okgg Privacy Policy

okgg collects personal data from players through several distinct channels: information you provide directly during registration and account operation, data generated automatically through your use of the platform, and limited information received from third-party payment processors and identity verification partners as part of our KYC process. The categories of data we collect are described below.

Registration and account data:

• Full legal name, as it appears on your government-issued identity document.
• Date of birth — collected to verify that you meet the 18+ age requirement applicable to all okgg players.
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar, as applicable).
• Email address — used as your primary account identifier and for all transactional and service communications.
• Chosen currency preference (BDT or INR) and preferred payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank).
• Username and encrypted password. okgg stores only a cryptographic hash of your password — your actual password is never stored in recoverable plain text.

KYC and identity verification data:

• Copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of address documents (utility bill, bank statement, or similar) dated within 90 days.
• Proof of payment method ownership (screenshot or statement confirming the bKash, Nagad, or bank account is registered in your name).
• Source-of-funds declarations where requested as part of enhanced due diligence for high-value accounts.

Transaction data:

• Deposit history: date, amount in BDT or INR, payment method used, and transaction reference number.
• Withdrawal history: date, amount, destination payment method, processing status, and any support correspondence related to the transaction.
• Wagering history: all bets placed, settled, and cancelled across the sportsbook, casino, slots, and poker products, including stake amounts, odds, and outcomes.
• Bonus claims and wagering progress records.

Technical and device data collected automatically:

• IP address — used for geolocation, fraud detection, and enforcing responsible gaming self-exclusions.
• Device type, operating system, and browser version — used to optimise the platform interface for your device.
• Session timestamps (login time, logout time, session duration) — used to fulfil responsible gaming session time reminder features.
• Referring URL — the web address from which you arrived at okgg.app, used for internal analytics only.
• In-platform navigation behaviour (pages visited, game categories browsed) — used to improve product design and detect unusual account activity patterns consistent with bot use or fraud.

okgg does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is incidentally visible in identity document photographs submitted for KYC purposes.

okgg processes personal data only for the purposes described below. If we wish to use your data for a materially new purpose not covered by this Privacy Policy, we will notify you and, where required, seek your consent before doing so.

• Account creation and management: Processing your registration, verifying your identity, maintaining your account, and handling account changes including password resets, currency preferences, and responsible gaming settings.
• Payment processing: Executing deposit and withdrawal transactions via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank). okgg passes only the minimum necessary data to payment processors to complete a transaction.
• Age and identity verification (KYC): Confirming that all players are aged 18 or above and that account details are genuine. This is a legal and responsible gaming obligation that okgg takes seriously across its Bangladesh-market player base.
• Fraud and AML monitoring: Analysing transaction patterns, IP addresses, device fingerprints, and wagering behaviour to identify potential fraud, money laundering, collusion, or bonus abuse. Automated monitoring is supplemented by manual review of flagged cases.
• Customer support: Using your account data and communication history to resolve queries submitted via live chat or email to [email protected]. Support agents access only the data necessary to resolve your specific enquiry.
• Platform improvement and analytics: Aggregated and anonymised behavioural data is used to improve game category layouts, page performance, payment flow UX, and mobile responsiveness. No individual player is identifiable in these aggregate reports.
• Responsible gaming compliance: Monitoring session duration, deposit frequency, and wagering velocity to identify players who may be at risk of problem gambling, and proactively applying responsible gaming interventions where warranted.
• Legal and regulatory compliance: Retaining records in line with applicable financial record-keeping obligations, and cooperating with lawfully issued requests from authorised government bodies or courts.
• Promotional communications: If you have opted in to marketing communications during registration, okgg may send you English-language promotional emails about bonuses, BPL cricket specials, seasonal offers (Eid, Pohela Boishakh), and new game launches. You may opt out of marketing emails at any time by contacting [email protected] — opting out does not affect transactional or account service communications.

okgg does not sell your personal data. We share your data with third parties only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

All third-party service providers engaged by okgg are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to okgg. Game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive only anonymous session tokens — they do not receive your name, email address, or payment details.

okgg uses cookies and similar browser-based storage technologies to operate the platform correctly, maintain your session, and gather anonymised performance analytics. We do not use advertising cookies or allow third-party advertising networks to place cookies on okgg.app.

You can control cookies through your browser settings. Disabling session cookies will prevent you from logging in to your okgg account. Disabling the currency preference cookie means your currency selection will not persist between visits. Disabling analytics cookies has no impact on core platform functionality.

okgg does not use pixel trackers, web beacons, or similar third-party tracking technologies placed by advertising networks. The only third-party scripts loaded on okgg.app are those directly required for game delivery from licensed software providers (Pragmatic Play, Evolution Gaming, etc.), and these scripts do not have access to your account or payment data.

okgg implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, and destruction. The key technical and organisational measures in place include the following:

• TLS/SSL encryption in transit: All communication between your browser or device and the okgg platform is encrypted using TLS 1.2 or higher. The connection is authenticated via a valid SSL certificate, verifiable in your browser's address bar.
• Encryption at rest: Sensitive fields in the player database — including identity document references, payment method identifiers, and KYC status records — are encrypted at rest using AES-256 encryption.
• Password hashing: Player passwords are stored using a modern adaptive cryptographic hash function (bcrypt with a sufficiently high work factor). Plain-text passwords are never stored or transmitted internally.
• Role-based access control: okgg staff access to the player data platform is controlled by role-based permissions. Customer support agents can access the minimum data necessary to resolve a query. Database administrators and engineers are subject to additional access controls and audit logging.
• Two-factor authentication for staff: All internal okgg staff accounts that have any access to player data systems require two-factor authentication.
• Penetration testing and security audits: The okgg platform undergoes periodic security assessments conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects player data, okgg will notify affected players via their registered email address within a reasonable timeframe, describe the nature of the incident, and outline the steps taken to contain it.

Data retention: okgg retains personal data for the periods set out in the data table in Section 1. The primary retention driver is a five-year minimum for account, KYC, and transaction records, consistent with standard financial services record-keeping practices. After the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be attributed to an individual player.

Players who request account closure are informed that their data will be retained for the applicable five-year period even after closure, as required for compliance and dispute resolution purposes. This retention does not entitle okgg to contact you with marketing communications after account closure — marketing communications cease immediately upon account closure.

okgg recognises and respects the data privacy rights of all players. While the specific rights available to you may vary depending on the laws applicable in your jurisdiction, okgg applies the following rights framework to all players on the platform as a matter of policy.

To exercise any of the above rights, contact the okgg privacy team at [email protected] with the subject line "Privacy Rights Request" from your registered email address. Include your full name, username, and a description of the right you wish to exercise. okgg will acknowledge your request within 5 business days and fulfil it within 30 days. Where a request is complex or numerous, we may extend this by a further 30 days with notice.

okgg will not charge a fee for exercising your privacy rights under normal circumstances. If requests are manifestly unfounded or excessive in frequency, okgg reserves the right to charge a reasonable administrative fee or decline to act, providing written reasons for the decision.

If you are a parent or guardian and believe that a minor in your care has registered an account on the okgg platform using false age information, please contact us immediately at [email protected]. We will investigate the report within 24 hours, close the account if the report is substantiated, and delete all personal data associated with that account to the extent not required to be retained for legal compliance purposes.

okgg supports the use of parental control software for households where minors have access to devices used by adults. Third-party internet filtering and parental control tools can block access to gambling websites as a household-level safeguard, independent of okgg's own age verification processes.

For more information on responsible gaming practices and tools available to you as a player — including deposit limits, session reminders, and self-exclusion — please visit the okgg Responsible Gaming page.

okgg reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable laws, or the services we use. When material changes are made, we will notify registered players via email to their registered address at least 14 days before the updated policy takes effect. The effective date at the top of this document will be updated accordingly.

We encourage players to review this Privacy Policy periodically. The most current version is always accessible at okgg.app/privacy-policy. Continued use of the platform after the effective date of any update constitutes your acknowledgement of the revised policy. If you do not agree with an update, you should close your account before the effective date of the change.

Non-material changes — such as typographical corrections, clarifications that do not affect your rights, or updates to contact details — may be made without advance notice.

This Privacy Policy was last reviewed and updated on 1 January 2026. It applies to all players who register or use the okgg platform on or after this date. Players who registered before this date should note that any data collected under previous privacy policies is now governed by the terms of this updated document, except where a previous policy granted rights that cannot be retroactively diminished.