Privacy Policy —
How okgbd Protects Your Data

When you interact with the okgbd platform — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing the site — we may collect certain categories of personal information. The information collected depends on the nature of your interaction with us.

The table below summarises the main categories of data we collect and the context in which each category arises:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in identity documents submitted for KYC verification. We do not collect data from children — our platform is strictly for users aged 18 and above.

okgbd processes personal data only for defined, legitimate purposes. We do not process your data in ways that are incompatible with the purpose for which it was collected. The primary purposes for which we use your personal information are as follows:

• Account management: Creating, maintaining, and securing your okgbd player account, including password resets, account updates, and session management.
• Service delivery: Enabling you to deposit funds, place bets, play casino games, withdraw winnings, and access all features of the okgbd platform.
• Identity and age verification: Verifying that you meet the minimum age requirement of 18 years and confirming the accuracy of the identity information you have provided.
• Payment processing: Processing deposits and withdrawals through your chosen mobile wallet (bKash, Nagad, Rocket, or Upay) and maintaining accurate financial records.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multiple-account abuse, bonus abuse, and unauthorised access to your account.
• Responsible gaming: Monitoring gaming patterns to identify potential signs of problem gambling and delivering responsible gaming tools such as deposit limits and self-exclusion at your request.
• Customer support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance purposes.
• Legal compliance: Meeting our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and data protection requirements.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game selection, platform performance, user experience, and support quality.
• Promotional communications: Sending you information about bonuses, promotions, and new game launches — but only where you have opted in to receive such communications. You may opt out at any time.

Every instance of personal data processing at okgbd is grounded in one of the following lawful bases. We rely on more than one basis depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted when registering your okgbd account — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws — including age verification, KYC/AML obligations, and record-keeping requirements imposed by financial regulations.
• Legitimate interests: Processing carried out for our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security monitoring, and anonymised analytics for service improvement.
• Consent: Processing based on your freely given, informed, and specific consent — specifically for optional promotional communications (email/SMS marketing). You may withdraw consent for marketing communications at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

Where we rely on legitimate interests as a lawful basis, we have assessed that our interests do not override your fundamental rights and freedoms. If you wish to understand more about the specific legitimate interest assessment applicable to any processing activity, you may contact us at [email protected].

okgbd does not sell or rent your personal data to any third party. We share data only where it is strictly necessary and only with parties who are bound by appropriate confidentiality and data protection obligations. The categories of third parties with whom we may share your information are:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum transaction data required to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• Game content providers: Where required for game delivery, technical identifiers (such as session tokens) may be shared with licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. No personally identifiable information beyond a session reference is shared with game providers.
• Identity verification services: Third-party KYC and AML screening services may process your identity documents and identity data to assist with compliance verification. These providers are contractually restricted to processing your data solely for verification purposes.
• Technology infrastructure providers: Cloud hosting, content delivery, and cybersecurity providers who process data on our behalf under data processing agreements that prohibit any independent use of your data.
• Legal and regulatory authorities: Where we are required by applicable law, court order, or regulatory instruction to disclose data, we will do so. We will notify you of any such disclosure wherever we are legally permitted to do so.

The okgbd platform uses cookies and similar technologies to operate correctly and to provide you with a seamless experience. A cookie is a small text file placed on your device by the platform when you visit. The following categories of cookies are used on the okgbd website:

okgbd does not use advertising cookies, retargeting cookies, or any third-party tracking pixels that serve commercial advertising. Analytics data is aggregated and anonymised — it cannot be used to identify you as an individual.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your okgbd account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

okgbd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the lifetime of your registered account and for a period of five years following permanent account closure, in accordance with standard financial record-keeping practices.
• KYC and identity verification documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later, to meet AML compliance obligations.
• Transaction records (deposits and withdrawals): Retained for five years from the date of each transaction. This period may be extended if a transaction is the subject of an investigation or legal proceedings.
• Customer support records: Live chat transcripts and support email correspondence are retained for three years from the date of the interaction, or until the resolution of any related dispute, whichever is later.
• Marketing consent records: Records of your consent to receive promotional communications are retained for as long as you remain opted in, plus two years following any opt-out, to demonstrate compliance with consent requirements.
• Technical logs (IP, session, access logs): Retained for 90 days under standard operational practice, or for up to 12 months where required for security investigation purposes.

Once the applicable retention period expires and there is no legal requirement to continue holding your data, we securely delete or anonymise the information so that it can no longer be associated with you.

Protecting your personal data from unauthorised access, loss, or misuse is a core operational priority at okgbd. We implement a layered approach to data security that includes both technical and organisational measures:

• Encryption in transit: All communications between your browser or app and the okgbd platform are encrypted using TLS (Transport Layer Security). This prevents interception of data during transmission.
• Encryption at rest: Sensitive personal data fields — including identity document data and financial account identifiers — are encrypted in our databases using strong encryption standards.
• Access controls: Access to personal data within okgbd's systems is restricted to authorised staff on a need-to-know basis. Role-based access controls are enforced and access logs are maintained and reviewed regularly.
• Password security: Account passwords are hashed using industry-standard one-way hashing algorithms. okgbd staff cannot see or retrieve your password in plain text — if you forget it, a secure reset process is required.
• Vulnerability management: Our platform undergoes regular security assessments, including vulnerability scanning. Critical security patches are applied promptly.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, okgbd will notify affected players as promptly as circumstances allow and will take immediate steps to contain and remediate the breach.

As a player on the okgbd platform, you have the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected]:

• Right of access: You have the right to request a copy of the personal data okgbd holds about you. We will provide this in a structured, readable format within 30 days of a valid request.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details (such as your contact email or mobile number) directly through your account settings.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires us to retain it. Note that we are required to retain certain financial and KYC records for regulatory compliance periods — erasure requests will be assessed against these obligations.
• Right to restrict processing: You may request that we limit our processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a machine-readable format for transfer to another provider.
• Right to withdraw consent: Where we process your data based on consent (such as for marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You have the right to object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling grounds that override your interests.

All privacy rights requests are handled by the okgbd data protection team. We will acknowledge your request within 5 business days and aim to resolve it fully within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by up to a further 30 days and will notify you accordingly.

The okgbd platform is strictly intended for adults aged 18 years and over. We do not knowingly collect personal data from any person under the age of 18. Age verification is a mandatory step in our KYC process and is conducted before any withdrawal is approved on a player account.

If we discover — through KYC verification, third-party screening, or any other means — that a player account belongs to a person under 18, we will:

• Close the account immediately and permanently.
• Delete all personal data associated with the account, subject to any legal retention obligation.
• Return any real-money deposit balance to the source payment method after deducting any winnings derived from gameplay, which are forfeited.
• Report the incident to relevant authorities where we are legally obliged to do so.

Parents and guardians who believe a minor may have accessed the okgbd platform using their details are encouraged to contact us immediately at [email protected]. We take such reports seriously and will investigate and act promptly.

okgbd may update this Privacy Policy from time to time to reflect changes in how we collect or use personal data, changes in applicable law or regulatory guidance, or improvements to our privacy practices. The effective date at the top of this document will be updated whenever a new version is published.

Where a material change is made to this Privacy Policy — one that significantly affects how we use your data or your rights as a data subject — we will notify registered players via email to the address held on their account at least 7 days before the updated policy takes effect. Non-material changes, such as clarifications of existing practices or corrections of typographical errors, may be made without prior notice.

We encourage you to review this Privacy Policy periodically to stay informed about how okgbd protects your personal information. The most current version of the Privacy Policy is always available on this page at https://okgbd.app/privacy-policy. Continued use of the Platform following notification of a material update constitutes your acknowledgement of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way okgbd handles your personal data, please contact our support team. All privacy-related enquiries are treated as priority correspondence.

• Support Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy requests: "Privacy Request — [Your Username]"
• Subject line for data breach notifications: "Data Concern — [Your Username]"
• Response time: Acknowledgement within 5 business days; full resolution within 30 calendar days
• Availability: 24/7 — Bangladesh Standard Time (UTC+6)

If you are not satisfied with how okgbd has handled your privacy complaint, you have the right to escalate the matter by writing to our compliance team — details of which will be provided in the acknowledgement email you receive following your initial contact. We are committed to resolving all privacy complaints fairly and transparently at every stage of the process.