okdaj Privacy Policy

Data Controller Information

okdaj operates as the data controller with respect to all personal data collected through the okdaj platform. As data controller, okdaj determines the purposes and means by which your personal data is processed. okdaj holds an international gaming licence and operates the platform at https://okdaj.net.

All data-related enquiries, access requests, deletion requests, and complaints regarding okdaj's handling of personal data should be directed to the okdaj Data Protection team via email at [email protected]. Please include "Privacy Request" in the subject line of your email so that your query is routed to the correct team. The okdaj Data Protection team will acknowledge your query within 5 business days Bangladesh Standard Time (BST, UTC+6).

Scope of This Policy

This Privacy Policy covers personal data collected through: the okdaj website and all of its pages; the account registration and verification process; deposit and withdrawal transactions; gameplay activity across all casino and sportsbook products; communications between you and the okdaj support team; and any surveys, promotions, or competitions you participate in as an okdaj player. This Policy does not apply to third-party websites or services that may be linked to or from the okdaj platform. okdaj is not responsible for the privacy practices of any third-party service provider or external website.

What Data We Collect

okdaj collects personal data from you in several ways: directly when you provide it to us during registration or in communications, automatically when you use the platform, and from third parties such as payment processors and identity verification services where this is necessary to fulfil our legal obligations. The table below summarises the categories of personal data we collect and the primary source of each category.

Data We Do Not Collect

okdaj does not collect or store full payment card numbers. Card transactions are processed exclusively by PCI-DSS compliant payment processors, and okdaj receives only a masked card reference for record-keeping purposes. okdaj does not collect biometric data beyond what is strictly required for facial-matching identity verification where applicable, and any such data is handled by a specialist third-party verification provider under a data processing agreement.

Sensitive Data

okdaj may, in limited circumstances, process sensitive personal data — specifically information relating to a player's self-exclusion status or problem gambling history — where this is strictly necessary to fulfil our responsible gaming obligations and to protect the welfare of the individual player. Such data is treated with the highest level of protection and is accessible only to a tightly restricted group of authorised staff.

How We Use Your Data

okdaj processes your personal data only where there is a lawful basis for doing so. The lawful bases we rely on are: performance of a contract (processing necessary to operate your account and deliver our services); compliance with a legal obligation (identity verification, anti-money-laundering checks, responsible gaming obligations); legitimate interests (fraud prevention, platform security, service improvement); and, in limited cases, your consent (marketing communications, where opted in).

• To register and manage your okdaj player account, including verifying your identity and age in accordance with our 18+ policy and KYC obligations.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, and to maintain accurate financial records of all transactions.
• To deliver the games, betting markets, live casino products, and other services you access through the okdaj platform.
• To detect and prevent fraud, money laundering, bonus abuse, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• To comply with our responsible gaming obligations, including monitoring gameplay patterns for signs of problem gambling and applying self-exclusion restrictions where requested or required.
• To respond to your support queries, complaints, and disputes in a timely and accurate manner.
• To send you service-related communications such as deposit confirmations, withdrawal updates, account security alerts, and important policy change notifications.
• To send you promotional communications about okdaj bonuses and offers — only where you have opted in to receive such communications and have not subsequently withdrawn that consent.
• To analyse aggregate usage data for the purpose of improving platform performance, game selection, and the overall player experience.
• To comply with all applicable laws, regulations, and lawful requests from competent authorities under okdaj's international gaming licence obligations.

Data Sharing and Third Parties

okdaj does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your personal data is shared with third parties only where strictly necessary for the operation of the platform, the fulfilment of legal obligations, or the protection of our legitimate business interests. All third parties with whom okdaj shares personal data are required to handle that data in accordance with applicable data protection standards and are bound by data processing agreements.

Categories of Third-Party Recipients

International Data Transfers

Some of the third parties listed above may process your personal data in countries outside Bangladesh. Where personal data is transferred internationally, okdaj takes appropriate steps to ensure that such transfers are subject to equivalent data protection safeguards, including contractual data protection clauses and data processing agreements that reflect applicable international standards.

Cookies and Tracking Technologies

The okdaj platform uses cookies and similar tracking technologies to ensure the platform operates correctly, to remember your session and preferences, to detect and prevent fraud, and to understand how players interact with the site so we can continue to improve it. By continuing to use the okdaj platform, you consent to the use of cookies as described in this section.

Types of Cookies We Use

Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies from specific websites. Please be aware that disabling strictly necessary or fraud prevention cookies will impair the functionality of the okdaj platform and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in the help section of your browser's settings menu. okdaj does not respond to "Do Not Track" browser signals, as there is currently no universally accepted standard for interpreting such signals.

Data Retention and Deletion

okdaj retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes that may arise. The retention periods below apply as a general guide; in specific circumstances, data may need to be retained for longer periods where required by law or where a legal dispute is ongoing.

• Active account data — retained for the entire duration of your okdaj account relationship and for a period of at least 5 years following permanent account closure, in order to meet anti-money-laundering record-keeping obligations.
• KYC and identity verification documents — retained for a minimum of 5 years following the date of verification or account closure (whichever is later), in accordance with international gaming licence requirements.
• Financial transaction records — retained for a minimum of 5 years following the date of the transaction, in line with standard financial record-keeping obligations.
• Support communications — retained for up to 3 years from the date of the last communication, to allow for accurate dispute resolution and quality assurance.
• Marketing consent records — retained for as long as you hold an active okdaj account, or until you withdraw consent, whichever is sooner. Withdrawal of consent is recorded and retained as evidence of your preference.
• Technical and usage data (anonymised) — anonymised analytics data may be retained indefinitely for platform improvement purposes, as it contains no personally identifiable information once anonymisation is applied.

Data Deletion Requests

You have the right to request deletion of your personal data (also known as the "right to erasure") subject to certain conditions. okdaj will honour deletion requests where there is no overriding legal obligation to retain the data. Please note that if you have an active okdaj account, or if there are outstanding transactions, unresolved disputes, or ongoing regulatory investigations associated with your account, okdaj may be required to retain your data until those matters are fully resolved before processing a deletion request. To submit a deletion request, email [email protected] with the subject line "Data Deletion Request" and include your registered account username.

Your Privacy Rights

As an okdaj player, you hold a number of rights in relation to the personal data we hold about you. okdaj is committed to upholding these rights and will respond to any valid rights request within a reasonable timeframe. To exercise any of the rights listed below, contact the okdaj Data Protection team at [email protected] with "Privacy Request" in the subject line and a clear description of the right you wish to exercise.

Complaints

If you are not satisfied with how okdaj has handled your personal data or responded to a privacy rights request, you have the right to raise a complaint. In the first instance, we encourage you to contact [email protected] so that the okdaj Data Protection team can attempt to resolve the matter directly. okdaj takes all privacy complaints seriously and will investigate and respond within 10 business days BST.

Data Security Measures

okdaj employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. No online platform can guarantee absolute security, but okdaj's security programme reflects current industry best practices for online gaming platforms.

Technical Safeguards

All data transmitted between your browser or device and the okdaj platform is encrypted using Transport Layer Security (TLS). Player passwords are stored using strong one-way cryptographic hashing — okdaj staff cannot see your password in plaintext and will never ask you for it. Sensitive account and financial data is encrypted at rest within okdaj's secure server infrastructure. The platform is protected by firewalls, intrusion detection systems, and 24/7 security monitoring.

Organisational Safeguards

Access to personal data within okdaj is restricted on a strict need-to-know basis. Staff who have access to personal data receive regular data protection training and are bound by confidentiality obligations. Access controls are reviewed regularly and are immediately revoked when a staff member's role changes or their employment ends. okdaj conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in its systems.

Your Role in Keeping Data Secure

The security of your okdaj account also depends on steps you take yourself. You should choose a strong, unique password for your okdaj account and not reuse it across other websites or services. You should never share your login credentials with any other person. If you believe your account has been accessed without your authorisation, contact [email protected] immediately. okdaj will never contact you to ask for your password, PIN, or full payment card details via email or chat.

Data Breach Notification

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, okdaj will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as soon as reasonably practicable. Notifications will be sent to the email address or mobile number registered to the affected account and will include a clear description of what happened, the categories of data involved, the steps okdaj has taken in response, and guidance on actions you can take to protect yourself.

Changes to This Privacy Policy

okdaj reserves the right to update this Privacy Policy at any time to reflect changes in law, platform functionality, or data processing practices. When material changes are made, the updated policy will be published on this page with a revised effective date, and registered players will be notified via their registered contact details. We encourage you to review this page periodically. Your continued use of the okdaj platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.