Privacy Policy

Data Controller & Contact Information

sstktok operates the website located at https://sstktok.net and acts as the data controller for all personal information collected from players and visitors of the platform. As data controller, sstktok determines the purposes and means by which your personal data is processed, and is responsible for ensuring that processing activities comply with applicable data protection principles.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our dedicated data support team using the details below. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

This Privacy Policy applies to all personal data collected through your use of the sstktok website, mobile-browser interface, customer support channels, and any other means by which you interact with sstktok as a player or site visitor. It does not apply to third-party websites or services linked to or from our platform, including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who operate under their own independent privacy policies.

Information We Collect

sstktok collects personal data in two primary ways: information you provide directly to us during registration, account management, and support interactions; and information we collect automatically as you use the platform. Below is a detailed breakdown of the categories of data we process.

Where you choose not to provide personal data that is marked as mandatory during registration, we may be unable to open or maintain your Account or provide certain Services. Optional data fields are clearly labelled as such during the registration process.

Data from Third Parties. sstktok may receive limited personal data about you from third-party payment processors (for example, transaction confirmation references from bKash, Nagad, Rocket, or Upay), fraud detection partners, and identity verification services. This data is used solely for the purposes of verifying your identity, preventing fraud, and complying with anti-money laundering obligations.

Legal Basis for Processing

sstktok processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing is required to perform the contract between you and sstktok — specifically, to open and manage your Account, process deposits and withdrawals, and provide access to games and betting markets.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including age verification (18+), Know Your Customer (KYC) requirements, and anti-money laundering (AML) reporting duties.
• Legitimate Interests: Processing is necessary for sstktok's legitimate business interests, including fraud prevention, platform security, customer support, business analytics, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent for a specific processing activity (for example, sending you promotional emails or enabling optional analytics cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Contact [email protected] to withdraw consent.
• Vital Interests: In limited circumstances, processing may be necessary to protect your vital interests or those of another person, such as in cases where we detect signs of gambling addiction that may require immediate responsible gaming intervention.

How We Use Your Data

sstktok uses your personal data only for the purposes described below. We do not use your data for automated decision-making that produces legal or similarly significant effects without human review, except where expressly permitted by applicable law.

• Account Management: Creating, operating, and maintaining your sstktok Account; authenticating your identity at login; and processing your Account closure request. (Basis: Contract)
• Transaction Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, and other supported methods; recording transaction histories in BDT. (Basis: Contract)
• Identity & Age Verification: Confirming that you are at least 18 years of age and that your identity matches the details provided at registration, in compliance with our KYC policy. (Basis: Legal Obligation)
• Fraud Prevention & Security: Monitoring Account activity for signs of fraudulent behaviour, collusion, bonus abuse, or money laundering; investigating suspicious activity; and reporting to relevant authorities as required by law. (Basis: Legal Obligation & Legitimate Interests)
• Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling; applying deposit limits, cool-off periods, and self-exclusions as requested or as required to protect player welfare. (Basis: Legitimate Interests & Vital Interests)
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining records of support interactions. (Basis: Contract & Legitimate Interests)
• Promotional Communications: Sending you information about bonuses, promotions, new games, and seasonal offers (e.g., Eid promotions, BPL season bonuses) where you have opted in to marketing communications. (Basis: Consent)
• Platform Improvement: Analysing usage data and session behaviour to improve the sstktok platform's design, performance, and game offering. (Basis: Legitimate Interests)
• Legal Compliance: Retaining records as required by applicable law; responding to lawful requests from regulatory and law enforcement authorities. (Basis: Legal Obligation)

Sharing & Disclosure of Your Data

sstktok does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment Processors: When you make a deposit or request a withdrawal, necessary transaction data (including your registered payment method identifier and transaction amount in BDT) is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, or Mastercard — solely to process the transaction.
• Game Providers: To provide casino games and sports data, limited technical identifiers (such as a pseudonymous session token) are shared with licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full name, financial data, or identity documents.
• Identity Verification Partners: KYC documents and identity data may be shared with authorised third-party identity verification services to confirm your age and identity in compliance with our legal obligations.
• Fraud Detection & Security Partners: Technical data (including IP addresses, device fingerprints, and behavioural patterns) may be shared with specialist fraud prevention providers to detect and prevent prohibited conduct on the platform.
• Legal & Regulatory Authorities: sstktok will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or lawful regulatory request. We will only share the minimum data necessary to comply with the specific legal requirement.
• Business Transfers: In the event of a merger, acquisition, or sale of sstktok's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material changes to data handling practices that result from it.

All third-party service providers who receive your personal data are contractually required to process it only for the specified purpose, maintain appropriate security measures, and not share it further without sstktok's prior written authorisation.

Cookies & Tracking Technologies

sstktok uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyse how players interact with the site. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

We use the following categories of cookies on the sstktok platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your Account preferences, and enable core features such as the game lobby and cashier. These cookies cannot be disabled without breaking platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors use the platform — for example, which pages are visited most frequently, how long sessions last, and which features are used. We use this data to improve the platform. These cookies require your consent and can be disabled.
• Functionality Cookies: These cookies remember choices you make (such as your preferred language or display settings) to provide a more personalised experience. Disabling these cookies may limit certain non-essential features.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your sstktok Account. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

Data Retention

sstktok retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your Account's active period, plus a minimum of 5 years following Account closure to comply with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction records (deposits, withdrawals, bet histories) are retained for a minimum of 5 years from the date of the transaction in accordance with applicable financial regulations.
• KYC Documents: Identity and address verification documents are retained for a minimum of 5 years from the date of submission or from the date of Account closure, whichever is later.
• Customer Support Records: Support correspondence is retained for 3 years from the date of the last interaction, unless the matter relates to an active dispute or legal proceeding, in which case it is retained until final resolution plus 1 year.
• Marketing Consent Records: Records of your consent to (or withdrawal of consent from) marketing communications are retained for the lifetime of your Account plus 3 years.
• Anonymised Analytics Data: Usage and performance data that has been fully anonymised (where it is no longer possible to re-identify you from the data) may be retained indefinitely for statistical analysis and platform improvement purposes.

When the applicable retention period expires, personal data is securely deleted or anonymised using industry-standard data destruction methods. If you request deletion of your personal data before the end of a mandatory retention period, we will retain only the minimum data required to comply with our legal obligations and securely delete all other records.

Your Data Rights

As an sstktok player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days and will not charge a fee for standard requests.

Data Security

sstktok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes, but is not limited to, the following measures:

• Encryption in Transit: All data transmitted between your browser and sstktok's servers is encrypted using 256-bit SSL/TLS protocols. Our SSL certificate is maintained and renewed automatically to ensure continuous protection.
• Encryption at Rest: Sensitive personal data, including KYC documents, financial records, and Account credentials, is encrypted at rest using AES-256 encryption on our storage infrastructure.
• Access Controls: Strict role-based access controls limit internal access to personal data to only those employees and contractors who require it for their specific job function. All internal access is logged and audited regularly.
• Password Security: Account passwords are stored as one-way salted cryptographic hashes. sstktok staff cannot view your password in plain text. You are encouraged to use a unique, strong password for your sstktok Account.
• Fraud Monitoring: Our automated fraud detection systems monitor Account activity 24 hours a day, 7 days a week, flagging unusual login attempts, suspicious transaction patterns, and potential account takeover behaviour for human review.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, sstktok will notify affected players and relevant authorities within the timeframes required by applicable law. Notifications will be sent to your registered email address.

While we take every reasonable precaution to protect your data, no security system is completely impenetrable. You play an important role in keeping your Account secure by using a strong, unique password, never sharing your login credentials, and reporting any suspected unauthorised Account access to [email protected] immediately.

Changes to This Privacy Policy

sstktok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and services we offer. The most current version of this Privacy Policy will always be published at sstktok.net/privacy-policy with a clearly marked effective date at the top of the page.

Where we make material changes to this Privacy Policy — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify active Account holders by email to their registered address prior to the changes taking effect. For minor clarifications or non-material edits, we will update the policy without individual notification, and the revised version will govern all subsequent data processing.

Your continued use of the sstktok platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated version. If you do not agree with the changes, you should stop using the platform and contact [email protected] to close your Account before the revised policy takes effect.

We encourage you to review this Privacy Policy periodically, particularly before making a deposit or submitting KYC documents, to stay informed about how sstktok protects your personal data. If you have questions about any aspect of this policy, our support team is available 24/7 at [email protected].