okbaji Privacy Policy

1. Introduction

okbaji ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the okbaji Platform. This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data gathered through the okbaji website at https://okbaji.lat and all associated services.

By registering an account on okbaji, depositing funds, placing bets, playing casino games, or otherwise using any part of the Platform, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of the Platform.

This policy is intended for players based in Bangladesh. Where local data protection laws impose additional obligations on okbaji, we will apply those requirements in addition to the general standards described herein.

2. Personal Data We Collect

okbaji collects different categories of personal data depending on how you interact with the Platform. The table below summarises the types of data we collect:

Category	Examples	Collected When
Identity Data	Full legal name, date of birth, national ID number, passport number	Registration and KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration and account updates
Financial Data	Mobile wallet identifiers (bKash, Nagad, Rocket, Upay), bank account references, transaction history	Deposit and withdrawal processing
Technical Data	IP address, device type, browser type, operating system, session timestamps	Each Platform visit
Usage Data	Pages visited, games played, bets placed, session duration, feature interactions	Ongoing Platform use
Communications Data	Support enquiry content, live chat transcripts, email correspondence	Customer support interactions
Verification Documents	Scanned copies of national ID, passport, utility bills, bank statements	KYC and enhanced due diligence

okbaji does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) unless required by applicable law or explicitly provided by you in the context of a responsible gaming self-exclusion request.

3. How We Collect Your Data

We collect personal data through the following channels:

3.1 Direct Interactions

You provide data directly to okbaji when you complete the account registration form, submit identity verification documents, make a deposit or withdrawal, contact our support team, respond to a survey or promotion, or update your account profile settings.

3.2 Automated Technologies

When you visit the okbaji Platform, our servers automatically record technical data including your IP address, browser type, device identifiers, referring URL, pages visited, and time spent on each page. This data is collected using server logs, cookies, and similar tracking technologies described further in Section 7 of this policy.

3.3 Third-Party Sources

In certain circumstances, okbaji may receive information about you from third parties, including identity verification providers engaged to complete KYC checks, payment processors who provide transaction confirmation data, and fraud detection services that help protect the integrity of the Platform.

4. Legal Basis for Processing

okbaji processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement, including processing deposits, settling bets, and paying withdrawals.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and financial record-keeping obligations.
• Legitimate interests: Processing undertaken to detect and prevent fraud, maintain platform security, improve our services, and manage responsible gaming obligations — where such interests are not overridden by your fundamental rights.
• Consent: Where you have provided explicit consent for specific processing activities, such as receiving promotional communications. You may withdraw consent at any time by contacting support or updating your account notification preferences.

5. How We Use Your Personal Data

okbaji uses the personal data we collect for the following purposes:

• To create, verify, and maintain your okbaji account.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank accounts.
• To verify your identity and age in accordance with our legal and regulatory obligations.
• To settle bets, award winnings, and apply bonuses and promotions to your account.
• To detect, investigate, and prevent fraudulent transactions, collusion, and other prohibited activities.
• To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• To provide customer support and respond to your enquiries and complaints.
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and account security alerts.
• To send you promotional communications about okbaji offers, bonuses, and new game releases — where you have opted in to receive such communications.
• To analyse aggregated usage data and improve the performance, design, and content of the okbaji Platform.
• To fulfil our responsible gaming obligations, including monitoring for signs of problem gambling and enforcing self-exclusion requests.

6. Data Sharing and Disclosure

okbaji does not sell your personal data. We may share your personal data with the following categories of third parties under strict confidentiality and data processing agreements:

6.1 Payment Service Providers

To process your deposits and withdrawals, okbaji shares necessary financial data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers process data solely for the purpose of completing your requested transaction.

6.2 Identity Verification Providers

To fulfil our KYC obligations, okbaji engages specialist identity verification services that may process copies of your identity documents and cross-reference your details against relevant databases. These providers are contractually prohibited from using your data for any purpose other than identity verification for okbaji.

6.3 Game Technology Providers

Casino game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive technical session data necessary to operate their game software within the okbaji Platform. These providers do not receive your full identity or financial data.

6.4 Fraud Prevention and Security Services

okbaji uses third-party fraud detection and cybersecurity services to protect the integrity of the Platform. These services may process technical data such as IP addresses and device fingerprints to identify suspicious activity.

6.5 Legal and Regulatory Authorities

okbaji may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, court order, or regulatory direction. Such disclosures will be made only to the extent required by the relevant legal obligation.

7. Cookies and Tracking Technologies

The okbaji Platform uses cookies and similar technologies to deliver a functional and optimised user experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They include session management cookies that keep you logged in during your visit. These cannot be disabled.
• Performance cookies: These cookies collect aggregated, anonymised data about how users interact with the Platform — for example, which pages are visited most frequently. This data helps us improve the Platform's performance and usability.
• Functionality cookies: These cookies remember your preferences, such as your preferred language, display settings, and last-visited game categories, to provide a more personalised experience during subsequent visits.

okbaji does not deploy third-party advertising or behavioural tracking cookies. You may configure your browser to block or delete cookies; however, doing so may impair the functionality of certain Platform features, including maintaining your login session.

8. Data Retention

okbaji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five (5) years following the closure of your account, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it is aggregated and anonymised.
• Responsible gaming records: Self-exclusion records are retained for the duration of the exclusion period and for a minimum of two (2) years thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in a manner that prevents reconstruction of individual identity.

9. Data Security

okbaji implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okbaji Platform.
• Encryption of sensitive data fields at rest within okbaji's database infrastructure.
• Role-based access controls ensuring that personal data is accessible only to personnel with a demonstrable operational need.
• Regular security vulnerability assessments and penetration testing of the Platform.
• Multi-factor authentication requirements for all administrative access to systems holding personal data.
• Incident response procedures that include notifying affected users in the event of a confirmed data breach that poses a material risk to their rights and interests.

While okbaji takes all reasonable precautions to protect your data, no system connected to the internet can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying okbaji immediately if you suspect any unauthorised access to your account.

10. Your Data Rights

As an okbaji account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected].

• Right of access: You may request a copy of the personal data okbaji holds about you, together with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to okbaji's legal obligation to retain certain records for compliance purposes.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests where you believe your individual rights and interests outweigh okbaji's stated legitimate purpose.

okbaji will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

11. Children's Privacy

The okbaji Platform is strictly intended for individuals aged 18 years and above. okbaji does not knowingly collect personal data from persons under the age of 18. If you believe that a minor has registered an account or provided personal data to okbaji, please contact us immediately at [email protected] so that we may investigate and, where confirmed, delete the relevant data and close the account without delay.

12. International Data Transfers

The okbaji Platform serves players based in Bangladesh. Some of okbaji's service providers — including game technology providers and fraud prevention services — may be based outside Bangladesh and may process your data in their respective jurisdictions. Where such transfers occur, okbaji takes steps to ensure that appropriate safeguards are in place, including contractual data processing agreements that require receiving parties to protect your data to a standard equivalent to that described in this Privacy Policy.

13. Changes to This Privacy Policy

okbaji reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will notify registered users via the email address associated with their account and will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Platform following notification of changes constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or okbaji's data handling practices, please contact our support team:

• Email: [email protected]
• Support Hours: Monday to Sunday, 10:00 AM – 12:00 AM Bangladesh Standard Time (BST, UTC+6)

For responsible gaming inquiries, including data related to self-exclusion records, please use the same contact details and clearly indicate that your message concerns a responsible gaming matter. All such communications are handled in strict confidence.