Your Privacy Matters — The okbij Privacy Policy

1 Who We Are

okbij is an online casino and sports betting platform operating at okbij.io, designed and operated specifically for players across Bangladesh. References to "okbij", "we", "us", or "our" throughout this Privacy Policy refer to the okbij platform and the entity responsible for the processing of your personal data.

For all privacy-related enquiries, data access requests, or concerns about how your information is handled, you may reach our Data Support team directly at [email protected]. We are available 24 hours a day, 7 days a week.

2 Personal Data We Collect

2.1 Data You Provide Directly

When you create an account, verify your identity, make a deposit or withdrawal, contact our support team, or opt into a promotion, you may provide us with the following categories of personal data:

• Identity information: Full legal name, date of birth, and a government-issued identification number (National ID, passport, or driving licence number).
• Contact information: Email address, mobile phone number registered in Bangladesh, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Financial information: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, or other accepted institutions, and transaction history on the okbij platform.
• Verification documents: Scanned or photographed copies of national identity cards, passports, utility bills, and bank statements submitted to fulfil KYC requirements.
• Communications: Records of your interactions with our customer support team via live chat, email, or any other communication channel.

2.2 Data We Collect Automatically

When you access and use the okbij platform, certain technical and behavioural data is collected automatically through your device and browser:

• Technical data: IP address, device type and model, operating system version, browser type and version, unique device identifiers, and network information.
• Usage data: Pages and sections of the platform you visit, games and sports markets you interact with, bets placed, game session durations, deposit and withdrawal actions, and navigation paths through the site.
• Log data: Server logs that record your activity on the platform, including login timestamps, failed authentication attempts, and error reports, which are used for security monitoring and fraud detection.

3 How We Collect Your Data

okbij collects personal data through the following means:

• Direct interaction: Data you submit when completing the registration form, the KYC verification process, payment forms, or support enquiries.
• Automated technologies: Cookies, web beacons, pixel tags, and server-side logging tools that capture technical and usage data as you browse the platform. See Section 7 for full details on our cookie practices.
• Third-party sources: Identity verification providers who assist with KYC checks, payment processors (bKash, Nagad, Rocket, Upay, and partner banks) who confirm transaction details, and fraud prevention services that flag suspicious activity patterns.
• Game providers: Licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share aggregated gameplay data with okbij for platform analytics and responsible gaming monitoring purposes.

4 How We Use Your Personal Data

okbij processes your personal data for the following specific purposes, each underpinned by an appropriate legal basis:

4.1 Account Management & Contract Performance

To create and maintain your okbij account, process your deposits and withdrawals via bKash, Nagad, Rocket, and partner banks, settle bets and game winnings, provide access to casino games and sports betting markets, and deliver customer support. This processing is necessary for the performance of our contract with you.

4.2 Identity Verification & Legal Compliance

To verify your age (21+ requirement), confirm your identity, prevent underage gambling, detect and prevent fraud, comply with anti-money laundering obligations, and respond to lawful requests from regulatory or law enforcement authorities. This processing is required to fulfil our legal obligations.

4.3 Responsible Gaming Monitoring

To monitor your gambling patterns and detect signs of problematic behaviour, apply deposit limits or cooling-off periods you have set, and proactively reach out if our systems identify behaviour consistent with gambling harm. This processing is based on both legal obligations and our legitimate interests in player welfare.

4.4 Security & Fraud Prevention

To protect the platform and its users from fraud, unauthorised access, account takeovers, and collusion. We analyse IP data, login patterns, and transaction behaviour to identify and investigate suspicious activity. This processing is based on our legitimate interests in maintaining a secure platform.

4.5 Platform Improvement & Analytics

To understand how players use the okbij platform, identify technical issues, optimise game and sportsbook offerings, and improve the overall user experience for players across Bangladesh. This processing is based on our legitimate interests in operating and improving our business.

4.6 Marketing Communications

To send you promotional offers, bonus notifications, sports event previews (such as BPL, T20, and IPL fixtures), and seasonal campaign messages (such as Eid and Pohela Boishakh promotions) where you have provided explicit consent. You may withdraw this consent at any time — see Section 12 for details.

5 Sharing Your Personal Data

okbij does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the transaction data required to execute your deposit or withdrawal. They are bound by their own data protection obligations and may not use your data for any other purpose.
• Identity verification providers: Third-party KYC service providers receive your identity documents and personal details solely for the purpose of age and identity verification. These providers operate under strict confidentiality agreements with okbij.
• Game and platform technology providers: Licensed game studios and platform infrastructure providers may receive pseudonymised usage and game session data to support technical operations. They do not receive your full identity profile.
• Fraud prevention services: Specialist anti-fraud and security monitoring providers receive technical data (IP addresses, device fingerprints, behavioural signals) to help detect and prevent fraudulent activity on the platform.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a regulatory or law enforcement authority, okbij will disclose personal data to the extent legally required. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the okbij business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any resulting changes to this Privacy Policy before they take effect.

6 Data Retention

okbij retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's active status plus a period of 5 years following account closure, to comply with anti-money laundering and fraud prevention record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, in line with standard financial compliance requirements.
• Transaction records: Retained for 5 years from the date of each transaction to satisfy record-keeping requirements.
• Support communications: Retained for 2 years from the date of the last interaction, unless the matter relates to an unresolved dispute or regulatory inquiry, in which case records are retained until final resolution.
• Marketing consent records: Retained for as long as you remain opted in, and for 2 years after you withdraw consent, to demonstrate compliance with marketing regulations.
• Technical and log data: Typically retained for 90 days for operational security monitoring, after which it is deleted or fully anonymised.

When personal data is no longer required, okbij will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

7 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the site to recognise your device on subsequent visits, remember your preferences, and collect information about how you use the platform. okbij uses both first-party cookies (set directly by okbij.io) and third-party cookies (set by our analytics and security partners).

7.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security cookies that protect against CSRF attacks, and load-balancing cookies. These cannot be disabled.
• Performance cookies: Collect anonymised data about how visitors use the platform — which pages are most visited, where users encounter errors, and how long sessions last. This data is used to improve platform performance and reliability.
• Functional cookies: Remember your preferences such as language settings, display preferences, and whether you have dismissed certain notifications. Disabling these cookies may result in a reduced experience.
• Analytics cookies: Used by analytics tools to help us understand aggregate user behaviour on the platform. Data collected is pseudonymised and used only for internal reporting purposes.

7.3 Managing Cookies

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to block all third-party cookies, clear existing cookies, or configure per-site cookie permissions. Please note that disabling certain cookies may impair functionality of the okbij platform, including persistent login sessions and personalised content preferences.

8 Data Security

okbij employs a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the okbij platform.
• Password hashing using industry-standard algorithms — your password is never stored in plain text and is not accessible to any okbij staff member.
• Access controls: Personal data is accessible only to authorised okbij personnel who require it to perform their specific job function. Access is logged and audited.
• Intrusion detection systems and 24/7 security monitoring to identify and respond to unusual access patterns or attempted breaches.
• Regular security reviews and vulnerability assessments of the platform infrastructure.
• Secure data storage with encrypted backups held in access-controlled environments.

In the event of a data breach that is likely to result in a risk to your rights or freedoms, okbij will notify affected players as promptly as practicable and take all reasonable steps to contain and remediate the incident.

9 Your Data Rights

As a player on the okbij platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of access: You may request a copy of all personal data we hold about you, along with information about how that data is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that certain data must be retained to comply with legal obligations and cannot be deleted on request.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a data accuracy dispute is being investigated.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format so you can transfer it to another controller.
• Right to object: You may object to processing based on our legitimate interests, including profiling for responsible gaming monitoring and marketing purposes. We will cease that processing unless we can demonstrate a compelling legitimate ground that overrides your interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

10 Children's Privacy

The okbij platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC process.

If okbij discovers or is notified that personal data has been collected from a person under 21, the account will be immediately suspended, the data will be securely deleted, and any funds on the account will be handled in accordance with our minor account procedures. If you believe a minor has registered on the okbij platform, please contact us immediately at [email protected].

11 Third-Party Links

The okbij platform does not contain links to external third-party websites. All navigation within the platform stays within the okbij.io domain. However, third-party services we use — such as game providers and payment processors — operate under their own privacy policies. When you interact with a payment gateway (such as bKash or Nagad) outside the okbij interface, that transaction is subject to the respective provider's own privacy terms. okbij is not responsible for the privacy practices of these independent services.

12 Marketing Communications

Where you have given your explicit consent, okbij may send you promotional emails, SMS messages, or in-platform notifications relating to:

• Welcome bonuses, reload offers, and cashback promotions.
• Cricket match previews and live betting opportunities for BPL, IPL, T20 World Cup, and international Bangladesh fixtures.
• New game launches from providers such as Pragmatic Play, Evolution Gaming, and Spribe.
• Seasonal campaigns tied to Eid, Pohela Boishakh, Victory Day, and other relevant occasions.
• VIP programme updates and loyalty reward notifications.

You may opt out of all marketing communications at any time by:

• Clicking the unsubscribe link at the bottom of any promotional email from okbij.
• Updating your notification preferences in your account settings dashboard.
• Sending an opt-out request to [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing does not affect transactional communications — you will continue to receive account security alerts, deposit confirmations, withdrawal notifications, and identity verification requests, as these are necessary for the operation of your account.

13 Changes to This Privacy Policy

okbij reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email and/or a prominent notice on the okbij platform at least 7 days before the updated policy takes effect.

The effective date at the top of this document will be updated to reflect the most recent revision. Your continued use of the okbij platform after any such changes constitutes your acceptance of the updated Privacy Policy. We strongly encourage you to review this page periodically to stay informed about how okbij protects your data.

14 Contact Us & Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy concern, please contact the okbij data support team using the details below:

• Email: [email protected]
• Subject line for data requests: "Data Rights Request — [Your Full Name]"
• Subject line for privacy concerns: "Privacy Concern — [Brief Description]"
• Response time: Within 30 days for formal data rights requests; within 5 business days for general privacy queries.
• Support availability: 24/7 — our team serves players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.