okpj Privacy Policy — How We Protect & Handle Your Personal Data

1. Who We Are

okpj ("the Platform", "the Brand") operates the online cricket betting and casino platform accessible at okpj.io and its associated sub-domains, mobile interfaces, and applications. okpj is designed specifically for players located in Bangladesh and provides sports betting, live casino, slot games, and related entertainment services in English.

For the purposes of this Privacy Policy, okpj acts as the data controller — meaning we determine why and how your personal data is processed. Where we engage third-party service providers (such as payment processors, KYC verification providers, and game studios) to process data on our behalf, those parties act as data processors under our instruction and are bound by appropriate contractual data protection obligations.

If you have any questions about how we handle your personal data, or wish to exercise any of your data rights described in Section 9, please contact our Data Protection contact at [email protected].

2. Personal Data We Collect

okpj collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from trusted third-party verification services. The categories of personal data we collect are described below.

2.1 Registration & Account Data

When you create an okpj account, we collect the following information:

• Full legal name (as it appears on a government-issued identity document)
• Date of birth (to confirm you are 21 years of age or older)
• Email address
• Bangladeshi mobile phone number
• Preferred username and hashed password
• Mobile financial service account number (bKash, Nagad, Rocket, or Upay) for payment purposes
• Residential address (city, district, division within Bangladesh)

2.2 Identity Verification (KYC) Data

In order to comply with responsible gaming and anti-money-laundering obligations, okpj may request and retain copies of:

• Government-issued photo ID: National Identity Card (NID), passport, or driving licence
• Proof of payment method ownership (screenshot or statement confirming the mobile financial service account is registered in your name)
• Selfie photograph for facial comparison against the submitted ID document

KYC documents are handled with strict access controls and are processed only by authorised personnel and our approved KYC verification partner. Documents are never shared beyond what is operationally or legally required.

2.3 Transaction & Financial Data

We maintain records of all financial activity associated with your account, including:

• Deposit amounts, dates, and payment reference numbers
• Withdrawal requests, processing times, and confirmation references
• Bonus credits applied, wagering history, and promotional participation records
• Account balance history

Full payment card numbers or full mobile wallet PINs are never stored on okpj servers. Payment processing is handled by PCI-DSS-compliant third-party payment gateways.

2.4 Betting & Gaming Activity Data

We collect records of your interactions with the okpj Platform's betting and gaming features, including:

• Sports bets placed: market, selection, stake, odds, outcome, and settlement date
• Casino and slot game sessions: game title, session duration, stakes, wins, and losses
• In-play and pre-match betting history
• Responsible gaming tool usage (deposit limits set, time-out activations, self-exclusion requests)

2.5 Technical & Usage Data

When you access the okpj Platform, our servers and analytics systems automatically collect certain technical data:

• IP address and approximate geographic location (country, city)
• Device type, operating system, and browser version
• Session start and end times, pages visited, and features used
• Referring URL (how you arrived at okpj.io)
• Error logs and crash reports

This technical data is collected primarily to maintain Platform security, detect fraudulent access, and improve the user experience. It is not used to build marketing profiles for sale to third parties.

2.6 Communications Data

When you contact our customer support team via email, WhatsApp, or live chat, we retain records of those communications — including the content of messages, timestamps, and any attachments — for quality assurance, dispute resolution, and regulatory audit purposes.

3. How We Use Your Personal Data

okpj uses the personal data we collect for the following specific purposes. We process data only for purposes that are compatible with the reason it was originally collected.

Purpose	Data Used
Account creation and management	Registration data, contact details
Age and identity verification (KYC)	Date of birth, ID documents, selfie
Processing deposits and withdrawals	Transaction data, payment method details
Delivering betting and gaming services	Betting and gaming activity data
Fraud prevention and security monitoring	Technical data, IP address, transaction data
Responsible gaming compliance	Gaming activity, deposit history, self-exclusion records
Customer support and dispute resolution	Communications data, account history
Promotional communications (with consent)	Contact details, game preferences
Platform analytics and improvement	Technical and usage data (anonymised where possible)
Legal and regulatory compliance	All relevant data categories as required

okpj does not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human oversight. Responsible gaming risk assessments involve human review by our player protection team.

4. Legal Basis for Processing

Every instance of personal data processing at okpj is grounded in one of the following recognised legal bases:

1. Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and delivery of betting and gaming services.
2. Legal obligation: Processing required to comply with applicable laws — including age verification, KYC/AML obligations, record-keeping requirements, and cooperation with lawful regulatory or law enforcement requests.
3. Legitimate interests: Processing necessary for our legitimate business interests, such as fraud detection, Platform security, analytics, and responsible gaming monitoring — provided those interests are not overridden by your fundamental privacy rights.
4. Consent: Processing activities where we have asked for and received your explicit consent — most commonly for optional marketing communications. You may withdraw consent for marketing at any time by contacting [email protected] or using the unsubscribe option in any promotional email.

5. Sharing Your Personal Data

okpj does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

5.1 Trusted Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These providers include:

• Payment processors: bKash, Nagad, Rocket, and Upay — to facilitate deposit and withdrawal transactions
• KYC/Identity verification partner: To validate submitted identity documents and confirm age eligibility
• Game providers and studios: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and others — limited game session data is shared to deliver and settle game outcomes
• Cloud hosting and infrastructure provider: For secure data storage and Platform operation
• Analytics provider: For anonymised or aggregated Platform usage analytics

All service providers are contractually prohibited from using your data for their own purposes beyond the specific service they provide to okpj.

5.2 Legal & Regulatory Disclosure

okpj may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in response to a valid court order, regulatory audit, or investigation into financial crime. We will disclose only the minimum data necessary to satisfy the legal requirement.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the okpj business, personal data held by okpj may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via email and the Platform prior to your data being subject to a materially different privacy policy.

6. Cookies & Tracking Technologies

The okpj Platform uses cookies and similar tracking technologies to operate core Platform functions, remember your session preferences, and analyse how players use our services. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, preferred sport, and display settings so you do not need to reconfigure them on each visit.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — pages visited, time on page, and click patterns — to help us improve the user experience. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent access, bot traffic, and suspicious login patterns.

okpj does not use advertising or retargeting cookies. We do not place third-party advertising cookies on your device. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair Platform functionality.

7. Data Security

okpj implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• SSL/TLS encryption on all data in transit between your device and okpj servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment references
• Role-based access control (RBAC) ensuring that only authorised okpj personnel can access player data, and only to the extent required by their role
• Two-factor authentication (2FA) available and strongly recommended for all player accounts
• Regular security audits and penetration testing of Platform infrastructure
• Intrusion detection systems and 24/7 security monitoring to identify and respond to threats in real time

Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, okpj will notify affected players promptly and take all necessary remediation steps.

8. Data Retention

okpj retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following standard retention periods apply:

Data Category	Retention Period
Account registration data	Duration of account + 5 years post-closure
KYC identity documents	Duration of account + 5 years post-closure
Transaction and financial records	7 years from transaction date
Betting and gaming activity logs	5 years from account closure
Customer support communications	3 years from last communication
Technical and server log data	12 months on a rolling basis
Marketing consent records	Duration of consent + 3 years

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Requests for early deletion are subject to legal retention obligations — see Section 9 for details of your right to erasure.

9. Your Data Rights

As a player on the okpj Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within a reasonable timeframe and at no charge.

• Right of Access: You may request a copy of all personal data okpj holds about you, along with information about how it is being used. We will provide this in a clear, machine-readable format upon verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly from within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. We will comply where the data is no longer necessary for the purposes collected, except where retention is required by law (e.g., AML record-keeping obligations). Erasure requests will be assessed individually with a written response provided.
• Right to Restrict Processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that processing of your data be temporarily restricted.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider.
• Right to Object: You may object to processing of your personal data that is carried out on the basis of legitimate interests, including profiling for responsible gaming assessments. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Please note that exercising certain rights — particularly the right to erasure — may necessitate account closure, as some personal data is essential to the ongoing operation of your okpj account. In all cases, okpj will explain any implications before processing your request.

10. Children & Minors

The okpj Platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that an account has been registered by a person under the minimum age, we will immediately suspend the account, investigate the circumstances, and delete any associated data that we are not required to retain for legal or regulatory purposes.

If you are a parent or guardian and believe that a minor in your care has registered on the okpj Platform without your knowledge, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will act without delay on any such report.

11. International Data Transfers

okpj's primary data processing infrastructure is hosted in secure data centres serving the South Asia region. However, some of our third-party service providers — particularly game studios and analytics tools — may process data in locations outside Bangladesh. In all such cases, okpj ensures that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy.

Specifically, international data transfers are governed by standard contractual clauses or equivalent data transfer mechanisms included in our agreements with all data processors. okpj does not transfer personal data to jurisdictions that do not offer adequate data protection standards without appropriate supplementary safeguards.

12. Third-Party Links

The okpj Platform may contain references to third-party game providers and sports organisations (such as Pragmatic Play, Evolution Gaming, BPL, IPL, and ICC). While we take care in the content we reference, okpj is not responsible for the privacy practices of any third-party organisations. This Privacy Policy applies solely to the okpj Platform and its directly operated services.

If you visit any external website or interact with any third-party service referenced in connection with okpj, we strongly encourage you to review that organisation's own privacy policy before submitting any personal information.

13. Updates to This Privacy Policy

okpj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will:

• Update the "Last updated" date at the top of this document
• Send an email notification to all registered players summarising the key changes
• Display a prominent in-Platform notification for a period of at least 14 days following the update

Your continued use of the okpj Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, please discontinue use of the Platform and contact support to request account closure.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data okpj holds about you, please reach out to our support team using the contact details below. All privacy-related correspondence is handled by a dedicated team and will receive a response within five business days.

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp & Helpline: +880 1700 000 000 (plain text — not a clickable link)
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
• Coverage: Serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar

We are committed to resolving all privacy-related queries promptly, fairly, and transparently. Your trust in okpj is something we take seriously, and we are always here to help.