Privacy Policy for the okgg Platform

This Privacy Policy ("Policy") describes how okgg ("okgg", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "Player", "User") who access or use the okgg website and associated services available at okgg.io, including all game, betting, account management, and payment features.

By registering an account on okgg or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register an account or use the okgg platform.

This Policy should be read in conjunction with the okgg Terms & Conditions, which are incorporated by reference. Defined terms used in this Policy have the same meaning as in the Terms & Conditions unless otherwise stated.

okgg collects the following categories of personal data from players. The specific data points collected at any given time depend on which features of the platform you use and what stage of account verification you have reached.

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used for age verification — players must be aged 21 or above);
• Residential address, including district, division, and postal code;
• Mobile phone number registered in Bangladesh;
• Valid email address used for account communications.

2.2 Identity Verification (KYC) Documents

• Scanned or photographed copy of your National Identity Card (NID), passport, or driving licence;
• Proof of address document (utility bill, bank statement, or mobile wallet statement dated within three months);
• Selfie photograph holding your identity document, where requested for enhanced verification.

2.3 Financial and Transaction Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, and Upay accounts used for deposits or withdrawals;
• Visa or Mastercard partial card details (last four digits, card type, and expiry month/year — full card numbers are never stored on okgg servers);
• Deposit amounts, withdrawal amounts, transaction dates, and transaction reference numbers;
• Account balance history and wagering activity records.

2.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system version, and browser type and version;
• Session start and end times, pages visited, features accessed, and game rounds played;
• Error logs and crash reports generated during use of the platform;
• Referral source (how you arrived at the okgg platform).

2.5 Communications Data

• Content of messages you send to the okgg support team via email;
• Records of support tickets, complaint submissions, and their resolutions;
• Responses to surveys or feedback forms you choose to complete.

okgg collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or respond to a promotion;
• Automatically — through cookies, server logs, and similar tracking technologies when you browse or use the okgg platform (see Section 9 on Cookies);
• From payment processors — transaction confirmation data returned by bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment networks when you initiate a financial transaction;
• From identity verification services — where okgg uses a third-party KYC provider to assist with document verification, that provider may return a verification outcome and associated data points to okgg;
• From fraud prevention and AML services — screening data returned by anti-money-laundering and sanctions list checking services used in the normal course of compliance operations.

okgg uses your personal data for the following purposes:

okgg processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity — processing required to create and maintain your account, process transactions, and deliver the services described in the Terms & Conditions;
• Legal obligation — processing required to comply with anti-money-laundering regulations, age verification requirements, sanctions screening obligations, and other applicable legal duties;
• Legitimate interests — processing carried out to prevent fraud, ensure platform security, conduct internal analytics, and improve the quality of our services, where these interests are not overridden by your fundamental rights and freedoms;
• Consent — where you have given explicit consent to a specific processing activity, such as receiving promotional communications. You may withdraw consent at any time by contacting [email protected], though withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

okgg does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

6.1 Payment Processors

Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks to the extent required to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and data protection obligations.

6.2 Identity Verification and KYC Providers

Where okgg uses a third-party KYC verification service, your identity documents and personal details may be shared with that service solely for the purpose of verifying your identity and age. Such providers are contractually bound to process your data only for the specified purpose and to apply appropriate security measures.

6.3 Anti-Money-Laundering and Compliance Services

okgg may share identity and transaction data with accredited sanctions screening and AML compliance services as part of its legal obligations. Any data shared for this purpose is handled under strict confidentiality obligations.

6.4 Game Providers

When you play games hosted by third-party providers such as Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, or Ezugi, a session token and anonymised player identifier are passed to the relevant game server. Full personal identity data is not shared with game studios.

6.5 Law Enforcement and Regulatory Authorities

okgg will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required to do so by applicable law, court order, or regulatory directive. Where legally permissible, okgg will attempt to notify the affected player prior to disclosure.

okgg retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and regulatory obligations:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

okgg employs a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to, the following measures:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okgg platform;
• Encryption of sensitive data fields (including identity document data and payment identifiers) at rest in our database systems;
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data;
• Multi-factor authentication enforced for all internal staff accessing production systems;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists;
• Automated monitoring systems that detect and alert on anomalous access patterns in real time;
• Secure, access-controlled data centres with physical security measures including CCTV and biometric access controls.

okgg uses cookies and similar tracking technologies to operate the platform, remember your session, and gather analytics data that helps us improve the user experience for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other regions of Bangladesh.

9.1 Types of Cookies Used

Strictly necessary cookies cannot be disabled as they are required for the platform to function. You may manage functional and analytics cookies through your browser settings. Disabling functional cookies may affect your experience on the platform.

As a player on the okgg platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving your request.

• Right of Access — you may request a copy of all personal data we hold about you, together with information about how it is being processed;
• Right to Rectification — you may request that we correct any inaccurate or incomplete personal data we hold about you. Some corrections (such as name changes) require supporting documentation;
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 7;
• Right to Restriction of Processing — you may request that we restrict the processing of your data in certain circumstances, for example while the accuracy of data you have contested is being verified;
• Right to Data Portability — you may request a structured, machine-readable copy of the personal data you have provided to okgg for transfer to another service provider;
• Right to Object — you may object to processing carried out on the basis of legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights;
• Right to Withdraw Consent — where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

okgg enforces age verification at two points: during initial registration (self-declared date of birth) and during KYC document verification (government-issued ID confirming date of birth). If you are a parent or guardian and believe that a person under 21 in your care has registered an account on okgg, please contact [email protected] immediately so that the account can be closed and the data deleted without delay.

okgg operates internationally and may store or process your personal data on servers located outside Bangladesh. Where personal data is transferred to countries that do not have data protection laws equivalent to those of the player's home jurisdiction, okgg ensures that appropriate safeguards are in place. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions applicable to the receiving country.

By using the okgg platform, you acknowledge and consent to the transfer of your personal data to server infrastructure and third-party service providers located in other jurisdictions as described in this Policy, subject to the safeguards described above.

okgg reserves the right to update this Privacy Policy at any time. When material changes are made, the revised Policy will be posted on this page with an updated effective date, and registered players will be notified via the email address associated with their account. Your continued use of the platform following notification of changes constitutes acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed of how we protect your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okgg, please contact our dedicated privacy team using the details below. All privacy-related enquiries are handled with strict confidentiality.

If you are not satisfied with our response to a privacy enquiry, you have the right to escalate your complaint to the relevant data protection or regulatory authority in your jurisdiction.