oktaka Privacy Policy

1 Introduction

oktaka is committed to safeguarding the privacy and personal data of every individual who interacts with our platform. This Privacy Policy has been drafted to give you a clear, honest, and complete account of our data practices — written in plain professional English so that every player across Dhaka, Chittagong, Sylhet, Khulna, and the wider Bangladesh region can understand exactly how their information is handled.

This policy applies to all personal data collected through the oktaka website, mobile-optimised platform, customer support channels, and any other service operated under the oktaka brand. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and oktaka.

We review and update this policy periodically to reflect changes in our services, applicable law, and industry best practice. The effective date at the top of this document always reflects the version currently in force.

2 Data Controller

For the purposes of data protection law, the data controller responsible for your personal information is oktaka, operating the platform at https://oktaka.bid. All data subject requests, privacy complaints, and enquiries regarding this policy should be directed to our designated privacy contact:

Where oktaka engages third-party processors to handle personal data on its behalf (for example, payment gateway providers or identity verification services), such processors are bound by written data processing agreements that require them to handle your data only as instructed by oktaka and in accordance with applicable data protection standards.

3 Data We Collect

We collect personal data in a number of categories depending on how you interact with the Platform. The table below sets out the main categories of data we hold and typical examples within each category:

We do not collect sensitive personal data such as biometric data, health records, religious beliefs, or political opinions. We do not knowingly collect any personal data from individuals under the age of 18.

4 How We Collect Your Data

4.1 Directly From You

The majority of personal data we hold is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. You are always in control of what information you choose to submit to us through these interactions.

4.2 Automatically via the Platform

When you access the oktaka platform, we automatically collect certain technical and usage data through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and session activity data. This automatic collection is essential for platform security, fraud detection, and ensuring a consistent experience across sessions. Please refer to Section 8 for our full Cookies Policy.

4.3 From Third-Party Providers

In limited circumstances, we receive personal data about you from third parties. These include:

• Payment providers (bKash, Nagad, Rocket, Upay) — who confirm transaction status and wallet ownership;
• Identity verification services — who assist in confirming the authenticity of documents submitted during KYC;
• Fraud prevention databases — which flag accounts or payment methods associated with known fraudulent activity.

Data received from third parties is used only for the specific purpose for which it was shared and is subject to the same protections described in this policy.

5 How We Use Your Personal Data

oktaka uses your personal data only for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the reason it was originally collected. The primary purposes for which we process personal data are:

• Account creation and management — to register, maintain, and administer your oktaka account, including enforcing the one-account-per-player rule;
• Identity verification (KYC) — to verify that you meet the 18+ age requirement and to confirm the identity of all players before processing withdrawals;
• Transaction processing — to facilitate deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment channels in Bangladeshi Taka (৳);
• Game and betting services — to deliver, record, and settle all wagers placed on casino games, live dealer tables, and sports betting markets including BPL, IPL, and T20 World Cup fixtures;
• Responsible gaming — to monitor gaming patterns and apply self-imposed limits, cooling-off periods, or self-exclusion measures at your request or, where legally required, on our own initiative;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct;
• Customer support — to respond to your enquiries, resolve disputes, and improve the quality of our support services;
• Legal and regulatory compliance — to fulfil any obligations imposed by applicable law, including record-keeping requirements and responses to lawful requests from authorities;
• Platform improvement — to analyse aggregated, anonymised usage data to understand how the platform is used and where improvements can be made.

We do not use personal data for automated decision-making processes that produce legal or similarly significant effects on players, except where this is required by law or is necessary to prevent fraud.

6 Legal Basis for Processing

For each purpose described in Section 5, oktaka relies on one or more of the following legal bases to process your personal data:

• Contractual necessity — processing is required to perform the contract between you and oktaka (i.e., the Terms & Conditions you accepted on registration). This covers account management, transaction processing, and game delivery.
• Legal obligation — processing is required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and responses to lawful regulatory requests.
• Legitimate interests — processing is necessary for the legitimate interests of oktaka, including fraud prevention, platform security, and service quality improvement, provided those interests are not outweighed by your rights and interests.
• Consent — where we rely on your consent for a specific processing activity (such as sending you promotional communications), you have the right to withdraw that consent at any time by contacting us at [email protected]. Withdrawing consent will not affect the lawfulness of any processing carried out before withdrawal.

7 Data Sharing & Disclosure

7.1 No Sale of Personal Data

oktaka does not sell, rent, or trade your personal data to any third party for commercial purposes. This is an absolute commitment and is not subject to any exception.

7.2 Authorised Third-Party Processors

We share personal data with carefully selected third-party processors only to the extent necessary to deliver our services. These include:

• Payment processors — bKash, Nagad, Rocket, Upay, and banking partners who process your financial transactions;
• Identity verification providers — who assist in confirming player identity and age during the KYC process;
• Technology infrastructure providers — who host platform data on secure, encrypted servers;
• Game content providers — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive anonymised session data to deliver game content.

All processors are bound by written agreements that restrict their use of your data strictly to the purpose for which it was shared.

7.3 Legal Disclosure

We may disclose personal data to law enforcement, regulatory bodies, or other authorities if we are required to do so by applicable law, or if we believe in good faith that disclosure is necessary to prevent fraud, protect platform security, or safeguard the rights of other players.

7.4 Business Transfers

In the event that oktaka undergoes a merger, acquisition, or sale of all or part of its assets, personal data held about players may form part of the transferred assets. We will notify affected players via their registered contact details before any such transfer takes place, and the acquiring entity will be required to honour the terms of this Privacy Policy.

8 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your session state, language preference, and device type — so that the platform can function correctly and provide a consistent experience across visits.

8.2 Cookies Used by oktaka

oktaka uses the following categories of cookies on the Platform:

• Strictly necessary cookies — required for the Platform to function. These enable login session management, security token validation, and basic navigation. They cannot be disabled without severely impairing your use of the Platform.
• Performance and analytics cookies — used to collect anonymised data about how visitors use the Platform (pages visited, time spent, errors encountered) to help us identify areas for improvement. No personally identifiable information is collected by these cookies.
• Functional cookies — used to remember your preferences such as display settings and previously visited game categories, so you do not need to reconfigure them on every visit.

8.3 Managing Cookies

Most modern browsers allow you to control cookie settings through your browser preferences. You can choose to block or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging into your oktaka account and using core platform features.

9 Data Retention

oktaka retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data — retained for the duration of your account's existence on the Platform;
• Transaction and financial records — retained for a minimum of five (5) years following the date of the transaction, in accordance with anti-money laundering record-keeping requirements;
• KYC and identity documents — retained for a minimum of five (5) years from the date of account closure or the last transaction, whichever is later;
• Customer support communications — retained for two (2) years from the date of the last interaction;
• Technical and usage logs — retained for up to twelve (12) months, after which they are automatically deleted or anonymised;
• Self-exclusion records — retained indefinitely to prevent re-registration by self-excluded players.

When personal data is no longer required for any of the above purposes and there is no legal obligation to retain it, we will securely delete or anonymise it in accordance with our internal data disposal procedures.

10 Your Rights Over Your Personal Data

You have the following rights with respect to the personal data that oktaka holds about you. To exercise any of these rights, please contact us in writing at [email protected] with "Data Rights Request" in the subject line and provide sufficient detail to allow us to locate and act on your request:

• Right of Access — you may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format within 30 days of a valid request.
• Right to Rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure — in certain circumstances you may request that we delete personal data we hold about you. This right is not absolute — we may be required to retain certain data to comply with legal obligations or to defend against legal claims.
• Right to Restrict Processing — you may request that we limit the way we use your personal data in specific circumstances, for example while the accuracy of data is being disputed.
• Right to Data Portability — where processing is based on your consent or on a contract, you may request that we provide your personal data in a machine-readable format for transfer to another service provider.
• Right to Object — you may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11 Data Security

oktaka implements and maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers;
• Encrypted storage for all sensitive data held at rest on our infrastructure;
• Access controls restricting internal access to personal data on a strict need-to-know basis, with all access logged and audited;
• Session security including automatic session timeouts and one-time passcode (OTP) verification for sensitive account actions;
• Regular security assessments to identify and remediate vulnerabilities in the Platform;
• Incident response procedures to contain, investigate, and notify affected players of any confirmed data breach in a timely manner.

Notwithstanding these measures, no system is completely impervious to security risks. In the unlikely event of a data breach that is likely to result in risk to your rights, oktaka will notify affected players as quickly as practicable after the breach is confirmed and contained.

You also play an important role in keeping your account data secure. Please ensure you use a strong, unique password for your oktaka account, keep your login credentials confidential, and contact us immediately at [email protected] if you suspect any unauthorised access to your account.

12 Children's Privacy

The oktaka platform is strictly restricted to individuals aged 18 years and above. We do not knowingly collect, process, or store personal data relating to anyone under the age of 18. Age verification is conducted as part of the account registration and KYC process to enforce this restriction.

If we become aware that personal data has been inadvertently collected from an individual under the age of 18, we will immediately suspend the associated account, delete all collected data relating to that individual, and, where applicable, return any deposited funds to the payment source. If you believe a minor has registered on our platform, please notify us immediately at [email protected].

13 Third-Party Links

The oktaka platform may, from time to time, contain references to third-party game providers, payment services, or informational resources. Where such references include links, please be aware that those third-party websites operate their own independent privacy policies and that oktaka has no control over, and accepts no responsibility for, the data practices of any third-party site.

We encourage you to review the privacy policy of any third-party site you visit before providing your personal data to that site. The presence of a reference to a third party on the oktaka platform does not constitute an endorsement of that third party's data practices.

14 Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our services, applicable law, or industry best practice. When we make material changes — those that significantly affect how we collect or use your personal data, or that affect your rights — we will provide advance notice via your registered email address or mobile number before the updated policy takes effect.

For non-material changes (such as typographical corrections or clarifications that do not alter the substance of our data practices), we may update the policy without prior notice. The effective date displayed at the top of this page will always reflect the version currently in force.

Your continued use of the oktaka platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with an updated policy, you should cease using the Platform and contact us to request account closure in accordance with Section 13.2 of our Terms & Conditions.

15 Contact & Privacy Complaints

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 10, or want to raise a concern about how we have handled your personal data, please contact our privacy team using the following details:

We take all privacy complaints seriously. We will acknowledge your complaint within 48 hours and aim to resolve it within 30 calendar days. If you are not satisfied with our response, you may escalate the matter through any applicable dispute resolution channel available to you under the laws of your jurisdiction.

For further information about how your data interacts with your account and gameplay, please also review our Terms & Conditions, our FAQ page, and our Responsible Gaming policy.