ak10 Privacy
Policy

1 About This Policy

This Privacy Policy ("Policy") describes how ak10 Gaming Ltd. ("ak10", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of players and visitors who access or use the ak10 online gaming platform ("Platform"), accessible at ak10.io.

This Policy applies to all personal data processing activities carried out by ak10, regardless of the channel through which data is collected — including registration forms, account management, payment processing, customer support interactions, and your general use of the Platform's features.

This Policy is intended to be read in conjunction with the ak10 Terms & Conditions. Both documents together constitute the full framework governing your relationship with ak10 as a player.

The Policy is written in English and is effective from January 2026. Earlier versions of this Policy are superseded in their entirety by this document.

2 Data Controller

The data controller responsible for your personal data under this Policy is:

As data controller, ak10 determines the purposes for which and the means by which your personal data is processed. Where ak10 engages third-party service providers to process personal data on its behalf (for example, payment processors or game providers), those parties act as data processors under ak10's instruction and are bound by contractual data protection obligations.

If you have any questions about this Policy or how your personal data is handled, please contact our support team at the email address above. We aim to respond to all privacy-related enquiries within five (5) business days.

3 Data We Collect

ak10 collects the following categories of personal data:

3.1 Identity & Registration Data
When you create an ak10 account, we collect your full legal name, date of birth, and residential address in Bangladesh. As part of the KYC (Know Your Customer) verification process, we may collect copies of government-issued identity documents such as your National Identity Card (NID) or passport, along with a recent photograph for identity confirmation.

3.2 Contact Data
We collect your registered mobile phone number and email address during registration. These are used for account security notifications, support communications, transaction confirmations, and — where you have provided consent — promotional messaging.

3.3 Financial & Transaction Data
To process deposits and withdrawals, ak10 collects the account references and transaction identifiers associated with your chosen payment methods, including bKash, Nagad, Rocket, Upay, and supported bank accounts. Full payment credentials (such as bKash PINs or bank passwords) are never collected or stored by ak10. We also maintain a record of your complete deposit and withdrawal history on the Platform.

3.4 Gaming Activity Data
ak10 maintains detailed records of your gaming activity on the Platform, including all bets placed, games played, session durations, win and loss outcomes, wagering patterns, and bonus activity. This data is essential for account management, responsible gaming monitoring, and the resolution of any disputes that may arise.

3.5 Technical & Device Data
When you access the ak10 Platform, we automatically collect technical data including your IP address, device type and identifier, browser type and version, operating system, referring URL, and the dates and times of your sessions. This data is used for security monitoring, fraud detection, and improving platform performance.

3.6 Communications Data
If you contact ak10 through our support channels, we retain records of those communications, including live chat transcripts, email correspondence, and complaint documentation. These records are used to deliver support, resolve disputes, and improve service quality.

3.7 Marketing Preference Data
Where you have opted in to receive promotional communications from ak10, we record your communication preferences, including your chosen notification channels and any modifications you make to those preferences over time.

4 How We Collect Your Data

ak10 collects personal data through the following channels:

• Directly from you: through account registration forms, KYC document submission, deposit and withdrawal requests, support communications, and when you update your account profile or preferences.
• Automatically through Platform use: via server logs, cookies, and session tracking technologies that record your interactions with the Platform as described in Section 7 (Cookies & Tracking).
• From payment providers: transaction confirmation data and payment status updates received from bKash, Nagad, Rocket, Upay, and supported banking partners when you initiate a deposit or withdrawal.
• From game providers: game outcome data and session records from third-party game studios whose titles are hosted on the ak10 Platform, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.
• From fraud prevention services: risk-scoring data and device fingerprint data from third-party fraud detection tools used to protect the Platform and its players from fraudulent activity.
• From publicly available sources: in limited circumstances, ak10 may cross-reference publicly available records to verify identity information provided during KYC where we have reasonable grounds to do so.

5 How We Use Your Data

ak10 uses your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age, maintain your account profile, and deliver the full range of Platform features.
• Processing transactions: To facilitate deposits and withdrawals via your chosen payment method, reconcile transaction records, and resolve any payment discrepancies.
• Regulatory and legal compliance: To fulfil our obligations under applicable anti-money laundering (AML) legislation, fraud prevention requirements, and age verification obligations. This includes retaining transaction records for the legally required retention period.
• Customer support: To respond to your support requests, investigate complaints, and resolve disputes relating to betting outcomes, game results, or account activity.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling behaviour, administer self-imposed limits and self-exclusion requests, and provide proactive responsible gaming interventions where warranted.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent account activity, bonus abuse, collusion, money laundering, and other prohibited conduct as described in the Terms & Conditions.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, features, and user experience of the ak10 Platform.
• Marketing communications (with consent only): To send you promotional offers, bonus notifications, and event updates by your preferred communication channel, where you have provided explicit consent to receive such communications.

6 Sharing Your Data

ak10 does not sell, rent, or commercially trade your personal data. We share your data only in the following limited and controlled circumstances:

6.1 Payment Processors
To process your deposits and withdrawals, ak10 shares the minimum necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, or your selected bank). These providers receive only the data required to execute the specific transaction and are bound by their own privacy obligations.

6.2 Game Providers
When you play a game hosted on the ak10 Platform by a third-party studio (such as Pragmatic Play, Evolution Gaming, or Spribe), a session token and anonymised player identifier are shared with that provider for the purpose of facilitating the game session and recording game outcomes. These providers do not receive your full registration details.

6.3 Identity Verification Services
As part of the KYC process, your identity documents and personal details may be processed by a third-party identity verification service. These processors act under ak10's instruction and are contractually obligated to handle your data securely and for verification purposes only.

6.4 Fraud Prevention & Security Services
Technical data including IP addresses, device identifiers, and behavioural patterns may be shared with fraud prevention service providers to protect the Platform against abuse. Such sharing is carried out on the basis of ak10's legitimate interest in maintaining platform security.

6.5 Legal and Regulatory Authorities
ak10 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies in response to a lawful request, court order, or to comply with applicable AML or fraud reporting obligations. ak10 will not disclose more information than is legally required in such circumstances.

6.6 Business Transfers
In the event of a merger, acquisition, or sale of all or a substantial portion of ak10's assets, your personal data may be transferred to the acquiring entity. In such circumstances, ak10 will notify registered players via their registered contact details prior to any transfer taking effect and prior to their data becoming subject to a different privacy policy.

7 Cookies & Tracking Technologies

ak10 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to secure your session, and to improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without preventing core Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and your last-used game category, so that your experience is consistent across sessions.
• Performance and Analytics Cookies: Collect anonymised information about how visitors interact with the Platform, such as which pages are visited most frequently and whether users encounter errors. This data is used exclusively to improve Platform performance and is not used to identify individual users.
• Fraud Prevention Cookies: Used to assign a consistent device identifier across sessions for the purpose of detecting and preventing fraudulent account activity and multi-account abuse.

ak10 does not use third-party advertising cookies or tracking pixels for the purpose of serving targeted advertisements on external websites. Your browsing activity on ak10 is not shared with advertising networks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. All other cookie categories may be disabled without preventing access to the Platform, though some features may be affected.

8 Data Retention

ak10 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five (5) years following permanent account closure, in compliance with applicable AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later.
• Gaming activity logs: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes, and for five (5) years where required for AML compliance.
• Support communications: Retained for three (3) years from the date of the last communication in a support thread.
• Marketing preference data: Retained until you withdraw consent or request deletion, subject to the mandatory retention periods above.
• Technical logs: Retained for twelve (12) months for security monitoring purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with an individual player.

9 Data Security

ak10 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and ak10 servers.
• Encryption at rest for all sensitive personal and financial data stored in ak10 databases.
• Role-based access controls ensuring that only authorised ak10 personnel with a legitimate business need may access personal data.
• Multi-factor authentication required for all internal systems that hold or process personal data.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Firewall protection and intrusion detection systems monitoring all access to ak10 infrastructure.
• Incident response procedures in place to detect, contain, and notify affected parties in the event of a personal data breach.

10 Your Data Rights

As a player on the ak10 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at the email address provided in Section 14:

• Right of Access: You may request a copy of all personal data that ak10 holds about you. We will provide this within 30 calendar days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Basic account details (email address, phone number) can be updated directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that ak10 delete your personal data. This right is subject to our mandatory data retention obligations under applicable law (see Section 8). Where deletion is not possible due to a legal retention requirement, we will restrict processing of the data instead.
• Right to Restriction of Processing: In certain circumstances — for example, while the accuracy of data is being contested — you may request that ak10 restrict the active processing of your data without deleting it.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to ak10, for the purpose of transferring it to another service provider.
• Right to Object: Where ak10 processes your data on the basis of legitimate interest, you have the right to object to that processing. ak10 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time with immediate effect for future processing.

ak10 will not charge a fee for handling data rights requests. We may request proof of identity before processing a request to ensure your data is not disclosed to an unauthorised party. If you are unsatisfied with our response, you may escalate your complaint to the appropriate data protection authority.

11 Children's Privacy

If ak10 becomes aware that personal data has been collected from a person under 21 years of age without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any funds associated with an underage account will be handled in accordance with our Terms & Conditions and applicable law.

If you believe that a person under 21 has registered on the ak10 Platform, or that your child has accessed the Platform, please contact our support team immediately. ak10 takes age verification seriously and employs multiple controls — including KYC document checks — to prevent underage access.

12 Third-Party Links

The ak10 Platform does not contain links to third-party websites for general browsing purposes. However, where game content is provided by third-party studios (such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, NetEnt, or Ezugi), those studios operate their own game clients that may involve separate data processing for the purpose of operating the game session.

ak10 is not responsible for the data practices of third-party game studios operating within the ak10 Platform environment. Each studio's applicable privacy terms govern the data they process for game session delivery. ak10 ensures, through contractual data processing agreements, that all game studios operating on the Platform process player data only as necessary to deliver the game session and in accordance with appropriate security standards.

If you follow any external link that may appear in a game interface provided by a third-party studio, ak10 is not responsible for the privacy practices or content of the destination site.

13 Policy Updates

ak10 reserves the right to update or amend this Privacy Policy at any time. Changes may be necessary to reflect updates to our services, changes in applicable law, or improvements to our data protection practices.

When we make material changes to this Policy, we will notify registered players via their registered email address and/or via a prominent notice on the Platform at least fourteen (14) days before the changes take effect. The updated Policy will be published at ak10.io/privacy-policy with a revised effective date.

Your continued use of the ak10 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and contact support to request account closure before the changes take effect.

We encourage you to review this Policy periodically to stay informed about how ak10 protects your personal data. The current version of the Policy always supersedes all prior versions.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ak10 handles your personal data, please contact our dedicated privacy support team using the details below.

When contacting us regarding a data rights request (Section 10), please include your registered email address and a brief description of your request so that we can verify your identity and process your request as efficiently as possible.

For concerns related to responsible gaming, self-exclusion, or deposit limits, please visit our Responsible Gaming page or contact support directly. Our team is equipped to assist you with all responsible gaming tools available on the Platform.