okla Privacy Policy

01 Data We Collect

okla collects personal data from players in order to operate the platform, verify player identities, process financial transactions, prevent fraud, and comply with applicable legal and regulatory obligations. We collect only the data that is reasonably necessary for these purposes. The categories of personal data we collect are described below.

Registration Data

When you create an okla account, we collect the following information directly from you: full legal name, date of birth, residential address, email address, and mobile phone number. This data is used to create and maintain your account, verify your eligibility to use the platform, and communicate with you about your account activity.

Identity Verification Data

As part of our Know Your Customer (KYC) process, we may request copies of identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request proof of address documentation. These documents are used solely for identity verification and fraud prevention purposes and are stored in encrypted format.

Transaction Data

We collect records of all financial transactions conducted through your okla account, including deposits, withdrawals, bonus claims, and bet history. This includes transaction amounts in BDT, timestamps, payment method references (e.g., the last four digits of your bKash or Nagad mobile number), and transaction status. We do not store your full mobile money PIN or complete account number.

Technical and Usage Data

When you access okla.vip, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device type, session duration, pages visited, and referring URL. This data is used for platform security, fraud detection, and performance optimisation.

02 How We Use Your Data

okla processes your personal data only for the specific purposes described in this Privacy Policy. We do not use your data for purposes that are incompatible with those stated here without first obtaining your consent or establishing a separate lawful basis for processing. The primary purposes for which we use your data are as follows:

• Account Management: To create, maintain, and administer your okla player account, including processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay.
• Identity and Age Verification: To verify that you are aged 18 or above and to confirm your identity in accordance with our KYC obligations, thereby protecting the platform from underage gambling and fraudulent account creation.
• Transaction Processing: To process your financial transactions accurately and securely, including recording deposit and withdrawal histories and reconciling your account balance.
• Fraud Prevention and Security: To monitor account activity for signs of fraudulent behaviour, collusion, multi-accounting, or other prohibited conduct as defined in our Terms & Conditions, and to take appropriate action where such activity is detected.
• Responsible Gaming: To support your use of responsible gaming tools such as deposit limits, loss limits, session reminders, and self-exclusion, and to comply with our obligations regarding player protection.
• Customer Support: To respond to your queries, complaints, and account-related requests submitted via [email protected] or through our live support channels.
• Platform Improvement: To analyse aggregate, anonymised usage patterns and technical performance data in order to improve the functionality, stability, and user experience of the okla platform.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory and law enforcement authorities, and fulfil our financial reporting obligations.
• Marketing Communications: Where you have given explicit consent, to send you promotional communications about okla bonuses, seasonal offers (such as Eid and BPL promotions), and platform updates. You may withdraw this consent at any time by contacting [email protected].

okla processes your personal data on the basis of contractual necessity (to perform our agreement with you as a player), legal obligation (to comply with applicable law), legitimate interests (to prevent fraud and improve the platform), and, where applicable, your explicit consent (for marketing communications).

03 Data Sharing & Disclosure

okla does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described:

Payment Service Providers

In order to process your deposits and withdrawals, we transmit necessary transaction data to your chosen mobile money provider (bKash, Nagad, Rocket, or Upay). The data shared is limited to what is required to authenticate and complete the specific transaction. Each payment provider operates under its own privacy policy and security framework, which we encourage you to review.

Identity Verification Partners

okla may engage specialist third-party KYC verification services to assist in confirming the authenticity of identity documents submitted by players. These partners are contractually bound to process identity data solely for verification purposes and are prohibited from using it for any other purpose.

Fraud Prevention and Security Services

We may share IP addresses, device fingerprints, and behavioural data with fraud detection service providers to identify and prevent prohibited conduct on the platform. These providers act as data processors under our instruction and are subject to strict data handling requirements.

Legal and Regulatory Authorities

okla will disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where we are legally required to do so — for example, in response to a valid court order, anti-money laundering investigation, or official inquiry. We will notify affected players of such disclosure where we are legally permitted to do so.

Business Transfers

In the event that okla undergoes a merger, acquisition, or transfer of some or all of its assets to another entity, player data may be transferred to the acquiring party as part of that transaction. In such a case, we will endeavour to notify affected players via email prior to any transfer and will ensure that the acquiring party is bound by privacy obligations no less protective than those set out in this policy.

04 Cookies & Tracking

okla uses cookies and similar tracking technologies on okla.vip to ensure the platform functions correctly, to maintain your login session, and to detect and prevent fraudulent activity. This section explains the types of cookies we use and the purpose of each.

Essential Cookies

These cookies are strictly necessary for the okla platform to function. They enable core features such as player authentication, session management, and security token validation. Without these cookies, the platform cannot operate correctly and you would be unable to log in or place bets. These cookies cannot be disabled.

Performance and Analytics Cookies

okla uses anonymised analytics cookies to understand how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is collected in aggregate form and cannot be used to identify individual players. It is used exclusively to improve platform performance and user experience.

Fraud Detection Cookies

To protect players and the integrity of our games, okla deploys cookies that record device characteristics and behavioural patterns associated with fraudulent or automated activity. These cookies are essential to maintaining a fair and secure gaming environment.

Managing Cookies

Most modern web browsers allow you to view, manage, and delete cookies through the browser's settings menu. Please note that disabling essential cookies will impair your ability to use the okla platform, including your ability to log in and access your account. Disabling performance cookies will not affect platform functionality but will limit our ability to improve our service.

05 Data Retention

okla retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your active okla account, plus a minimum of five years following account closure, to comply with financial record-keeping obligations.
• Identity Verification Documents: Retained for a minimum of five years from the date of submission, in accordance with anti-money laundering requirements.
• Transaction Records: Retained for a minimum of five years from the date of each transaction, for financial audit and dispute resolution purposes.
• Support Communications: Retained for three years from the date of the last communication, to support dispute resolution and service improvement.
• Technical and Usage Logs: Retained for a maximum of twelve months, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus one year after consent withdrawal, as evidence of your original consent.

When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents recovery. Anonymised data (which can no longer be linked to an individual) may be retained indefinitely for aggregate statistical analysis.

06 Data Security

okla takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and okla's servers, indicated by the HTTPS prefix on all okla.vip pages.
• AES-256 encryption for all personal data stored on okla's servers, including identity documents and account information.
• Role-based access controls that limit access to personal data to only those okla staff members and contractors who require it to perform their legitimate functions.
• Regular security audits and penetration testing of the okla platform and its supporting infrastructure.
• Automated anomaly detection systems that monitor for unusual login activity, bulk data access, and other indicators of potential data breach.
• Two-factor authentication options for player accounts, which we strongly recommend all okla users enable to protect their account from unauthorised access.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your own okla login credentials confidential and for ensuring that no unauthorised person has access to your account. If you believe your account has been compromised, contact [email protected] immediately.

07 Your Privacy Rights

As a registered player on the okla platform, you hold the following rights in respect of your personal data. These rights may be exercised at any time by contacting us at [email protected] with the subject line "Privacy Rights Request". We will respond to all valid requests within seven (7) business days on Bangladesh Standard Time.

Right of Access

You have the right to request a copy of the personal data that okla holds about you. Upon receipt of a valid access request, we will provide you with a summary of the categories of data held, the purposes for which it is processed, and the recipients with whom it has been shared.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields (such as your registered email address or phone number), you may be able to update this information directly through your account settings. For data that cannot be self-corrected, contact [email protected].

Right to Erasure

You may request that okla delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where you believe the data has been processed unlawfully. Please note that this right is subject to our legal obligations: we may be required to retain certain data (such as transaction records and identity verification documents) for a minimum statutory period regardless of an erasure request.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of your data or object to a particular processing activity — you have the right to request that we restrict the processing of your data while the matter is investigated. During a restriction period, okla will continue to store your data but will not actively process it except for the purpose of storage or to establish, exercise, or defend legal claims.

Right to Object to Marketing

If you have previously consented to receiving promotional communications from okla, you may withdraw that consent and object to further marketing at any time by contacting [email protected]. We will process your opt-out request within five business days and will not send further marketing communications to your registered email or phone number after that point.

08 Policy Updates & Contact

okla reviews this Privacy Policy periodically to ensure it remains accurate, complete, and reflective of our current data practices. We reserve the right to update or amend this policy at any time. Where we make material changes — for example, changes to the categories of data we collect or the purposes for which we use it — we will notify registered players via the email address associated with their okla account at least seven days before the updated policy takes effect.

The date displayed at the top of this page ("Last Reviewed") indicates when this policy was most recently updated. We encourage you to review this page from time to time. Your continued use of the okla platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

How to Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data has been handled by okla, please contact our support team using the details below. We take all privacy queries seriously and will endeavour to respond promptly.

• Email: [email protected] (subject line: "Privacy Enquiry" or "Privacy Rights Request")
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Within seven (7) business days for formal rights requests; within 48 hours for general privacy enquiries
• Language: English

This Privacy Policy is written in English and governs the relationship between okla and its players with respect to personal data. By registering an account on okla.vip and using our services, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this policy, please do not register an account or continue using the okla platform.