Privacy Policy — How okpo Protects Your Personal Data
At okpo, your privacy matters. This Privacy Policy explains exactly what personal data we collect from players in Bangladesh, how that data is used, who it may be shared with, and the rights you hold over your own information. We are committed to transparency, security, and fair data practices on every level.
Six Pill ars of Our Privacy Commitment
okpo's approach to privacy is built on six core principles. Every data decision we make is measured against these standards to ensure your information is always handled with care and integrity.
All personal data held by okpo is protected using industry-standard TLS/SSL encryption in transit and AES-256 encryption at rest. Our infrastructure undergoes regular security audits to keep your information safe from unauthorised access, disclosure, or alteration.
okpo collects only the personal data that is strictly necessary to operate your account, process your transactions in BDT, verify your identity under KYC requirements, and comply with applicable legal obligations. We do not collect data beyond what is required for these purposes.
okpo does not sell, rent, lease, or otherwise transfer your personal data to unaffiliated third parties for their own marketing purposes. Your data is shared with service partners only to the minimum extent necessary to deliver the Platform's services to you.
Registered players have the right to access, correct, update, and in certain circumstances request deletion of the personal data okpo holds about them. You can exercise these rights at any time by contacting our support team at [email protected] from your registered email address.
okpo retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. When data is no longer needed, it is securely deleted or anonymised in accordance with our internal data retention schedule.
In the unlikely event of a data breach that poses a risk to your rights and freedoms, okpo will notify affected players without undue delay and will take all reasonable remedial steps to contain the breach, assess its impact, and prevent recurrence. Transparency with our players is non-negotiable.
Introduction
okpo is Bangladesh's trusted online betting and casino platform, offering sports betting (including cricket BPL and T20 markets), live casino games, slots, Win Drop, and Virtual Casino products — all transacted in Bangladeshi Taka (BDT) via local payment methods including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank.
In the course of operating the Platform and delivering these services to players across Bangladesh — including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — okpo necessarily collects and processes certain personal data about you.
This Privacy Policy sets out in plain, accessible English exactly what data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have as a data subject. We encourage you to read this document alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of your overall agreement with okpo.
Data Controller
For the purposes of this Privacy Policy, okpo acts as the data controller in respect of all personal data collected from players using the Platform. As data controller, okpo determines the purposes and means by which your personal data is processed.
All data-related enquiries, access requests, correction requests, deletion requests, and formal complaints regarding okpo's data practices should be directed to:
- Email: [email protected]
- Subject line: Data Privacy Request
- Response time: Within 14 business days of receipt
Data We Collect
okpo collects personal data in the following categories. The specific data points collected will depend on how you interact with the Platform.
3.1 Registration & Identity Data
When you create an okpo account, we collect your full legal name, date of birth, mobile phone number (used as your primary account identifier), and the country and city of your residence. This data is necessary to create and maintain your account and to verify that you meet the minimum age requirement of 21 years.
3.2 KYC & Verification Data
To comply with our identity verification obligations and to process withdrawals, we may collect copies of government-issued identity documents (National ID card, passport, or driving licence), proof of residential address (utility bill or bank statement), and proof of payment method (mobile banking account screenshot). These documents are stored securely and accessed only by authorised personnel for the purpose of KYC review.
3.3 Financial & Transaction Data
We collect records of all financial transactions conducted through your okpo Wallet, including deposit amounts and timestamps, withdrawal requests and settlement confirmations, bet placement records, winnings credited, and bonus transactions. All amounts are recorded in BDT.
3.4 Technical & Device Data
When you access the Platform, our servers automatically record certain technical information including your IP address, device type (mobile, tablet, desktop), operating system and browser version, session duration, and the pages you visit within the Platform. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.
3.5 Usage & Behaviour Data
We collect information about how you use the Platform, including which games you play, which betting markets you access, your preferred stake amounts, session frequency, and feature interaction patterns. This data is used in aggregate to improve the Platform experience and, where you have consented, to personalise content and promotions.
3.6 Communications Data
If you contact okpo's support team by email or through the Platform's live chat interface, we retain records of those communications — including the content of your messages, the date and time of contact, and the outcome of any support interaction — for quality assurance, dispute resolution, and legal compliance purposes.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, mobile number | Account creation, age verification |
| KYC Documents | National ID, passport, address proof | Identity verification, withdrawal processing |
| Financial Data | Deposit/withdrawal records, bet history | Transaction processing, dispute resolution |
| Technical Data | IP address, device type, browser | Security, fraud prevention, performance |
| Usage Data | Games played, session frequency | Platform improvement, responsible gaming |
| Communications Data | Support emails, chat logs | Quality assurance, dispute resolution |
How We Collect Your Data
okpo collects your personal data through the following channels:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, submit a support request, or respond to a survey or promotional communication.
- Automatically via the Platform — through server logs, session tracking, and standard web analytics tools that record technical and usage data as you interact with the Platform.
- From payment providers — when you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, the relevant payment provider shares confirmation data with okpo to enable transaction processing and reconciliation.
- From KYC verification partners — where okpo engages a third-party identity verification service to assist with the KYC process, that service may provide okpo with a verification outcome and associated identity data.
- From fraud prevention and security services — okpo may receive risk signals and flagged data from third-party fraud detection tools that monitor for suspicious account or transaction patterns.
How We Use Your Data
okpo uses the personal data we collect for the following purposes:
5.1 Account Management
To create, maintain, verify, and, where necessary, close your okpo account. This includes processing your registration, managing your BDT Wallet balance, applying deposit and withdrawal transactions, and maintaining an accurate record of your account history.
5.2 Service Delivery
To provide you with access to all okpo products and features, including cricket betting, live casino, slots, Win Drop, and Virtual Casino — and to ensure that those services are delivered accurately, reliably, and in accordance with the applicable game and betting rules.
5.3 Identity Verification & Fraud Prevention
To verify your identity and age in compliance with our KYC obligations, and to detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
5.4 Financial Processing
To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or partner bank), to settle winning bets, to apply bonus credits, and to maintain accurate financial records of all transactions conducted through your account.
5.5 Responsible Gaming
To monitor your gaming activity patterns for indicators of problem gambling, to apply responsible gaming tools (including deposit limits, session time limits, and self-exclusion periods) where requested or required, and to fulfil okpo's obligations under its Responsible Gaming policy. Visit our Responsible Gaming page for more information.
5.6 Customer Support
To respond to your support enquiries, resolve disputes, investigate complaints, and provide you with accurate account information when requested.
5.7 Marketing Communications (with your consent)
Where you have expressly consented to receive promotional communications from okpo, we may use your contact details to send you information about new promotions, seasonal bonuses (for example, during Eid, Pohela Boishakh, or major cricket tournaments including BPL and T20 World Cup), and Platform updates. You may withdraw your consent to marketing communications at any time by contacting [email protected].
5.8 Legal & Regulatory Compliance
To comply with any applicable legal obligation, respond to lawful requests from governmental or regulatory authorities, enforce our Terms & Conditions, and protect the rights, property, and safety of okpo, its players, and third parties.
5.9 Platform Improvement
To analyse aggregated, anonymised usage data for the purpose of improving the Platform's features, performance, and user experience. This analysis does not identify individual players.
Legal Basis for Processing
okpo processes your personal data on one or more of the following legal grounds:
- Contractual necessity — processing that is necessary to perform the contract between you and okpo (i.e., to operate your account, process transactions, and deliver Platform services). Without this processing, okpo cannot provide you with its services.
- Legal obligation — processing that is necessary to comply with applicable legal requirements, including KYC and anti-money-laundering obligations.
- Legitimate interests — processing that is necessary for okpo's legitimate business interests, including fraud prevention, security monitoring, Platform improvement, and responsible gaming compliance — provided those interests are not overridden by your own privacy rights.
- Consent — processing that is based on your freely given, specific, informed consent, primarily in relation to marketing communications. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.
Sharing Your Data
okpo does not sell your personal data. We share your data only with the following categories of third parties, and only to the minimum extent necessary for the stated purpose:
7.1 Payment Providers
To process deposits and withdrawals, okpo shares necessary transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank). Each payment provider operates under its own privacy policy and is independently responsible for the data it processes.
7.2 Identity Verification Partners
Where okpo engages a third-party KYC service provider to assist with identity and age verification, that provider may process copies of the identity documents you submit. Such providers are contractually bound to use your data solely for verification purposes and to maintain appropriate security standards.
7.3 Game Technology Providers
The casino and sports betting products available on the okpo Platform are powered by third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, Microgaming, NetEnt, and Spribe. These providers may receive technical session data (such as your player session token and game round data) necessary to deliver their games to you. They do not receive your full identity data.
7.4 Fraud Prevention & Security Services
okpo may share technical data (including IP addresses, device fingerprints, and transaction patterns) with specialist fraud prevention service providers for the purpose of detecting and preventing fraudulent activity on the Platform.
7.5 Legal & Regulatory Authorities
okpo may disclose your personal data to governmental or regulatory authorities where required to do so by applicable law, by court order, or in connection with any legal proceedings to which okpo is a party. In such cases, okpo will disclose only the minimum data necessary to satisfy the legal requirement.
Cookies & Tracking Technologies
The okpo Platform uses cookies and similar tracking technologies to enhance your experience, maintain your login session, and collect usage analytics. The following categories of cookies are used:
8.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They maintain your login session, remember your language preference, and enable core features such as the bet slip and Wallet balance display. Without these cookies, the Platform cannot operate correctly. No consent is required for strictly necessary cookies.
8.2 Analytics Cookies
These cookies collect aggregated, anonymised information about how players use the Platform — including which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used exclusively to improve the Platform and does not identify individual players.
8.3 Preference Cookies
These cookies remember your Platform preferences (such as your preferred stake amounts or game display settings) so that you do not need to re-enter them each time you visit. They are active only for the duration of your browser session or for a defined period if you choose to save your preferences.
8.4 Managing Cookies
You can control the use of non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain Platform features. Instructions for managing cookies in the most common browsers are available on the respective browser's support pages.
Data Retention
okpo retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable legal or regulatory obligations. The following general retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | Legal and regulatory compliance |
| KYC documents | Duration of account + 5 years after closure | Anti-money-laundering obligations |
| Transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical & device logs | 12 months from collection | Security monitoring, fraud prevention |
| Marketing consent records | Until consent is withdrawn + 1 year | Demonstrating lawful basis for marketing |
When personal data reaches the end of its applicable retention period and there is no legal basis for continued retention, okpo will securely delete or irreversibly anonymise that data in accordance with our internal data retention and disposal procedures.
Your Rights as a Data Subject
As a player on the okpo Platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact [email protected] from your registered email address, using the subject line "Data Rights Request".
10.1 Right of Access
You have the right to request a copy of the personal data okpo holds about you, together with information about how that data is being used. We will provide this information within 14 business days of receiving a valid request.
10.2 Right to Rectification
If any personal data okpo holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Where practicable, corrections will be made within 7 business days.
10.3 Right to Erasure
You may request that okpo delete the personal data it holds about you where: the data is no longer necessary for the purpose for which it was collected; you have withdrawn consent and there is no other legal basis for processing; or the data has been processed unlawfully. Note that we may be unable to delete data that we are legally required to retain (for example, financial transaction records subject to statutory retention requirements).
10.4 Right to Restrict Processing
In certain circumstances — for example, while a dispute about the accuracy of your data is being investigated — you may request that okpo restricts the processing of your personal data rather than deleting it entirely.
10.5 Right to Object
Where okpo processes your personal data on the basis of legitimate interests, you have the right to object to that processing. okpo will review your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
10.6 Right to Withdraw Consent
Where processing is based on your consent (primarily in relation to marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
Data Security
okpo implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- TLS 1.3 encryption for all data in transit between your device and the okpo Platform.
- AES-256 encryption for sensitive personal data and financial records stored at rest.
- Multi-factor authentication requirements for access to internal systems that hold personal data.
- Role-based access controls ensuring that only authorised personnel with a defined business need can access player personal data.
- Regular vulnerability scanning and penetration testing of Platform infrastructure.
- A formal Incident Response Plan covering the detection, containment, assessment, and notification procedures to be followed in the event of a data security incident.
While okpo takes all reasonable precautions to protect your data, no system is entirely immune to security risks. You also have a role to play in keeping your data safe: use a strong, unique password for your okpo account, enable two-factor authentication if available, and contact [email protected] immediately if you suspect your account has been compromised.
Children & Minors
The okpo Platform is strictly for adults aged 21 and above. okpo does not knowingly collect or process personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds (net of any promotional balance received) in accordance with our standard closure procedures.
If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an account on the okpo Platform, please contact [email protected] immediately. We will investigate and take appropriate action as a priority.
Third-Party Links
The okpo Platform may contain references to third-party game providers and payment partners. While these entities operate under commercial agreements with okpo, their own websites and digital products are governed by their own privacy policies, for which okpo accepts no responsibility. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the okpo Platform.
okpo does not embed third-party social media tracking pixels, advertising networks, or affiliate tracking scripts that would share your personal data with unaffiliated parties for their own commercial purposes. Any analytics tools used on the Platform are configured to anonymise IP addresses and are operated solely for Platform improvement purposes.
Policy Updates
okpo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the Platform. When we make material changes to this policy, we will notify registered players by email to their registered address and will post a prominent notice on the Platform for a period of not less than 30 days prior to the changes taking effect.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically so that you remain informed about how okpo is protecting your data. Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of those changes.
Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which okpo processes your personal data, please contact our support team using the details below. We take all privacy-related enquiries seriously and will respond promptly.
- Email: [email protected]
- Subject line: Privacy Policy Enquiry
- Available: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
- Response time: Within 3 business days for general enquiries; within 14 business days for formal data rights requests
okpo is committed to resolving all privacy-related concerns directly with our players. If after contacting us you remain dissatisfied with our response, you may have the right to lodge a complaint with an applicable data protection authority.
Ready to Play on Bangladesh's Trusted Platform?
Your data is protected. Your bets are fair. Your winnings are paid fast — in BDT via bKash and Nagad. For players aged 21 and above only.