okbeet Privacy Policy
At okbeet, we treat your personal data with the same seriousness we bring to every other aspect of our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, and what rights you hold over your own data as an okbeet account holder in Bangladesh.
Our Commitment
Your Privacy, Our Responsibility
okbeet is committed to handling personal data responsibly, transparently, and securely. The six principles below summarise our approach before the full legal detail that follows.
Minimal Data Collection
We collect only the personal information that is strictly necessary to operate your account, process your transactions, verify your identity, and comply with our legal obligations. We do not collect data for its own sake.
No Selling of Personal Data
okbeet does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is shared only with the specific service partners needed to operate the platform, under strict data processing agreements.
SSL Encryption Throughout
All data transmitted between your device and okbeet servers is protected by 256-bit SSL/TLS encryption. Sensitive account data is encrypted at rest in our secure database infrastructure.
You Control Your Data
You have the right to access, correct, and request deletion of your personal data at any time. We provide clear channels through which you can exercise these rights without barriers or unnecessary delays.
Defined Retention Periods
We keep your personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law. When the retention period expires, data is securely deleted or anonymised.
Transparent Policy Updates
When this Privacy Policy is updated in any material way, we will notify registered account holders by email at least 14 days before the changes take effect, giving you time to review before continuing to use the platform.
Article 1
Data We Collect
The personal data okbeet collects falls into four broad categories. The table below sets out each category, specific data points within it, and the primary reason for collection.
| Category | Data Points Collected | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, NID or passport number, photograph of identity document | Account registration, KYC verification, age verification (18+ rule), fraud prevention |
| Contact Data | Email address, mobile phone number, residential address (city/district level) | Account communication, OTP delivery, customer support, responsible gaming outreach |
| Financial Data | Deposit transaction records, withdrawal transaction records, bKash/Nagad/Rocket/Upay wallet numbers (masked), bank account references (masked), account balance history | Payment processing, anti-money laundering compliance, dispute resolution, withdrawal verification |
| Technical Data | IP address, device fingerprint, browser type and version, operating system, session timestamps, geolocation (country/city level), cookies and local storage identifiers | Security monitoring, fraud detection, duplicate account prevention, platform performance optimisation |
| Usage Data | Pages visited, betting history, game session records, search queries within the platform, feature interaction logs | Responsible gaming monitoring, personalisation, customer support context, product improvement |
| Communications Data | Content of live chat transcripts, email correspondence with support, voluntary survey responses | Customer support quality, dispute resolution, compliance record-keeping |
Data You Provide Directly
The majority of personal data okbeet holds about you is information you provide directly — during account registration, during KYC document submission, when contacting support, or when completing your account profile. You are in control of what you submit, and where a field is optional at registration, that is clearly indicated.
Data Collected Automatically
When you visit and use the okbeet platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device type, browser fingerprint, session duration, and the pages and features you interact with. This data is collected to maintain platform security, detect fraudulent or suspicious activity, and improve the overall user experience for players across Bangladesh and beyond.
Data From Third Parties
In certain circumstances, okbeet may receive personal data about you from third parties. This includes identity verification data returned by our KYC processing partner when you submit your NID or passport, payment confirmation data returned by bKash, Nagad, Rocket, Upay, or partner banks when you make a deposit or withdrawal, and fraud risk signals from industry-standard fraud prevention databases. We use this third-party data solely for the purposes of operating your account securely and legally.
Article 2
How We Use Your Data
okbeet processes your personal data only for defined, specific purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The following are the lawful bases and purposes under which we process your personal data:
Contract Performance
The primary legal basis for processing most of your personal data is the performance of our contract with you — that is, providing the okbeet betting and casino service you registered to use. This includes processing your deposits and withdrawals, settling your bets, maintaining your account balance, delivering your winnings, and providing customer support in relation to your account activity.
Legal and Regulatory Compliance
Certain data processing activities are required by law. These include identity verification (KYC) before processing withdrawals, transaction monitoring for anti-money laundering purposes, age verification to enforce the 18+ restriction, and maintaining records of all financial transactions for a minimum period as required by applicable financial regulations. We cannot waive these obligations even at your request.
Legitimate Interests
We also process some data on the basis of our legitimate interests as a platform operator, where those interests are not overridden by your privacy rights. This includes fraud detection and prevention, security monitoring, duplicate account detection, responsible gaming monitoring (identifying betting patterns that may indicate problematic gambling behaviour), and platform analytics that help us improve the okbeet experience for all users. Where we rely on legitimate interests, we conduct a balancing assessment to ensure the impact on your privacy is proportionate.
Consent-Based Processing
Where we process your data for optional purposes — such as sending you promotional emails about new games, seasonal offers like Eid bonuses or BPL cricket promotions, or personalisation of your home screen — we do so only with your explicit consent. You can withdraw consent for marketing communications at any time by clicking the unsubscribe link in any promotional email or by contacting our support team. Withdrawing marketing consent does not affect the processing of data needed to operate your account.
Responsible Gaming Monitoring
okbeet uses automated analysis of account usage data — including deposit frequency, wagering volume, session duration, and changes in betting patterns — to identify account holders who may be at risk of developing a gambling problem. Where our systems flag a potential concern, a member of our responsible gaming team may reach out to you directly. This processing is carried out in your interest and forms part of our duty of care to all players on the platform.
Article 3
Data Sharing and Disclosure
okbeet does not sell your personal data to any third party. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.
We share transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners solely for the purpose of processing deposits and withdrawals to and from your account. These partners operate under their own privacy policies and regulatory obligations.
Your identity documents are shared with our KYC verification partner to validate your identity before your first withdrawal is processed. Document data is retained by our KYC partner only for the period required by their own regulatory obligations.
When you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, Spribe, or Ezugi, a session token is passed to the relevant provider to initialise your game session. No more personal data than is technically necessary for game initialisation is shared.
okbeet may disclose account data, transaction records, or usage logs to law enforcement or financial intelligence authorities in Bangladesh where required by a valid legal order, court process, or statutory obligation. We will notify you of such disclosure where we are legally permitted to do so.
International Data Transfers
Some of okbeet's service partners — particularly cloud infrastructure providers and game studios — may process data on servers located outside Bangladesh. Where such international transfers occur, okbeet takes steps to ensure that appropriate data protection safeguards are in place, including contractual data processing agreements that require the recipient to maintain the same standard of data protection as okbeet itself.
Business Transfers
In the event that okbeet undergoes a corporate restructuring, merger, acquisition, or sale of business assets, personal data held by okbeet may form part of the transferred assets. In such a scenario, you would be notified by email at least 30 days before your data is transferred to any new entity, and the new entity would be required to honour the commitments made in this Privacy Policy.
Article 4
Cookies and Tracking
okbeet uses cookies and similar tracking technologies — including local storage and session tokens — to operate the platform, remember your preferences, maintain your login session, and understand how users interact with the site. This section explains the types of cookies we use and how you can manage them.
Types of Cookies We Use
The table below summarises the four categories of cookies present on the okbeet platform:
| Cookie Type | Purpose | Can Be Disabled? | Retention |
|---|---|---|---|
| Strictly Necessary | Maintain your login session, remember your account balance state, enable deposit and withdrawal flows, CSRF security tokens | No — required for the platform to function | Session / up to 30 days |
| Preference | Remember your language preference, display settings, last-visited game category, and notification preferences | Yes — disabling may reduce platform convenience | Up to 1 year |
| Performance | Measure page load times, track which features are most used, identify technical errors, generate aggregate usage reports | Yes — opt out via cookie settings | Up to 2 years |
| Targeting | Serve relevant promotional content within the platform, measure the effectiveness of on-site promotional banners | Yes — opt out via cookie settings or marketing preferences | Up to 90 days |
Managing Your Cookie Preferences
You can manage non-essential cookie categories at any time through your okbeet account settings under the Privacy Preferences section. You can also control cookies at the browser level — all major browsers (Chrome, Firefox, Safari, Edge) provide tools to view, block, or delete cookies. Note that blocking essential cookies will prevent the platform from functioning correctly, including logging in to your account.
Article 5
Data Security
Protecting your personal data from unauthorised access, disclosure, alteration, and destruction is a core technical and organisational priority at okbeet. The following security measures are in place across all systems that handle personal data:
Technical Safeguards
- All data in transit is protected by 256-bit TLS encryption. The platform enforces HTTPS on every page and rejects unencrypted HTTP connections.
- Sensitive data at rest — including identity document images, payment references, and account credentials — is stored using AES-256 encryption in our database infrastructure.
- Account passwords are never stored in plain text. We use industry-standard bcrypt hashing with a per-account salt.
- Two-factor authentication via SMS OTP is available to all account holders and is mandatory at the withdrawal stage for all accounts.
- Our platform infrastructure is protected by DDoS mitigation, web application firewall (WAF) rules, and rate limiting on authentication endpoints.
- Access to production databases containing personal data is restricted to a minimal set of authorised engineers and is logged and audited.
Organisational Safeguards
- All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
- Access rights follow a least-privilege model — team members only have access to the data categories their role requires.
- Data processing agreements are in place with all third-party service partners who handle okbeet user data.
- Security vulnerabilities are managed through a responsible disclosure process. If you discover a security issue, please report it to [email protected].
Data Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, okbeet will notify affected account holders by email as soon as reasonably practicable — and in any event within 72 hours of becoming aware of the breach — providing details of what data was affected, what we have done to contain the breach, and what steps you should take to protect yourself.
256-bit TLS Encryption
Every connection between your browser and okbeet is encrypted. Look for the padlock icon in your browser's address bar when using the platform.
SMS OTP Two-Factor Auth
Your account requires a one-time password sent to your registered mobile number every time a withdrawal is initiated, protecting your funds even if your password is compromised.
Responsible Disclosure
Found a security vulnerability? Contact [email protected] with details. We investigate all reports promptly and take security issues seriously.
Article 6
Your Privacy Rights
As an okbeet account holder, you have the following rights over your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We aim to respond to all data rights requests within 30 days.
Right of Access
Request a copy of all personal data okbeet holds about you. We will provide this in a structured, readable format within 30 days of your request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Identity data changes may require re-submission of KYC documents.
Right to Erasure
You may request that we delete your personal data where it is no longer necessary for the purpose it was collected. Note that financial transaction records must be retained for legal compliance purposes even after account closure.
Right to Restrict Processing
You can request that we restrict how we use your data while a dispute or accuracy query is being resolved, without requiring full deletion of the data.
Right to Data Portability
You may request your personal data in a machine-readable format (CSV or JSON) so that you can transfer it to another service provider if you wish.
Right to Object
You can object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. We will stop such processing unless we can demonstrate compelling legitimate grounds that override your rights.
Article 7
Data Retention
We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods below are our standard policy. In exceptional circumstances — such as an ongoing legal dispute or regulatory investigation — data may be retained beyond these periods until the matter is resolved.
| Data Category | Standard Retention Period | Basis for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal compliance, dispute resolution |
| KYC identity documents | Duration of account + 5 years after closure | Anti-money laundering regulatory requirement |
| Financial transaction records | 7 years from transaction date | Financial regulatory compliance |
| Betting and game history | Duration of account + 3 years after closure | Dispute resolution, responsible gaming monitoring |
| Customer support communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Marketing consent records | Until consent is withdrawn + 3 years | Compliance evidence |
| Technical / server logs | 90 days | Security monitoring, incident response |
| Analytics cookies | Up to 2 years from placement | Platform performance analysis |
When personal data reaches the end of its retention period, it is either securely deleted from all okbeet systems and backup environments, or — where complete deletion is not immediately practicable for technical reasons — anonymised such that it can no longer be associated with any individual account holder. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.
Article 8
Changes to This Policy
okbeet reviews this Privacy Policy at least once every 12 months and whenever a material change in our data practices, applicable law, or business operations requires an update. The version history table below records the current and most recent prior version of this document.
| Version | Effective Date | Summary of Changes |
|---|---|---|
| 3.0 (Current) | 1 January 2026 | Added cookie type table, expanded data retention schedule, added responsible gaming monitoring section, clarified international transfer safeguards |
| 2.1 | 1 July 2025 | Added data portability right, updated payment processor list to include Upay and Islami Bank, revised breach notification timeline to 72 hours |
| 2.0 | 1 January 2025 | Full redraft in plain English, added individual rights section, added six privacy principles summary |
How We Notify You of Changes
When we make a material change to this Privacy Policy — meaning a change that meaningfully affects how we collect, use, share, or retain your personal data — we will send a notification email to your registered email address at least 14 days before the change takes effect. The notification will describe the nature of the change and, where the change requires a new consent, provide a mechanism for you to provide or withhold that consent.
Minor changes — such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or updates to reflect new payment partner names — may be made without prior email notice. The "Effective Date" at the top of this page will always reflect the date of the most recent update, whether major or minor.
Continuing to use the okbeet platform after a revised Privacy Policy has taken effect constitutes your acceptance of the revised terms. If you do not agree with the revised policy, you should close your account before the change takes effect by contacting [email protected].
Policy Update Notifications
All registered okbeet account holders will receive an email at least 14 days before any material change to this Privacy Policy takes effect. Keep your registered email address up to date to ensure you receive these notifications.
Questions About Your Privacy at okbeet?
Our support team is available around the clock. You can also explore our FAQ for quick answers, review our Responsible Gaming commitments, or head straight to the casino.