Privacy Policy — okbagee

01 Information We Collect

okbagee collects personal information from players at various stages of the account lifecycle — during registration, through ongoing platform use, during KYC verification, and in connection with financial transactions. The categories of information we collect are described below.

1.1 Registration Data

When you create an account on okbagee, we collect the following information:

• Your full legal name as it appears on your government-issued identity document;
• A valid and active email address;
• Your Bangladesh mobile number (required for mobile payment integration and account security notifications);
• Your date of birth (used to verify that you meet the 18+ age requirement);
• A username and password of your choosing (passwords are stored in hashed, non-reversible form — we never store plain-text passwords).

1.2 KYC Verification Data

Before processing withdrawal requests, okbagee is required to verify the identity of all registered players. As part of the KYC (Know Your Customer) process, we may collect:

• A clear image or scanned copy of your National Identity Card (NID) or valid passport;
• A recent proof of address document (such as a utility bill or bank statement issued within the last three months), where requested;
• A selfie photograph or short video verification, where additional identity confirmation is required;
• Proof of ownership of the payment method used for deposits (such as a screenshot of your bKash or Nagad account confirming your registered mobile number).

1.3 Transaction and Financial Data

When you make deposits or withdrawal requests on okbagee, we collect transactional records including deposit amounts, withdrawal amounts, payment method identifiers (such as your bKash mobile number, Nagad account reference, or masked card number), transaction timestamps, and transaction status records. We do not store full card numbers or mobile banking PINs. All payment data in transit is encrypted via TLS.

1.4 Behavioural and Usage Data

okbagee automatically collects certain technical and behavioural data when you access and use the platform. This includes:

• IP address and approximate geolocation derived from it;
• Device type, operating system, browser type and version;
• Pages visited, games played, session duration, and navigation patterns;
• Betting history, wagering amounts, and game session logs;
• Login timestamps and account activity logs.

1.5 Communications Data

When you contact the okbagee support team via live chat or email, we retain records of those communications — including the content of your messages, the date and time of contact, and the resolution outcome. These records are kept to enable us to handle follow-up queries, maintain quality assurance, and comply with any dispute resolution requirements.

02 How We Use Your Data

okbagee processes the personal information it collects on the following legal bases and for the following purposes:

2.1 No Automated Decision-Making

okbagee does not make any decisions that significantly affect your account — such as account suspension, bonus eligibility withdrawal, or withdrawal limits — solely through automated processing without human review. Where automated systems flag an account for investigation, a qualified member of the compliance or security team reviews the flagged activity before any enforcement action is taken.

03 Data Sharing & Third Parties

okbagee does not sell your personal data to any third party. We do, however, share specific data with carefully selected service providers and, where legally required, with regulatory or law enforcement authorities. All data-sharing arrangements are governed by written agreements that require third parties to process your data only for specified, limited purposes.

3.1 Service Providers

We share data with the following categories of third-party service providers where necessary to deliver the okbagee platform and its Services:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card payment networks (Visa, Mastercard) receive the minimum transaction data required to process your deposit or withdrawal;
• Identity verification providers: Third-party KYC verification platforms that assist with document authentication and liveness checks during the KYC process;
• Game content providers: Certified casino game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive anonymised session data required to operate their games within the platform environment;
• Cloud hosting and infrastructure providers: Server and storage infrastructure providers who host okbagee's platform environment under strict data processing agreements;
• Customer support platform providers: Live chat and ticketing system providers who process support communication data solely to enable the delivery of customer support services.

3.2 Legal and Regulatory Disclosure

okbagee may be required to disclose personal information to law enforcement agencies, financial intelligence units, or other government authorities where we receive a valid legal demand, court order, or are otherwise required to do so under applicable law. In such cases, we will disclose only the minimum information required to satisfy the legal obligation and will notify affected players where we are legally permitted to do so.

3.3 Business Transfers

In the event that okbagee undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, player personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, all players will be notified in advance via the registered email address, and the acquiring entity will be required to honour the privacy commitments set out in this Policy.

04 Cookies & Tracking Technologies

okbagee uses cookies and similar tracking technologies to operate the platform, maintain session security, analyse usage patterns, and deliver a personalised experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember certain information about your preferences or session. okbagee uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a specified period or until deleted).

4.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly — including session authentication, login state persistence, and security token management. These cannot be disabled without impairing platform functionality;
• Analytics cookies: Used to understand how players navigate the platform, which games are most popular, and where technical issues occur. Data collected via analytics cookies is aggregated and anonymised;
• Preference cookies: Store your platform preferences such as language settings, display options, and responsible gaming tool configurations;
• Security cookies: Used to detect fraudulent login attempts, bot activity, and suspicious behavioural patterns that may indicate account compromise.

4.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, or configure per-site cookie preferences. Please note that disabling essential cookies will prevent you from logging in to your okbagee account and will impair the functionality of the platform. Disabling analytics or preference cookies will not affect your ability to use the platform's core features.

05 Data Security & Storage

okbagee applies a layered approach to data security, combining technical controls, operational procedures, and access governance to protect the personal information of all registered players. While no online platform can guarantee absolute security against all threats, we maintain security standards consistent with industry best practice for online gaming platforms.

5.1 Technical Security Measures

• TLS 1.2 / TLS 1.3 encryption for all data transmitted between player devices and okbagee servers;
• AES-256 encryption at rest for sensitive data fields including identity document images and KYC records;
• Bcrypt hashing for all stored passwords — plain-text passwords are never stored or logged;
• Web Application Firewall (WAF) and DDoS mitigation to protect platform availability;
• Intrusion detection systems and real-time security monitoring across all platform infrastructure;
• Two-factor authentication (2FA) available to all registered players and mandatory for all internal staff accounts.

5.2 Data Retention

okbagee retains personal data for as long as your account remains active and for a defined period after account closure. The standard data retention schedule is as follows:

• Account and identity data: Retained for 5 years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction records: Retained for 5 years from the date of each transaction;
• KYC documents: Retained for 5 years following the completion of the KYC verification process or account closure, whichever is later;
• Support communications: Retained for 2 years from the date of the final communication in each support case;
• Behavioural and usage logs: Retained for 13 months from the date of recording, after which they are aggregated and anonymised.

5.3 Data Breach Response

In the event of a confirmed personal data breach that poses a risk to affected players, okbagee will notify all impacted account holders via their registered email address within 72 hours of the breach being confirmed. The notification will describe the nature of the breach, the categories of data affected, the steps already taken to contain the breach, and the recommended actions for affected players to take to protect themselves.

06 Your Data Rights

As a registered player on okbagee, you hold the following rights in relation to the personal data we hold about you. These rights can be exercised by contacting the okbagee Data Privacy team at support@okbagee with the subject line "Data Rights Request". We will acknowledge all data rights requests within 5 business days and aim to fulfil them within 30 calendar days.

6.1 Right of Access

You have the right to request a copy of the personal data that okbagee holds about you. Upon a verified access request, we will provide a structured summary of the categories of data held, the purposes for which it is processed, and the retention periods that apply. Access requests from verified account holders are fulfilled at no charge.

6.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updates to contact details or address) can be made directly within the Account Settings panel after login. For corrections to identity document records or KYC data, a formal rectification request should be submitted to the support team along with supporting documentation.

6.3 Right to Erasure

In certain circumstances, you may request the deletion of personal data we hold about you. This right is subject to legal and regulatory retention obligations — in particular, anti-money laundering laws require that transaction records and identity verification data be retained for a minimum period regardless of erasure requests. Where an erasure request is received, we will delete all data that is not subject to a mandatory retention obligation and will confirm in writing what data has been deleted and what data must be retained and why.

6.4 Right to Restrict Processing

You may request that okbagee restrict the processing of your personal data in circumstances where you contest the accuracy of the data, where processing is unlawful but you prefer restriction over erasure, or where you have objected to processing and that objection is pending review. During a restriction period, okbagee will continue to store your data but will suspend active processing beyond what is necessary for storage and legal compliance.

6.5 Right to Object to Marketing

Where data processing is based on consent — specifically, the sending of promotional and marketing communications — you have the right to withdraw that consent at any time. You can opt out of all marketing communications via the Notification Preferences section of your Account Settings, or by emailing support@okbagee. Opt-outs are processed within 5 business days. Withdrawing marketing consent does not affect the lawfulness of any processing that occurred prior to the withdrawal.

07 Marketing Communications

okbagee sends promotional communications — including bonus offers, tournament announcements, seasonal promotions (Eid, Pohela Boishakh, BPL season, IPL season), and platform updates — only to players who have opted in to receive them. Marketing communications are delivered via email and/or SMS to the contact details provided at registration.

7.1 Opt-In Basis Only

Marketing consent is collected at the point of registration via an explicit opt-in checkbox. Pre-ticking the marketing consent box or bundling marketing consent with acceptance of these Terms is not practised by okbagee — consent for marketing is always obtained as a separate, standalone action. Players who did not opt in at registration will not receive promotional communications unless they subsequently opt in via the Account Settings panel.

7.2 Communication Content

Where a player has opted in, okbagee may send communications relating to: welcome bonuses and reload promotions, free spin offers on new and featured slot games, BPL and IPL cricket betting promotions, seasonal festival offers tied to Bangladesh's cultural calendar, and platform updates or new game announcements. All marketing communications sent by okbagee will clearly identify okbagee as the sender and will include a prominent, functional unsubscribe link or instruction.

7.3 Responsible Marketing

okbagee does not direct marketing communications to players who have active self-exclusion arrangements or who have submitted a request to close their account. Players who have set deposit limits or cooling-off periods through the Responsible Gaming tools may receive reduced-frequency communications focused on platform news rather than bonus promotions, at their stated preference.

08 Policy Updates & Contact

okbagee reviews this Privacy Policy on a regular basis and updates it when platform practices change, when new data categories are introduced, or when applicable legal requirements evolve. The current effective date of this Policy is always displayed at the top of this page.

8.1 Notification of Changes

When material changes are made to this Privacy Policy — meaning changes that affect how we collect, use, or share your personal data in a way that is substantively different from the current Policy — we will notify all registered players via their registered email address at least 14 days before the changes take effect. The revised Policy will also be published on this page with an updated effective date. Continued use of the okbagee platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes.

8.2 Contacting Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way okbagee handles your personal information, please contact the Data Privacy team using the following details:

• Email: support@okbagee (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 via the chat icon on the okbagee platform
• Response Time: All privacy-related enquiries acknowledged within 2 business days; full responses within 30 calendar days

8.3 Governing Language

This Privacy Policy is written and published in English. English is the governing language of this document. In the event of any inconsistency between this English-language Privacy Policy and any translated or summarised version, the English text shall take precedence in all respects.