okpo Privacy Policy

This Privacy Policy ("Policy") describes how okpo ("okpo", "we", "us", "our"), the operator of the online gaming platform at okpo.club, collects, uses, stores, shares, and protects the personal data of individuals who visit the okpo website or register and use an okpo account ("you", "your", "Player").

By accessing the okpo website or creating an account, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data in the manner described herein. This Policy is incorporated by reference into the okpo Terms & Conditions, which are available at okpo.club/terms-conditions.

okpo is committed to handling personal data responsibly, transparently, and in accordance with principles of data minimisation, purpose limitation, and data security. If you have questions about this Policy or about how your data is handled, please contact [email protected] at any time.

For the purposes of this Privacy Policy, the data controller — the entity that determines the purposes and means of processing your personal data — is okpo, the operator of the okpo.club platform. As data controller, okpo is responsible for ensuring that personal data entrusted to it by players is processed lawfully, fairly, and transparently.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the okpo data team via email at [email protected]. okpo aims to respond to all data-related requests within 30 calendar days of receipt.

okpo collects personal data across three broad categories: data you provide directly, data generated automatically through your use of the platform, and data received from third-party service providers. The specific data points collected within each category are described below.

3.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during account registration or identity verification.
• Contact Data: Email address, mobile telephone number, and residential address in Bangladesh (city, district, and postcode).
• Verification Documents: Copies of national identity cards, passports, or other official documents submitted during Know Your Customer (KYC) verification procedures.
• Financial Data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank and others), and payment card details (Visa, Mastercard) provided when making deposits or withdrawal requests. Full payment card numbers are not stored by okpo — card transactions are processed directly by our payment processor partners using tokenisation.
• Communications Data: The content of messages exchanged with the okpo support team via email or live chat, including support ticket content, complaint details, and feedback submissions.

3.2 Data Generated Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited on the okpo website, game sessions played (including game names, wager amounts, session duration, and outcomes), navigation paths, and click patterns.
• Transaction Data: Records of all deposits, withdrawals, bonuses claimed, wagers placed, and account balance changes associated with your okpo account.
• Cookie and Tracking Data: Data collected via cookies, web beacons, and similar technologies as described in Section 8 of this Policy.

3.3 Data Received from Third Parties

• Identity Verification Providers: Confirmation of identity and age from third-party KYC verification services used by okpo.
• Payment Processors: Transaction status updates, payment confirmations, and fraud risk indicators from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard processing networks.
• Fraud Prevention Services: Risk scores and flagging data from fraud detection services used to protect okpo players and the platform from financial crime.

okpo collects personal data through the following means:

• Account Registration: When you create an okpo account, you provide identity and contact data directly through the registration form.
• KYC Verification: When you submit identity documents in response to a verification request, either proactively or at the time of a withdrawal request.
• Deposits and Withdrawals: When you initiate cashier transactions, payment data is captured and processed in accordance with the payment method used.
• Platform Usage: Technical and usage data is collected automatically as you browse the okpo website and interact with games, using server logs and analytics tools.
• Customer Support: When you contact our support team, communications data is created and retained as part of the support record.
• Cookies: Data collected passively via cookies placed on your device in accordance with Section 8 of this Policy.

okpo processes personal data under the following legal bases:

okpo uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your okpo account, maintain your account profile, process login requests, and manage account settings and preferences.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 18 years and to confirm your identity in accordance with our anti-money-laundering obligations.
• Payment Processing: To process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard, and to maintain transaction records.
• Fraud and Security Monitoring: To detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other forms of abuse on the platform.
• Responsible Gaming: To monitor account activity for indicators of problem gambling, to apply responsible gaming limits requested by the player, and to enforce self-exclusion periods.
• Customer Support: To respond to support requests, resolve complaints, and maintain records of support interactions for quality and compliance purposes.
• Platform Improvement: To analyse how players use the okpo platform in aggregate, to improve the website and game experience, and to inform product development decisions.
• Promotional Communications: To send you bonus offers, promotional updates, and platform news where you have opted in to receive such communications. You may opt out at any time.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, to respond to lawful requests from regulatory or law enforcement authorities, and to enforce the okpo Terms & Conditions.

okpo does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where such decisions are subject to appropriate human review and are disclosed to the player concerned.

okpo does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Personal data is shared only in the following limited and controlled circumstances:

• Game Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited session and technical data necessary to deliver their games on the okpo platform. These providers are bound by confidentiality and data processing agreements.
• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard receive the financial and identity data necessary to process deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Third-party identity verification services receive copies of verification documents solely for the purpose of confirming age and identity on okpo's behalf.
• Fraud Prevention and Security Services: Risk and fraud management platforms receive technical and transactional data to generate fraud risk assessments that protect okpo players.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics tools to help okpo understand platform performance and improve the user experience. No personally identifiable information is included in these analytics data sets.
• Legal and Regulatory Authorities: okpo may disclose personal data to law enforcement agencies, courts, or regulatory bodies when legally required to do so or when necessary to protect the rights and safety of okpo and its players.

The okpo website uses cookies and similar tracking technologies to provide a functional, personalised, and secure browsing experience. A cookie is a small text file placed on your device by a website server. Cookies cannot execute programs or transmit viruses to your device.

okpo uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the operation of the okpo website and cannot be disabled. They are used to maintain your login session, store your game preferences, and ensure the security of your account. No consent is required for these cookies.
• Performance and Analytics Cookies: These cookies collect aggregated information about how visitors use the okpo website, such as which pages are visited most frequently and whether users encounter any errors. This data is used solely to improve the platform. These cookies require your consent where mandated by applicable law.
• Functional Cookies: These cookies remember choices you have made on the platform — such as preferred language or display settings — to provide a more personalised experience on your next visit.

You may control and manage cookie settings through your browser. Most browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the okpo platform. Instructions for managing cookies in popular browsers are available through the relevant browser's help documentation.

okpo takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your device and the okpo platform is encrypted using 256-bit SSL/TLS technology. The okpo website operates exclusively over HTTPS.
• Data-at-Rest Encryption: Sensitive personal data stored on okpo's servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to okpo personnel and service providers who have a legitimate need to access it for the purposes described in this Policy. All access is logged and subject to periodic audit.
• Payment Data Security: Full payment card details are never stored by okpo. Card transactions are tokenised and processed directly by certified payment service providers. Mobile banking transactions via bKash, Nagad, Rocket, and Upay are processed through their respective secure APIs.
• Incident Response: okpo maintains an incident response plan to detect, contain, and remediate data security incidents promptly. In the event of a data breach that poses a significant risk to affected individuals, okpo will notify affected players without undue delay.

Whilst okpo takes all reasonable steps to protect your personal data, no data transmission or storage system is completely secure. You are also responsible for maintaining the security of your own okpo account credentials as described in the okpo Terms & Conditions.

okpo retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active okpo account is retained for the duration of the account's existence and for a defined period after account closure.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum period as required by anti-money-laundering regulations applicable to online financial platforms.
• KYC and Verification Documents: Identity verification documents are retained for the period required to demonstrate compliance with age and identity verification obligations. After this period, documents are securely deleted.
• Support Communications: Customer support interaction records are retained for a period sufficient to handle recurring queries and to support dispute resolution, after which they are deleted or anonymised.
• Dormant Accounts: Where an account has been inactive for an extended period, okpo may reduce the volume of personal data held in association with the account in accordance with its data minimisation obligations. Players with dormant accounts will be notified before any such data reduction takes place.

When personal data is no longer required for any of the purposes described in this Policy and no legal obligation requires its retention, it is securely deleted from okpo's systems or irreversibly anonymised so that it can no longer be associated with an individual.

As a data subject whose personal data is processed by okpo, you hold the following rights with respect to that data. To exercise any of these rights, please contact okpo at [email protected] with "Privacy Request" in the subject line and your registered account username or email address in the message body.

• Right of Access: You have the right to request a copy of the personal data that okpo holds about you, along with information about how that data is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by okpo be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that okpo delete the personal data it holds about you. This right is subject to limitations where okpo has legal or regulatory obligations that require it to retain the data.
• Right to Restriction of Processing: You have the right to request that okpo restrict the processing of your personal data in defined circumstances, such as while a correction request is under review.
• Right to Data Portability: Where processing is based on your consent or on a contract between you and okpo, you have the right to receive a structured, machine-readable copy of the personal data you have provided to okpo.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on okpo's legitimate interests. okpo will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

The okpo platform is strictly for individuals aged 18 years and above. okpo does not knowingly collect personal data from persons under the age of 18. If okpo becomes aware that personal data has been collected from a minor, it will take immediate steps to delete that data and close the associated account in accordance with its Terms & Conditions.

Parents and guardians who believe that a minor may have registered an okpo account or submitted personal data to the platform are encouraged to contact okpo immediately at [email protected]. okpo will prioritise such reports and act on them without delay.

okpo reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or the services offered on the platform. When material changes are made, okpo will notify registered account holders via email to their registered address and will display a notice on the okpo website for a reasonable period before the revised Policy takes effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the okpo platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you must discontinue your use of the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which okpo handles your personal data, please contact the okpo data team using the details below. All privacy-related enquiries are handled with care and discretion.

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Enquiry" in the subject line of your email.
• Response Time: okpo aims to acknowledge all privacy enquiries within 3 business days and to provide a full response within 30 calendar days.
• Operating Hours: The okpo support team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6), including all Bangladesh national holidays.

For enquiries related to specific data rights requests — such as access, rectification, erasure, or portability — please include your registered okpo username or registered email address in your message so that we can locate your account records promptly and process your request without delay.