Rokoktoto Privacy Policy

Welcome to rokoktoto. Our Privacy Policy explains how we collect your personal data, what we use it for, and how securely it is stored. This policy applies to the rokoktoto website, mobile app, and all associated services.

By using our platform, you are considered to have accepted the terms of this Privacy Policy. We strongly encourage you to read it before using the platform, as it clearly sets out both your rights and our responsibilities.

Rokoktoto is a gaming platform designed specifically for users in Bangladesh and across South Asia. We believe privacy is a fundamental right, and that belief drives every decision we make.

Rokoktoto collects two types of information from you — what you provide directly, and what is gathered automatically while you use the platform. Details are outlined below:

We never store your full bank card number or password. Payment information is handled by certified third-party payment gateways and is never stored on rokoktoto servers.

Rokoktoto uses your information only for defined, legitimate purposes. No data is used for unrelated activities. The primary purposes are:

• Account Management: To manage registration, secure login, and account settings.
• Transaction Processing: To process deposits, handle withdrawals, and manage bonus transactions.
• Security Assurance: To detect fraud, money laundering, and multiple accounts.
• Service Improvement: To improve platform performance and enhance the user experience.
• Legal Compliance: To meet the requirements of licensing authorities and law enforcement agencies.
• Customer Support: To resolve your issues quickly and effectively.
• Responsible Gaming: To detect unusual gaming patterns and provide assistance where needed.
• Promotional Communications: To send you offers and updates with your consent (you can opt out at any time).

Rokoktoto does not sell your personal data and does not share it unnecessarily. However, certain information may be shared with third parties in limited circumstances:

• Payment Providers: bKash, Nagad, Rocket, and other payment gateways require minimal information to process transactions. These providers operate under their own privacy policies.
• Licensing Authority: We may be required to provide certain information to regulatory authorities as a condition of our gaming licence.
• Law Enforcement: Data may be disclosed in response to a court order or valid legal request.
• Technology Partners: Limited encrypted data may be shared for cybersecurity and fraud detection purposes.

Outside the cases mentioned above, your data is not shared with any third party. Partners who do receive data are bound by strict confidentiality agreements and may only use it for the specified purpose.

Rokoktoto uses cookies and similar tracking technologies to improve platform performance. Cookies are small text files stored in your browser that help deliver a smoother experience on your next visit.

Types of cookies we use:

• Essential Cookies: To maintain login sessions and ensure security — disabling these will prevent the platform from functioning.
• Performance Cookies: To analyze which pages are most visited — no personal data is collected.
• Functional Cookies: To remember your language preference and other settings.
• Marketing Cookies: To show relevant offers — these can be disabled from your browser settings.

Most browsers offer options to manage cookies. However, disabling essential cookies may cause certain platform features to stop working.

Rokoktoto does not store your data indefinitely. Specific retention periods apply to each type of information:

• Account Information: For the duration your account is active, and up to 5 years after closure as required by law.
• Transaction History: Retained for up to 7 years in accordance with financial regulations.
• KYC documents: Up to 5 years after account closure — this is a legal requirement.
• Cookie Data: Typically expires within 30 days to 1 year.
• Support Chat History: Up to 2 years after the issue has been resolved.

Once the retention period ends, data is securely deleted or irreversibly anonymized.

Every registered user on rokoktoto has the following rights over their own data:

• Right to Know: You can request to know what data we hold about you.
• Right to Rectification: To update incorrect or outdated information, please contact support.
• Right to Erasure: Where no legal obligation exists, you may request deletion of your data when closing your account.
• Right to Object: You may object to the use of your data for specific purposes.
• Right to Portability: You may request a copy of your data in a portable, machine-readable format.
• Marketing Opt-Out: You may opt out of promotional communications at any time.

To exercise any of these rights, contact our support team. We will respond within 30 business days of receiving your request.

Rokoktoto strictly does not serve anyone under 18. Our registration process includes age verification, and age is confirmed again during the KYC process.

If we suspect that data from a minor has been collected, we will immediately close the account and delete the data. If a parent or guardian believes their child has registered on our platform, please contact support right away.

Rokoktoto employs industry-leading technology to protect your data. Our security framework is multi-layered, so even if one layer is compromised, your information remains secure.

• TLS/SSL Encryption: All website and app traffic is secured with 256-bit encryption.
• Two-Factor Authentication (2FA): An extra layer of security can be added when accessing your account.
• Firewall & DDoS Protection: Server-level protections are in place to prevent cyberattacks.
• Regular Penetration Testing: Third-party security experts conduct regular vulnerability assessments.
• Staff Training: All staff with data access undergo strict confidentiality training.
• Incident Response Plan: In the event of a data breach, affected users will be notified within 72 hours.

Please note, however, that 100% security on the internet cannot be guaranteed. We encourage you to stay vigilant — use a strong password and never share your login credentials with anyone.

Rokoktoto may update this Privacy Policy from time to time. Depending on the nature of the changes, we will notify you in different ways:

• For major changes, a notice will be sent to your registered email at least 7 days in advance.
• Minor or editorial updates will only change the "Last Updated" date on the page.
• A notification of changes may be displayed upon logging into the platform.

Continuing to use the platform after any policy change constitutes acceptance of the updated policy. We recommend reviewing this page periodically.

For any privacy-related questions, complaints, or requests, please reach out to our dedicated Privacy Team. We aim to respond within 48 hours.

Contact Address: [email protected]

Live chat support is available 24 hours a day, 7 days a week.