Privacy Policy

When you register for or use the okplay platform, we collect certain categories of personal information. We only collect data that is genuinely necessary to provide you with a safe, functional, and compliant online casino experience in Bangladesh. The categories of information we collect are as follows:

1.1 Information You Provide Directly

• Registration data: Your full name, date of birth, email address, mobile number, and preferred username and password when you create your okplay account.
• Identity verification documents: Copies of your National Identity Card (NID), passport, or other government-issued documents submitted as part of our Know Your Customer (KYC) process.
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details, or card information used to make deposits and withdrawals. Full card numbers are not stored on our servers; they are processed through secure, tokenised payment gateways.
• Communication data: Messages, emails, live chat transcripts, and other correspondence you send to the okplay support team.
• Responsible gaming data: Deposit limits, cooling-off periods, or self-exclusion preferences you set through your account settings.

1.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type (mobile, desktop, tablet), screen resolution, and time zone.
• Usage data: Pages visited, games played, session duration, bet history, click-stream data, and in-platform navigation patterns.
• Location data: Approximate geographic location derived from your IP address, used to verify that access is permitted from your region.
• Cookie and tracking data: Information gathered through cookies, pixels, and similar technologies — described in detail in Section 4 below.

okplay uses the personal information we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with those stated purposes. The primary uses of your personal data are:

• Account management: To create, maintain, and administer your okplay account, verify your identity and age (18+ requirement), and facilitate your access to platform features.
• Service delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; to settle bets and pay out winnings; and to deliver customer support.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) rules, KYC requirements, and fraud prevention standards. This includes retaining transaction records for required periods and responding to lawful requests from authorities.
• Platform security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide personalised responsible gaming interventions where appropriate.
• Service improvement: To analyse usage trends, optimise platform performance, improve the user interface, and develop new features and product offerings that are relevant to players in Bangladesh.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign messages (such as Eid, Pohela Boishakh, BPL, or T20 World Cup promotions) where you have given your consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Technical operations: To diagnose server issues, perform maintenance, conduct A/B testing, and ensure the overall reliability of the okplay platform.

okplay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary.

3.1 Service Providers

We work with carefully selected third-party service providers who process data on our behalf under strict data processing agreements. These providers include:

• Payment processors: Mobile financial service operators (bKash, Nagad, Rocket, Upay), banking partners, and card networks (Visa, Mastercard) — who require certain transactional data to process your deposits and withdrawals.
• Game technology providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, which operate the games you play. These providers may receive your player ID and session data for game delivery and fairness certification purposes.
• KYC and identity verification services: Third-party verification platforms used to confirm the authenticity of identity documents submitted during onboarding.
• Customer support platforms: Live chat and helpdesk software providers that host support interactions between you and the okplay team.
• Analytics providers: Web analytics services used to understand platform usage patterns at an aggregate level. Where personal data is involved, we use contractual safeguards to restrict further use.

3.2 Legal and Regulatory Disclosure

We may disclose personal data to government authorities, law enforcement agencies, or other regulatory bodies if required to do so by law, court order, or legally binding governmental request. We will, where permitted by law, notify you of such a request before complying.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of the okplay business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered on your account, and your rights under this Privacy Policy will continue to apply.

okplay uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, and understand how players interact with our services. A cookie is a small text file placed on your device when you visit our website.

4.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit, security tokens, and cookies that maintain your language and currency preferences. You cannot opt out of these without disabling core functionality.
• Performance and analytics cookies: Collect anonymised data about how players navigate and use okplay — for example, which game categories are most visited, average session lengths, and error occurrences. This data helps us improve the platform.
• Functionality cookies: Remember your platform preferences such as table limits, display settings, and notification choices, so you do not need to reconfigure them on each visit.
• Marketing and targeting cookies: Used to deliver promotional content that is relevant to your interests and betting behaviour, and to measure the effectiveness of our marketing campaigns. These cookies are only placed with your consent.

4.2 Managing Cookies

You may control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may impair the functionality of the okplay platform. For marketing and non-essential cookies, you may withdraw your consent at any time via your account privacy settings. Please note that withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

okplay retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum period of five (5) years after account closure to satisfy legal, regulatory, and audit obligations.
• Transaction records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five (5) years following the transaction date in line with standard financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years after account closure or the last transaction, whichever is later.
• Support communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the interaction, unless a longer period is required for an ongoing dispute or legal matter.
• Marketing preferences: Retained until you withdraw your consent or close your account, whichever comes first. Historical records of consent are kept for compliance purposes.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.

When your personal data is no longer required, okplay will securely delete or anonymise it in accordance with our internal data disposal procedures. You may request early deletion of specific categories of data by contacting us at [email protected], subject to any legal retention obligations that prevent deletion.

okplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security practices include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the okplay platform is encrypted using industry-standard TLS encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Data encryption at rest: Sensitive data stored on our servers — including identity documents and payment records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data within the okplay organisation is restricted on a strict need-to-know basis. Employees and contractors who require access are bound by confidentiality obligations and receive regular data protection training.
• Two-factor authentication: okplay offers optional two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised login attempts.
• Fraud detection systems: Automated real-time monitoring systems are in place to detect suspicious account activity, unusual transaction patterns, and potential security breaches.
• Penetration testing and audits: Our platform infrastructure undergoes periodic security assessments and penetration testing by qualified security professionals to identify and address vulnerabilities proactively.

As a player on the okplay platform, you have meaningful rights over your personal data. We are committed to honouring these rights promptly and without undue burden. Your rights include:

• Right of access: You have the right to request a copy of the personal data okplay holds about you, along with information about how it is being used. We will provide this within a reasonable timeframe upon verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update most account details directly through your account settings.
• Right to erasure: In certain circumstances, you have the right to request that okplay delete your personal data. This right applies where the data is no longer necessary for the purposes it was collected, you withdraw consent (and no other legal basis applies), or the data has been unlawfully processed. Note that legal retention obligations may prevent full erasure.
• Right to restrict processing: You may request that we limit how we use your personal data in specific situations — for example, while the accuracy of data is being disputed.
• Right to data portability: Where technically feasible and where processing is based on your consent or a contract, you may request a structured, machine-readable copy of your data to transfer to another service provider.
• Right to object: You have the right to object to our processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be able to demonstrate compelling grounds that override your objection in certain cases.
• Right to withdraw consent: Where we rely on your consent to process personal data (such as for marketing), you may withdraw that consent at any time without affecting the lawfulness of processing prior to the withdrawal.

To exercise any of the above rights, please contact the okplay privacy team by email at [email protected] or via the 24/7 live chat function within the platform. We will verify your identity before actioning any request and aim to respond within 30 calendar days. If we are unable to fulfil your request in full, we will explain why.

okplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify registered players by email to the address associated with their okplay account, or via a prominent notice on the platform, at least seven (7) days before the changes take effect.

The "Effective Date" shown at the top of this Privacy Policy indicates when the current version came into force. We encourage you to review this Policy periodically so that you remain informed about how okplay protects your data. Your continued use of the okplay platform after a notified Policy update constitutes your acknowledgement of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a potential data protection concern, please contact us at any time:

• Email: [email protected]
• Live Chat: Available 24/7 within the okplay platform
• Support Hours: 24/7 Bangladesh Standard Time (BST, UTC+6)

This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions are available on request.