Your Privacy

okbaju Privacy Policy —
Your Data, Our Responsibility

Every piece of information you share with us is a trust. Here you'll find a clear, straightforward explanation of how okbaju collects, protects, and uses your data.

Updated: January 2026 Language: English Read: ~10 Minutes GDPR Compliant
Our Commitments at a Glance
No sale of data to third parties
Your data is never sold or rented
256-Bit SSL Encryption
All data is secured with the highest standard of encryption
Full Control Over Your Data
View, correct, or delete your data at any time
Minimal Data Collection Policy
Only the Necessary Data Is Collected
Data Deletion After Retention Period
Data is securely disposed of once it is no longer needed
You will be promptly notified in the event of a breach
Notified within 72 hours in the event of a data breach
Pillars of Data Protection

How we protect your privacy

Ensuring protection at every level is a core responsibility of okbaju

End-to-End Encryption

Every piece of data transmitted between your browser and our servers is secured with 256-bit SSL/TLS encryption. No one can intercept it in transit — not even okbaju staff can view it directly.

Bank-Grade Security
Data Minimisation Principle

Okbaju collects only the data that is strictly necessary to deliver its services — nothing more, nothing irrelevant. Less data means less risk.

Minimal Collection
Secure Server Infrastructure

Your data is stored in ISO 27001-certified data centers with 24/7 physical and cybersecurity measures in place. Regular backups and a disaster recovery plan are always active.

ISO 27001
Anonymisation Technology

All personally identifiable details are removed before data is used for analysis and research. You cannot be identified from anything used for statistical purposes.

Identity Anonymisation
Your Rights & Control

Under GDPR, you have the right to request access to, correction of, download of, or deletion of your data. okbaju is required to respond within 30 days.

Full Control
Automated Threat Detection

Our AI-powered system instantly detects and blocks suspicious logins, unusual access patterns, and potential data breach attempts — all in real time.

Real-Time Protection
Data Flow

How Your Data Flows

👤
You
Data Provision
🔒
SSL Layer
Encryption
🛡️
Firewall
Filtering
🏦
Secure DB
Collection
🤖
AI Monitor
Monitoring
Service Delivery
Only when necessary

Your data is protected at every step — no third party can intercept it along the way

Your Privacy Is Our Priority

By using any okbaju service, you agree to this Privacy Policy. This policy is updated periodically, and you will be notified of any changes.

1
Introduction & Scope
Scope and Applicability of This Policy

This Privacy Policy okbajuApplies to all personal data collected through -'s website, mobile application, and other digital services. This policy takes effect from the moment you first register and remains in force for a defined period even after your account is closed.

okbaju We comply with international data protection laws, including the EU General Data Protection Regulation (GDPR). We believe data privacy is a fundamental human right, and we treat it as such.

Core Principles
okbaju Your personal information is never sold, rented, or exchanged. Your data is used solely for the purposes described in this policy.

2
What Information We Collect
What data we hold about you

okbaju Three types of data are collected — what you provide directly, what is generated automatically as you use the service, and what is received from verified third parties.

Data Type Detailed Examples Purpose
Identity Information Full name, date of birth, NID number KYC Verification
Contact Information Mobile, Email, Address Service Delivery
Financial Information Mobile banking number, transaction history Payment Processing
Gaming Data Betting history, game preferences Service Improvement
Technical Data IP address, device information, logs Security
Cookie Data Sessions, preferences, browsing Experience Enhancement
About Sensitive Information

Okbaju does not collect religion, political views, health information, or biometric data. For identity verification, only a photo of your NID or passport is collected and stored securely after verification.


3
How We Collect Your Information
When and How We Receive Your Information

okbaju We collect information in three main ways:

Direct Collection

  • When You Fill Out the Registration Form
  • When submitting documents for identity verification
  • When making a deposit or withdrawal
  • During interactions with the support team
  • When participating in promotions or surveys

Automatic Collection

  • IP Address and Browser Information Collected Upon Site Access
  • Device and Operating System Information Collected During App Usage
  • In-game activity logs
  • Through cookies and similar tracking technologies

From Third Parties

  • Transaction confirmations from payment providers (Mobile Pay, Nagad, Rocket)
  • From Identity Verification Service Providers
  • From fraud prevention agencies

4
How Your Data Is Used
What We Do With Your Data

okbaju Your information is used for specific, legitimate purposes only. Each purpose is explained in detail below:

  • Account Management: Registration, login, and profile updates
  • Payment Processing: To process deposits and withdrawals
  • Identity Verification: Meeting legal obligations (KYC/AML)
  • Service Improvement: To Analyse User Behaviour and Improve the Platform
  • Personalized Experience: Bonus and game recommendations tailored to your preferences
  • Security Assurance: Fraud prevention and account security
  • Legal Compliance: Regulatory reporting and audits
  • Contact: Important updates, bonus offers & support
What We Never Do
Selling your information to third-party advertisers, using it for political purposes, sending commercial SMS without your consent, or making automated decisions against you — none of these okbaju Never.

5
Data Sharing Policy
When and With Whom We Share Your Information

okbaju Your data is shared with third parties only in the following legitimate circumstances:

Legally Mandated Situations

  • Upon a valid order from a government or law enforcement authority
  • In anti-money laundering authority investigations
  • For audit requirements by our licensing authority

Authorised Partners for Service Delivery

  • Payment providers (Mobile Pay, Nagad, Rocket, Bank) — to process your transactions
  • Identity verification services — for the KYC process
  • Game software provider — for recording gameplay history
  • Cloud hosting provider — for data storage

All partners are bound by strict Data Processing Agreements (DPAs). They may only use your data for the specific purposes defined and are not permitted to use it for their own needs.

International Data Transfers
When data is transferred to other countries, appropriate safeguards are in place — such as EU Standard Contractual Clauses or equivalent protective measures.

6
Cookies & Tracking Technologies
Types of Cookies We Use

okbaju We use various types of cookies to keep our website and app running smoothly. Each type is described below:

Required Login sessions, security tokens, and language preferences — the platform cannot function without these Required
Functionality Remembers your game preferences, theme settings, and last-visited sections Required
Analytics Page visit counts, session duration, most-played games — helps us improve the platform Optional
Performance Load time monitoring, error logging, and server load balancing Required
Marketing Promotional offer tracking and referral source monitoring Optional

Declining optional cookies will not affect your access to core services. You can manage your cookie preferences at any time through your browser settings.


7
Data Retention Period
How Long We Retain Your Data

okbaju No data is retained longer than necessary. Retention periods vary depending on the type of data:

Data TypeRetention PeriodReason
Account Information5 years after account closureLegal Obligation
Transaction Records7 YearsAML/Tax Laws
Gaming History3 yearsDispute Resolution
Support Chat2 YearsService Improvement
Log Files1 YearSecurity Analytics
Marketing Cookies90 DaysPreference Tracking

Once the specified retention period expires, your data is permanently and securely destroyed — recovery is no longer possible.


8
Your Data Rights
Your Rights Over Your Data

Under GDPR and international data protection laws, you have the following rights:

👁️
Right to Access
You may request a copy of all data we hold about you
✏️
Right to Rectification
Request corrections to any inaccurate or outdated information
🗑️
Right to Erasure
Request Data Deletion Beyond Legal Obligations
⏸️
Right to Restrict Processing
Request that we restrict the use of your data for specific purposes
📦
Right to Data Portability
Download Your Data in a Machine-Readable Format
🚫
Right to Object
Opt out of marketing or profiling

To exercise any of your rights, please contact us via support chat or email. okbaju Required to respond within 30 days.


9
Protection of Minors
Policy on Protecting Users Under 18

okbaju's services are intended for users aged 18 and above only. We do not knowingly collect personal information from minors.

  • An age verification system is active at the point of registration
  • Any account suspected of belonging to a minor is suspended immediately
  • Any data inadvertently collected from a minor is permanently deleted
  • If you believe a minor in your household is using okbaju, please let us know right away
For Parents

If your child attempts to access okbaju, please contact us immediately. We will take prompt action. On family devices, Parental Control Setup is recommended.


10
Security Measures
Technical & Operational Safeguards

okbaju Your data is protected by industry-leading security standards:

  • 256-bit SSL/TLS Encryption — across all communications
  • Two-Factor Authentication (2FA) — to secure your account
  • Real-Time Intrusion Detection System (IDS) — Hacking Attempts Blocked
  • Regular third-party security audits — independent verification
  • Staff data access controls — Accessible only on a need-to-know basis
  • Data Breach Response Plan — Notified within 72 hours in the event of a breach
In the Event of a Data Breach
In the event of a data breach okbaju You will be notified by email and SMS within 72 hours, with a clear explanation of what data was affected and what steps have been taken.

11
Policy Changes & Updates
How You'll Be Notified of Changes

okbaju This Privacy Policy may be revised from time to time due to legal changes, new services, or technical updates.

  • For significant changes, you will be notified via email and in-app notification
  • You will receive at least 7 days' notice before any changes take effect
  • The date of the latest update will always be displayed at the top of this page
  • Re-consent May Be Required for Significant Changes

We recommend reviewing this page periodically. Feel free to contact us if you have any questions.


12
Contact Us
For privacy complaints and inquiries

For any privacy-related questions, concerns, or to exercise your rights, please contact our Data Protection Officer:

Email: privacy@okbaju.ws
Live Chat: Type "Privacy" in the 24/7 Support Chat
Response Time: Within 30 days (typically 48 hours)

If you are not satisfied with our response, you may lodge a complaint with the relevant data protection authority.

Frequently Asked Questions

Frequently Asked Privacy Questions

Never. okbaju does not view or collect your Mobile Pay, Nagad, or Rocket PIN. All transactions are processed exclusively through each payment provider's own secure gateway. Likewise, your okbaju password is stored in an encrypted hash format — the actual password is never visible to anyone.

Yes. Under GDPR's "data portability" right, you can request a copy of all your data. Simply contact our support team and we will deliver your data in JSON or CSV format within 30 days.

No. The mobile app only uses permissions you have explicitly granted — such as camera access (for KYC photo capture) or notifications. No background access occurs without your knowledge. You can revoke any permission at any time through your phone settings.

Most data will be deleted; however, transaction records are retained for 7 years and account information for 5 years due to legal obligations under anti-money laundering laws. Once the applicable retention period expires, data is deleted automatically.

Your approximate country or city is determined from your IP address for security purposes — for example, to detect logins from unusual locations. okbaju does not track GPS or precise location data, and does not request location permissions from users.
🔒

Protects Your Privacy
Play Safe on okbaju

Join Bangladesh's most trusted platform — world-class data protection and instant payouts, all in one place.

Your data is never sold SSL Encryption GDPR Compliant 24/7 Support
বাংলা