Privacy Policy — How okbaji Handles Your Personal Data

1 How We Use Your Data

okbaji processes your personal data on the basis of contractual necessity, legal obligation, legitimate interest, and — where required — your explicit consent. The specific purposes for which we use your data include:

• Creating and administering your okbaji player account.
• Verifying your identity and confirming your eligibility to use the Platform (21+ age verification).
• Processing deposits and withdrawals via your chosen payment method.
• Detecting and preventing fraud, money laundering, and other financial crimes.
• Delivering responsible gaming tools and monitoring for signs of problem gambling behaviour.
• Providing customer support and responding to your queries and complaints.
• Sending transactional communications such as deposit confirmations and withdrawal receipts.
• Improving Platform functionality, game performance, and user experience based on aggregated usage analytics.
• Complying with applicable legal and regulatory obligations.

2 Cookies and Tracking Technologies

okbaji uses cookies and similar tracking technologies on the Platform to maintain your logged-in session, remember your preferences, and collect aggregated analytics data that helps us improve the Platform. Cookies do not contain your payment details or passwords. The following types of cookies may be active on the Platform:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled.
• Functional cookies: Remember your language and display preferences across sessions.
• Analytics cookies: Collect anonymised data about how players navigate and interact with the Platform so we can identify areas for improvement.

You may adjust cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of parts of the Platform.

3 Sharing Your Data with Third Parties

okbaji does not sell, rent, or trade your personal data to third-party marketers. We may share your data with carefully selected third parties only where it is necessary to operate the Platform and fulfil our obligations to you. Such third parties may include:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) to facilitate deposits and withdrawals.
• Identity verification providers to confirm your age and identity in compliance with our know-your-customer obligations.
• Game content providers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe) who supply the games available on the okbaji Platform and who may process session data as part of game delivery.
• IT and infrastructure providers who host and maintain Platform systems under strict data processing agreements.
• Legal and regulatory authorities where we are required by law to disclose data.

All third parties with whom we share data are contractually required to handle it in accordance with applicable data protection principles and to use it solely for the purposes we specify.

4 Data Retention

okbaji retains personal data for as long as your account remains active and for a period thereafter as required by applicable legal, regulatory, and accounting obligations. In general terms:

• Account and identity records are retained for a minimum of five years following account closure.
• Financial transaction records are retained for a minimum of seven years to meet financial record-keeping requirements.
• Support communications are retained for up to three years from the date of the last interaction.
• Technical and usage logs are retained for up to twelve months on a rolling basis.

Following the expiry of the applicable retention period, data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

5 Security Measures

okbaji employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and okbaji servers.
• Encrypted storage of sensitive data fields including payment references and identity document scans.
• Role-based access controls ensuring that only authorised personnel can access player records.
• Regular internal security reviews and vulnerability assessments.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised login.

No data transmission over the internet is completely immune from risk. While we work to protect your data using robust security practices, we cannot guarantee absolute security. You are also responsible for maintaining the confidentiality of your okbaji login credentials and for notifying us at [email protected] if you suspect any unauthorised access to your account.

6 International Data Transfers

The okbaji Platform serves players primarily located in Bangladesh. However, certain third-party service providers — including game content providers and cloud infrastructure partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, okbaji ensures that appropriate contractual safeguards are in place to maintain a standard of data protection equivalent to that applied within the Platform itself. We do not transfer data to any third party in a manner that would undermine your rights as described in this Policy.

7 Children and Minors

The okbaji Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21. If we become aware that a minor has registered an account or provided personal data, we will immediately close the account, delete all associated data, and — where applicable — return any deposited funds to the originating payment method. If you believe a minor has accessed the okbaji Platform, please notify us immediately at [email protected].

8 Marketing Communications

With your consent, okbaji may send you promotional communications about new games, bonus offers, seasonal promotions (such as those tied to BPL, IPL, Eid, or Pohela Boishakh), and Platform updates. You may withdraw your consent to receive marketing communications at any time by updating your account notification preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the processing of data for account administration or legal compliance purposes.

9 Changes to This Policy

okbaji reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, the updated Policy will be published on this page with a revised effective date. We encourage you to review this Policy periodically. Your continued use of the Platform following any update constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and may close your account by contacting [email protected].