okbed Privacy Policy — How We Handle Your Personal Data

Data Controller

okbed is the data controller for all personal data collected through the okbed platform. As data controller, okbed determines the purposes for which personal data is processed and the means by which it is processed. All questions and requests relating to data held by okbed about you should be directed to [email protected].

What Personal Data We Collect

okbed collects the following categories of personal data: (a) Registration data — mobile phone number, date of birth, full name, and any other information you provide during account registration; (b) Identity verification data — copies of identity documents submitted during the KYC process; (c) Financial data — mobile wallet account details used for deposits and withdrawals (bKash, Nagad, Rocket, Upay), transaction amounts, and transaction history; (d) Usage data — log files, IP address, device type, browser type, pages visited, session duration, and game activity records; (e) Communications data — records of messages, emails, and support interactions between you and okbed. We collect only the data that is necessary for the purposes described in this Policy.

How We Use Your Personal Data

okbed uses your personal data for the following purposes: (a) to create and manage your okbed account; (b) to process deposits and withdrawals via your chosen mobile wallet; (c) to verify your identity and age in compliance with our Terms and Conditions; (d) to detect, investigate, and prevent fraud, money laundering, and other prohibited conduct; (e) to operate and improve the okbed platform, including game performance and user experience; (f) to communicate with you in response to support requests and account-related matters; (g) to send you promotional communications where you have consented to receive them; (h) to fulfil our legal and regulatory obligations. okbed does not use your personal data for purposes incompatible with those listed above without first obtaining your consent.

Legal Basis for Processing

okbed processes your personal data on the following legal bases: (a) Contract performance — processing necessary to create and manage your account, process transactions, and deliver the services you have requested; (b) Legal obligation — processing required to comply with applicable law, including age verification, anti-money laundering checks, and fraud prevention requirements; (c) Legitimate interests — processing necessary for okbed's legitimate business interests, including platform security, fraud detection, and improvement of services, provided these interests are not overridden by your rights; (d) Consent — where okbed requests your consent for a specific processing purpose (such as marketing communications), processing will only occur where you have freely given that consent, and you may withdraw consent at any time.

Data Sharing and Disclosure

okbed does not sell, rent, or share your personal data with third parties for their own marketing purposes. okbed may share your personal data with the following categories of third parties in the circumstances described: (a) Payment processors — mobile wallet providers (bKash, Nagad, Rocket, Upay) to process your financial transactions; (b) Game providers — game software providers (such as Pragmatic Play, Evolution Gaming, JILI, Spribe, Ezugi) receive only the technical data necessary to deliver their games to your device; (c) Compliance and legal — where required by applicable law or by a lawful request from a regulatory authority or law enforcement body; (d) Service providers — third-party providers who assist okbed in operating the platform (such as hosting and security providers) are bound by data processing agreements and may not use your data for their own purposes. All third parties with whom okbed shares data are required to maintain appropriate security measures and to process your data only for the purposes for which it was shared.

Data Retention

okbed retains your personal data for as long as your account remains active and for a reasonable period thereafter to fulfil our legal, regulatory, and business obligations. Specifically: account and registration data is retained for the duration of the account relationship plus a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements; transaction records are retained for the same period; KYC documents are retained for the minimum period required by applicable law; usage and log data is retained for a shorter operational period as required for security monitoring and fraud detection. When data is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it, okbed will securely delete or anonymise it.

Data Security Measures

okbed applies appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the okbed servers; secure, access-controlled storage for account and KYC data; regular security reviews of the platform infrastructure; and restricted internal access to personal data on a need-to-know basis. Notwithstanding these measures, no method of electronic data transmission or storage is completely secure. In the event of a data breach that is likely to affect your rights or interests, okbed will notify you and take appropriate remedial action within a reasonable timeframe.

International Data Transfers

okbed's servers and data storage infrastructure may be located outside Bangladesh. Where personal data is transferred outside Bangladesh to a country that does not provide the same level of data protection as Bangladesh, okbed will take appropriate steps to ensure that your personal data remains adequately protected, including by imposing contractual obligations on recipients of your data. By using the okbed platform, you acknowledge and consent to the transfer of your personal data in accordance with this Policy.

Children and Minors

The okbed platform is strictly for adults aged 21 and above. okbed does not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and believe that a person under 21 in your care has provided personal data to okbed, please contact us immediately at [email protected]. Upon verification, okbed will promptly delete the account and all associated personal data. okbed takes the protection of minors seriously and will cooperate fully with any request from a parent or guardian to remove a minor's data from its systems.

Changes to This Privacy Policy

okbed reserves the right to update or amend this Privacy Policy at any time. When material changes are made, okbed will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the okbed platform following any update to this Policy constitutes your acceptance of the revised Policy. If you do not agree with any change, you should stop using the platform and may request account closure by contacting [email protected].