okpj Privacy Policy — How We Protect Your Data

Introduction

This Privacy Policy explains how okpj ("we", "us", "the Platform") collects, uses, stores, and shares personal information when you visit or use the okpj website located at https://okpj.bio. It applies to all users of the platform, including visitors who browse without registering and fully verified account holders. By accessing okpj, creating an account, or making a deposit, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

okpj is operated for the Bangladesh market. We understand that privacy and data security are top concerns for players using mobile banking services such as bKash, Nagad, and Rocket. This policy sets out clearly what data we collect, why we collect it, who we share it with, and what rights you have over your own information. We do not sell personal data to third parties and we do not use player data for any purpose outside of operating the platform and complying with our legal obligations.

Your Privacy at a Glance

Section 1

Information We Collect

okpj collects personal information in the following categories. Collection occurs at registration, during account use, and through your interactions with the platform:

• Identity data: your legal name, date of birth, and government-issued identification document details provided during KYC verification. This data is collected to verify your eligibility to use the platform (minimum age 21) and to comply with anti-money laundering obligations.
• Contact data: your mobile phone number, email address (where provided), and the primary language preference on your account. This is used to deliver account notifications, transactional alerts, promotional messages (where opted in), and support communications.
• Financial data: your bKash, Nagad, or Rocket mobile wallet number (or bank account details where applicable), transaction history, deposit amounts, withdrawal amounts, and balance history. This data is strictly used for processing payments and fulfilling our anti-money laundering reporting duties.
• Technical data: your device's IP address, browser type and version, operating system, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and session duration logs. This data is collected automatically when you access the platform and is used to maintain platform security, detect fraudulent access, and improve platform performance.
• Behavioural data: your game history, bet amounts, game preferences, session frequency, responsible gaming tool usage (deposit limits set, cool-off periods activated), and customer support interaction records. This data is used to personalise your platform experience, deliver relevant promotions, and monitor for responsible gaming indicators.

Section 2

How We Use Your Information

okpj processes your personal data for the following specific purposes. We do not use personal data for any purpose that is not listed below, and we do not process data in ways that are incompatible with the original purpose of collection:

• Account management: to create, maintain, verify, and close your okpj account, to process your deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and to keep your account balance and transaction records accurate and up to date.
• Platform security: to detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities. This includes automated monitoring systems that flag unusual login patterns, device fingerprinting for returning user verification, and IP-based access controls.
• Legal compliance: to fulfil our obligations under applicable law, including Know Your Customer (KYC) identity verification requirements, anti-money laundering transaction monitoring, financial record-keeping for the minimum statutory retention period, and responding to lawful requests from government authorities.
• Customer support: to respond to your queries, complaints, and account requests via live chat and email, to document support interactions for quality assurance purposes, and to follow up on unresolved issues within the timeframes stated in our Terms and Conditions.
• Personalisation and promotions: to deliver promotions, bonus offers, and platform notifications that are relevant to your account activity and preferences — but only where you have opted in to receive marketing communications. You may withdraw consent for marketing at any time by contacting our support team.

Section 3

Legal Basis for Processing

okpj processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing that is required to perform the contract between you and okpj — including account creation, deposit processing, withdrawal processing, and game result recording. Without this processing, we cannot provide the platform services.
• Legal obligation: processing required to comply with applicable legal requirements, including KYC verification, anti-money laundering transaction monitoring, statutory financial record-keeping, and responding to lawful government requests.
• Legitimate interests: processing for platform security monitoring, fraud prevention, and internal analytics that improve the platform — where these interests are not overridden by your privacy rights. We conduct a balancing test before relying on legitimate interests as a legal basis.
• Consent: processing for optional marketing communications, personalised promotional offers, and non-essential cookies — where you have given clear, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Section 4

Sharing of Your Information

okpj does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: we share the minimum necessary financial data with our payment partners (including bKash, Nagad, Rocket, and banking partners) solely to process deposits and withdrawals on your account. These partners are contractually bound to handle your data in accordance with applicable data protection standards and are prohibited from using your data for any other purpose.
• Game providers: we share session tokens and anonymised gameplay data with our game content providers (including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and Microgaming) to deliver their games within the okpj platform. These providers do not receive your identity data, contact data, or financial data.
• Regulatory and law enforcement authorities: we may disclose personal data to competent authorities — including Bangladeshi government bodies, financial intelligence units, and law enforcement agencies — where we are legally required to do so, including under anti-money laundering legislation, court orders, or other lawful process.
• Professional advisers: we may share limited personal data with our legal, accounting, and audit advisers on a strictly confidential basis where required for the conduct of their professional services to okpj. All such advisers are bound by professional confidentiality obligations.

Section 5

Cookies and Tracking Technologies

okpj uses cookies and similar tracking technologies on its website. A cookie is a small text file placed on your device when you visit the platform. We use three categories of cookies:

• Essential cookies: these are required for the platform to function and cannot be disabled. They include session authentication tokens (keeping you logged in), security cookies that detect cross-site request forgery, and cookies that remember your language preference and responsible gaming settings.
• Analytics cookies: these help us understand how players use the platform — which pages are visited most, how long sessions last, and where players encounter problems. This data is collected in aggregated, anonymised form and is used solely to improve the platform. We do not share analytics data with third-party advertising networks.
• Preference cookies: these remember your platform settings, such as your preferred game category, display settings, and notification preferences. These cookies are optional and do not affect the core functionality of your account if declined.

You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent the okpj platform from functioning correctly and you will not be able to log in or place bets. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.

Section 6

Data Retention

okpj retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply: identity and KYC documents are retained for a minimum of five years from account closure, in accordance with anti-money laundering record-keeping requirements. Financial transaction records are retained for the same minimum five-year period. Behavioural and gameplay data is retained for the duration of your account's active life and for up to two years following account closure, after which it is anonymised or deleted.

When your personal data is no longer required, okpj will securely delete or anonymise it. Where deletion is not immediately possible due to technical constraints (for example, data stored in backup archives), we will isolate that data from further processing until deletion is feasible. You may request the deletion of your personal data at any time, subject to our legal retention obligations. We will respond to deletion requests within 30 calendar days.

Section 7

Your Privacy Rights

As a user of the okpj platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or email. We will respond to all verified rights requests within 30 calendar days:

• Right of access: you may request a copy of the personal data that okpj holds about you. We will provide this in a structured, commonly used format. We may require identity verification before fulfilling an access request to protect your data from unauthorised disclosure.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may ask us to correct it. We will update the relevant data promptly and notify any third parties to whom the inaccurate data was disclosed, where it is appropriate to do so.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal retention obligations under anti-money laundering and other applicable law.
• Right to restrict processing: you may ask us to restrict (but not delete) processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while we verify it, or where you object to processing and we are assessing your objection.
• Right to object: you may object to processing that is based on our legitimate interests, including profiling. You may also object at any time to the processing of your personal data for direct marketing purposes. Upon receiving a valid objection to direct marketing, we will cease that processing immediately.

Section 8

Data Security

okpj implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include 256-bit SSL encryption for all data transmitted between your device and the okpj platform, encrypted storage of sensitive data fields (including payment identifiers and identity document details) at rest, role-based access controls ensuring that only authorised okpj personnel can access personal data on a need-to-know basis, regular internal security reviews and penetration testing of the platform, and two-factor authentication requirements for account access.

While okpj takes all reasonable steps to protect your personal data, no security system is completely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, okpj will notify you without undue delay and will take all necessary steps to contain the breach and mitigate any harm. If you suspect that your account has been compromised, please contact our support team immediately via live chat.

Section 9

Protection of Minors

okpj does not knowingly collect personal data from any person under the age of 21. The platform is strictly for adults aged 21 and above. If we become aware that we have inadvertently collected personal data from a person under 21 — for example, through a fraudulent registration — we will immediately close the account, delete all personal data collected from that individual, and reverse any financial transactions where possible. If you are a parent or guardian and believe that a person under 21 in your care has registered with okpj, please contact our support team immediately via live chat or at [email protected].

Section 10

Policy Changes and How to Contact Us

okpj reserves the right to update this Privacy Policy at any time. When we make a material change, we will update the "Last updated" date at the top of this page. For significant changes, we will also notify registered players via their account contact details. Your continued use of the platform after a policy update constitutes acceptance of the revised policy. We encourage you to review this page periodically. If you have any questions, concerns, or requests relating to this Privacy Policy or the way okpj handles your personal data, please contact our support team. We are available 24 hours a day, seven days a week via live chat, and by email.