okajee Privacy Policy

1. Information We Collect

okajee collects personal data through several channels: directly from you when you register an account or contact support, automatically through your use of the platform, and from third-party identity and payment verification partners. The categories of data we collect are described below.

Registration and Identity Data

When you create an okajee account, we collect the following information:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (used for mandatory age verification — players must be 18 years or older)
• Bangladeshi mobile phone number (used for account verification, two-factor authentication, and support)
• Email address (used for account communications and marketing where consent has been given)
• Residential address (city, district, and postal code — required for KYC compliance)
• Username and hashed password (your password is never stored in plain text)

Identity Verification (KYC) Documents

As part of our Know Your Customer obligations, we may request copies of the following documents at account registration or before processing a withdrawal:

• National Identity Card (NID) — the primary accepted document for Bangladeshi players
• Passport (biographical data page)
• Driver's licence
• Proof of address: utility bill or bank statement issued within the past 90 days
• Proof of payment method: screenshot or confirmation from bKash, Nagad, Rocket, Upay, or your bank account showing your name and account number

KYC documents are stored securely in an encrypted document management system with access restricted to authorised okajee compliance personnel only.

Financial Transaction Data

We record all deposit and withdrawal transactions associated with your account, including the amount in BDT, the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank), the transaction reference number, and the date and time of each transaction in Bangladesh Standard Time (BST, UTC+6). This data is retained for anti-money-laundering compliance purposes and to assist in resolving any payment disputes.

Gameplay and Betting Data

We record all game sessions, bet amounts, game outcomes, bonus usage, and wagering activity on your account. This data is used to calculate account balances, settle disputes, detect bonus abuse, fulfil responsible gaming monitoring obligations, and improve our game offering. Gameplay data from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is subject to those providers' own data processing agreements.

Technical and Device Data

When you access the okajee platform, our servers and analytics systems automatically record technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time spent on each page, and session duration. This data is used for security monitoring, fraud detection, platform performance optimisation, and aggregate analytics.

Communications Data

If you contact okajee support via email or live chat, we retain a record of your communications including the date, time, and content of each interaction. This data is used for quality assurance, dispute resolution, and staff training purposes.

2. How We Use Your Data

okajee uses personal data collected from players for the following documented purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or being required to do so by applicable law.

Account Management

We use your registration and identity data to create, maintain, and manage your okajee account. This includes authenticating your login sessions, processing password reset requests, applying responsible gaming restrictions you have chosen, and sending transactional communications such as deposit confirmations, withdrawal receipts, and security alerts.

Identity and Age Verification

We use KYC documents and identity data to verify that you are who you claim to be and that you meet the minimum age requirement of 18 years. Age verification is a legal and ethical obligation we take seriously. Where automated verification is not conclusive, manual document review is conducted by our compliance team.

Payment Processing

We use your financial data to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard). Transaction records are retained as required by applicable financial regulations and anti-money-laundering legislation.

Fraud Prevention and Security

We use technical and identity data to detect and prevent fraudulent activity, including detection of duplicate accounts, unauthorised access attempts, collusion between players, bonus abuse, and money laundering. Where fraud is suspected, we may share relevant data with law enforcement or financial intelligence authorities as required by law.

Responsible Gaming Compliance

We use gameplay and account data to monitor for signs of problem gambling behaviour, enforce deposit limits and self-exclusion restrictions, and ensure that players experiencing difficulty are directed to appropriate support resources. This data processing is carried out in the interests of player welfare and regulatory compliance.

Platform Improvement and Analytics

We use aggregated and anonymised technical and gameplay data to analyse platform performance, understand how players interact with our game lobby and navigation, and improve the overall user experience. This analytics processing does not identify you as an individual.

Marketing Communications

Where you have provided consent at registration or subsequently, we may use your email address and mobile number to send you information about okajee promotions, bonuses, seasonal offers (such as Eid, Pohela Boishakh, and BPL season promotions), and new game launches. You may withdraw this consent at any time by contacting [email protected].

3. Legal Basis for Processing

okajee processes your personal data on one or more of the following legal bases depending on the specific processing activity involved:

• Contractual necessity: Processing is necessary to perform the contract between you and okajee — that is, to operate your account, process your bets, and handle payments. Without this processing, we cannot provide the okajee service to you.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money-laundering requirements, age verification mandates, and financial record-keeping obligations under Bangladeshi law.
• Legitimate interests: Processing is necessary for okajee's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — provided those interests are not overridden by your rights and interests.
• Consent: For marketing communications and optional data processing activities (such as personalised game recommendations), we rely on your freely given, specific, informed, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Third Parties

okajee does not sell or rent your personal data to any third party. We share personal data only in the following limited circumstances and only to the extent necessary for the specific purpose described:

Game Providers

To deliver games from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, limited technical data (such as your player session token and bet amounts) is transmitted to those providers in real time. Game providers are contractually obligated to process this data only for game delivery purposes and are prohibited from using it for any other purpose, including marketing.

Payment Processors

To process deposits and withdrawals, we share the minimum necessary financial and identity data with our payment processing partners, which may include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and international card processors for Visa and Mastercard transactions. All payment partners are bound by strict data processing agreements and applicable financial data protection requirements.

Identity Verification Partners

To conduct automated KYC and age verification checks, we may share identity data with third-party verification service providers. These partners process your data solely to return a verification result to okajee and are not permitted to retain or repurpose your identity data beyond the verification transaction.

Law Enforcement and Regulatory Authorities

okajee may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities in Bangladesh or other applicable jurisdictions where we are legally required or compelled to do so, including in response to a valid court order, warrant, or official government request. We will notify you of such disclosures where we are legally permitted to do so.

Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of the okajee business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the contact details registered on your account prior to your data being subject to a different privacy policy.

5. Cookies and Tracking Technologies

The okajee platform uses cookies and similar tracking technologies (including local storage and session tokens) to deliver and improve the service. The following categories of cookies are used:

Strictly Necessary Cookies

These cookies are essential for the okajee platform to function. They maintain your login session, remember your account preferences, and enable secure navigation between pages. These cookies cannot be disabled without breaking core platform functionality.

Performance and Analytics Cookies

These cookies collect anonymised information about how players navigate and interact with the okajee platform, including which pages are visited most frequently, how long players spend in the game lobby, and which deposit methods are most commonly selected. This data is used in aggregate to improve platform design and performance.

Functional Cookies

These cookies remember choices you have made on the platform, such as your preferred language or display settings, to provide a more personalised experience during subsequent visits.

Marketing and Retargeting Cookies

Where you have provided consent, okajee may use cookies to deliver relevant promotional content on the okajee platform based on your gameplay history and demonstrated interests. These cookies do not track your activity on external websites. You may opt out of marketing cookies by contacting [email protected].

Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use core okajee platform features including account login and payment processing. Instructions for managing cookies are available in the help documentation of all major browsers.

6. Data Retention

okajee retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes or enforce agreements. The principal retention periods applicable to different categories of data are set out below.

Once the applicable retention period has expired and there is no legal basis for continued retention, okajee will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual.

7. Your Data Rights

Subject to applicable law and certain exceptions relating to our legal obligations, you hold the following rights over the personal data okajee processes about you. All requests should be submitted in English to [email protected] with your account username and the specific right you wish to exercise. We will respond within 30 days of receiving a valid request.

Right of Access

You have the right to request a copy of all personal data okajee holds about you, together with information about the purposes for which it is processed, the categories of recipients with whom it has been shared, and the applicable retention periods. This is commonly known as a Subject Access Request (SAR).

Right to Rectification

If any personal data okajee holds about you is inaccurate or incomplete, you have the right to request correction. Please note that correcting certain identity data (such as your name or date of birth) may require you to submit supporting identity documents to our compliance team.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the processing is unlawful. This right is subject to our legal obligations to retain certain categories of data as set out in Section 6 above.

Right to Restriction of Processing

You may request that okajee restricts processing of your personal data in certain circumstances, for example where you contest the accuracy of the data and we are in the process of verifying it, or where you have objected to processing based on legitimate interests and we are assessing whether those interests are overridden.

Right to Object

You have the right to object to processing of your personal data carried out on the basis of okajee's legitimate interests, including profiling for marketing purposes. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.

Right to Data Portability

Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format (e.g., CSV or JSON), and to request that it be transmitted directly to another service provider where technically feasible.

8. Data Security Measures

okajee implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures in place include:

• 256-bit SSL/TLS encryption: All data in transit between your browser and the okajee servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser's address bar confirms that your connection is secure.
• Password hashing: Account passwords are never stored in plain text. okajee uses bcrypt hashing with a high work factor to protect stored password credentials against brute-force attacks in the event of a data breach.
• Encrypted data storage: Personal data and KYC documents stored in okajee's databases and document management systems are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Employee access is governed by role-based access controls, and all access to sensitive data is logged and audited.
• Two-factor authentication (2FA): okajee offers 2FA for player accounts to provide an additional layer of security beyond the standard username and password. Players are encouraged to enable 2FA via their account security settings.
• Penetration testing and security audits: The okajee platform undergoes regular independent security assessments to identify and remediate vulnerabilities. Critical security patches are applied as a priority.
• Incident response: okajee maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

While okajee takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own okajee login credentials and for notifying us immediately at [email protected] if you suspect that your account has been compromised.

9. Children's Privacy

The okajee platform is strictly intended for adults aged 18 years and above. 18+ okajee does not knowingly collect, process, or retain personal data relating to any individual under the age of 18. If we discover or are notified that personal data has been collected from a person under the age of 18, we will immediately suspend the associated account, delete all personal data collected in connection with that account, and void any transactions made from it.

Age verification is conducted at account registration as a mandatory step. Where automated age checks are inconclusive, manual document review is performed before the account is permitted to make deposits or place bets. Parents or guardians who believe that a minor may have registered an okajee account should contact [email protected] immediately so that the account can be investigated and closed without delay.

okajee strongly encourages parents and guardians in Bangladesh to use available parental control software to restrict minors' access to online gambling and gaming platforms. Our commitment to keeping underage players off the platform is absolute — it is both a legal obligation and a core ethical principle of how we operate.

10. Policy Updates and Contact

Updates to This Policy

okajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The effective date at the top of this page will be updated whenever a revision is made. Where an amendment is material — meaning it substantially affects how your personal data is collected or used — we will provide advance notice via a platform notification or email to your registered address at least seven days before the change takes effect. Your continued use of the okajee platform following any such notification constitutes acceptance of the revised Policy.

Governing Language

This Privacy Policy is published in English. In the event that any translation is made available for reference purposes, the English-language version shall prevail in all cases of interpretation or dispute.

Contact and Data Requests

All privacy-related enquiries, data subject access requests, erasure requests, and objections to processing should be submitted in English to the okajee support team. Our support team is available 24 hours a day, all day, Bangladesh Standard Time (BST, UTC+6).

Contact email: [email protected] — please include your registered account username and the nature of your privacy request in the subject line. We aim to acknowledge all privacy requests within 48 hours and provide a full response within 30 days.

For concerns relating to responsible gaming and the use of your gameplay data, please visit the Responsible Gaming page where additional resources and self-management tools are available. For questions about the legal terms governing your use of the platform, please refer to the Terms & Conditions page.