okpk Privacy Policy

1 Who We Are

1.1 Controller Identity. The okpk platform, accessible at okpk.vu, is operated by okpk ("we", "us", "our"). okpk is the data controller responsible for the personal data of all registered players and site visitors. For all privacy-related enquiries, the designated contact is the okpk Data Support Team, reachable at [email protected] (plain text — not a clickable link).

1.2 Platform Scope. This Privacy Policy covers all personal data collected and processed through the okpk.vu website, any associated mobile-optimised interfaces, and all services offered within the platform, including sports betting, live casino games, slot games, promotional programmes, and customer support interactions.

1.3 Target Market. okpk operates as a platform directed at adult players residing in Bangladesh. All personal data processing described in this policy is conducted with Bangladesh-based players in mind. okpk processes all transaction data exclusively in Bangladeshi Taka (৳) and integrates with Bangladesh-based payment services including bKash, Nagad, Rocket, and Upay.

2 Data We Collect

2.1 Identity and Registration Data. When you create an okpk account, we collect your full legal name, date of birth, gender, nationality, and the details of the identity document you provide for KYC verification (National Identity Card number, passport number, or driving licence number).

2.2 Contact Data. We collect your email address, mobile phone number, and residential address (including district, division, and postal code). This information is used to administer your account, process transactions, and communicate service-critical notifications.

2.3 Financial and Transaction Data. We collect data relating to all deposits and withdrawals made through your account, including the payment method used (e.g., bKash mobile number, Nagad account reference, bank account details), transaction amounts in BDT, transaction timestamps, and references assigned by the payment provider.

2.4 Gameplay and Betting Data. We collect records of all bets placed, games played, stakes wagered, outcomes received, and bonus credits applied within your okpk account. This data is used for account administration, dispute resolution, responsible gaming monitoring, and fraud detection.

2.5 Technical and Device Data. We automatically collect technical information when you access the platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data helps us maintain platform security and improve the user experience.

2.6 Communications Data. We retain records of communications between you and the okpk support team, including emails, live chat transcripts, and support ticket histories. These records are kept for quality assurance, dispute resolution, and compliance purposes.

2.7 Summary of Data Categories:

3 How We Collect Data

3.1 Directly From You. The majority of personal data okpk holds about you is provided directly by you during the account registration process, during KYC document submission, when making deposits or withdrawals, when contacting customer support, and when participating in promotional programmes or surveys.

3.2 Automatically. Certain technical and device data is collected automatically as a result of your interaction with the okpk platform, through server logs, session tracking systems, and first-party cookies. This collection occurs in the background and does not require any active input from you.

3.3 From Third Parties. okpk may receive supplementary data about you from third-party service providers in limited circumstances. KYC and identity verification partners may provide the results of document authentication checks. Payment processors may provide transaction status updates and fraud risk scores. These third-party data sources are used solely to support the services outlined in this policy and are not used for unsolicited marketing.

4 How We Use Your Data

okpk uses the personal data it collects for the following purposes:

• Account creation and administration: Setting up your okpk account, maintaining accurate account records, and enabling you to log in securely.
• Identity verification: Conducting KYC checks to confirm your identity, verify your age (21+ requirement), and validate your residential address in Bangladesh.
• Payment processing: Executing deposit and withdrawal transactions via your chosen payment method, including bKash, Nagad, Rocket, Upay, and partner banks. All amounts are denominated in BDT.
• Fraud and security: Detecting and investigating suspicious account activity, preventing unauthorised access, identifying duplicate accounts, and protecting the integrity of the platform.
• Anti-money-laundering (AML) compliance: Monitoring transaction patterns for indicators of financial crime and reporting suspicious activity to competent authorities as required by applicable law.
• Responsible gaming: Monitoring gameplay data to identify indicators of problem gambling behaviour and facilitating the operation of deposit limits, cooling-off periods, and self-exclusion tools where requested by the player.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised gameplay and navigation data to improve the design, functionality, and content of the okpk platform.
• Marketing communications (opt-in only): Sending you promotional offers, bonus notifications, and event updates relevant to your interests, where you have given explicit consent to receive such communications. You may withdraw consent at any time by contacting support at [email protected].

5 Legal Bases for Processing

okpk relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and okpk — for example, creating your account, processing payments, and settling bets.
• Legal obligation: Processing required to comply with applicable laws — for example, KYC verification, AML monitoring, and transaction record-keeping obligations.
• Legitimate interests: Processing that serves the legitimate business interests of okpk, such as fraud detection, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing that is based on your explicit and freely given consent — for example, the sending of promotional and marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

6 Sharing Your Data

6.1 Service Providers. okpk shares personal data with third-party service providers who assist in delivering the platform's services. These providers act as data processors under contractual obligations that require them to process data only on okpk's instructions and to maintain appropriate security measures. Categories of service provider include: payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), KYC and identity verification providers, game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and IT infrastructure and hosting providers.

6.2 Legal and Regulatory Authorities. okpk may be required to disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts of competent jurisdiction in response to a lawful request, court order, or statutory obligation. Such disclosures will be limited to the data strictly necessary to satisfy the legal requirement.

6.3 No Sale of Personal Data. okpk does not sell, rent, lease, or trade your personal data to any third party for their own marketing or commercial purposes. Data sharing is limited to the operational purposes described in this policy.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of okpk's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to the privacy practices applicable to your data in advance of the transfer taking effect.

7 Cookies and Tracking

7.1 What Are Cookies. Cookies are small text files placed on your device by the okpk platform when you visit. They allow the platform to recognise your device across sessions, maintain your login state, remember your preferences, and collect anonymised analytics data about how the platform is used.

7.2 Types of Cookies Used. okpk uses the following categories of cookies:

• Strictly necessary cookies: Essential to the operation of the platform. These enable functions such as maintaining your logged-in session, remembering items in your bet slip, and securing your account. These cookies cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Collect anonymised data about how visitors navigate the platform, which pages are most visited, and where errors occur. This data is used to improve platform performance and content.
• Functional cookies: Remember your preferences such as display settings and language selection to improve your experience across sessions.

7.3 Managing Cookies. You may manage or disable cookies through your browser settings. Disabling strictly necessary cookies will affect your ability to use core platform features including logging in and maintaining a session. Disabling performance or functional cookies will not prevent you from using the platform but may reduce the quality of your experience.

7.4 No Third-Party Advertising Cookies. okpk does not use third-party advertising networks or retargeting cookies. No behavioural profiling data from your okpk activity is shared with external advertising platforms.

8 Data Retention

8.1 Active Accounts. Personal data associated with an active okpk account is retained for as long as the account remains open and in use. During this period, all account, transaction, gameplay, and communication data is maintained to support account administration, dispute resolution, and legal compliance.

8.2 Closed Accounts. Following the closure of an account — whether initiated by you or by okpk — personal data is retained for the minimum period required by applicable financial record-keeping and anti-money-laundering regulations. Transaction records are retained for a minimum period of five years from the date of the transaction. Identity documents provided for KYC purposes are retained for a minimum period of five years from the date of account closure.

8.3 Dormant Accounts. Accounts with no login activity for 12 consecutive months are classified as dormant. The personal data associated with dormant accounts is subject to the same retention schedule as active accounts during the dormancy period and is transitioned to the closed account retention schedule if the account is subsequently closed.

8.4 Data Deletion Requests. You may submit a request for the deletion of personal data that is not subject to a mandatory retention obligation by contacting the okpk support team at [email protected]. Deletion requests will be assessed within 30 days of receipt. Where data cannot be deleted due to a legal retention obligation, okpk will inform you of the specific obligation that prevents deletion and the earliest date on which deletion can be completed.

9 Security Measures

9.1 Encryption in Transit. All data transmitted between your device and the okpk platform is encrypted using 256-bit SSL/TLS protocols. This ensures that your personal data, login credentials, and payment information cannot be intercepted by unauthorised parties during transmission.

9.2 Encryption at Rest. Sensitive personal data stored within okpk's systems — including identity document references and payment credentials — is encrypted at rest using industry-standard cryptographic methods. Account passwords are processed using one-way hashing algorithms, ensuring that plain-text passwords are never stored anywhere in okpk's systems.

9.3 Access Controls. Access to player personal data within okpk's internal systems is restricted on a strict need-to-know basis. Only personnel with a specific operational requirement are granted access to any given category of personal data. All internal access to player data is logged and subject to periodic audit.

9.4 Incident Response. In the event of a data security incident that poses a risk to your personal data, okpk will take immediate steps to contain the incident, assess its scope, and notify affected players at the registered email address without undue delay. okpk maintains an incident response plan that is reviewed and updated on a regular basis.

9.5 Player Responsibilities. While okpk implements robust technical and organisational security measures, you also have a role to play in protecting your account. You are responsible for keeping your okpk login credentials confidential, for using a strong and unique password, and for logging out of your account when using shared or public devices. Any suspected unauthorised access to your account should be reported to [email protected] immediately.

10 Your Rights

As a player whose personal data is processed by okpk, you hold the following rights with respect to your personal information:

• Right of access: You may request a copy of the personal data okpk holds about you at any time. okpk will provide this data in a structured, readable format within 30 days of receiving a verified request.
• Right to rectification: If any personal data okpk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number or email address) can be made directly through your account settings.
• Right to erasure: You may request the deletion of personal data that is no longer necessary for the purposes for which it was collected, provided that no mandatory retention obligation applies. Where a legal obligation prevents full erasure, okpk will explain this clearly.
• Right to restriction: In certain circumstances — for example, where you contest the accuracy of data or have objected to its processing — you may request that okpk restrict the processing of your data while the matter is under review.
• Right to withdraw consent: Where okpk processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.
• Right to object to marketing: You may opt out of receiving promotional communications from okpk at any time, either by using the unsubscribe option in any marketing email you receive or by contacting our support team directly.

To exercise any of the above rights, contact the okpk support team at [email protected] (plain text — not a clickable link). Please include your registered username and a description of the right you wish to exercise. okpk will respond to all verified rights requests within 30 calendar days.

11 Children and Minors

11.1 Strict Age Restriction. The okpk platform is intended exclusively for adults aged 21 years and above. okpk does not knowingly collect personal data from individuals under the age of 21. If okpk becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed without delay.

11.2 Reporting Underage Access. If you have reason to believe that a person under the age of 21 has accessed the okpk platform or provided personal data through it, please notify the support team at [email protected] immediately. okpk takes underage access seriously and will investigate all reports promptly.

11.3 Parental Controls. Parents and guardians are encouraged to make use of internet filtering and parental control tools to prevent minors from accessing online gambling platforms. okpk supports responsible use of such tools and recommends that households with children under 21 implement appropriate access restrictions on internet-connected devices.

12 Changes to This Policy

12.1 Right to Amend. okpk reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in data processing practices, applicable laws, or platform services. The effective date at the top of this document will be updated to reflect the date on which any revised version takes effect.

12.2 Notification of Material Changes. Where changes to this Privacy Policy are material — meaning they significantly affect how your personal data is collected, used, or shared — okpk will notify registered players via the email address associated with their account prior to the changes taking effect. For non-material changes (such as typographical corrections or clarifications that do not alter the substance of the policy), notice will be provided by updating the effective date only.

12.3 Continued Use as Acceptance. Your continued use of the okpk platform following notification of changes to this Privacy Policy constitutes your acceptance of the revised version. If you do not agree to the revised terms, you should cease using the platform and contact support at [email protected] to request account closure.

12.4 Governing Language. This Privacy Policy is written in English. In the event of any inconsistency between this English-language version and any translated version, the English version shall prevail.