oktaka Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how oktaka ("we", "us", "our") collects, processes, stores, and protects personal data provided by users ("you", "your", "the Player") of the website located at oktaka.asia and all associated platform services, including sports betting, casino games, account management, promotional communications, and customer support interactions (collectively, "the Services").

oktaka is committed to protecting the privacy and personal data of every player who uses our platform. We handle all personal information in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By registering for an account on oktaka or using the Services in any capacity, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any aspect of this Policy, please discontinue use of the platform and contact the support team to close your account.

Our Core Privacy Principles

1. Personal Data We Collect

1 .1 Registration Data. When you create an oktaka account, we collect the personal information you provide directly, including:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify you meet the 21+ age requirement)
• Residential address, including city and postal code
• Valid Bangladeshi mobile phone number
• Email address
• Username and encrypted password

1.2 Identity Verification Data. As part of our Know Your Customer (KYC) process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, and proof of residential address such as a utility bill or bank statement issued within the last three months.

1.3 Financial Data. When you make deposits or request withdrawals, we collect transaction details including payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or card provider), transaction reference numbers, and deposit and withdrawal amounts in Bangladeshi Taka (৳ BDT). We do not store full card numbers or mobile banking PINs on our servers.

1.4 Usage and Activity Data. We automatically collect certain technical and behavioural data when you access the platform, including:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited, features accessed, and time spent on the platform
• Betting history, game session data, and wager amounts
• Login timestamps and session duration

1.5 Communications Data. If you contact the oktaka support team via email or live chat, we retain records of that correspondence, including the content of your messages and any attachments, to enable us to resolve your query and maintain a support history.

1.6 Cookies and Tracking Technologies. oktaka uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse platform usage patterns. Further details are provided in Section 7 (Cookies) of this Policy.

2. How We Use Your Personal Data

2.1 oktaka processes your personal data only for the specific purposes for which it was collected. The primary purposes for which we use personal data are:

2.2 oktaka will not use your personal data for any purpose that is incompatible with the purposes described in this section without first obtaining your consent or establishing a separate legitimate legal basis for doing so.

3. Sharing Your Personal Data

3.1 oktaka does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your data with carefully selected third parties only in the circumstances described below.

3.2 Payment Service Providers. We share the minimum necessary transaction data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard solely to process your deposit and withdrawal instructions. These providers are bound by their own privacy obligations and industry security standards.

3.3 Game Technology Providers. Casino game studios including Pragmatic Play, Evolution Gaming, NetEnt, Ezugi, and Spribe receive session data necessary to deliver their games and to maintain game integrity. These providers are bound by contractual data protection obligations and their own certified security frameworks.

3.4 Identity Verification Partners. To fulfil KYC obligations, we may share identity document images and personal details with accredited third-party identity verification services. These services process data under strict confidentiality agreements and are used solely for the purpose of verifying player identity and age.

3.5 Legal and Regulatory Authorities. We may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosure where legally permitted to do so.

3.6 Corporate Transactions. In the event of a merger, acquisition, restructuring, or sale of assets involving oktaka, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer and of any material change in data controller identity via the contact details held on their account.

4. Data Retention

4.1 oktaka retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting obligations.

4.2 Active Account Data. While your account remains open and active, we retain all registration, financial, and activity data associated with it. This data is necessary to deliver the Services, manage your account, and honour any ongoing bonus or promotional commitments.

4.3 Closed Account Data. Following the closure of your account, whether at your request or by oktaka under the circumstances described in our Terms and Conditions, we retain your personal and financial data for a minimum period of five years. This retention period is required to comply with anti-money laundering record-keeping obligations and to defend against any legal claims that may arise from your use of the platform.

4.4 Marketing Data. If you withdraw consent for marketing communications, your contact details will be suppressed from marketing lists within 10 business days of your request. However, a record of your suppression preference will be retained indefinitely to prevent future unsolicited contact.

4.5 Support Correspondence. Records of customer support interactions are retained for a period of three years from the date of the last interaction, unless the matter involves an ongoing legal dispute or regulatory inquiry, in which case records will be retained until the matter is fully resolved.

4.6 When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

5. Data Security

5.1 oktaka implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the oktaka platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Password Storage: Passwords are stored using one-way cryptographic hashing algorithms. oktaka staff cannot view or retrieve your password in plain text.
• Access Controls: Access to personal data is restricted to authorised personnel who require it to perform their job functions. All staff with data access receive regular data protection training.
• Two-Factor Authentication: Where available, players are encouraged to enable two-factor authentication (2FA) on their accounts using their registered Bangladeshi mobile number for OTP verification.
• Regular Security Audits: The platform undergoes periodic security reviews and vulnerability assessments to identify and address potential weaknesses in our data protection infrastructure.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, oktaka will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

5.2 While we take every reasonable precaution to safeguard your data, no internet-based system is entirely immune to security risk. You are responsible for keeping your account credentials confidential and for using a secure, private network when accessing the platform. Do not access your oktaka account over public or unsecured Wi-Fi connections.

6. Cookies and Tracking Technologies

6.1 oktaka uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and analyse how players interact with the site. The following types of cookies are used:

6.2 You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect your experience on the oktaka platform. Please note that blocking essential cookies may prevent you from logging in or using certain platform features.

7. Your Data Protection Rights

7.1 As a player whose data is processed by oktaka, you hold the following rights with respect to your personal information. To exercise any of these rights, please contact the oktaka support team at [email protected] with your full name and account details.

7.2 oktaka will not charge a fee for handling data rights requests in ordinary circumstances. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

8. Minors and Age Restriction

8.1 The oktaka platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data belonging to individuals under the age of 21. If we become aware that an account has been registered by a person under 21, that account will be immediately closed, all data will be handled in accordance with our legal obligations, and the matter may be referred to appropriate authorities.

8.2 Parents and guardians are encouraged to use parental control and internet filtering software to prevent minors from accessing gambling platforms, including oktaka. If you believe a minor has registered on our platform, please contact [email protected] immediately so that the matter can be investigated and resolved promptly.

9. Changes to This Privacy Policy

9.1 oktaka reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or regulatory requirements. Where changes are material — meaning they significantly affect how your data is used or your rights as a data subject — we will notify registered players via the email address or mobile number held on their account, or by displaying a prominent notice on the platform, at least 14 calendar days before the changes take effect.

9.2 Minor or administrative updates (such as corrections to contact details, formatting changes, or clarifications that do not alter the substance of the Policy) may be made without prior notice. The "Last Updated" date displayed at the top of this Policy will always reflect the date of the most recent revision.

9.3 Your continued use of the oktaka platform following the effective date of any Policy update constitutes your acceptance of the revised Policy. If you do not agree with the changes, you may close your account by contacting the support team before the revised Policy takes effect.

10. Contact Us About Privacy

10.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way oktaka handles your personal data, please contact the oktaka Data Protection team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.

Email (plain text — not a clickable link): [email protected]

10.2 When contacting us about a data rights request or privacy concern, please include your full name, your registered username, and a brief description of your request or concern so that we can locate your account and respond efficiently.