Privacy Policy – How okbj Handles Your Data

okbj ("we", "us", "our") operates the online betting and gaming platform accessible at okbj.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, whether as a registered Player, a visitor to our website, or a user of our customer support channels.

This Privacy Policy ("Policy") sets out in detail the types of personal data we collect, the purposes for which that data is processed, the conditions under which it may be disclosed to third parties, the security measures we apply to protect it, and the rights you have as a data subject.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy. By registering an account or otherwise using the Platform, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

okbj collects personal data in the following categories. The specific data points collected in each category are detailed in the table below:

okbj collects personal data through several distinct channels, both direct and automated:

• Account Registration: Data you provide directly when creating your okbj account, including your name, date of birth, email, phone number, and address.
• KYC Submission: Identity documents and photographs you upload when completing our Know Your Customer verification process.
• Deposits & Withdrawals: Payment details associated with transactions made via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or USDT.
• Platform Interaction: Data automatically generated when you browse the Platform, place bets, play games, or interact with promotional content.
• Customer Support: Information you provide voluntarily when contacting our support team via live chat or email.
• Cookies and Tracking Technologies: Automated data collected via cookies, web beacons, pixel tags, and server logs as described in Section 7 of this Policy.
• Third-Party Verification Partners: Data received from KYC and identity verification providers when we conduct due diligence checks on your submitted documents.

okbj processes your personal data for the following purposes. Each processing activity is connected to a specific legal basis as described in Section 5:

• Account Management: Creating and maintaining your player account, processing login credentials, managing account settings, and updating registration details upon your request.
• Identity & Age Verification: Confirming that you are who you claim to be and that you meet the minimum age requirement of 21 years to use the Platform.
• Payment Processing: Facilitating deposit and withdrawal transactions, reconciling payment records, and managing currency conversions for USDT transactions.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multiple account abuse, money laundering, bonus fraud, and unauthorised access attempts.
• Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and financial crime prevention regulations.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling indicators and offering appropriate responsible gaming tools and interventions.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Service Improvement: Analysing anonymised or aggregated platform usage data to improve the performance, usability, and content of the okbj Platform.
• Marketing Communications: Sending you promotional offers, bonus announcements, and relevant gaming news via email or SMS, where you have opted in to receive such communications. You may unsubscribe at any time.
• Legal Claims: Establishing, exercising, or defending legal claims in the event of a formal dispute between you and okbj.

For each category of personal data processing, okbj relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered Player — including account management, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and financial crime reporting duties.
• Legitimate Interests: Processing carried out in pursuit of okbj's legitimate business interests — such as fraud prevention, security monitoring, service improvement, and responsible gaming monitoring — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — most notably for marketing communications and for the use of non-essential cookies. You may withdraw consent at any time by contacting [email protected] or adjusting your account communication preferences.

okbj does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your data may be shared with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment Processors: Mobile Financial Service providers (bKash, Nagad, Rocket, Upay) and card/bank payment gateways receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC & Identity Verification Providers: Specialist third-party verification platforms used to authenticate identity documents and conduct age verification checks on behalf of okbj.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session identifiers to serve game content and enforce game-level limits. They do not receive full personal registration details.
• Fraud Prevention & AML Services: Specialist analytics and risk-management platforms used to detect suspicious transaction patterns and prevent financial crime.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or regulatory directive, okbj will disclose personal data to competent authorities including financial intelligence units.
• Professional Advisors: Legal counsel, auditors, and accountants acting under professional confidentiality obligations, where necessary to conduct okbj's business operations.
• Business Successors: In the event of a merger, acquisition, or sale of the okbj business or any part thereof, personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

okbj uses cookies and similar tracking technologies on the Platform to deliver functionality, maintain session security, and analyse user behaviour. The categories of cookies we use are as follows:

Strictly necessary cookies are deployed without requiring your consent as they are essential to the operation of the Platform. All other cookie categories are activated only where you have provided consent. You may manage your cookie preferences by adjusting your browser settings; however, disabling strictly necessary cookies may impair the functionality of your account.

okbj retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The principal retention periods applied by okbj are as follows:

• Active Account Data: Retained for the duration of your account's active status and for a period of 5 years following account closure, to meet AML and financial record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of verification, or longer if required by a regulatory authority or ongoing investigation.
• Transaction Records: Financial transaction records are retained for a minimum of 5 years in compliance with anti-money laundering record-keeping requirements.
• Betting & Gaming History: Retained for 2 years from the date of the relevant activity for dispute resolution purposes, and archived in anonymised form thereafter.
• Support Communications: Email and live chat records retained for 2 years from the date of the interaction.
• Marketing Consent Records: Retained for 3 years from the date of consent, or until consent is withdrawn, whichever is earlier.
• Technical & Server Logs: Retained for 90 days in active storage for security monitoring, then deleted or anonymised.

Where data is subject to a legal hold — for example, in connection with an ongoing regulatory investigation or litigation — the standard retention period will be extended until the matter is resolved.

The security of your personal data is a top priority for okbj. We implement a comprehensive set of technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• Encryption in Transit: All data transmitted between your device and okbj servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption. Our SSL certificate is maintained and renewed to the current industry standard.
• Encryption at Rest: Sensitive stored data — including KYC documents and financial records — is encrypted at rest using AES-256 encryption within our secure data infrastructure.
• Password Security: Account passwords are hashed using a bcrypt algorithm and are never stored or transmitted in plain text. okbj staff cannot access your password at any time.
• Access Controls: Access to personal data within okbj's internal systems is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Intrusion Detection: Our infrastructure incorporates real-time monitoring and intrusion detection systems to identify and respond to suspicious access attempts or anomalous activity.
• Penetration Testing: okbj conducts periodic security penetration tests and vulnerability assessments on our Platform infrastructure to proactively identify and remediate potential weaknesses.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their okbj account as an additional layer of protection against unauthorised access.

While okbj applies robust security measures, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account safe — please use a strong, unique password for your okbj account, do not share your login credentials with any third party, and contact [email protected] immediately if you suspect unauthorised access to your account.

As a Player using the okbj Platform, you hold the following rights in relation to your personal data. You may exercise any of these rights by contacting us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of all personal data that okbj holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 days of a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data must be retained to comply with AML and financial record-keeping regulations even after account closure.
• Right to Restriction of Processing: You have the right to request that okbj restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured format and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring and direct marketing communications. We will honour objections to marketing immediately; other objections will be assessed on their individual merits.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The okbj Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Our registration and KYC processes are specifically designed to prevent the creation of accounts by underage individuals.

If okbj discovers, through its verification processes or otherwise, that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data (subject to any mandatory retention obligations under AML law), and retain a record of the incident for compliance purposes.

If you have reason to believe that a minor has created an account on the okbj Platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take such reports extremely seriously and will act on verified reports within 24 hours.

The okbj Platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, certain technical session data — such as a session token and your anonymised player identifier — is transmitted to the relevant game studio's servers to deliver the game content to your device.

These game providers operate their own privacy policies and data handling practices, which are independent of this Policy. okbj is not responsible for the data practices of third-party game studios once a game session is initiated. We encourage you to review the privacy documentation published by any third-party service provider whose services you access through the Platform.

Payment service providers — including bKash, Nagad, Rocket, Upay, and card processing partners — also maintain their own privacy policies governing the data they collect in connection with payment transactions. okbj shares only the minimum necessary data with payment providers to execute your requested transaction.

okbj reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our services. The most current version of this Policy will always be accessible at okbj.io/privacy-policy and will be identified by the "Last Updated" date displayed at the top of the document.

Where changes to this Policy are material — meaning they substantially affect how we use your personal data, your rights as a data subject, or our data sharing arrangements — we will notify registered Players by email to the address associated with their account no fewer than 14 days before the updated Policy takes effect. For non-material changes such as typographical corrections or minor clarifications, the updated Policy may take effect immediately without advance notice.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any material changes to this Policy, you have the right to close your okbj account before the changes take effect by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to okbj's handling of your personal data, please reach out to us through the following channels. All privacy-related correspondence is treated as confidential and handled by our dedicated data protection team:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is routed to the correct team
• Live Chat: Available 24/7 directly within the okbj Platform — select "Privacy & Data" from the support topic menu
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours (BST, UTC+6) and to provide a substantive response within 5 business days

When submitting a data rights request, please include your registered account username or email address, the specific right you wish to exercise, and sufficient detail to allow us to identify and locate your personal data. We may need to verify your identity before fulfilling any request to ensure we do not disclose or delete data belonging to another individual.