okbazi Privacy Policy

Section 1

Information We Collect

okbazi collects personal data from players in Bangladesh through several channels: directly when you register an account, indirectly through your interaction with the platform, and automatically through technical systems that operate in the background whenever you access okbazi.vip. The categories of information we collect are described in full below. We collect only what is necessary and proportionate to the specific purpose for which it is used. We do not collect sensitive categories of personal data — such as health records, political opinions, or biometric identifiers — unless this is strictly required for an identity verification process and explicitly consented to by the player.

When you create an okbazi account, you voluntarily provide us with registration data including your full legal name, date of birth, registered mobile phone number, and email address. This information forms the core of your player profile and is used to operate your account, communicate with you, and comply with our Know Your Customer (KYC) obligations. Accurate registration data is a condition of account eligibility — providing false or incomplete information is a breach of our Terms & Conditions.

In addition to data you provide directly, we collect technical and device data automatically when you visit okbazi.vip. This includes your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), screen resolution, referring URL, and time-zone setting (Bangladesh Standard Time, UTC+6). This technical data helps us diagnose platform issues, prevent fraudulent access, and optimise the platform for the devices most commonly used by players in Bangladesh, including lower-specification Android smartphones common in Dhaka, Chittagong, and Sylhet.

• Registration and identity data — collected at account creation and during KYC review.
• Contact data — mobile number and email address, updated whenever you modify your account profile.
• Financial transaction data — recorded for every deposit, withdrawal, bonus credit, and bet settlement.
• Gameplay and session data — collected in real time during each platform session.
• Device and technical data — collected automatically via server logs and browser APIs on every page load.
• Communications data — records of emails, support tickets, and any written correspondence you send to okbazi.
• Verification documents — copies of identity documents uploaded during KYC, stored securely and accessed only by authorised personnel.

Section 2

How We Use Your Data

okbazi processes your personal data for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. The table below sets out the primary purposes for which we process personal data, the legal basis on which we rely for that processing, and the specific category of data involved.

okbazi uses automated decision-making in limited circumstances, specifically in our fraud-detection and responsible gaming monitoring systems. Where an automated process generates a decision that materially affects your account — such as a temporary suspension or a transaction flag — you have the right to request a human review of that decision. Please contact [email protected] to exercise this right. We do not make automated decisions about player eligibility based on protected characteristics such as ethnicity, religion, or gender.

Section 3

Cookies & Tracking Technologies

okbazi uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. A cookie is a small text file placed on your device when you visit okbazi.vip. Cookies allow the platform to remember your preferences, keep you logged in between page loads, and collect aggregated analytics data that helps us understand how players across Bangladesh interact with the site.

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling essential cookies will impair or completely prevent your ability to log in to your okbazi account and use real-money gaming features. Disabling analytics or preference cookies will not affect your ability to play but may result in a less personalised experience. Most modern mobile browsers used in Bangladesh — including Chrome for Android and Samsung Internet — provide cookie management options in their settings menus.

• okbazi does not use third-party advertising or retargeting cookies that track your behaviour across external websites.
• Session cookies are deleted automatically when you close your browser. Persistent cookies are retained for a defined period, typically not exceeding 12 months.
• Local storage and session storage technologies may be used in addition to cookies for performance optimisation. These are subject to the same data-use principles described in this policy.
• okbazi does not sell cookie-derived data to any third party for advertising or commercial profiling purposes.

Section 4

Data Sharing & Third Parties

okbazi does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only where it is strictly necessary to operate the platform, comply with a legal obligation, or protect the integrity of the service. Every third party with whom we share data is bound by contractual obligations that require them to process that data solely for the agreed purpose and to maintain security standards consistent with our own.

The categories of third parties with whom okbazi shares personal data, and the reasons for sharing, are as follows:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks): We share the minimum financial and identity data necessary to process your deposits and withdrawals. These providers operate their own privacy policies and are responsible for their own data handling in accordance with Bangladesh Bank regulations.
• Game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others): Game platform operators receive a session token and anonymised player identifier necessary to serve the game. They do not receive your full name, mobile number, or payment details.
• Identity verification services: Third-party KYC providers may process copies of your identity documents solely for the purpose of verifying your identity against national identity databases. Documents are not stored by the verification provider beyond the period required to complete the check.
• Technology and hosting partners: Cloud infrastructure, content delivery, and security service providers who host or protect the okbazi platform may have access to server logs containing technical data including IP addresses. These partners do not have access to player account or financial data.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or a request from a competent authority in Bangladesh, okbazi will disclose personal data as directed. We will notify you of such a disclosure where we are legally permitted to do so.
• Fraud prevention agencies: In cases of confirmed or suspected fraud, money laundering, or other illegal activity, we may share data with industry fraud-prevention bodies or law enforcement agencies without prior notice to the player.

Section 5

Data Retention & Storage

okbazi retains personal data for as long as your account remains active and for a defined period after account closure. Retention periods are determined by the purpose for which the data was collected and by any applicable legal obligations that require us to hold records for a minimum period. We do not retain personal data for longer than is necessary for those purposes.

All personal data held by okbazi is stored on encrypted servers. Access to player data is restricted to authorised okbazi personnel who require it for legitimate operational purposes. All staff with access to personal data are trained in data privacy obligations and are subject to contractual confidentiality obligations. When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

Section 6

Your Privacy Rights

As a player on the okbazi platform, you hold a number of rights in relation to the personal data we hold about you. okbazi is committed to upholding these rights in a timely and transparent manner. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Privacy Rights Request" and your registered account details so that we can verify your identity before processing the request.

We will respond to all verified privacy rights requests within 30 days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your privacy rights, unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply.

Section 7

Data Security Measures

okbazi implements a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. All data transmitted between your device and okbazi.vip is encrypted using industry-standard TLS (Transport Layer Security). Data stored on our servers is encrypted at rest using AES-256 encryption.

• Access to player personal data within the okbazi organisation is governed by role-based access controls. Only staff whose job function requires access to specific data categories are granted permission to view that data.
• All staff with access to personal data complete mandatory data privacy and security training at induction and at regular intervals thereafter.
• Password hashing using industry-standard algorithms ensures that okbazi does not store your account password in plain text. Even okbazi support staff cannot read your password — only reset it through a verified process.
• The platform undergoes regular security assessments and vulnerability scanning. Identified vulnerabilities are classified by severity and remediated within defined response windows.
• In the event of a personal data breach that poses a risk to your rights, okbazi will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.
• We encourage all players to use a strong, unique password for their okbazi account and to avoid reusing passwords from other websites or apps. okbazi will never ask for your password by email, SMS, or live chat.

Section 8

Policy Updates & Contact

okbazi reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time to reflect changes in our data-processing activities, changes in applicable law, or improvements to our operational practices. When material changes are made to this policy, we will notify registered players via the email address associated with their account. The effective date at the top of this document will be updated to reflect the date on which the revised policy comes into force. Your continued use of the platform following notification of a policy update constitutes your acceptance of the revised terms.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional information relevant to how okbazi handles player data and player welfare obligations.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how okbazi is handling your personal data, please contact our support team. We are committed to resolving all privacy-related queries promptly and transparently.

• Material policy updates will be communicated to registered players by email at least 7 days before the revised policy takes effect.
• Minor clarifications and formatting changes that do not affect data-processing practices may be made without advance notice.
• Archived versions of previous Privacy Policy editions are available on request by contacting [email protected].
• This policy is governed by and construed in accordance with applicable law. Any disputes arising from this policy are subject to the jurisdiction clauses set out in the okbazi Terms & Conditions.
• Players aged 18 and above are eligible to hold an okbazi account. If you believe a minor has registered an account, please notify us at [email protected] immediately so we can take appropriate action.