okba Privacy Policy —
How We Handle Your Data

1. Introduction and Scope

This Privacy Policy applies to all personal information collected, processed, or stored by okba in connection with the operation of the okba online gaming platform, accessible at okba.app. It applies to all users of the platform, including registered account holders, visitors who browse the site without registering, and any person who communicates with okba's support team.

By registering an account on okba or by continuing to use the platform after this Privacy Policy has been published or updated, you acknowledge that you have read and understood this document and that you consent to the collection and use of your personal information as described herein. If you do not agree to the practices described in this Privacy Policy, you should not use the okba platform.

okba is committed to handling all personal data with the highest standards of care, confidentiality, and security. We collect only the minimum amount of information that is reasonably necessary for the purposes described in this policy. We do not collect personal information speculatively or for purposes unrelated to the provision, improvement, or security of the okba platform.

1.1 Changes to This Policy

okba reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered users via their registered email address and publish the revised policy at okba.app/privacy-policy with an updated "Last Updated" date. We encourage all users to review this policy periodically. Your continued use of the platform following any published amendment constitutes acceptance of the revised policy.

1.2 Contact for Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how okba has handled your personal information, please contact the support team. The designated contact for privacy matters is reachable at [email protected]. All privacy-related enquiries will be acknowledged within five business days and addressed substantively within 30 days of receipt.

2. Information We Collect

okba collects personal information through several means: directly from you when you register an account or contact support, automatically as you interact with the platform, and from third-party payment processors when you make deposits or withdrawals. The categories of personal data we collect are described in detail below.

2.1 Information You Provide Directly

When you register an account with okba, update your profile, make a transaction, or contact our support team, you provide us with information directly. This includes:

• Identity information: Full legal name, date of birth, and national ID or passport details (required for age and identity verification).
• Contact information: Email address, Bangladeshi mobile phone number, and residential address (city, district, postal code).
• Account credentials: Username and hashed password. okba never stores passwords in plain text.
• Financial information: bKash, Nagad, Rocket, or Upay mobile wallet account numbers used for deposits and withdrawals. okba does not store full payment credentials — only the account reference needed to process transactions.
• Verification documents: Copies of government-issued ID, utility bills, or other documents submitted to satisfy our identity verification requirements.
• Communications: Records of messages, emails, or live chat conversations you have with the okba support team.
• Responsible gaming preferences: Self-exclusion periods, deposit limits, and session time restrictions you set via your account settings.

2.2 Information Collected Automatically

When you visit or use the okba platform, certain technical information is collected automatically by our systems. This data helps us maintain platform security, diagnose technical issues, and improve the overall user experience. It includes:

• Device information: Device type, operating system, browser type and version, screen resolution, and device language settings.
• Network information: IP address, internet service provider (ISP), and approximate geographic location derived from the IP address (city and country level only).
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within the platform.
• Log data: Server access logs recording the date, time, and nature of requests made to the okba platform, including error logs used for debugging.
• Cookie and tracking data: Information collected via cookies and similar technologies as described in Section 5 of this policy.

2.3 Information from Payment Processors

When you make a deposit or request a withdrawal, our payment processing partners — including bKash, Nagad, Rocket, and Upay — share limited transaction data with okba necessary to confirm the status and amount of the transaction. This typically includes a transaction reference number, the amount transacted, and a timestamp. okba does not receive your full mobile banking credentials or PIN from these providers.

2.4 Categories of Data — Quick Reference

3. How We Use Your Information

okba uses the personal information it collects strictly for purposes connected to the operation, security, and improvement of the platform, and to fulfil obligations we have to our users and under applicable law. We never use your data for purposes that are incompatible with those for which it was originally collected without first obtaining your explicit consent.

3.1 Account Operations

The primary use of your personal data is to create and maintain your okba account, verify your identity and age, process deposits and withdrawals, settle bets and gaming transactions, and provide you with access to all platform features. Without this data, it is not possible to operate your account or deliver the okba service.

3.2 Regulatory Compliance and Fraud Prevention

okba is obligated to conduct know-your-customer (KYC) checks, verify player ages, and maintain records of transactions for anti-money laundering (AML) compliance purposes. Your identity and financial data are used to fulfil these obligations. We also use technical data — including IP addresses, device fingerprints, and behavioural patterns — to detect and prevent fraudulent activity, multi-accounting, bonus abuse, and other forms of platform manipulation.

3.3 Customer Support

When you contact the okba support team, the information you provide — along with your account history — is used to investigate and resolve your query as efficiently as possible. Support communications are retained for a period of time to allow for dispute resolution and service quality review. See Section 7 for retention periods.

3.4 Responsible Gaming Monitoring

okba uses behavioural data — including deposit frequency, session duration, and betting patterns — to identify indicators of potentially harmful gambling behaviour. Where such indicators are detected, okba may contact the player concerned to offer responsible gaming resources, or may apply account-level protections in accordance with its Responsible Gaming policy.

3.5 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to analyse how players interact with the okba platform, identify technical issues, optimise game offerings, and improve the overall user experience. This analytics activity does not involve making decisions about individual users and does not affect your account status.

3.6 Marketing Communications

With your explicit consent given at registration or subsequently via your account settings, okba may send you promotional communications about bonuses, new game releases, seasonal promotions, and platform updates. You can withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting the support team. Withdrawal of marketing consent does not affect your ability to use the platform or receive essential account communications.

4. Data Sharing and Third Parties

okba does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We share your data only in limited, defined circumstances as described in this section, and only to the extent strictly necessary for each purpose.

4.1 Payment Processors

To process deposits and withdrawals, okba shares necessary transaction data with our payment processing partners — bKash, Nagad, Rocket, and Upay. Each of these providers operates under its own privacy policy and data protection framework. okba shares only the minimum data required to initiate or confirm each transaction, such as your registered wallet number and the transaction amount.

4.2 Game Content Providers

Games on the okba platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. When you play a game provided by one of these studios, certain technical data — such as a session token and bet amounts — is shared with that provider's game servers to facilitate gameplay. These providers do not receive your full personal profile, identity documents, or financial details.

4.3 Identity Verification Services

okba may engage third-party identity verification services to assist with KYC checks. In such cases, the identity documents and personal data you submit for verification may be processed by those services on okba's behalf. These providers are bound by strict data processing agreements and may only use your data for the specific purpose of identity verification.

4.4 Legal and Regulatory Disclosure

okba may be required by law or by a competent regulatory or law enforcement authority to disclose certain personal data. In such cases, okba will comply with its legal obligations and will disclose only the information specifically required by the relevant authority. Where legally permissible, okba will notify the affected user of any such disclosure request.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of okba's business, user data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and of any material changes to data handling practices that may result from it, in advance of those changes taking effect.

5. Cookies and Tracking Technologies

The okba platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session while you are logged in, to remember your preferences, and to gather analytics data that helps us improve the service. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

5.1 What Are Cookies?

Cookies are small text files that a website places on your device when you visit it. They allow the website to recognise your device on subsequent visits and to store certain information about your preferences or session. Cookies themselves cannot execute code or transmit viruses, and they do not have access to other files stored on your device.

5.2 Types of Cookies Used by okba

5.3 Managing Your Cookie Preferences

You can control or disable non-essential cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or receive a notification when a new cookie is set. Please note that disabling essential cookies will prevent you from logging in to your okba account and using core platform features.

Instructions for managing cookies in common browsers are available from the browser developer's support pages (for example, via the Help section of Chrome, Firefox, or Safari). okba does not control the cookie behaviour of third-party game provider iframes embedded within the platform — please refer to the respective provider's privacy policy for information about cookies set by their game engines.

6. Data Security and Encryption

okba takes the security of your personal data seriously and employs a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. No system can guarantee absolute security, but okba continually reviews and strengthens its security posture to address emerging threats.

6.1 Encryption in Transit

All data transmitted between your device and the okba platform is protected by TLS 1.2 or higher encryption. The padlock icon visible in your browser address bar when you visit okba.app confirms that your connection is encrypted. This means that any data you enter — including login credentials, personal information, and payment details — cannot be intercepted by third parties during transmission.

6.2 Encryption at Rest

Sensitive personal data stored in okba's databases — including identity verification documents and payment references — is encrypted at rest using industry-standard encryption. Passwords are never stored in plain text; they are processed using a strong one-way cryptographic hashing algorithm with a unique salt per user, making them computationally infeasible to reverse even in the event of a data breach.

6.3 Access Controls

Access to personal data within okba's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific roles. All internal access to sensitive personal data is logged and subject to periodic audit. okba employees are bound by confidentiality obligations as a condition of their employment.

6.4 Security Incident Response

In the event of a data security incident that poses a risk to your personal information, okba will take immediate steps to contain the incident, assess its scope, and notify affected users via their registered email addresses as promptly as possible. okba will also comply with any applicable mandatory breach notification obligations.

7. Data Retention and Deletion

okba retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, or to resolve disputes and enforce agreements. Once data is no longer needed for any of these purposes, it is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

7.1 Retention Periods by Data Category

7.2 Account Closure and Data Deletion

When you close your okba account, your personal data is not deleted immediately. This is because okba has legal obligations — particularly under anti-money laundering regulations — to retain certain records for a defined period after account closure. The retention periods in the table above apply from the date of account closure rather than from the original date of data collection. After the applicable retention period has elapsed, your personal data will be securely and irreversibly deleted from okba's active systems.

Anonymised and aggregated data derived from your account activity — from which you cannot be identified — may be retained indefinitely for statistical and analytical purposes even after your personal data has been deleted.

8. Your Privacy Rights

As a user of the okba platform, you have a number of rights in relation to the personal data we hold about you. okba is committed to facilitating the exercise of these rights in a timely and transparent manner. To exercise any of the rights described in this section, please contact the okba support team at [email protected] with a clear description of your request.

8.1 Right of Access

You have the right to request a copy of the personal data that okba holds about you. Upon receiving a valid access request, okba will provide you with a summary of the categories and specific data we hold, the purposes for which it is used, and information about any third parties with whom it has been shared. We will fulfil access requests within 30 days of receipt.

8.2 Right to Rectification

If you believe that any personal data okba holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many standard account details — such as your email address or phone number — can be updated directly via your account settings. For corrections to identity information or verification documents, please contact the support team.

8.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other legal basis for continued processing), or where the data has been processed unlawfully. Please note that okba may be unable to delete certain data where it is required to fulfil regulatory obligations, as described in Section 7. In such cases, we will explain the reason for retaining the data.

8.4 Right to Restrict Processing

In certain circumstances — for example, while the accuracy of data you have disputed is being verified — you have the right to request that okba restricts the processing of your personal data to storage only, without using it for other purposes. okba will act on such requests promptly and will notify you before any restriction is lifted.

8.5 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. You can exercise this right by updating your communication preferences in your account settings or by contacting the support team. Your request will be actioned within five business days.

8.6 Right to Data Portability

Where okba processes your personal data on the basis of your consent or for the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, and machine-readable format. This allows you to transfer your data to another service provider if you choose. Please contact the support team to make a portability request.