okbit Privacy Policy

1. Introduction

okbit is committed to protecting the personal information of everyone who uses the okbit platform. This Privacy Policy describes how okbit collects, uses, stores, shares and protects personal data in connection with the services we provide to players across Bangladesh. It covers all interactions with the okbit platform — including account registration, deposits and withdrawals, gameplay sessions, customer support communications, and general use of our website.

By registering an account with okbit, accessing the platform or providing any personal information to okbit, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your data as described here. If you do not agree, you should not access or use the okbit platform. okbit may update this policy from time to time — continued use after an update constitutes acceptance of the revised policy.

2. Data We Collect

okbit collects personal data in four broad categories. The specific data collected within each category depends on how you interact with the platform and which services you use.

3. How We Use Your Data

okbit uses the personal data it collects only for the purposes described in this policy. We do not sell personal data to third parties. The following sets out the specific purposes for which each category of data is processed.

• 3.1 Account management: to create and maintain your okbit account, verify your identity, process KYC documentation, and manage your account preferences and settings. This is necessary for the performance of the contract between you and okbit.
• 3.2 Payment processing: to process deposits via bKash, Nagad, Rocket and Upay, execute withdrawal requests, detect and prevent payment fraud, and maintain financial records as required by applicable law. Payment data is shared only with the relevant payment service provider for the purpose of executing the specific transaction.
• 3.3 Responsible gaming compliance: to monitor gambling activity for signs of problem gambling, apply deposit limits and session reminders you have requested, process self-exclusion requests, and flag potentially at-risk accounts to our responsible gaming team.
• 3.4 Platform improvement and analytics: to analyse aggregated and anonymised usage data to improve the performance, reliability and content of the okbit platform. Individual user profiles are not built for advertising purposes. Analytics data is used only for internal service improvement.
• 3.5 Customer support: to respond to support queries, investigate complaints, and maintain a record of communications related to your account. Support communications may be reviewed for quality assurance in anonymised form.

4. Legal Basis for Processing

okbit processes personal data only where there is a lawful basis for doing so. The primary legal bases are: (a) performance of a contract — processing necessary to provide the services you have requested; (b) compliance with a legal obligation — processing required by applicable anti-money-laundering and KYC laws; (c) legitimate interests — processing for fraud prevention, platform security and internal analytics where those interests are not overridden by your rights; and (d) consent — where you have provided explicit consent for a specific processing purpose such as receiving promotional communications.

5. Sharing Your Data

okbit does not sell, rent or trade personal data to third parties for marketing or advertising purposes. Personal data is shared only in the limited circumstances below and only to the extent necessary for the stated purpose.

• 5.1 Payment service providers: transaction data is shared with bKash, Nagad, Rocket or Upay solely to process the specific deposit or withdrawal transaction you have initiated. okbit does not share any additional personal data with payment providers beyond what is strictly required to execute the transaction.
• 5.2 Game providers: session identifiers and wagering data are shared with certified game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt and Microgaming to the extent necessary to operate game sessions, verify outcomes and resolve disputes. Providers are contractually prohibited from using this data for any other purpose.
• 5.3 Legal and regulatory authorities: okbit will disclose personal data to government bodies or law enforcement agencies where required by applicable law, court order or lawful regulatory instruction. okbit will use reasonable endeavours to notify you of such a disclosure where legally permitted.
• 5.4 Approved service providers: okbit uses carefully selected third-party technology providers for fraud detection, platform hosting and analytics. These providers act as data processors under okbit's instructions and are contractually prohibited from processing personal data for any purpose beyond their specific service role.

6. Payment Data and Financial Security

okbit takes particular care with financial data. bKash, Nagad, Rocket and Upay mobile account numbers provided for deposits and withdrawals are stored in encrypted form and are accessible only to okbit's payment processing systems and authorised staff involved in transaction review and dispute resolution. Full card numbers are never stored by okbit. All payment transactions are processed over SSL-encrypted connections to protect data in transit between your device and our servers.

In the event of a suspected security breach affecting financial data, okbit will take immediate steps to contain the breach and will notify affected users as soon as reasonably practicable. okbit recommends that you do not share your account credentials with any third party and that you contact support immediately if you suspect your account has been accessed without your authorisation.

7. Cookies and Tracking Technologies

okbit uses cookies and similar technologies to operate the platform, maintain session state, prevent fraud and improve the user experience. The following describes the categories of cookies in use on the okbit platform.

• 7.1 Essential cookies: strictly necessary for the platform to function. These include session authentication cookies, security tokens and cookies required to maintain your login state across page navigations. These cookies cannot be disabled without preventing access to core platform features.
• 7.2 Analytics cookies: used to collect anonymised information about how users navigate the platform, which games are most popular and where users encounter errors or slow loading. This data is used only to improve platform performance and is not linked to individual user profiles.
• 7.3 Preference cookies: used to remember your language preference, responsible gaming settings and other optional platform preferences. These cookies improve your experience but are not strictly necessary. You may clear them via your browser settings without affecting core platform functionality.

8. Data Retention

okbit retains personal data only for as long as necessary to fulfil the purposes described in this policy or as required by applicable law. General retention periods: account data and KYC documentation are retained for a minimum of 5 years from account closure to comply with anti-money-laundering regulations; financial transaction records for a minimum of 7 years from each transaction date; gameplay session logs for a maximum of 3 years; and customer support communications for a maximum of 3 years from the date of the last interaction.

Following the expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Anonymised or aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

9. Your Data Rights

You have the following rights in relation to the personal data okbit holds about you. To exercise any of these rights, please contact okbit support at [email protected] with the subject line "Data Rights Request". okbit will respond within 30 days of receiving a verified request.

• Right of access: you have the right to request a copy of the personal data okbit holds about you, together with information about how that data is used and with whom it has been shared.

• Right to rectification: you have the right to request that okbit correct any personal data about you that is inaccurate or incomplete. Where a correction is made to data that has been shared with a third party, okbit will use reasonable endeavours to notify that third party of the correction.

• Right to erasure: you have the right to request that okbit delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. This right is subject to okbit's legal obligations to retain certain data under applicable anti-money-laundering regulations.

• Right to restriction: you have the right to request that okbit restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data while okbit verifies it, or where you object to processing based on legitimate interests while okbit assesses your objection.

• Right to object: you have the right to object to okbit processing your personal data where that processing is based on legitimate interests. okbit will cease processing unless it can demonstrate compelling grounds that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.

To exercise any of the above rights, please email [email protected] with the subject line "Data Rights Request" and include your registered account username and a description of the right you wish to exercise. okbit may request additional verification before processing a data rights request to protect the security of your account data.

10. Children's Privacy

The okbit platform is strictly for adults aged 21 and above. okbit does not knowingly collect personal data from individuals under the age of 21. If okbit becomes aware that personal data has been collected from a person under 21, it will delete that data as quickly as reasonably practicable and close the associated account. If you believe a person under 21 has registered an account with okbit, please notify us immediately at [email protected]. Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gambling platforms.

11. Security Measures

okbit implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest, strict access controls limiting staff access to personal data on a need-to-know basis, regular security audits and penetration testing, and two-factor authentication requirements for staff accessing systems containing personal data.

While okbit takes reasonable steps to protect personal data, no system is entirely immune from security risks. Users are responsible for maintaining the confidentiality of their own account credentials and for using strong, unique passwords. okbit will never contact you by email, phone or messaging app to ask for your account password. If you receive such a request, treat it as a phishing attempt and report it to [email protected] immediately.

12. Changes to This Privacy Policy

okbit may update this Privacy Policy at any time. When material changes are made, okbit will endeavour to provide reasonable notice to registered users via the email address associated with their account or via a prominent notice on the okbit platform. The date of the most recent revision is displayed at the top of this page. Continued use of the okbit platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms. Users who do not accept the revised policy should close their account in accordance with the voluntary closure procedure described in the Terms and Conditions.

13. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data okbit holds about you, please contact the okbit data support team. All privacy-related enquiries are handled in confidence and responded to within 30 days of receipt of a verified request.

Email: [email protected] — Subject line: "Privacy Policy Enquiry" or "Data Rights Request". Response time: within 30 days for data rights requests; within 5 business days for general privacy enquiries. Support is available in both English and Bengali, 24/7.