions including game title, provider, bet size, win/loss amounts, and session duration;
• Responsible gaming tool settings (deposit limits, session timers, cooling-off periods, self-exclusion status).

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical information:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Session timestamps, page views, click paths, and referring URLs;
• Cookie identifiers and session tokens (see Section 8).

3.6 Communications Data

When you contact our support team, we retain records of:

• Incoming and outgoing email correspondence to and from [email protected];
• Live chat transcripts from sessions conducted through your account dashboard;
• Complaint records submitted under our formal complaints process.

---

4. How We Collect Your Data

wwok collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or update your account settings;
• Automatically — through server logs, cookies, and analytics tools as you interact with the Platform;
• From third parties — KYC verification providers may confirm identity data against official document databases; payment providers confirm transaction status; fraud prevention services may flag suspicious activity patterns.

---

5. How We Use Your Personal Data

The table below summarises the primary purposes for which wwok processes your personal data:

---

6. Legal Basis for Processing

wwok processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the services you have signed up for, including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements, responsible gaming obligations, and regulatory reporting;
• Legitimate Interests: Processing carried out for the legitimate interests of wwok or third parties, including fraud detection, platform security, and service improvement, provided those interests are not overridden by your rights and freedoms;
• Consent: Where we rely on your consent (for example, for marketing communications), you may withdraw that consent at any time by contacting [email protected] or by updating your notification preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

---

7. Data Sharing & Disclosure

7.1 Authorised Third-Party Processors

wwok shares personal data with the following categories of authorised third-party data processors, each bound by contractual data processing agreements:

• Payment service providers — bKash, Nagad, Rocket, Upay, and other payment partners require transaction data to process deposits and withdrawals;
• KYC and identity verification providers — to verify the identity and age of Players as required by our compliance programme;
• Game studios and content providers — Evolution Gaming, Pragmatic Play, Spribe, JILI, Microgaming, Ezugi, NetEnt, and others receive anonymised session identifiers to power game delivery; they do not receive your full personal profile;
• Fraud prevention and AML screening services — to protect the Platform and its users from financial crime and account abuse;
• Cloud infrastructure and hosting providers — for secure data storage and Platform operation;
• Customer support tooling providers — to manage live chat and email support interactions.

7.2 Legal Disclosures

wwok may disclose personal data without your prior consent where required or permitted by law, including in response to:

• A valid court order, subpoena, or regulatory directive from a competent authority;
• A law enforcement request made in accordance with applicable legal process;
• A compliance investigation by our licensing authority;
• An emergency situation involving an immediate threat to life or safety.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or part of wwok's assets, personal data held by wwok may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via email or a prominent notice on the Platform prior to your data being transferred or becoming subject to a different privacy policy.

---

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit the wwok Platform. They allow the Platform to recognise your device across sessions, remember your preferences, maintain your login state, and collect analytical data about how the Platform is used.

8.2 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable you to log in, navigate between pages, and maintain your session. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as preferred language, notification settings, and responsible gaming tool configurations.
• Analytical Cookies: Collect anonymised data about how users interact with the Platform — pages visited, time on site, error messages encountered — to help us improve the user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic and unusual login patterns.

8.3 Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. However, disabling strictly necessary or security cookies may impair the functionality of your wwok account, including your ability to log in or complete transactions. Analytical and functional cookies can be declined without affecting core service delivery.

---

9. Data Retention

wwok retains personal data only for as long as necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by law. The following retention guidelines apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

---

10. Security Measures

wwok employs a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include:

• 256-bit TLS encryption applied to all data transmitted between your device and the wwok servers;
• AES-256 encryption at rest for sensitive data stored in our database infrastructure;
• Firewalled and segmented server infrastructure hosted in a certified data centre with physical access controls;
• Role-based access controls ensuring that wwok staff can only access personal data relevant to their specific job function;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists;
• Hashed and salted password storage — plaintext passwords are never stored anywhere in our systems;
• Intrusion detection and monitoring systems operating around the clock;
• Staff training on data protection responsibilities conducted at onboarding and on an annual basis.

---

11. Your Data Subject Rights

Subject to applicable law and certain conditions, you have the following rights in relation to personal data that wwok holds about you:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Right Type]". We will acknowledge your request within 5 business days and provide a full response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and we will notify you if an extension is required.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where wwok is required by law to retain your data (such as AML transaction records). Where we are unable to fulfil a request in full, we will explain the reason in our response.

---

12. International Data Transfers

wwok operates an internationally hosted Platform and may transfer personal data to servers or service providers located outside of Bangladesh. Where such transfers occur, wwok takes appropriate steps to ensure that your personal data is afforded an equivalent level of protection to that described in this Policy, including:

• Entering into data processing agreements that incorporate standard contractual clauses or equivalent safeguards with all third-party processors located outside Bangladesh;
• Assessing the data protection laws and practices of the destination country before transferring data;
• Restricting transfers to processors who can demonstrate compliance with internationally recognised security standards such as ISO 27001 or SOC 2.

---

13. Minors and Age Restriction

The wwok Platform is strictly restricted to individuals aged 21 years and above. wwok does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process before any real-money gameplay or withdrawal activity is permitted on an account.

If wwok becomes aware that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, all funds will be reviewed in accordance with our Terms & Conditions, and the personal data will be securely deleted without undue delay.

If you believe that a minor has registered an account on the Platform, please contact our support team immediately at [email protected] with the subject line "Minor Account Report".

---

14. Third-Party Links and Embedded Content

The wwok Platform may contain links to third-party websites or embed content delivered by third-party game providers such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and others. These third parties operate independently of wwok and are governed by their own privacy policies.

wwok is not responsible for the privacy practices or content of any third-party website or service accessible from or integrated with the Platform. We encourage you to read the privacy policies of any third-party services you access through or in connection with the wwok Platform.

---

15. Changes to This Privacy Policy

wwok reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this Policy;
• Send a notification to the email address registered to your account;
• Display a prominent notice on the Platform for a reasonable period following the change.

Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should close your account and cease using the Platform before the effective date of the changes.

We recommend that you review this page periodically to stay informed of how wwok handles your personal data.

---

16. Contact Us & Complaints

If you have any questions, concerns, or complaints about how wwok handles your personal data, or if you wish to exercise any of your data subject rights, please contact us through the following channel:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 through your account dashboard
• Support Hours: 00:00–24:00 Bangladesh Standard Time (BST, UTC+6)

We take all privacy complaints seriously and aim to resolve them promptly. If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.