okbag Privacy Policy — How We Handle Your Personal Data

1. Data Controller & Contact Information

For the purposes of this Privacy Policy, the data controller responsible for your personal information is okbag, operating the platform at okbag.net. References to "okbag", "we", "us", and "our" throughout this document refer to the platform and its operators.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:

2. Information We Collect

okbag collects personal information through several channels: directly from you when you register and use the platform, automatically through your interactions with okbag.net, and in limited cases from third-party sources such as payment processors and identity verification services. The categories of personal information we collect are described below.

2.1 Information You Provide Directly

• Registration data: Your full name, date of birth, mobile number, email address, and username provided when you create your okbag account.
• Identity verification documents: National Identity Card (NID), passport, or other government-issued photo ID submitted during KYC verification.
• Payment information: Mobile financial service numbers (bKash, Nagad, Rocket, Upay), bank account details, or card information provided when making deposits or requesting withdrawals. Full card numbers are processed by our payment partners and are not stored on okbag's own servers.
• Communication records: Messages sent to our customer support team via email or live chat, including the content of your enquiry and our responses.
• Responsible gaming preferences: Deposit limits, session time limits, and self-exclusion requests you submit through your account settings.

2.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within okbag.net.
• Transaction data: Deposit and withdrawal history, bet history, bonus claims, and account balance changes — all linked to your account record.
• Cookie and tracking data: Data collected via cookies, web beacons, and similar technologies as described in Section 5 of this policy.

2.3 Information from Third Parties

Where necessary to verify your identity or process payments, okbag may receive limited personal data from third-party service providers, including identity verification agencies and payment processors. This data is used only for the specific purpose for which it was shared and is handled with the same level of care as data you provide directly.

Data Category	Examples	Purpose
Identity Data	Full name, date of birth, NID number	Account registration, KYC verification, age check
Contact Data	Mobile number, email address	Account communications, security alerts, support
Financial Data	bKash/Nagad number, bank account, transaction history	Deposit processing, withdrawal, fraud prevention
Technical Data	IP address, device ID, browser fingerprint	Security, fraud detection, platform optimisation
Behavioural Data	Games played, bets placed, session time	Personalisation, responsible gaming monitoring
Communication Data	Support chat transcripts, email history	Customer service, dispute resolution, audit trail

3. Legal Basis for Processing Your Data

okbag processes your personal data on one or more of the following legal grounds, depending on the specific processing activity involved:

• Contractual necessity: Processing your registration details, payment information, and bet history is necessary to operate your account and deliver the services you have contracted with us to provide.
• Legal obligation: We are required to collect and retain certain data — including identity documents and transaction records — to meet our obligations related to anti-money laundering (AML), know-your-customer (KYC) compliance, and responsible gaming requirements.
• Legitimate interests: We process technical and behavioural data to maintain the security and integrity of the platform, detect and prevent fraud, and improve the overall user experience. These legitimate interests are balanced against your rights and do not override your fundamental privacy interests.
• Consent: Where we send you marketing communications or deploy non-essential cookies, we do so only with your explicit consent. You may withdraw that consent at any time by contacting [email protected] or by adjusting your cookie preferences.

4. How We Use Your Data

The personal information okbag holds about you is used for clearly defined purposes that are proportionate to the data collected. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are as follows:

• Account management: Creating and maintaining your okbag account, authenticating your identity at login, and processing account-related requests such as password resets or username changes.
• Service delivery: Processing your bets and casino game sessions, crediting winnings to your balance, and maintaining an accurate record of your transaction history.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods. Payment data is shared with the relevant payment service provider only to the extent required to complete the transaction.
• Identity verification and KYC: Confirming your age and identity to ensure compliance with our 18+ age restriction and to meet our legal obligations related to fraud prevention and financial crime.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining communication records for audit and quality assurance purposes.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour and, where appropriate, reaching out proactively to offer support tools such as deposit limits or self-exclusion. For more information, please visit our Responsible Gaming page.
• Platform security: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, multi-accounting, and other forms of platform misuse.
• Marketing communications: Sending you promotional offers, match previews, and seasonal campaign notifications relevant to your interests — but only where you have consented to receive such communications. You may opt out of marketing emails at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with okbag.net and to guide product development decisions. This analysis does not identify you personally.

5. Cookies & Tracking Technologies

okbag uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the site. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies cannot execute programs or deliver viruses to your device.

5.1 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the platform to function and cannot be disabled. They include session cookies that keep you logged in during your visit, security tokens, and cookies that remember your cookie consent choice.
• Functional cookies: These cookies remember your preferences — such as your preferred language and display settings — so you do not need to reset them on each visit.
• Analytics cookies: We use anonymised analytics data to understand how visitors navigate okbag.net, which pages are most visited, and where users encounter difficulties. This helps us continuously improve the platform experience.
• Marketing cookies: Where you have consented, we may use cookies to track whether you arrived at okbag.net via a specific promotional campaign. This allows us to measure the effectiveness of our marketing activities. These cookies do not share your personal data with unrelated advertisers.

5.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies may impair the functionality of okbag.net, including your ability to log in and place bets. Instructions for managing cookies vary by browser — please refer to your browser's help documentation for guidance.

6. Data Sharing & Third Parties

okbag does not sell your personal data. We share your information only in the specific and limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary payment details with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and card processors for Visa and Mastercard transactions. These partners are contractually bound to handle your data securely and to use it only for transaction processing.

6.2 Identity Verification Services

Where we use a third-party identity verification provider to assist with KYC checks, we share only the specific documents and data required for verification. Identity verification partners are prohibited from retaining or using your documents for any purpose beyond the immediate verification task.

6.3 Technology and Infrastructure Providers

okbag uses trusted third-party technology providers for hosting, data storage, platform infrastructure, and security monitoring. These providers act as data processors on our behalf, operating strictly under our instructions and subject to contractual data protection obligations.

6.4 Legal and Regulatory Disclosures

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of okbag, its users, or the public. In such cases, we disclose only the minimum data necessary to comply with the legal requirement.

6.5 Business Transfers

In the event that okbag or its operations are acquired by, merged with, or transferred to another entity, your personal data may form part of the transferred assets. In any such scenario, the acquiring entity would be required to honour the commitments made in this Privacy Policy or to notify you of any material changes before your data is processed differently.

7. Data Retention

okbag retains your personal data for as long as your account is active and for a period thereafter as required by our legal and compliance obligations. The specific retention periods we apply are as follows:

• Active account data: Retained for the full duration of your account's active status and for a minimum of 5 years following account closure, in accordance with financial crime prevention requirements.
• Transaction and betting records: Retained for a minimum of 5 years from the date of the transaction to support audit, dispute resolution, and regulatory compliance requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last communication in a support thread, or for the duration of any active dispute, whichever is longer.
• Marketing consent records: Retained for as long as you remain opted in to marketing communications, plus 2 years following any opt-out, as evidence of consent management.
• Anonymised analytics data: Retained indefinitely in aggregated, non-identifiable form and used for statistical platform analysis only.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of your data by contacting [email protected], subject to any overriding legal retention obligations that prevent us from complying with such a request in full.

8. Your Rights & Choices

As a user of the okbag platform, you hold a number of rights with respect to your personal data. We are committed to facilitating the exercise of these rights promptly and without unnecessary obstacles. To exercise any of the rights described below, please contact [email protected] with the subject line "Data Rights Request" and include your registered account details.

• Right of access: You have the right to request a copy of the personal data okbag holds about you. We will provide this in a clear, readable format within 10 business days of verifying your identity.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly through your account settings panel, or contact support for changes to verified identity data.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. Note that certain data may be exempt from erasure where retention is required by law.
• Right to restrict processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being investigated — you may request that we restrict the processing of your data to storage only.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another service provider where technically feasible.
• Right to withdraw consent: Where we process your data based on your consent — for example, for marketing communications or non-essential cookies — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to object: You may object to processing based on our legitimate interests where you believe your fundamental rights and freedoms outweigh those interests. We will assess your objection and discontinue the processing unless we can demonstrate compelling legitimate grounds that override your interests.

9. Data Security Measures

okbag implements a range of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following safeguards:

• SSL/TLS encryption: All data in transit between your browser and okbag.net is encrypted using current-generation TLS protocols. Our platform enforces HTTPS across all pages.
• Password hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. okbag staff cannot view your password in plain text.
• Access controls: Access to personal data held on okbag's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Firewalls and intrusion detection: Our server infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring to detect and respond to threats in real time.
• Regular security audits: We conduct periodic security assessments and vulnerability scans to identify and remediate potential weaknesses in our systems before they can be exploited.
• Incident response: In the event of a data security incident that poses a risk to your personal data, okbag will take immediate steps to contain the incident, assess its scope, and notify affected users as required by applicable law.

While we employ robust security measures, no system is entirely immune to security risks. We encourage you to play your part by using a strong, unique password for your okbag account and by enabling any available account security features. If you suspect your account has been compromised, contact [email protected] immediately.

10. Policy Updates & Contact

okbag reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or operational procedures. When we make material changes to this policy, we will notify registered users by posting a prominent notice on okbag.net and, where appropriate, by sending a notification to your registered email address or mobile number. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of the okbag platform after a policy update constitutes your acknowledgement of the revised policy. If you do not agree with a material change, you may request account closure by contacting [email protected] before the revised policy takes effect.

For all privacy-related questions, data rights requests, or concerns about how your personal information is handled, please reach out to the okbag privacy team at [email protected]. We treat all privacy enquiries with the utmost seriousness and commit to responding promptly and transparently.