Privacy Policy — How okbaeej Collects, Uses, and Safeguards Your Personal Data
Your privacy matters to us. This Privacy Policy explains exactly what personal information okbaeej collects from players in Bangladesh, the lawful basis on which we process it, how we keep it secure, and the rights you hold over your own data. Please read this document carefully alongside our Terms & Conditions.
256-Bit SSL Encryption
All data transmitted between your device and the okbaeej platform is protected by industry-standard 256-bit SSL encryption. Your login credentials, payment details, and personal information travel over fully encrypted channels at all times.
We Never Sell Your Data
okbaeej does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used exclusively for the purposes described in this Privacy Policy and for no other commercial purpose.
Your Data, Your Rights
You have the right to access, correct, export, and request deletion of the personal data okbaeej holds about you. Submit a data rights request at any time by contacting our support team at [email protected] with your account details.
Secure Payment Processing
Payment transactions via bKash, Nagad, Rocket, and Upay are processed through encrypted, tokenised channels. okbaeej does not store your full mobile wallet credentials or bank account numbers on our servers after a transaction is complete.
Transparent Cookie Use
okbaeej uses cookies strictly for essential platform operation, session management, fraud prevention, and anonymised analytics. We do not deploy invasive tracking cookies or share cookie data with advertising networks. See Section 5 for full cookie details.
Secure Data Storage
All personal data collected by okbaeej is stored on access-controlled servers with restricted staff access, regular security audits, and automated intrusion-detection systems. Data access is limited to authorised personnel on a strict need-to-know basis only.
1 Information We Collect
okbaeej collects personal information from players in Bangladesh in order to provide a safe, compliant, and fully functional online gaming experience. The categories of information we collect, and the circumstances under which we collect them, are described in detail below.
Information You Provide Directly
When you register a player account, make a deposit, request a withdrawal, or contact our support team, you actively provide us with personal information. This includes:
- Your full legal name as it appears on a government-issued identity document such as your National Identity Card (NID) or passport.
- Your date of birth, which we use to verify that you meet the minimum age requirement of 18 years.
- Your email address, which we use for account notifications, security alerts, and promotional communications (where consented).
- Your Bangladeshi mobile phone number, which is used for account verification, two-factor authentication, and as the source or destination for mobile wallet transactions via bKash, Nagad, Rocket, or Upay.
- Your residential address in Bangladesh, which may be required during KYC (Know Your Customer) verification.
- A copy of your NID, passport, or driver's licence, submitted during identity verification.
- A utility bill, bank statement, or similar document confirming your address, when requested during enhanced KYC checks.
- Any information you voluntarily provide when contacting support via live chat or email, including the content of those communications.
Information Collected Automatically
When you access and use the okbaeej platform, certain technical and behavioural information is collected automatically by our systems:
| Data Type | Examples | Purpose |
|---|---|---|
| Device & Browser Data | Device type, OS version, browser type and version, screen resolution | Platform optimisation, fraud detection |
| Network & Connection Data | IP address, approximate geolocation (city level), connection type | Jurisdictional compliance, security monitoring |
| Session & Activity Data | Login timestamps, pages visited, session duration, bet history, game history | Account management, responsible gaming monitoring |
| Transaction Data | Deposit amounts, withdrawal requests, payment method reference IDs | Payment processing, AML compliance |
| Cookie & Tracking Data | Session cookies, preference cookies, anonymised analytics identifiers | Session management, platform improvement |
Information From Third Parties
In limited circumstances okbaeej may receive personal information about you from third parties, including:
- Mobile financial service providers (bKash, Nagad, Rocket, Upay) — transaction reference data confirming payment initiation and completion.
- Identity verification and KYC service providers — verification status outcomes based on checks conducted against government databases.
- Fraud prevention and AML screening services — risk scores and alerts associated with payment activity patterns.
- Responsible gaming support organisations — where you have voluntarily self-excluded via a third-party gambling exclusion register and that register notifies participating platforms.
okbaeej collects only the personal information that is genuinely necessary for the purposes described in this Privacy Policy. We do not collect categories of sensitive personal data — such as racial or ethnic origin, religious beliefs, health data, or biometric data — unless such collection is strictly required by law or directly relevant to a responsible gaming intervention.
2 Legal Basis for Processing
okbaeej processes your personal data on the following lawful grounds, depending on the specific processing activity in question:
Contractual Necessity
The majority of the personal data processing we carry out is necessary to perform the contract between you and okbaeej — that is, to operate your player account, process your deposits and withdrawals, settle your bets, and deliver customer support. Without this processing, okbaeej could not provide its services to you.
Legal Obligation
Certain processing activities are required by law or regulatory expectation. These include identity verification and age checking (to meet our 18+ policy), transaction monitoring for anti-money laundering (AML) compliance purposes, and the retention of financial records for the periods specified in applicable financial regulations.
Legitimate Interests
okbaeej processes some personal data on the basis of legitimate interests — specifically, our interest in preventing fraud, detecting security threats, improving the platform experience, and ensuring the responsible operation of a gaming service. Where we rely on legitimate interests, we conduct a balancing assessment to confirm that our interests do not override your fundamental privacy rights.
Consent
Where we send you promotional communications by email or SMS — such as bonus offers, seasonal promotions, or news about new games — we do so on the basis of your explicit consent, provided at the point of account registration or subsequently updated in your account communication preferences. You may withdraw this consent at any time by updating your preferences in your account settings or by contacting support at [email protected].
Withdrawing consent for marketing communications will not affect the lawfulness of any processing carried out before the withdrawal, nor will it affect processing carried out on other lawful grounds such as contractual necessity or legal obligation. Withdrawing marketing consent does not close your account or restrict your ability to use the okbaeej platform.
3 How We Use Your Information
The personal information collected by okbaeej is used for the following specific purposes:
Account Management and Service Delivery
- Creating and maintaining your okbaeej player account.
- Verifying your identity and confirming that you meet the 18+ age requirement.
- Processing deposits to your account balance and executing withdrawal requests to your registered payment method.
- Settling bets and crediting winnings to your account.
- Delivering customer support and responding to your queries, complaints, and disputes.
- Sending account-related notifications — including deposit confirmations, withdrawal updates, security alerts, and password reset emails.
Security, Fraud Prevention, and Compliance
- Monitoring account and payment activity for signs of fraud, money laundering, or other criminal behaviour.
- Verifying that your account is operated by you personally and not by an automated system, proxy, or third party.
- Enforcing the one-account-per-player policy and detecting duplicate registrations.
- Complying with applicable legal and regulatory obligations, including any lawful requests from competent authorities.
- Maintaining records required for AML compliance and financial reporting.
Responsible Gaming
- Monitoring your betting and gaming patterns for indicators of potentially problematic gambling behaviour.
- Administering self-exclusion requests, deposit limits, session time limits, and other responsible gaming tools you activate.
- Contacting you proactively where our responsible gaming systems identify a pattern of concern — for example, a sudden significant increase in deposit volume or session length.
Platform Improvement and Analytics
- Analysing anonymised, aggregated usage data to understand how players interact with the platform and to identify areas for improvement.
- Testing new features, games, and platform layouts to improve the user experience for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other regions of Bangladesh.
Marketing and Promotions
Where you have given consent, we use your email address and mobile number to send you information about okbaeej promotions, bonus offers, new game launches, and seasonal events such as Eid specials and BPL cricket season offers. You can opt out of marketing communications at any time without affecting your ability to use the platform.
okbaeej does not use fully automated decision-making processes that produce legal or similarly significant effects on you — such as automated account closures or withdrawal refusals — without human review. Where automated systems flag an account for investigation, a member of the okbaeej compliance team reviews the case before any consequential action is taken.
4 Data Sharing and Disclosure
okbaeej does not sell, rent, or trade your personal data to any third party. We share your personal information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Processing Partners
To process your deposits and withdrawals, okbaeej shares the minimum necessary payment reference data with your chosen mobile financial service provider — bKash, Nagad, Rocket, or Upay — or with your bank (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other supported institutions). These providers act as independent data controllers for their own transaction records and are bound by their own published privacy policies.
Identity Verification and KYC Providers
To comply with our age verification and identity verification obligations, we may share your name, date of birth, NID number, and document images with accredited KYC verification service providers. These providers process your data solely for the purpose of returning a verification result to okbaeej and are contractually prohibited from using your data for any other purpose.
Fraud Prevention and AML Screening Services
Transaction data and account activity patterns may be shared with third-party fraud detection and anti-money laundering screening services. These services analyse the data to produce risk scores that help okbaeej identify suspicious activity. They do not receive your full personal profile — only the specific data points required for their assessment.
Technology Infrastructure Providers
okbaeej relies on third-party cloud hosting, content delivery, and infrastructure providers to operate the platform. These providers have access to data stored on our infrastructure in the course of providing their services. All such providers are bound by data processing agreements that restrict them from accessing, using, or disclosing your personal data beyond what is strictly necessary for their infrastructure role.
Game Software Providers
When you play games on the okbaeej platform powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — game session data (including bet amounts and outcomes) may be processed by those studios' game servers. This processing is necessary to deliver the game to you. These studios do not receive your full personal profile or payment information.
Legal and Regulatory Disclosure
okbaeej will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so by a valid court order, regulatory directive, or other binding legal instrument. We will notify you of any such disclosure where we are legally permitted to do so and where such notification would not compromise an ongoing investigation.
okbaeej does not share your personal data with advertising networks, data brokers, social media platforms, or any other third party for the purpose of targeted advertising, profiling, or data monetisation. Our data sharing is limited exclusively to the operational categories described in this section.
5 Cookies and Tracking Technologies
okbaeej uses cookies and similar tracking technologies on the platform. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session or language preference — so that the site functions correctly and your experience is consistent across pages and visits.
Categories of Cookies We Use
| Cookie Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, fraud prevention, load balancing. Without these, the platform cannot function. | No — required for operation |
| Functional / Preference | Remembering your language preference (English), interface settings, and responsible gaming tool status. | Yes — optional but recommended |
| Analytical | Anonymised, aggregated data on page views, session lengths, and feature usage — used to improve the platform. No personally identifiable data is shared with analytics providers. | Yes — optional |
What We Do Not Use Cookies For
okbaeej does not use advertising cookies, retargeting pixels, social media tracking scripts, or any other cookie technology designed to track your behaviour across third-party websites. Our cookie use is limited to the three categories described above, all of which relate exclusively to the operation and improvement of the okbaeej platform itself.
Managing Your Cookie Preferences
You can control and delete cookies through your web browser settings. The exact process varies by browser — refer to your browser's help documentation for instructions. Note that disabling strictly necessary cookies will prevent the okbaeej platform from functioning correctly. Disabling functional or analytical cookies will not affect your ability to place bets or use core platform features, but may affect your experience by resetting certain preference settings on each visit.
Strictly necessary session cookies are temporary and are deleted automatically when you close your browser. Functional preference cookies are persistent and are stored on your device for a defined period (typically 30 days) so that your preferences are remembered between visits. Analytical cookies use anonymised identifiers and are set with a rolling 90-day expiry. No cookies set by okbaeej contain your full name, NID number, payment details, or other directly identifying personal information.
6 Data Security Measures
okbaeej takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, loss, alteration, or disclosure.
Technical Safeguards
- 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
- At-rest encryption for sensitive data fields including identity documents, payment references, and account credentials stored in our database systems.
- Two-factor authentication (2FA) available to all players and mandatory for administrative staff accounts.
- Automated intrusion detection and prevention systems (IDS/IPS) monitoring platform traffic in real time.
- Regular penetration testing conducted by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
- Web application firewall (WAF) protecting the platform against common attack vectors including SQL injection, cross-site scripting (XSS), and credential stuffing.
Organisational Safeguards
- Access to personal data is restricted to authorised okbaeej personnel on a strict need-to-know basis, governed by role-based access controls.
- All staff with access to personal data are trained in data protection obligations and confidentiality requirements as part of their onboarding and annual refresher process.
- Third-party service providers with access to personal data are required to sign data processing agreements committing them to appropriate security standards before being granted any access.
- A formal data breach response procedure is in place. In the event of a confirmed data breach affecting your personal information, okbaeej will notify affected players promptly and take all necessary steps to contain and remediate the incident.
While okbaeej takes every reasonable precaution to protect your data, no internet-based system can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password, enabling 2FA, not sharing your credentials with anyone, and contacting support immediately if you suspect your account has been compromised. okbaeej will never ask for your password via email, live chat, or SMS.
7 Data Retention Policy
okbaeej retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration details (name, email, mobile number) | Duration of account + 5 years after closure | Legal obligation, AML compliance |
| Identity documents (NID, passport copies) | Duration of account + 5 years after closure | Legal obligation, KYC record-keeping |
| Transaction and financial records | 7 years from date of transaction | Financial regulation, AML record-keeping |
| Betting and game history | Duration of account + 2 years after closure | Dispute resolution, responsible gaming audit |
| Support communications (emails, chat logs) | 3 years from date of communication | Dispute resolution, quality assurance |
| Analytical and session data (anonymised) | 90 days rolling | Platform improvement, legitimate interest |
| Marketing consent records | Duration of consent + 3 years | Consent management compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, the anonymised data set can no longer be linked to you as an individual and is therefore no longer considered personal data under applicable privacy frameworks.
Account Closure and Retention
Closing your okbaeej account does not result in the immediate deletion of all your personal data. As shown in the table above, certain categories of data must be retained after account closure to meet legal and regulatory obligations. These records are placed in a restricted archive state and are not used for any active processing purpose during the retention period — they are held solely to satisfy legal record-keeping requirements and to resolve any disputes that may arise after account closure.
8 Your Privacy Rights
As an individual whose personal data is processed by okbaeej, you hold the following rights in relation to that data. To exercise any of these rights, contact the okbaeej support team at [email protected] with the subject line "Privacy Rights Request" and include your registered account details for verification.
Right of Access
You have the right to request a copy of the personal data okbaeej holds about you. Upon receiving a verified access request, we will provide a structured summary of your personal data within 30 days, free of charge for the first request in any 12-month period.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay. For certain data fields — such as your registered name or date of birth — we may require documentary evidence before making a correction, to ensure the integrity of our KYC records.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing only), or where you object to processing based on legitimate interests and your interests override ours. This right is not absolute — where we are required to retain data by law (see Section 7), we cannot fulfil an erasure request for that data until the mandatory retention period has elapsed.
Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data, or while a legitimate interests objection is being assessed. During a processing restriction, we continue to hold the data but do not use it for any active processing purpose.
Right to Data Portability
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that we transmit this data directly to another service provider where technically feasible.
Right to Object
You have the right to object to processing carried out on the basis of legitimate interests — including profiling for responsible gaming monitoring purposes. Upon receiving an objection, okbaeej will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for the establishment, exercise, or defence of legal claims.
okbaeej will acknowledge all privacy rights requests within 5 business days (Bangladesh Standard Time, UTC+6) and will fulfil verified requests within 30 calendar days. For complex or voluminous requests, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason within the initial 30-day window.
9 Third-Party Services
The okbaeej platform integrates third-party services that are necessary for its operation — including payment processing partners, game software providers, and infrastructure services. This section explains how your interaction with these third parties relates to your privacy.
Game Software Providers
Games on the okbaeej platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, your game session data is processed by that studio's game server to determine outcomes and return results to your screen. These providers operate under their own privacy policies and data protection frameworks. okbaeej shares only the session data strictly necessary for game delivery — not your full personal profile.
Payment Service Providers
Payment transactions via bKash, Nagad, Rocket, Upay, and supported banks are processed by those providers' own systems. okbaeej does not store your full mobile wallet PIN, bank account passwords, or card numbers. Each payment provider's handling of your financial data is governed by that provider's own privacy policy and applicable Bangladeshi financial regulations.
Analytics Services
okbaeej uses server-side analytics to understand platform usage patterns. All analytics data is anonymised at the point of collection and is processed in aggregate form only — no individually identifiable data is shared with analytics service providers. We do not use client-side analytics scripts from third-party advertising or social media platforms.
The okbaeej platform does not contain links to external third-party websites for commercial or advertising purposes. However, payment partner logos displayed for informational purposes may reference their respective brands. Any interaction you have directly with a third-party provider — outside the okbaeej platform — is governed by that provider's own terms and privacy policy, and okbaeej accepts no responsibility for third-party data handling practices.
10 Updates to This Policy
okbaeej reserves the right to update or revise this Privacy Policy at any time to reflect changes to our data processing practices, platform features, applicable laws, or payment partner arrangements. All updates will be published on this page at https://okbaeej.net/privacy-policy with a revised "Last updated" date prominently displayed at the top of the document.
Notification of Material Changes
Where a change to this Privacy Policy is material — meaning it significantly alters how we collect, use, or share your personal data — okbaeej will notify registered players by email at the address on file at least 7 days before the revised policy takes effect. For minor, clarificatory changes that do not alter the substance of our data practices, we may update the policy without advance notification, though the updated date will always reflect the most recent revision.
Continued Use Constitutes Acceptance
Your continued use of the okbaeej platform after a revised Privacy Policy has taken effect constitutes your acknowledgement of the updated terms. If you do not agree with a revised Privacy Policy, you should stop using the platform and request account closure in accordance with the account closure procedure described in the okbaeej Terms & Conditions.
Contact for Privacy Queries
If you have any questions about this Privacy Policy, wish to exercise a privacy right, or want to report a privacy concern, please contact the okbaeej data protection team at [email protected] with the subject line "Privacy Policy Query". All privacy correspondence is handled by our support team, available 24/7 in English, and formal queries are responded to within 5 business days (Bangladesh Standard Time, UTC+6).
To exercise any of your data rights described in Section 8, or to submit a formal complaint about our data practices, address your communication to [email protected] with the subject line "Privacy Rights Request — [Your Account Username]". Please include a description of the right you wish to exercise and any supporting details that will help us process your request accurately and promptly.
Explore okbaeej — Bangladesh's Premier Gaming Platform
Now that you know how we protect your data, dive into the action. Bet on cricket, spin the slots, or join a live casino table — all with the security and privacy standards you just read about.