okapk Privacy
Policy
Your privacy matters to okapk. This Privacy Policy explains in plain, formal English exactly what personal data we collect from Bangladeshi players, how we use it, who we share it with, how long we keep it, and what rights you have over it. We encourage you to read this document in full before creating your account.
Six Ways okapk Protects Your Data
Before diving into the full legal text, here is a plain-English summary of the most important data protection commitments okapk makes to every Bangladeshi player on the platform.
SSL Encryption by Default
Every page on okapk is served over HTTPS with SSL encryption. All data transmitted between your device and our servers — including login credentials, payment details, and personal information — is encrypted in transit at all times.
No Data Sold to Third Parties
okapk does not sell, rent, or trade your personal data to any external marketing company, data broker, or unaffiliated third party. Your information is used exclusively to operate the platform and deliver the services you have requested.
BDT Payment Data Protected
Transaction records for bKash, Nagad, Rocket, and Upay are processed using encrypted channels. okapk does not store your full mobile banking PIN or password. Payment method details are stored in tokenised form only.
Minimal Data Collection
okapk collects only the personal data that is strictly necessary to operate a safe, compliant gambling platform for Bangladeshi players. We do not collect data that serves no operational, legal, or security purpose.
Clear Retention Limits
Personal data is not kept indefinitely. okapk applies defined retention periods to every category of data we hold. When the retention period expires and no legal obligation requires continued storage, data is securely deleted or anonymised.
Player Rights Respected
You have the right to access, correct, restrict, or request deletion of your personal data held by okapk. Requests are handled within a clearly defined response window, with no administrative fees charged for standard requests.
Data Controller Information
For the purposes of this Privacy Policy, the data controller is okapk, the operator of the online casino and sports betting platform accessible at https://okapk.app (the "Platform"). As data controller, okapk determines the purposes for which and the manner in which personal data relating to players and platform visitors is processed.
This Privacy Policy applies to all personal data collected by okapk through:
- The okapk website at https://okapk.app and all sub-pages thereof.
- The okapk account registration, login, and dashboard systems.
- Customer support communications via email and live chat.
- Payment processing interactions, including deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
- Promotional communications sent to players who have opted in to receive them.
- Any dedicated okapk application made available to Bangladeshi players.
This Policy does not apply to third-party websites, game studio platforms, or payment provider environments that may be accessible through or linked from the okapk platform. Each of those third parties operates under its own privacy policy, for which okapk accepts no responsibility. Players are encouraged to review the privacy documentation of any third-party service they interact with.
Questions or requests relating to this Privacy Policy or to okapk's processing of your personal data should be directed to our support team. Contact details are provided in Section 9 of this document. okapk aims to respond to all privacy-related enquiries within four (4) hours during Bangladesh Standard Time (BST, UTC+6) working hours.
Data We Collect
okapk collects personal data from players through three principal channels: information you provide directly during registration and account operation; information generated automatically by your use of the platform; and information received from third parties such as payment processors in the course of transaction verification. The specific categories of data collected are set out below.
Data You Provide Directly
- Registration data: Full legal name, date of birth, email address, Bangladeshi mobile phone number, and a password of your own creation. This information is required to create and identify your account.
- KYC verification documents: Copies of your National Identity Card (NID), passport, or driving licence; proof of address documents (utility bill, bank statement); and proof of payment method as described in the okapk Terms and Conditions.
- Financial information: Details of the payment method used to deposit and withdraw, including the mobile banking number associated with your bKash, Nagad, Rocket, or Upay account. okapk does not store full card numbers. Card transactions processed via Visa or Mastercard are handled by a PCI-DSS compliant payment gateway; okapk retains only a tokenised reference.
- Support communications: The content of any message you send to okapk via email or live chat, together with the date, time, and account identifier associated with the communication.
- Responsible gaming preferences: Deposit limits, session time controls, self-exclusion requests, and reality check settings configured through the account dashboard.
Data Collected Automatically
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
- Usage data: Pages visited, games launched, bet amounts placed, session start and end times, navigation paths, and feature interactions within the account dashboard.
- Transaction logs: A complete record of all deposit and withdrawal transactions associated with your account, including timestamps, amounts in BDT, payment method references, and transaction status.
- Game history: A record of all wagers placed across casino games (slots, live dealer tables, crash games, fishing games) and sports betting markets, including stake, outcome, and resulting account balance movement.
- Cookies and similar tracking technologies: As detailed in Section 5 of this Policy.
Data Received from Third Parties
- Payment provider confirmations: Transaction status updates from bKash, Nagad, Rocket, Upay, and card network processors, confirming whether a deposit or withdrawal has been completed, pending, or declined.
- Fraud and risk screening data: Risk signals provided by fraud detection partners, including device fingerprint scores and IP reputation data, used to protect the integrity of the platform and the security of player accounts.
- Identity verification data: Where okapk uses a third-party KYC verification service, that service may return a verification result (pass, fail, or refer) and a confidence score associated with the documents submitted. okapk does not receive the raw biometric data processed by the KYC provider.
| Data Category | Examples | Legal Basis |
|---|---|---|
| Identity Data | Full name, date of birth, NID number | Contract performance; legal obligation (KYC/AML) |
| Contact Data | Email address, mobile number | Contract performance; legitimate interests |
| Financial Data | bKash/Nagad number, transaction records | Contract performance; legal obligation (AML) |
| Technical Data | IP address, device type, browser | Legitimate interests (security, fraud prevention) |
| Usage Data | Games played, bet history, session duration | Contract performance; legitimate interests |
| Marketing Data | Promotional preferences, opt-in status | Consent |
| Responsible Gaming Data | Deposit limits, self-exclusion status | Legal obligation; player welfare |
How We Use Your Data
okapk processes your personal data only for the specific, lawful purposes described in this section. We do not use your data in any manner inconsistent with the purpose for which it was collected without first notifying you and, where required, obtaining your consent.
Account Creation and Management
Your registration data is used to create and maintain your okapk account, verify your identity, enforce the one-account-per-player rule, and associate your gameplay and transaction history with your unique account record. This processing is necessary for the performance of the contract between you and okapk.
Payment Processing
Financial data and payment method details are used exclusively to process deposit and withdrawal transactions in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. okapk does not use payment data for any purpose other than completing the specific transaction requested by the player and maintaining the associated transaction log for audit purposes.
Identity Verification and Compliance
KYC documents and identity data are processed to verify that account holders meet the age requirement (18+), to confirm the accuracy of registration information, and to fulfil okapk's obligations under applicable anti-money laundering (AML) principles. This processing is required by legal obligation and cannot be opted out of.
Platform Security and Fraud Prevention
Technical data, device information, and usage patterns are analysed to detect and prevent fraudulent activity, unauthorised account access, bonus abuse, collusion, and the use of automated tools. This processing is carried out under okapk's legitimate interest in maintaining a fair and secure platform for all registered players.
Responsible Gaming Monitoring
Gameplay and transaction data — including session frequency, deposit escalation patterns, and reversal behaviour — is monitored by okapk's responsible gaming team to identify players who may be showing signs of problem gambling. Where such indicators are detected, okapk may proactively apply precautionary measures as described in the Responsible Gaming Policy. This processing is carried out in the player's vital interests and in fulfilment of okapk's duty of care obligations.
Customer Support
Support communications, together with the relevant account and transaction data, are used to investigate and resolve player queries, complaints, and disputes. Communication records are retained for quality assurance and dispute resolution purposes.
Marketing Communications
Where you have provided explicit consent to receive promotional communications from okapk, your contact data and gameplay preferences may be used to send targeted offers, seasonal promotions (including BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh campaigns), and loyalty programme updates. You may withdraw consent to marketing communications at any time via the account dashboard or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Platform Improvement and Analytics
Aggregated and anonymised usage data may be used by okapk to analyse platform performance, improve the user experience, and inform product development decisions. This data is processed in anonymised form; individual player records are not used for analytics purposes without a separate lawful basis.
Data Sharing and Third Parties
okapk shares personal data with third parties only in the circumstances described below. Each third-party processor or controller with whom data is shared is subject to appropriate contractual safeguards requiring them to process the shared data securely and only for the purposes authorised by okapk.
Payment Processors
Financial data necessary to complete deposit and withdrawal transactions is shared with the relevant payment service provider — bKash, Nagad, Rocket, Upay, or the applicable card network processor for Visa and Mastercard transactions. These providers process data solely to execute the transaction and maintain records required by their own regulatory obligations. okapk does not transmit more data than is necessary for the transaction to be completed.
Game Studio Providers
To deliver casino game content from studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi, okapk transmits a session token and a player identifier (not your full name or contact details) to the relevant game server. This minimal data transfer is required to launch the game session and record the outcome. Game studios are not permitted to use this data for their own marketing purposes.
KYC and Identity Verification Partners
Where okapk uses a third-party service to assist with document verification during the KYC process, identity documents submitted by the player are shared with that partner for verification purposes only. The partner returns a verification result to okapk; documents are not retained by the partner beyond their own stated processing window.
Fraud Prevention and Risk Services
Technical data including IP addresses, device fingerprints, and behavioural signals may be shared with fraud detection partners to screen for known fraud patterns, compromised devices, and high-risk IP addresses. This sharing is carried out under okapk's legitimate interest in protecting the platform and its player base.
Legal and Regulatory Disclosure
okapk will disclose personal data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, valid legal process, or a binding order issued by a competent authority. In such cases, okapk will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected player of the disclosure.
Business Transfers
In the event of a merger, acquisition, or transfer of all or a material part of okapk's business to a successor entity, player data may be transferred to the acquiring party as part of that transaction. Players will be notified of any such transfer and of any material change to the data controller's identity via the email address on their account, in advance of the transfer taking effect where practicable.
Cookies and Tracking Technologies
okapk uses cookies and similar tracking technologies to operate the platform, maintain session security, and — where you have provided consent — to understand how players navigate the site so that we can improve the experience. This section explains the types of cookies used, their purpose, and how you can manage your preferences.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain your logged-in session, and remember certain preferences. Cookies cannot execute code or deliver viruses; they are data files only.
Categories of Cookies Used by okapk
| Cookie Type | Purpose | Consent Required? | Retention |
|---|---|---|---|
| Strictly Necessary | Session management, login state, security tokens, load balancing | No — essential to platform operation | Session / up to 24 hours |
| Functional | Remembering language preference, dashboard layout, responsible gaming settings | No — supports core functionality | Up to 12 months |
| Analytics | Aggregated page-view and navigation data to improve platform UX | Yes — opt-in consent required | Up to 13 months |
| Marketing / Targeting | Recording whether a player arrived via a specific promotional campaign | Yes — opt-in consent required | Up to 30 days |
Managing Cookie Preferences
You may review and adjust your cookie preferences at any time via the cookie settings panel accessible from the account dashboard. You may also configure your browser to block or delete cookies; however, please note that disabling strictly necessary cookies will prevent the okapk platform from functioning correctly — in particular, it will not be possible to maintain a logged-in session without session cookies.
Most modern browsers provide cookie management controls in their settings menus. Specific instructions vary by browser. Please refer to your browser's official documentation for guidance on managing cookies on your device.
Similar Technologies
In addition to cookies, okapk may use web beacons (small image pixels embedded in emails) to confirm whether a promotional email has been opened by the recipient. This is used solely to measure the effectiveness of marketing campaigns sent to consenting players and does not involve any additional collection of personal data beyond what is already held on your account.
Data Retention Periods
okapk retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The table below summarises the primary retention periods applied to each category of data.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | AML compliance; dispute resolution |
| KYC Documents | 5 years from date of verification | Legal obligation — identity verification record |
| Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Game History | 3 years from account closure | Dispute resolution; responsible gaming monitoring |
| Support Communications | 3 years from last interaction | Quality assurance; dispute resolution |
| Marketing Preferences | Until consent withdrawn + 1 year | Evidence of consent basis |
| Technical / Log Data | 13 months from collection | Security monitoring; fraud investigation |
Upon expiry of the applicable retention period, okapk will securely delete or irreversibly anonymise the relevant data. Where anonymisation is applied, the resulting anonymised dataset is no longer personal data and may be retained indefinitely for statistical and analytical purposes without further notice to the player.
In certain circumstances — for example, where data forms part of an ongoing legal dispute, regulatory investigation, or fraud review — okapk may extend the applicable retention period beyond the standard window stated above. Players will be notified of any such extension where legally permissible.
Your Privacy Rights
As an okapk player, you have a defined set of rights over your personal data. These rights may be exercised at any time by contacting okapk at [email protected]. okapk will respond to all valid rights requests within a reasonable period and at no charge for standard requests.
Right of Access
You have the right to request a copy of all personal data okapk holds about you, together with information about how it is used, where it is stored, and with whom it is shared. okapk will provide this information in a structured, readable format.
Right to Rectification
If any personal data okapk holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that changes to KYC-verified identity data may require resubmission of supporting documents.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations.
Right to Restrict Processing
In certain circumstances, you may request that okapk limits how your personal data is used — for example, while a dispute over its accuracy is being resolved — without requiring its deletion.
Right to Data Portability
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
Right to Object
You may object at any time to processing carried out on the basis of okapk's legitimate interests, including profiling for responsible gaming monitoring and direct marketing. okapk will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
How to Exercise Your Rights
To exercise any of the rights described above, contact okapk's support team by email at [email protected] (plain text — not a link). Please include your full name, the email address registered to your okapk account, and a clear description of the right you wish to exercise. okapk may request additional information to verify your identity before processing the request, in order to protect against unauthorised access to another player's data.
okapk will acknowledge all valid rights requests and provide a substantive response within a reasonable timeframe. Where a request is particularly complex or where multiple requests have been received simultaneously, the response window may be extended, and okapk will inform you of the expected timeline. No fee is charged for standard requests; where a request is manifestly unfounded or excessive, okapk reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision.
Data Security Measures
okapk takes the security of player data seriously and has implemented a layered set of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure.
Technical Safeguards
- HTTPS / SSL encryption: All data transmitted between the player's device and okapk's servers is protected by Transport Layer Security (TLS). Players can verify the presence of a valid SSL certificate in their browser's address bar.
- Data encryption at rest: Sensitive personal data stored in okapk's databases — including identity records and KYC document references — is encrypted at rest using industry-standard encryption algorithms.
- Access controls: Internal access to personal data is restricted to okapk staff members who require it to perform their specific job functions. Role-based access control ensures that no staff member has broader access to player data than their role requires.
- Password hashing: Player passwords are never stored in plain text. They are hashed using a strong, salted cryptographic hashing algorithm. okapk staff cannot retrieve your password — only reset it.
- Fraud and intrusion monitoring: okapk's infrastructure is monitored continuously for signs of unauthorised access, unusual data access patterns, and potential security incidents.
Organisational Safeguards
- Staff with access to personal data are trained in data protection best practices and are bound by contractual confidentiality obligations.
- Third-party processors are subject to data processing agreements that require them to implement equivalent security standards and to notify okapk promptly in the event of a data security incident.
- okapk condu cts periodic internal reviews of its data handling practices to identify and address potential vulnerabilities.
- In the event of a data security incident that affects player personal data, okapk will take immediate steps to contain the incident, assess the scope of impact, and notify affected players without undue delay where the incident is likely to result in a high risk to their rights and interests.
Player Responsibilities
While okapk implements robust technical and organisational security measures, the security of your account also depends on the steps you take to protect your own access credentials. okapk strongly recommends that players:
- Choose a strong, unique password for their okapk account that is not used on any other platform.
- Never share their account password or one-time verification codes with any third party, including individuals claiming to represent okapk. okapk staff will never ask for your password.
- Log out of their okapk account when using a shared or public device.
- Contact okapk support immediately at [email protected] if they suspect their account credentials have been compromised or if they notice any unauthorised activity on their account.
- Keep the email address and mobile number associated with their account up to date, as these are used for account recovery and security verification.
okapk cannot be held responsible for unauthorised access to a player's account that results from the player's failure to keep their access credentials secure, unless that failure is attributable to a security deficiency on okapk's part.
Policy Updates and Contact
Updates to This Privacy Policy
okapk reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, changes in the way the platform operates, or changes in the data processing activities described herein. Where a material change is made to this Policy — for example, a change to the purposes for which personal data is used or a change to the categories of third parties with whom data is shared — okapk will notify registered players by email to the address on their account at least fourteen (14) days before the change takes effect.
Non-material changes — such as clarifications of existing language, corrections of typographical errors, or updates to contact information — may be made without advance notice. The "Effective Year" stated at the top of this document reflects the year in which the current version of the Policy came into force.
Continued use of the okapk platform following the effective date of any update to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any updated terms, you should cease using the platform and contact okapk support to discuss the closure of your account.
Contact okapk on Privacy Matters
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way okapk processes your personal data, please contact our support team using the details below. All privacy enquiries are handled by okapk's support team, which is available 24 hours a day, seven days a week via the account dashboard live chat function, and via email during Bangladesh Standard Time (BST, UTC+6) business hours.
- Email (plain text — not a link): [email protected]
- Live Chat: Available 24/7 via the account dashboard after login.
- Response time: okapk aims to respond to all privacy-related enquiries within four (4) hours during BST business hours.
- Postal / physical address: okapk does not publish a postal address for privacy requests; all such requests must be submitted via the email address or live chat channel listed above to ensure secure handling.
Governing Language
This Privacy Policy is written in the English language. In the event of any conflict between an English version of this Policy and a translation or summary in any other language or format, the English text shall prevail.
Age Restriction
okapk's platform is strictly for adults aged 18 years and above. okapk does not knowingly collect personal data from individuals under the age of 18. If okapk becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. If you believe a minor has registered an account on okapk, please contact [email protected] immediately.
Ready to Play Responsibly?
Now that you understand how okapk handles your data, explore our full game library, read our FAQ for quick answers, or log in to your account and start playing. All players must be 18 years or older.