okebet Privacy Policy

This Privacy Policy applies to all personal data processed by okebet in connection with the operation of the okebet online betting and casino platform accessible at okebet.vu, including all associated subdomains, mobile web interfaces, and any future products or services offered under the okebet brand.

This Policy applies to all individuals who interact with okebet in any capacity, including registered players, prospective players who browse the platform without registering, and individuals who contact okebet's support team.

By accessing or using the okebet platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the platform and contact our support team to close your account.

okebet acts as the data controller for personal data collected through the platform. Where okebet engages third-party processors (such as payment providers, identity verification services, or game studios), those parties act as data processors under okebet's instruction and are bound by appropriate data processing agreements.

okebet collects the following categories of personal data from users of the platform. The specific data points collected may vary depending on the nature of your interaction with okebet:

okebet does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by applicable law or with your explicit prior consent.

okebet collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically when you access the okebet platform via cookies, web beacons, server logs, and similar tracking technologies. See Section 8 (Cookies & Tracking) for full details.
• Third-party sources: Identity and fraud-screening data received from our KYC and anti-money laundering (AML) verification partners; transaction confirmation data received from payment processors including bKash, Nagad, Rocket, and Upay; geolocation data derived from your IP address via third-party geolocation services.
• Publicly available sources: In limited circumstances related to fraud prevention or legal compliance, okebet may cross-reference information you provide against publicly available databases or regulatory watchlists.

okebet processes your personal data only where a lawful basis for doing so exists. The following table sets out the primary purposes for which okebet processes personal data and the corresponding legal basis:

Where okebet relies on your consent as the legal basis for processing (for example, sending you promotional emails about BPL betting offers, Eid bonuses, or new slot releases), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

okebet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. okebet may share your data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners receive transactional data necessary to process your deposits and withdrawals. These parties process data under their own privacy policies and are independently regulated.
• KYC and AML providers: Identity verification and document authentication services receive your identity and verification data solely for the purpose of completing required compliance checks.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data (e.g., player session token, stake, and result) necessary to deliver the game and calculate outcomes. These providers do not receive your personal identity data.
• IT infrastructure and hosting providers: Servers, cloud infrastructure, and cybersecurity partners that host and protect the okebet platform infrastructure.
• Legal and regulatory authorities: okebet will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or in response to a verified request relating to suspected fraud, money laundering, or illegal activity.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of okebet's assets, personal data held by okebet may be transferred to the acquiring entity, subject to equivalent privacy protections.

okebet retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and operational requirements. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with standard AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction to satisfy financial reporting and AML compliance obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the final interaction in the relevant support thread.
• Technical and usage logs: Retained for up to twelve (12) months from the date of collection, unless a specific log is required to be preserved in connection with an ongoing investigation or legal proceeding.
• Marketing preferences and consent records: Retained for as long as your account remains active and for two (2) years following account closure or consent withdrawal, to maintain an auditable record of your marketing preferences.

When personal data is no longer required, okebet will securely delete or anonymise it in accordance with industry-standard data disposal procedures. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

okebet employs a multi-layered approach to data security designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the okebet platform, ensuring that account credentials, payment details, and personal data cannot be intercepted during transmission.
• Encrypted data storage for all sensitive fields including passwords (stored as salted hashes), financial account identifiers, and identity document copies.
• Access controls that restrict access to personal data to authorised okebet personnel on a strict need-to-know basis, with role-based permission systems and multi-factor authentication required for administrative access.
• Regular security assessments including penetration testing, vulnerability scanning, and third-party security audits conducted on a scheduled basis and following any material infrastructure change.
• Intrusion detection and monitoring systems that continuously monitor the okebet infrastructure for anomalous access patterns, potential breaches, and suspicious activity.
• Secure data centres with physical access controls, 24/7 monitoring, and redundant power and network infrastructure.

Despite okebet's comprehensive security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials and for ensuring that no unauthorised person can access your account. If you suspect a security incident involving your okebet account, contact [email protected] immediately.

okebet uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and collect usage analytics. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to use the okebet platform. Disabling functional or analytics cookies will not prevent platform access but may reduce personalisation functionality.

Subject to applicable law, you hold the following rights in relation to your personal data held by okebet. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You may request a copy of all personal data okebet holds about you, along with information about how it is being processed. okebet will respond to valid access requests within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your okebet account. Minor corrections (e.g., email address updates) may be made directly within your account settings.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purpose for which it was collected. Note that okebet may be required to retain certain data to comply with legal obligations (e.g., AML record-keeping) even following an erasure request.
• Right to Restrict Processing: You may request that okebet restrict the processing of your data while a dispute about its accuracy or the lawfulness of its processing is being resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that okebet provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of okebet's legitimate interests. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The okebet platform is intended exclusively for adults aged 18 years and above. okebet does not knowingly collect personal data from any individual under the age of 18. Age verification checks are conducted during the registration process and at subsequent points as required by our responsible gaming obligations.

If okebet becomes aware that personal data has been collected from an individual under the age of 18, that data will be deleted immediately, the associated account will be closed without notice, and any balances will be dealt with in accordance with okebet's Terms & Conditions and applicable law.

If you are a parent or guardian and believe that your child may have registered an account or submitted personal data to okebet, please contact us immediately at [email protected]. We will investigate and take prompt remedial action.

okebet operates internationally, and your personal data may be transferred to and processed in countries outside of Bangladesh. Such transfers may occur in connection with our use of cloud hosting infrastructure, KYC verification services, game content delivery networks, or other third-party processors located in various jurisdictions.

Wherever personal data is transferred internationally, okebet ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy. Safeguards may include contractual clauses with data processors, adherence to internationally recognised data protection frameworks, or the application of equivalent technical and organisational security measures.

By using the okebet platform and providing your personal data, you acknowledge and consent to the transfer of your data to jurisdictions outside of Bangladesh as described in this section.

The okebet platform integrates services provided by third parties, including game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and analytics and security tools. These third-party services operate under their own privacy policies and okebet is not responsible for the data practices of these independent providers.

okebet does not embed third-party social media plugins, advertising networks, or external content widgets that would allow those third parties to track your activity on the okebet platform without your knowledge. Any third-party integrations are strictly functional in nature and subject to contractual data processing restrictions.

okebet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, okebet will notify registered players via the email address associated with their account and will update the "Last updated" date at the top of this document.

Your continued use of the okebet platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Policy, you must stop using the platform and contact our support team to close your account.

The current version of this Privacy Policy is always available at okebet.vu/privacy-policy. We encourage you to review this page periodically to stay informed of how okebet protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way okebet handles your personal data, please contact our Privacy team using the details below. We aim to respond to all privacy-related enquiries within 30 days of receipt:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Rights Request" or "Data Enquiry"
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response Time: okebet targets a maximum response time of 30 calendar days for all privacy-related requests