okba Privacy Policy — Your Data, Your Rights, Our Responsibility

Who We Are

This Privacy Policy is issued by okba ("okba", "we", "us", "our"), the operator of the online betting and casino platform accessible at okba.pro. okba provides sports betting, live casino games, slot games, fishing games, and other entertainment products to eligible players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

For the purposes of this Privacy Policy, okba acts as the data controller in respect of personal information collected from players registered on the platform. Any questions relating to this policy or our data handling practices may be directed to us at the contact details provided in Section 13.

This policy applies to all personal data collected through the okba.pro website, any okba mobile applications, and any communications between you and okba including via live chat, email, or WhatsApp support. It does not apply to third-party websites or services that may be linked to or integrated with the okba platform, whose own privacy policies govern those interactions.

Personal Data We Collect

okba collects personal data in the following categories. The specific data points collected depend on how you interact with the platform.

2.1 Registration and Identity Data

When you create an account on okba, we collect: full legal name, date of birth, residential address, email address, and a username of your choice. This information is required to create and maintain your account and to verify that you meet the minimum age requirement of 21 years.

2.2 Verification and KYC Data

As part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, we may request and collect copies of government-issued identity documents (such as a National ID card or passport), proof of address documents, and proof of payment method ownership. These documents are processed by our compliance team and stored securely for the duration required by applicable law.

2.3 Financial and Transaction Data

We collect records of all financial transactions conducted on your account, including deposit amounts, withdrawal requests, betting activity, and bonus utilisation. We do not store full payment card numbers — card transactions are processed by our third-party payment partners who operate under their own security and compliance frameworks.

2.4 Usage and Technical Data

When you use the okba platform, we automatically collect technical information including: IP address, device type and model, operating system, browser type and version, session duration, pages visited, game history, betting patterns, and approximate geographic location derived from your IP address. This data is used to secure your account, detect fraud, and improve the platform experience.

2.5 Communication Data

If you contact okba via live chat, email, or WhatsApp, we retain records of those communications, including the content of messages, timestamps, and your account reference. These records are used to resolve disputes, train support staff, and improve service quality.

2.6 Data Collected via Cookies

okba uses cookies and similar tracking technologies to collect additional usage data. Full details of the cookies we use and how to manage your cookie preferences are provided in Section 6 of this policy.

How We Use Your Personal Data

The personal data collected by okba is used for the following purposes:

okba will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

Legal Basis for Processing

okba processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between okba and the player, including account management, payment processing, and the provision of betting and gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML transaction monitoring, and record-keeping obligations.
• Legitimate interests: Processing undertaken to pursue okba's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw consent at any time by contacting us or updating your account notification preferences.

Sharing Your Personal Data

okba does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and security standards.
• Identity verification services: Third-party KYC and document verification providers may receive copies of identity documents for the purpose of age and identity verification.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to deliver game content. They do not receive your name, contact details, or payment information.
• Analytics and fraud detection tools: Anonymised or pseudonymised technical data may be shared with analytics and security partners to detect fraudulent activity and improve platform stability.
• Legal and regulatory authorities: okba may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by law, court order, or in response to a legitimate request related to fraud, money laundering, or other criminal investigations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of okba's business operations, personal data held on the platform may be transferred to the acquiring entity. Players will be notified of any such transfer via their registered email address prior to the transfer taking effect where reasonably practicable.

Cookies and Tracking Technologies

okba uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the platform. The cookies used on okba.pro fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies. No personal data collected by these cookies is shared with third parties.
• Functional cookies: These cookies remember your preferences, such as your preferred language setting and the state of your account interface, to provide a more personalised experience on return visits.
• Analytics cookies: We use anonymised analytics cookies to understand how players navigate the platform, which pages are most visited, and where technical errors occur. This data is used solely for platform improvement and does not identify you personally.
• Security and fraud prevention cookies: These cookies help okba detect suspicious behaviour, identify bot traffic, and protect player accounts from unauthorised access.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the okba platform and may prevent you from logging in or completing transactions.

okba does not use advertising or retargeting cookies, and does not place tracking pixels or beacons on behalf of third-party advertising networks.

Data Security

okba employs a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the okba platform.
• Encryption of sensitive data fields — including identity document scans and payment records — when stored in our systems.
• Role-based access controls ensuring that staff members can only access personal data that is relevant to their specific job function.
• Regular security audits and penetration testing of platform infrastructure.
• Incident response procedures to detect, investigate, and respond to data security events in a timely manner.
• Staff training on data protection and information security obligations.

While okba takes data security seriously and invests in robust protective measures, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their okba accounts and to enable any available two-factor authentication options.

Data Retention

okba retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Account and identity data: Retained for the duration of your account plus a minimum of five years following account closure, to satisfy AML and KYC record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, as required by applicable financial regulations.
• Communication records (support chat, email): Retained for up to three years from the date of the communication, unless the content is relevant to an open dispute or investigation.
• Technical and usage data: Typically retained in identifiable form for up to 24 months, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent plus one year following withdrawal of consent, to demonstrate compliance.

When personal data is no longer required for any legitimate purpose, okba will securely delete or irreversibly anonymise it so that it can no longer be linked to an individual player.

Your Data Rights

As a player on the okba platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us using the details in Section 13. okba will acknowledge your request within 5 business days and will provide a substantive response within 30 days.

• Right of access: You may request a copy of the personal data okba holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing: You may request that okba restricts the processing of your data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Please note that some rights are subject to conditions and exemptions. For example, we cannot delete data that we are legally required to retain. okba will explain any applicable limitations when responding to your request.

Children's Privacy

The okba platform is strictly intended for adults aged 21 years and above. okba does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data to us, we will immediately close the account and delete all associated personal data.

Parents and guardians who believe that a minor in their care may have registered on okba or provided personal information to us are encouraged to contact us immediately at [email protected] so that we may take appropriate action without delay.

okba recommends that parents and guardians install parental control software on shared devices to prevent minors from accessing online gambling platforms.

Third-Party Links and Integrations

The okba platform may contain references to or integrations with third-party services, including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). When you interact with any third-party service in connection with your use of okba, that third party will collect and process data in accordance with its own privacy policy.

okba is not responsible for the privacy practices of third-party service providers. We encourage players to review the privacy policies of any third party with whom they share personal information in the course of using the platform. okba does not endorse or make any representation about the data handling practices of third parties.

Updates to This Privacy Policy

okba reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by sending an email to the address associated with their account at least 14 days before the changes take effect, and we will update the "Last updated" date shown at the top of this document.

Your continued use of the okba platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue using the platform and may request account closure by contacting our support team.

We recommend reviewing this page periodically to stay informed of how okba manages and protects your personal data. The version number and effective date at the top of this policy indicate which version you are currently reading.

Contact Us — Data and Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data security concern, please contact the okba data team through any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing.
• Live Chat: Available 24/7 via the live chat widget on okba.pro — ask to be connected to the compliance team for data-related enquiries.
• WhatsApp Support: Available 24/7 — contact details provided upon login to your okba account.
• Response commitment: All privacy-related enquiries are acknowledged within 5 business days and substantively resolved within 30 days.

okba serves players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. All privacy communications are handled in English.