okbje Privacy Policy

1 Data Controller & Scope

This Privacy Policy applies to all personal data collected by okbje ("we", "us", "our", "the Platform") in connection with your use of the okbje website, mobile application, and any related services, products, or communications. okbje acts as the data controller in respect of personal data processed under this Policy.

This Policy applies to all registered players, prospective players who browse the platform without creating an account, and any individual who contacts okbje via email or live chat. It covers data collected digitally through the platform and data you provide voluntarily when you communicate with our support team.

okbje operates primarily to serve players across Bangladesh. All data processing activities described in this Policy are conducted with due regard to the privacy rights of individuals and in accordance with responsible data management principles. Where this Policy refers to "personal data", it means any information relating to an identified or identifiable natural person — in practice, this includes your name, mobile number, email address, payment account details, and device identifiers.

2 Information We Collect

okbje collects personal data through several channels: information you provide directly during registration and account use, information generated automatically by your interaction with the platform, and information received from third-party payment processors and identity verification services.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, gender, email address, and mobile phone number.
• Identity verification documents: Copies of government-issued identification (National ID card, passport, or driving licence) and proof of address submitted during the KYC process.
• Payment information: Your bKash, Nagad, Rocket, Upay, or DBBL account number or registered mobile number used for deposits and withdrawals. We do not store full card numbers; card transactions are handled directly by PCI-DSS-compliant payment processors.
• Communications: Messages, attachments, and metadata from your correspondence with okbje support via email or live chat.
• Responsible gaming preferences: Deposit limits, session time limits, cooling-off periods, and self-exclusion requests that you set on your account.

2.2 Information Collected Automatically

• Device and connection data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Session and usage data: Pages visited, games played, bet amounts and outcomes, login timestamps, session duration, and navigation paths within the platform.
• Cookies and similar technologies: Session cookies, persistent cookies, and local storage identifiers. See Section 6 for full details.
• Geolocation data: Country and city-level location derived from your IP address. We do not collect precise GPS coordinates.

2.3 Information from Third Parties

• Payment processors: Transaction reference numbers, payment status, and partial account identifiers provided by bKash, Nagad, Rocket, Upay, and DBBL to confirm deposit and withdrawal outcomes.
• Identity verification providers: Confirmation results (pass/fail) from third-party document verification services used to fulfil our KYC obligations. These providers do not share the full document image with okbje once verification is complete.
• Fraud prevention services: Risk scores and device fingerprint identifiers from fraud-detection partners, used to protect the platform and its players from account takeover and payment fraud.

3 Legal Basis for Processing

okbje processes your personal data on one or more of the following lawful bases, depending on the specific purpose of the processing activity:

Where we rely on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to confirm that our legitimate interests are not overridden by your privacy rights. You may request a summary of that assessment by contacting us at [email protected].

4 How We Use Your Data

okbje uses the personal data we collect for clearly defined, specific purposes. We do not use your data for automated decision-making that produces significant legal effects without human review, and we do not use your data to build advertising profiles or sell targeted advertising inventory.

4.1 Account Operations

We use your registration data, contact details, and device information to create and maintain your player account, authenticate your identity at login, manage your session securely, and send you transactional notifications such as deposit confirmations, withdrawal updates, and account security alerts.

4.2 Payment Processing

Your payment account identifiers (bKash number, Nagad number, etc.) are used exclusively to process the specific deposit or withdrawal transaction you have initiated. We retain a transaction reference and status record for accounting and dispute resolution purposes. We do not use your payment details for any purpose other than executing the financial transactions you request.

4.3 Compliance and Responsible Gaming

We use identity documents, date of birth, and transaction history to fulfil our age verification obligations (18+ requirement), to conduct ongoing KYC checks as required by our responsible gaming commitments, and to enforce self-exclusion lists and deposit limit settings that you have applied to your account. We may also review your gaming pattern data to identify potential signs of problem gambling and proactively reach out to offer support resources.

4.4 Fraud Detection and Platform Security

Device identifiers, IP addresses, session behaviour, and payment patterns are analysed by automated fraud-detection systems to identify account takeover attempts, bonus abuse, collusion, money laundering indicators, and other prohibited conduct. Flagged accounts are reviewed by our security team before any enforcement action is taken.

4.5 Customer Support

When you contact okbje support via live chat or email, your message content and account details are used to understand and resolve your query. Support conversation records are retained for training, quality assurance, and dispute resolution purposes for a period of 24 months.

4.6 Platform Improvement and Analytics

Aggregated, anonymised usage data (page views, game popularity, session lengths, device breakdowns) is analysed to improve platform performance, fix bugs, optimise the user interface, and inform product development decisions. This analysis does not use data that can be linked back to any individual player.

4.7 Promotional Communications

If you have opted in to marketing communications during registration or via your account preferences, we may send you information about new games, promotions, reload bonuses, BPL cricket betting offers, and other platform news by email or in-app notification. You can withdraw your consent and unsubscribe from marketing communications at any time by updating your account preferences or by emailing [email protected] with "Unsubscribe" in the subject line.

5 Data Sharing & Disclosure

okbje does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle your data securely and in accordance with this Privacy Policy.

5.1 Payment Service Providers

We share your payment account identifier and transaction amount with the relevant payment service provider (bKash, Nagad, Rocket, Upay, or DBBL) solely for the purpose of executing a deposit or withdrawal that you have initiated. Each provider operates under its own privacy policy and data protection obligations.

5.2 Identity Verification Partners

During the KYC process, identity document images are transmitted via encrypted connection to our third-party verification partner for automated document authenticity checks. The verification partner returns a pass/fail result and a confidence score. Document images are not retained by the partner after the verification decision has been made; okbje retains a record of the verification outcome only.

5.3 Fraud Prevention and Security Services

Device fingerprint data, IP addresses, and risk indicators are shared with fraud prevention service providers to detect and prevent fraudulent account activity. These providers act as data processors on our behalf and are contractually prohibited from using your data for their own purposes.

5.4 Legal and Regulatory Disclosure

okbje may disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by law, court order, or regulatory instruction, or where disclosure is necessary to prevent imminent harm, financial crime, or violations of our Terms & Conditions. We will notify affected players of any such disclosure unless we are legally prohibited from doing so or notification would compromise an ongoing investigation.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business, personal data held by okbje may be transferred to the successor entity as part of the business assets. We will notify registered players of any such change and the new entity will be required to honour the commitments made in this Privacy Policy.

6 Cookies & Tracking Technologies

okbje uses cookies and similar technologies (local storage, session storage) to operate the platform, maintain your login session, remember your preferences, and collect anonymous analytics about how the platform is used. This section explains each category of cookie we use and the purpose it serves.

okbje does not use advertising cookies, social media tracking pixels, or any third-party cookie that enables cross-site behavioural profiling. We do not partner with advertising networks that require placing tracking cookies on our platform.

You can manage or delete cookies at any time through your browser's settings menu. Removing strictly necessary cookies will log you out of your session and may prevent certain features from working correctly. All other cookie categories can be removed without affecting core platform access.

7 Data Retention

okbje retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes. The following retention periods apply to the main categories of data we hold:

When a retention period expires, personal data is securely deleted using industry-standard data erasure methods, or anonymised so that it can no longer be linked to any individual. Backup copies of data are subject to the same retention periods and are overwritten on a rolling schedule.

If you request erasure of your data (see Section 8), we will delete or anonymise your personal data ahead of schedule where no legal obligation requires its continued retention. Where legal obligations prevent immediate deletion, we will restrict processing to the minimum necessary to satisfy those obligations and delete the data as soon as the obligation lapses.

8 Your Privacy Rights

As an individual whose personal data is processed by okbje, you hold the following rights. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 2 business days and provide a substantive response within 30 calendar days.

Right of Access

You have the right to request a copy of the personal data okbje holds about you, together with information about how it is used, where it came from, and who it has been shared with. We will provide this information in a structured, readable format.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most contact and preference data directly through your account settings page; for changes to identity-verified fields (legal name, date of birth), please contact support and we may request supporting documentation.

Right to Erasure

You have the right to request that we delete your personal data. We will honour erasure requests where we no longer need the data for the purpose it was collected and where no legal retention obligation applies. Where a legal obligation prevents full erasure, we will restrict processing and delete the data as soon as the obligation lapses, and we will inform you of the specific obligation that applies.

Right to Restriction of Processing

In certain circumstances — for example, while you contest the accuracy of data we hold, or while we review a legitimate interests assessment — you may request that we restrict processing of your data to storage only. During a restriction period, we will not use the restricted data for any active processing purpose.

Right to Data Portability

Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider if you choose.

Right to Object

You have the right to object to processing based on legitimate interests. We will review your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your privacy interests, or where processing is necessary for the establishment or defence of legal claims.

Right to Withdraw Consent

Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9 Data Security

okbje implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. The key measures we have in place include:

• TLS/SSL encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher, preventing interception in transit.
• At-rest encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only via role-based access controls.
• Password hashing: Account passwords are stored exclusively as salted cryptographic hashes using bcrypt. okbje staff cannot see your password in plain text at any time.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security. We send OTP verification codes to your registered mobile number for high-risk account actions.
• Penetration testing: Our platform undergoes regular security assessments by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Access logging: All access to production databases and personal data stores is logged with timestamp, user identity, and action taken. Logs are reviewed regularly for anomalies.
• Staff training: All okbje team members with access to personal data receive regular data protection and security awareness training. Access is limited strictly to what each role requires.
• Incident response: okbje maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players promptly with details of what occurred and what steps we are taking to mitigate the impact.

While we take comprehensive steps to secure your data, no online platform can guarantee absolute security. You also play an important role in protecting your account: use a strong, unique password, enable 2FA, do not share your login credentials, and notify us immediately at support@okbje .net if you suspect any unauthorised access to your account.

10 Updates to This Policy

okbje may update this Privacy Policy from time to time to reflect changes in our data processing practices, improvements to the platform, or developments in applicable privacy standards. When we make a material change to this Policy, we will:

• Update the "Effective Date" and "Last Reviewed" date at the top of this page.
• Display a prominent notice on the platform informing registered players that the Policy has been updated.
• For significant changes that affect how we use your data in a materially different way, send a direct notification to your registered email address or via in-app message at least 14 days before the new terms take effect.

Your continued use of the okbje platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you may close your account and request erasure of your personal data by contacting us at [email protected] before the effective date.

We encourage you to review this Privacy Policy periodically so that you remain informed about how okbje protects your personal data. Previous versions of this Policy are available on request.