okazz Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") explains how okazz ("we", "us", "our") collects, uses, stores, and protects the personal information of users ("you", "your") who access or use the okazz platform available at okazz.io ("the Platform"). We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. Please read this Policy carefully before registering an account or using any services offered through the Platform. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. In the event of any conflict between this Policy and another document on the Platform, the more specific document will prevail in relation to the matters it specifically addresses.

1. About This Privacy Policy

okazz is an online betting and casino platform primarily serving players based in Bangladesh. As a platform that processes financial transactions and account credentials, we take our data protection obligations extremely seriously. This Policy applies to all personal data collected through your use of the Platform, including data collected when you register an account, make deposits or withdrawals, place bets, play casino games, contact customer support, or interact with any other feature of the okazz service.

This Policy does not apply to the data practices of third-party game providers, payment processors, or other external services whose links or integrations may appear on the Platform. We encourage you to review the privacy policies of any third-party services you interact with independently of okazz.

2. Data We Collect

2.1 Registration Data

When you create an okazz account, we collect the following personal information that you provide directly:

• Full legal name;
• Date of birth (to verify you meet the 21+ age requirement);
• Email address;
• Mobile phone number;
• Residential address, including district, division, and postcode;
• Username and encrypted password;
• Preferred currency (Bangladeshi Taka, BDT).

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and to protect the integrity of the Platform, okazz may request the following documentation from you before processing your first withdrawal or if unusual account activity is detected:

• Government-issued photo identification (e.g., National ID Card, passport, or driving licence);
• Proof of residential address (e.g., a recent utility bill or bank statement issued within the past three months);
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account showing the same mobile number registered on your okazz account);
• Source-of-funds documentation where required by anti-money laundering (AML) procedures.

2.3 Financial Transaction Data

When you deposit funds or request a withdrawal, okazz records the following transaction data:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard);
• Transaction amounts in Bangladeshi Taka (BDT);
• Transaction timestamps in Bangladesh Standard Time (BST, UTC+6);
• Transaction reference numbers issued by the payment provider;
• Partial payment account identifiers (e.g., the last four digits of a card, or the mobile number associated with a bKash account).

okazz does not store full card numbers, card CVV codes, or full bank account credentials on its own servers. These are handled exclusively by our certified payment processing partners.

2.4 Betting and Gaming Activity Data

We maintain a detailed record of your activity on the Platform, including:

• All bets placed, including stake amounts, selections, odds, and outcomes;
• Casino game sessions, including game titles, bet sizes, win/loss results, and session durations;
• Bonus claims, wagering activity, and promotional participation history;
• Account balance history and adjustment logs.

This data is used to manage your account, resolve disputes, produce accurate financial records, and support responsible gaming monitoring.

2.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical information, including:

• IP address and approximate geographical location derived from it;
• Device type, operating system, and browser version;
• Referring URL and pages viewed within the Platform;
• Session duration and clickstream data;
• Cookie identifiers (see Section 8 for full cookie details).

2.6 Customer Support Data

When you contact the okazz support team via live chat or email, we retain a record of those communications, including the content of your messages, the date and time of contact, and any resolutions reached. This data is used to resolve your query, train our support team, and maintain a record of our interactions with you.

3. How We Use Your Personal Data

okazz uses the personal data it collects for the following purposes:

3.1 Account Management and Service Delivery

We use your registration data to create and maintain your okazz account, authenticate your identity when you log in, process your deposits and withdrawals, credit your account with winnings, and communicate important account-related information to you (such as deposit confirmations, withdrawal approvals, and security alerts).

3.2 Identity Verification and Fraud Prevention

KYC and AML obligations require us to verify your identity before processing significant financial transactions. We use the identity documents you provide to confirm your age (21+), verify your residential address, and confirm ownership of the payment methods linked to your account. This data is also analysed to detect and prevent fraudulent activity, money laundering, and abuse of the Platform's bonus system.

3.3 Legal and Regulatory Compliance

okazz may be required to retain certain categories of personal data to comply with applicable legal obligations, including financial record-keeping requirements, anti-money laundering legislation, and law enforcement requests made through proper legal channels. Where we are legally required to disclose personal data to a public authority, we will do so and will notify you of such disclosure where we are legally permitted to.

3.4 Platform Improvement and Analytics

We use aggregated and anonymised usage data to understand how players interact with the Platform, identify technical issues, test new features, and improve the overall user experience. Analytics data used for this purpose is processed in a form that does not directly identify individual users wherever possible.

3.5 Responsible Gaming Monitoring

okazz uses your betting and gaming activity data, in combination with your account settings and any responsible gaming tools you have applied, to monitor for indicators of harmful gambling behaviour. Where such indicators are detected, okazz may reach out to you proactively with responsible gaming resources or apply account-level protections in accordance with our Responsible Gaming Policy.

3.6 Marketing and Promotional Communications

With your consent (obtained at registration or via your account communication preferences), okazz may send you promotional emails and notifications about new bonuses, seasonal offers, upcoming sports events (such as BPL, IPL, T20 World Cup matches), and new game launches. You may withdraw your consent and opt out of marketing communications at any time via the communication preferences section of your account dashboard. Opting out of marketing communications does not affect your receipt of essential account-related notifications.

4. Legal Basis for Processing

okazz processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, transaction data, and gaming activity data is necessary to perform the contract between you and okazz as set out in our Terms & Conditions.
• Legal obligation: Processing identity verification documents and financial records is required to comply with AML, KYC, and other applicable legal obligations.
• Legitimate interests: Processing technical and device data for fraud prevention, security monitoring, and platform analytics is carried out on the basis of okazz's legitimate business interests, balanced against your right to privacy.
• Consent: Sending marketing communications and deploying non-essential cookies is carried out on the basis of your freely given consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

5.1 Payment Processors

To process deposits and withdrawals, okazz shares the minimum necessary transaction data with our approved payment processing partners, including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and the card processing networks used for Visa and Mastercard transactions. All payment partners are contractually bound to use your data solely for payment processing purposes and to maintain appropriate security standards.

5.2 Game Providers

When you play a casino game supplied by a third-party provider such as Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, or Spribe, a unique player identifier (not your full name or contact details) is shared with that provider to facilitate the game session and to retrieve game results and RTP calculations. Game providers do not receive your financial transaction data or KYC documents.

5.3 Identity Verification Partners

okazz may use third-party identity verification services to assist in processing KYC checks. Any personal data shared with such services is protected by data processing agreements that restrict its use to verification purposes only.

5.4 Legal and Regulatory Authorities

okazz may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, by a valid legal order, or where okazz reasonably believes such disclosure is necessary to prevent or detect criminal activity, including money laundering, fraud, or match-fixing.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of okazz's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and the privacy implications for your data before the transfer takes effect, to the extent permitted by applicable law.

6. International Data Transfers

okazz primarily stores and processes data on servers located in secure data centres that serve the Asia-Pacific region. In some circumstances, data may be transferred to or processed by third-party partners (such as game providers or identity verification services) whose infrastructure is located outside Bangladesh. Where such transfers occur, okazz ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain the same standard of protection applied within our own systems.

By using the okazz Platform, you acknowledge that your personal data may be transferred internationally as described in this section. If you have questions about the specific safeguards applied to any international transfer of your data, you may contact the okazz data team via the support dashboard.

7. Data Retention

okazz retains your personal data for the following periods, unless a longer retention period is required by law:

• Account registration data: Retained for the duration of your active account, plus 5 years following account closure, to satisfy financial record-keeping requirements.
• KYC and identity verification documents: Retained for 5 years from the date of submission, in accordance with standard AML compliance requirements.
• Financial transaction records: Retained for 5 years from the date of each transaction.
• Betting and gaming activity logs: Retained for 3 years from the date of each activity record, or for the duration of any unresolved dispute relating to that activity, whichever is longer.
• Customer support communications: Retained for 2 years from the date of each interaction.
• Marketing consent records: Retained for the duration of your marketing subscription, plus 1 year following opt-out, as evidence of consent management.
• Technical and device logs: Retained for 12 months from collection, after which they are aggregated and anonymised.

When personal data reaches the end of its applicable retention period, okazz securely deletes or irreversibly anonymises it in accordance with our internal data deletion procedures. Anonymised data (which can no longer identify you) may be retained indefinitely for analytical purposes.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember certain information about your preferences and session state. okazz uses cookies and similar technologies (such as local storage and session storage) to operate core platform functionality and to improve your experience.

8.2 Categories of Cookies We Use

• Essential cookies: These are strictly necessary for the Platform to function. They maintain your login session, remember your account preferences, and support security features such as CSRF protection. Essential cookies cannot be disabled without breaking core platform functionality.
• Performance cookies: These cookies collect anonymised data about how visitors use the Platform — such as which pages are visited most frequently and whether error messages are displayed. This data helps us improve platform performance and user experience. No personal identity is attached to performance cookie data.
• Functional cookies: These cookies remember choices you make on the Platform, such as your preferred language, the last game category you browsed, and your responsible gaming settings. They are not strictly essential but meaningfully improve your experience.
• Analytics cookies: okazz uses first-party analytics tools to understand aggregate player behaviour across the Platform. Analytics cookies do not track you across third-party websites and are not used for advertising purposes.

8.3 Third-Party Cookies

okazz does not deploy third-party advertising cookies or permit advertising networks to place tracking cookies on the Platform. Game providers integrated into the Platform may use session-level cookies strictly necessary to deliver the game experience. These are not used for cross-site tracking or advertising profiling.

8.4 Managing Your Cookie Preferences

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling essential cookies will prevent you from logging into your okazz account and using key Platform features. Instructions for managing cookies are available in the help documentation of your chosen browser (Chrome, Firefox, Safari, Edge, etc.).

9. Your Data Rights

As a registered user of the okazz Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the okazz support team via live chat in your account dashboard or by email at the address provided in Section 15.

• Right of access: You have the right to request a copy of the personal data that okazz holds about you. okazz will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details (such as your email address or phone number) can be updated directly from within your account dashboard.
• Right to erasure: You may request that okazz delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. Please note that okazz may be required to retain certain data (such as financial transaction records) for legal compliance purposes even following an erasure request, in which case we will inform you of the data we are legally required to retain.
• Right to restriction of processing: You may request that okazz restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or a contractual relationship, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on okazz's legitimate interests. okazz will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

10. Children's Privacy

The okazz Platform is strictly for adults aged 21 years and above. okazz does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor may have registered on the Platform, please contact the okazz support team immediately via the contact details provided in Section 15 of this Policy.

okazz employs age verification checks at the point of registration and again before the first withdrawal is processed to enforce the 21+ restriction. These checks are a core component of our responsible gaming framework.

11. Security Measures

okazz implements a layered approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport Layer Security (TLS): All data transmitted between your browser or device and the okazz Platform is encrypted using 256-bit TLS encryption, ensuring that data cannot be intercepted during transmission.
• At-rest encryption: Sensitive data stored in okazz's databases — including identity documents and payment method records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within okazz's internal systems is restricted on a role-based need-to-know basis. Staff who do not require access to personal data to perform their role are not granted it.
• Two-factor authentication (2FA): okazz offers 2FA to all registered players and requires its use for certain high-risk account actions such as password changes and withdrawal requests above specified thresholds.
• Regular security testing: The Platform undergoes regular vulnerability assessments and penetration testing by independent security professionals to identify and address potential security weaknesses.
• Incident response procedures: okazz maintains a documented incident response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, okazz will notify affected users without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

While okazz takes all reasonable precautions to protect your data, no internet-based system can guarantee absolute security. You are encouraged to use a strong, unique password for your okazz account and to enable 2FA via your account security settings.

12. Marketing Communications

okazz may send you promotional communications — including emails and platform notifications — about bonuses, seasonal promotions (such as Eid specials, Pohela Boishakh offers, and BPL cricket betting promotions), new game launches, and other platform updates. These communications are sent only where you have given your consent at the point of registration or have subsequently opted in via your account communication preferences.

You may opt out of receiving marketing communications at any time by:

• Clicking the "Unsubscribe" link included at the bottom of every marketing email we send;
• Updating your communication preferences in the notifications section of your account dashboard;
• Contacting the okazz support team and requesting removal from marketing lists.

Opting out of marketing communications will not affect your receipt of essential transactional communications, such as deposit confirmations, withdrawal notifications, security alerts, and updates to our Terms or this Privacy Policy.

13. Third-Party Links and Integrations

The okazz Platform may contain links to external websites or integrate third-party services — such as live game streaming feeds, sports data providers, or payment gateway interfaces — that are not operated by okazz. This Privacy Policy applies solely to data processed by okazz and does not extend to the data practices of third-party websites or services. okazz is not responsible for the privacy practices of third parties, and we encourage you to review the privacy policies of any external services you access through or in connection with your use of the Platform.

14. Updates to This Privacy Policy

okazz reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where a material change is made to this Policy — meaning a change that substantively affects how we collect or use your personal data — okazz will notify you by email to the address registered on your account and will display a prominent notice on the Platform before the change takes effect.

Where a non-material change is made — such as a correction of typographical errors or a clarification of existing provisions — the updated Policy will be published on this page and the "last updated" date at the top of the Policy will be revised accordingly. We encourage you to review this Policy periodically to stay informed about how okazz protects your privacy. Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way okazz handles your personal data, please contact our support team via live chat in your account dashboard or by email. The okazz support and data team operates 24 hours a day, 7 days a week, in accordance with Bangladesh Standard Time (BST, UTC+6).

Email: support at okazz.io