okapk Privacy Policy — How We Handle Your Data

1. Introduction

okapk ("we", "our", "us") operates the online betting and gaming platform available at okapk.bet. We are committed to protecting the privacy of all individuals who use our platform, in particular the players based in Bangladesh who form the primary audience of okapk. This Privacy Policy describes the categories of personal data we collect from you when you register, use, or interact with the okapk platform, how we use that data, with whom we share it, how long we retain it, and what rights you have in relation to it.

By registering an account on okapk, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the okapk platform. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the platform.

2. Information We Collect

okapk collects personal data from you in three main ways: information you provide directly to us, information we collect automatically when you use the platform, and information we receive from third-party service providers such as payment processors.

2.1 Information You Provide Directly

When you register an account on okapk, update your profile, complete KYC verification, make a deposit or withdrawal, contact our support team, or otherwise interact with the platform, you may provide us with the following categories of personal data:

• Identity data: your full name, date of birth, and a copy of your government-issued photo identification document (National ID card, passport, or driving licence) where KYC verification is required.
• Contact data: your registered Bangladeshi mobile number and, if provided, an email address.
• Financial data: transaction history on the platform (deposits, withdrawals, bet amounts, winnings), and where applicable, confirmation of payment method ownership for bKash, Nagad, Rocket, Upay, Visa, or Mastercard.
• Communications data: messages, queries, and complaints you send to the okapk support team via any communication channel.

2.2 Information Collected Automatically

When you access or use the okapk platform via a mobile browser, we automatically collect certain technical and usage data. This includes:

• Device and browser data: your device type, operating system version, browser type and version, screen resolution, and mobile network operator (e.g., Grameenphone, Robi, Banglalink).
• Usage data: pages visited, features used, time spent on each page, betting activity, game session data, and click-path information within the platform.
• IP address and approximate location: your IP address and the approximate geographic region it resolves to (used for fraud prevention and to verify that access originates from a permitted region).

2.3 Information from Third Parties

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment service provider transmits transaction confirmation data to okapk, including transaction reference numbers, amounts, and in some cases the mobile number or card identifier associated with the transaction. This data is used solely for the purpose of crediting or debiting your okapk account balance and for fraud prevention purposes.

3. How We Use Your Information

okapk uses the personal data collected from you for the following specific purposes:

• Account creation and management: to register your account, verify your identity, maintain your account balance, and provide you with access to the full okapk platform including betting markets, casino games, and slot titles.
• Payment processing: to process your deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process your withdrawal requests to the same payment methods.
• KYC and fraud prevention: to verify that you meet the age and eligibility requirements to use okapk (21 years or older), to detect and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
• Customer support: to respond to your queries, resolve disputes, process complaints, and provide technical assistance with your okapk account.
• Platform improvement: to analyse usage patterns, identify technical issues, and develop improvements to the okapk platform that benefit players in Bangladesh.
• Responsible gaming: to monitor betting patterns for signs of problematic gambling behaviour and to apply responsible gaming tools (deposit limits, session reminders, self-exclusion) where necessary or as requested by the player.

4. Legal Basis for Processing

okapk processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing required to create and manage your account, process payments, and provide the core betting and gaming services described in our Terms and Conditions.
• Legal obligation: processing required for KYC and anti-money-laundering compliance, age verification, and any other legal obligation applicable to okapk as an online gaming platform.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where such processing does not override your fundamental privacy rights.
• Consent: where you have provided explicit consent to a specific processing activity, such as receiving promotional communications from okapk about bonuses, seasonal offers, and new game launches.

5. Sharing Your Information

okapk does not sell your personal data to third parties. We share your personal data only in the limited circumstances described in this section, and only to the extent necessary for each specific purpose.

5.1 Payment Service Providers

To process your deposits and withdrawals, okapk shares the minimum necessary transaction data with the relevant payment service provider for each transaction — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. This data sharing is strictly limited to the information required to complete the financial transaction and is governed by the privacy policies of the respective payment providers.

5.2 Game Technology Providers

The casino games and slot titles available on okapk are powered by certified third-party game providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. These providers may receive session identifiers or anonymised player data sufficient to deliver the game session to your browser and to log game outcomes for dispute resolution purposes. They do not receive your full name, contact data, or financial data.

5.3 Legal and Regulatory Disclosure

okapk may disclose your personal data to law enforcement, government authorities, or regulatory bodies where required to do so by applicable law, court order, or lawful request. okapk will endeavour to notify you of any such disclosure where legally permitted to do so, unless the disclosure is itself subject to a legal prohibition on notification.

6. Payment Data and Financial Security

okapk does not store full payment card numbers, bKash PINs, Nagad PINs, or any other sensitive authentication credentials associated with your payment methods. Payment transactions are processed directly through the secure infrastructure of the relevant payment service provider. okapk retains only transaction reference numbers, amounts, timestamps, and payment method type identifiers (e.g., "bKash", "Nagad") in its own systems for the purpose of maintaining accurate account balance records and processing withdrawal requests.

If you contact okapk support with a payment query, you should never share your bKash PIN, Nagad PIN, card CVV, or any password with the support team. okapk support will never ask for these details. If you receive a communication claiming to be from okapk that asks for such details, treat it as fraudulent and report it to okapk support immediately.

7. Cookies and Similar Technologies

okapk uses cookies and similar browser storage mechanisms on its platform to deliver core functionality and improve the player experience. The categories of cookies used by okapk are:

• Essential cookies: cookies required for the platform to function, including session authentication cookies that keep you logged in during your betting session, and security tokens that protect against cross-site request forgery.
• Functional cookies: cookies that remember your preferences (such as language settings) and enable enhanced features like remembering your last-visited game category.
• Analytics cookies: anonymised data about how players interact with the platform, used to identify usability issues and inform platform improvements. This data is aggregated and does not identify individual players.

You can control or disable cookies through your mobile browser settings. Please note that disabling essential cookies will prevent certain core features of okapk from functioning correctly, including the ability to maintain a logged-in session. okapk does not use advertising or targeting cookies, and does not share cookie data with third-party advertising networks.

8. Data Retention

okapk retains your personal data for as long as your account remains active and for a period after account closure as required to meet legal, regulatory, fraud prevention, and dispute resolution obligations. In practice, this means that account data and transaction records are typically retained for a minimum of five years following account closure, in line with standard financial record-keeping practices applicable to online gaming platforms.

Data that is no longer required for any legitimate purpose is securely deleted or anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis purposes, but in anonymised form it cannot be linked back to you as an individual.

9. Your Data Rights

As a user of the okapk platform, you have the following rights in relation to the personal data okapk holds about you. To exercise any of these rights, contact the okapk support team using the contact details published on okapk.bet. okapk will acknowledge your request within 48 hours and aim to fulfil it within 30 days.

• Right of access: you may request a copy of all personal data okapk holds about you, including your account information, transaction history, and any KYC documents on file.
• Right to rectification: you may request correction of any inaccurate or incomplete personal data okapk holds about you.
• Right to erasure: subject to legal retention requirements, you may request that okapk delete your personal data. This right is typically exercisable upon account closure where no outstanding legal obligations prevent deletion.
• Right to restrict processing: you may request that okapk restrict the processing of your personal data in certain circumstances, for example while a rectification request is being investigated.
• Right to withdraw consent: where processing is based on your consent (e.g., receiving promotional communications), you may withdraw that consent at any time by contacting okapk support or adjusting your account notification preferences.

okapk will not discriminate against you for exercising any of your data rights. Exercising a data right will not affect the availability of your account or any services you are otherwise entitled to use, except where the nature of the right itself requires account closure (e.g., a full erasure request).

10. Data Security

okapk implements technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your browser and the okapk platform, encrypted storage for personal data at rest on okapk's servers, access controls that restrict internal access to personal data on a need-to-know basis, and regular security assessments of the platform's infrastructure.

While okapk takes all reasonable steps to secure your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okapk will notify affected players without undue delay and will take all necessary remedial steps to contain and mitigate the breach.

11. Children and Minors

okapk is strictly an adults-only platform. The minimum age to register and use okapk is 21 years. okapk does not knowingly collect personal data from individuals under the age of 21. If okapk becomes aware that personal data has been collected from a person under the age of 21, that data will be immediately deleted and the associated account will be permanently closed. If you believe that a minor has registered on okapk, please report this to the okapk support team immediately.

12. Changes to This Privacy Policy

okapk may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the features and services available on the platform. When we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, provide a notice on the okapk platform. Your continued use of okapk after any such update constitutes your acceptance of the revised Privacy Policy.

13. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the okapk support team using the email address published on okapk.bet. All privacy-related enquiries and data subject requests are handled by the okapk support team and will be acknowledged within 48 hours of receipt. okapk is committed to resolving all privacy enquiries promptly and transparently.