Your Privacy
Matters at okabaji

1. Data We Collect

When you register for an account, use our services, or interact with the okabaji platform in any way, we may collect the following categories of personal data. We collect only what is necessary to operate our platform safely and in compliance with our obligations.

1.1 Registration and Identity Data

When you create an okabaji account, we collect your full legal name as it appears on your government-issued identification document, your date of birth, a valid mobile phone number registered in Bangladesh, and your chosen username and password (stored in hashed, non-reversible form). This information is used to create and administer your account, verify your identity, and ensure compliance with our 18+ age restriction policy.

1.2 Know Your Customer (KYC) Verification Data

To comply with anti-money laundering (AML) obligations and to verify player identity before processing withdrawals, okabaji collects the following KYC documents when required:

• A scanned copy or photograph of a valid government-issued photo identification document, such as a Bangladesh National Identity Card (NID) or passport.
• A recent proof-of-address document, such as a utility bill or bank statement dated within the last three months.
• Proof of payment method ownership, where the payment method used is not self-evidently linked to your registered name (for example, a screenshot of your bKash or Nagad account showing your registered mobile number).

KYC documents are processed securely and are not shared with third parties except where required by law or by our licensed payment processors for verification purposes.

1.3 Transaction and Payment Data

We record details of all financial transactions conducted through your okabaji account, including deposit amounts, withdrawal requests, payment method types (bKash, Nagad, Rocket, Upay, Visa, Mastercard, etc.), transaction timestamps, and transaction reference numbers. We do not store full card numbers or mobile banking PINs — payment data is handled directly by our payment processing partners using their own secure systems.

1.4 Gaming and Behavioural Data

To deliver our services, detect fraud, and comply with responsible gaming obligations, we log data about your activity on the platform. This includes game history (games played, bet amounts, outcomes, session duration), sportsbook betting history, bonus usage records, login timestamps, and IP addresses associated with account access.

1.5 Device and Technical Data

When you access okabaji via a browser or mobile device, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and referring URL. This data is used for fraud prevention, technical troubleshooting, and platform optimisation. It does not individually identify you unless cross-referenced with your account data.

1.6 Communications Data

If you contact okabaji via our support email at [email protected] or through any other support channel, we retain records of those communications — including the content of your messages and any attachments — for quality assurance, dispute resolution, and regulatory compliance purposes.

---

2. How We Use Your Data

okabaji uses the personal data we collect for the specific, legitimate purposes set out in the table below. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected.

Where we rely on legitimate interests as a legal basis for processing, we have carried out a balancing assessment to confirm that our interests do not override your fundamental privacy rights. You may request details of those assessments by contacting us at [email protected].

---

3. Data Sharing and Third Parties

okabaji does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

3.1 Payment Processing Partners

To process deposits and withdrawals, we share necessary transaction data with our licensed payment processing partners, which include the operators of bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. Each of these partners operates under their own privacy policies and is responsible for the security of payment data within their own systems. okabaji does not receive or store your full mobile banking credentials or card numbers.

3.2 Game Providers

To deliver casino games and live dealer experiences, okabaji integrates with third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. These providers may receive limited technical data (such as a player session token or anonymised player identifier) solely to facilitate game delivery and to record game round outcomes for dispute resolution purposes. They do not receive your full name, NID details, or payment information.

3.3 Legal and Regulatory Disclosure

okabaji may be required to disclose your personal data to relevant authorities in response to a lawful request, court order, or regulatory requirement. Such disclosures may include sharing transaction records or account details with financial intelligence units or law enforcement agencies in connection with investigations into money laundering, fraud, or other financial crime. We will notify you of any such disclosure to the extent permitted by law.

3.4 Business Transfers

In the event that okabaji undergoes a merger, acquisition, or sale of all or part of its business assets, player personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and ensure that the receiving entity commits to handling your data in a manner consistent with this Privacy Policy.

---

4. Cookies and Tracking Technologies

okabaji uses cookies and similar tracking technologies on its platform to ensure proper functionality, improve user experience, prevent fraud, and — where you have given consent — to deliver relevant promotional content. A cookie is a small text file placed on your device by a website. It cannot execute code or transmit viruses and does not give us access to your device beyond the data stored in the cookie itself.

4.1 Essential Cookies

These cookies are strictly necessary for the operation of the okabaji platform. They enable core functions such as user authentication (keeping you logged in during a session), session security tokens, load balancing across our servers, and remembering your in-session preferences (such as game display settings). Essential cookies cannot be disabled without rendering the platform non-functional. No consent is required to place these cookies.

4.2 Analytics Cookies

With your consent, okabaji uses analytics cookies to understand how players navigate the platform, which pages are visited most frequently, how long sessions typically last, and which game categories are most popular. This data is aggregated and anonymised — it does not identify you as an individual. Analytics data helps us improve the platform and prioritise new features for our Bangladesh player base.

4.3 Preference Cookies

Preference cookies allow okabaji to remember choices you have made during previous visits, such as your preferred display language, notification settings, or whether you have previously acknowledged certain on-platform notices. These cookies improve the convenience of your experience without collecting personally identifiable information.

4.4 Managing Your Cookie Preferences

You may adjust your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified before a cookie is placed. Please note that disabling non-essential cookies may affect some elements of your platform experience. Detailed instructions for managing cookies are available in the help section of your browser.

---

5. Data Retention and Storage

okabaji retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as we are required to retain it under applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Account registration data: Retained for the duration of your active account plus seven (7) years following account closure, to comply with AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of submission, in accordance with financial crime prevention standards.
• Transaction records: Retained for seven (7) years from the date of each transaction.
• Gaming history: Retained for five (5) years from the date of each game session, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for three (3) years from the date of the communication, unless they relate to an open dispute or legal proceeding.
• Marketing consent records: Retained until you withdraw consent and for one (1) year thereafter as a record of consent status.

Once a retention period expires and there is no ongoing legal basis for continued processing, personal data is securely and permanently deleted or anonymised so that it can no longer be associated with you as an individual.

Your personal data may be stored on servers located in multiple jurisdictions. Where data is transferred outside Bangladesh, okabaji takes appropriate steps to ensure that such transfers are subject to adequate safeguards consistent with internationally recognised data protection standards.

---

6. Your Data Rights

As a player on the okabaji platform, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within five business days and respond in full within thirty calendar days.

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is processed, the categories of data held, who it has been shared with, and how long it will be retained. We will provide this information in a clear, structured format.

6.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For certain data fields — such as your registered name or date of birth — we may require you to provide supporting documentation before making a correction.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where you believe the data has been processed unlawfully. Please note that this right is subject to our legal retention obligations — for example, we are required to retain transaction records and KYC documents for defined periods regardless of an erasure request.

6.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed. Where processing is restricted, we will continue to store your data but will not process it further without your consent or for the establishment or defence of legal claims.

6.5 Right to Object to Marketing

You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of a valid objection, we will cease using your data for marketing immediately. This right is unconditional and does not require justification.

---

7. Data Security Measures

okabaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures are reviewed and updated on a regular basis to reflect evolving best practices in information security.

Our key security measures include:

• SSL/TLS encryption: All data in transit between your browser or app and our servers is encrypted using current-generation TLS protocols, preventing interception by third parties.
• Password hashing: Account passwords are stored exclusively in hashed form using a one-way cryptographic algorithm. We cannot retrieve your plain-text password, and it is never stored in readable form.
• Access controls: Access to player personal data within okabaji's internal systems is restricted on a strict need-to-know basis. Staff members who do not require access to personal data as part of their role are not granted it.
• Fraud detection systems: Automated systems monitor account activity for unusual patterns, including atypical login locations, unusual transaction volumes, and other indicators of account compromise or fraudulent behaviour.
• Secure data storage: Personal data and KYC documents are stored in secured, access-controlled environments with regular backup procedures and disaster recovery protocols in place.
• Incident response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, okabaji has an incident response procedure in place to contain the breach, assess its scope, and notify affected players without undue delay.

While we take every reasonable precaution to protect your data, no internet-based system can be guaranteed to be entirely free from the risk of breach. You can reduce your own exposure by choosing a strong, unique password for your okabaji account, enabling two-factor authentication where available, and never sharing your login credentials with any other person.

---

8. Updates to This Policy

okabaji reserves the right to amend this Privacy Policy at any time. Changes may be made to reflect new platform features, revised data processing practices, changes in applicable law, or feedback from players and regulators. All amendments will be published on this page with a revised "Last Updated" date shown at the top of the document.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — we will provide advance notice by sending a notification to your registered email address or by displaying a prominent notice on the okabaji platform at least seven days before the change takes effect. Your continued use of the platform after the effective date of a revised policy constitutes your acceptance of those changes.

We encourage you to revisit this page periodically to stay informed about how okabaji protects your data. If you have any questions about this Privacy Policy or about how your personal data is handled, please contact our support team at [email protected]. We are available seven days a week and will respond to all privacy-related enquiries in English within two business days.