okpo Privacy Policy

Our Privacy Commitments at a Glance

okpo is committed to handling your personal data with care, transparency, and integrity. The six principles below summarise the foundation of our privacy practices across every service we offer to players in Bangladesh.

Who We Are

okpo ("the Platform", "we", "us", "our") is an online casino and sports betting platform operating at https://okpo.bio and serving players located in Bangladesh. For the purposes of this Privacy Policy, okpo acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all users who visit the okpo platform, register an account, make deposits or withdrawals, place bets, interact with customer support, or otherwise provide personal data through any feature of the platform. By using okpo, you consent to the data practices described in this policy.

Information We Collect

okpo collects personal data through several channels: directly from you when you register and use the platform, automatically when you browse or play, and from trusted third-party verification services when you complete KYC. The categories of data we collect are set out below.

okpo does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information beyond what is strictly necessary for responsible gaming compliance (e.g. self-exclusion records). If you contact support and voluntarily disclose sensitive information, that disclosure is logged solely to resolve your enquiry.

How We Use Your Information

okpo processes your personal data for specific, documented purposes. We do not use your data for any purpose that is incompatible with the purposes listed below. The lawful bases for each use are described in Section 4.

• To create and manage your okpo account, including verifying your identity and age in line with our 21+ requirement.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial transaction records.
• To provide customer support, respond to enquiries, and resolve disputes or complaints raised by you or on your behalf.
• To comply with our responsible gaming obligations, including enforcing deposit limits, self-exclusion periods, and the 21+ age restriction across all accounts.
• To detect, investigate, and prevent fraud, money laundering, multi-accounting, and other prohibited activities outlined in our Terms and Conditions.
• To personalise your experience on the okpo platform, including recommending games and promotions based on your play history and stated preferences.
• To improve the performance, stability, and security of the okpo platform through analysis of aggregated technical and usage data.

Legal Basis for Processing

For each processing activity, okpo relies on one or more of the following lawful bases:

• Contractual necessity — processing required to perform the contract between you and okpo, including account management, payment processing, and game delivery.
• Legal obligation — processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and applicable gaming regulations.
• Legitimate interests — processing for fraud prevention, platform security, and improving our services where our interests do not override your rights and freedoms.
• Consent — where you have given explicit consent for a specific processing activity, such as receiving personalised promotional communications.

KYC and Identity Verification

okpo is required to verify the identity of all players who deposit real money and request withdrawals. This process, known as Know Your Customer (KYC), is a standard obligation for online gaming platforms and is designed to prevent fraud, underage gambling, and financial crime. During KYC you will be asked to submit one or more of the following: a copy of your National Identity Card (NID), valid passport, or Bangladesh driving licence; and in some cases, a recent utility bill or bank statement as proof of address.

All KYC documents are processed securely using encrypted upload channels. Documents are reviewed by okpo's compliance team and are not shared with any party other than those listed in Section 6 of this policy. Once KYC is complete, your documents are retained only for the minimum period required by applicable regulations and are then securely deleted.

Sharing Your Personal Data

okpo does not sell, rent, or trade your personal data. We share data only where necessary, with the categories of recipient listed below, and only to the extent required for the stated purpose.

• Payment processors — bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum transaction data necessary to authorise and settle your deposits and withdrawals. Each processor handles your data under their own published privacy policy.
• Game providers — Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt, and other licensed providers receive session identifiers and game interaction data required to operate and audit the games you play. No additional personal data is shared.
• KYC and compliance services — third-party identity verification providers receive the identity documents you submit during KYC solely for the purpose of performing age and identity checks on our behalf.
• Law enforcement and regulatory authorities — okpo will disclose personal data to competent authorities where required by applicable law, court order, or regulatory direction, including in cases of suspected money laundering or financial crime.

All third-party recipients are contractually required to process your data securely, use it only for the specified purpose, and comply with applicable data protection obligations. okpo does not transfer personal data to countries or territories that do not provide an adequate level of data protection without implementing appropriate safeguards.

Payment Data and Financial Information

When you make a deposit or request a withdrawal on the okpo platform, your payment details are transmitted directly to the relevant payment processor using encrypted connections. okpo does not store full card numbers, CVV codes, or mobile banking PINs on its servers. The only financial identifiers retained by okpo are the last four digits of a card or the registered mobile number associated with a bKash, Nagad, or Rocket account, used solely for transaction matching and support purposes.

All transaction records — including deposit amounts, withdrawal amounts, dates, and payment method references — are retained for a minimum of five years following the closure of your account, in accordance with anti-money laundering record-keeping requirements. These records may be shared with regulatory authorities on request.

Cookies and Tracking Technologies

The okpo platform uses cookies and similar tracking technologies to operate core platform features, analyse user behaviour, and improve performance. We use four categories of cookies:

• Essential cookies — required for the platform to function. They enable session management, login state, and security features. These cannot be disabled without breaking core functionality.
• Analytics cookies — collect aggregated, anonymised data about how players navigate the platform. This data helps us identify performance bottlenecks and improve the user experience.
• Functionality cookies — remember your preferences such as language selection, display settings, and responsible gaming limits so you do not need to re-enter them each session.
• Fraud prevention cookies — help us detect unusual activity patterns, multiple account attempts, and bot-driven interactions that may indicate fraudulent use of the platform.

Most mobile browsers allow you to control cookie settings through the browser's privacy menu. Disabling non-essential cookies will not prevent you from accessing the okpo platform, but may affect certain personalisation features. okpo does not use third-party advertising cookies or share browsing data with ad networks.

Data Retention

okpo retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply: account data and KYC records are retained for a minimum of five years following account closure; transaction records are retained for a minimum of five years; support communications are retained for two years; and technical/log data is retained for up to twelve months.

When the applicable retention period expires, okpo securely deletes or anonymises your personal data so that it can no longer be linked to you as an individual. Self-exclusion records are treated as an exception and may be retained for longer periods to prevent re-registration during active exclusion periods.

Your Privacy Rights

As a player on the okpo platform, you hold the following data subject rights. To exercise any of these rights, contact our support team at [email protected] with your account details and a description of your request. okpo will respond within 30 days of receiving a verified request.

• Right of access — you may request a copy of all personal data okpo holds about you, together with information about how it is processed.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
• Right to restrict processing — in certain circumstances you may request that we restrict how we process your data while a complaint or dispute is being resolved.
• Right to data portability — where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object — you may object to processing based on legitimate interests, including profiling. okpo will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, email [email protected] with the subject line "Data Subject Request" and include your registered mobile number and a brief description of your request. All requests are handled confidentially and responded to within 30 days. We may ask you to verify your identity before processing a data subject request.

Data Security Measures

okpo implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include: 256-bit SSL/TLS encryption for all data in transit; encrypted storage for all personal data at rest; role-based access controls that restrict staff access to personal data on a need-to-know basis; regular internal security audits and vulnerability assessments; and two-factor authentication requirements for administrative access to platform systems.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, okpo will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate any harm. A data breach log is maintained for all security incidents, regardless of severity.

Children and Minors

The okpo platform is strictly intended for adults aged 21 and above. okpo does not knowingly collect personal data from any person under the age of 21. Our registration process includes mandatory date-of-birth verification, and KYC procedures are used to confirm age where required. If okpo becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has registered on the okpo platform, please contact us immediately at [email protected]. We will investigate the matter promptly, close the account, and delete all associated personal data in accordance with this policy.

Changes to This Privacy Policy

okpo may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by displaying a prominent notice on the platform or by sending a notification to the mobile number associated with your account. The effective date at the top of this page will be updated to reflect the date of the latest revision.

Your continued use of the okpo platform following notification of any change to this policy constitutes your acceptance of the updated Privacy Policy. If you do not agree with any change, you may close your account by contacting support. We encourage you to review this page periodically so that you remain informed of how we protect your data.

Contact Us and Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way okpo processes your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 24 hours Bangladesh Standard Time (BST, UTC+6), and all formal data subject requests within 30 calendar days of receiving a verified request.

When submitting a data subject request, please include your registered mobile number and a clear description of your request so we can locate your records and respond accurately. You may be asked to provide identity verification before your request is processed.