Privacy Policy
At ok baja, protecting your personal data is a fundamental responsibility we take seriously. This Privacy Policy explains precisely what information we collect from registered players in Bangladesh, how that information is used, who we may share it with, and the rights you hold over your own data. Transparency is a core value of the ok baja platform.
Your Data, Your Rights
These cards summarise ok baja's core data privacy commitments. The full legal text follows in the sections below — please read everything carefully.
1. Information We Collect
ok baja collects personal information from players at different stages of the account lifecycle, from initial registration through to ongoing account activity. The categories of information we collect and the circumstances in which we collect them are set out below.
1.1 Registration Data
When you create an ok baja account, we collect the following information directly from you:
- Full legal name (as it appears on your government-issued identification document)
- Date of birth (for age verification purposes — ok baja is an 18+ platform)
- Email address (used for account communications and verification)
- Bangladesh mobile phone number (required to link your bKash, Nagad, or Rocket mobile money account)
- Residential address in Bangladesh (city, district, and postcode)
- Preferred currency: Bangladeshi Taka (BDT / ৳)
- Username and encrypted password credentials
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) compliance process, which is mandatory before any withdrawal can be processed, ok baja may request and retain copies of the following documents:
- Bangladesh National Identity Card (NID) — front and back
- Valid passport biographical page
- Proof of residential address (utility bill, bank statement, or official correspondence dated within the last three months)
- Selfie photograph or liveness check for identity matching
- Payment method verification (screenshot or confirmation of your bKash, Nagad, or Rocket account in your own name)
1.3 Transaction & Financial Data
When you make deposits or withdrawal requests, ok baja records:
- Transaction amounts in BDT (৳)
- Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
- Transaction timestamps and reference numbers
- Account balance history (deposits, withdrawals, bonus credits, wagers, and winnings)
1.4 Gameplay & Behavioural Data
ok baja automatically records data about how you use the platform, including:
- Games played, bet amounts, session durations, and game outcomes
- Pages visited on ok baja and time spent on each section
- Search queries made within the platform
- Responsible gaming tool interactions (deposit limit settings, self-exclusion requests, time-out activations)
1.5 Technical & Device Data
When you access ok baja, our servers automatically collect technical information including:
- IP address and approximate geographic location (country and city level)
- Device type, operating system, and browser version
- Referring URL (how you arrived at ok baja)
- Cookie identifiers and session tokens (see Section 4 for full cookie details)
Note on Sensitive Data: ok baja does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond liveness checks for identity verification), or health information, except where specifically required by applicable law or with your explicit consent.
2. How We Use Your Data
ok baja processes personal data only where a lawful basis exists to do so. The primary lawful bases applicable to our processing activities are: (a) performance of a contract with you as a registered player; (b) compliance with legal obligations; (c) our legitimate business interests; and (d) your explicit consent where separately requested. The table below summarises our core processing activities and their lawful basis.
| Processing Activity | Data Categories Used | Lawful Basis |
|---|---|---|
| Account creation and management | Registration data, technical data | Contract performance |
| Age and identity verification (KYC) | KYC documents, registration data | Legal obligation |
| Processing deposits and withdrawals | Transaction data, KYC data | Contract performance |
| Delivering games and betting markets | Gameplay data, technical data | Contract performance |
| Fraud prevention and AML compliance | All categories | Legal obligation, legitimate interest |
| Responsible gaming monitoring | Gameplay data, behavioural data | Legal obligation, legitimate interest |
| Customer support communications | Registration data, transaction data | Contract performance |
| Platform improvement and analytics | Technical data, behavioural data (aggregated) | Legitimate interest |
| Promotional communications (opt-in) | Registration data, gameplay data | Consent |
Marketing Communications
ok baja may send you promotional emails, SMS notifications, or in-platform messages about bonuses, seasonal offers (such as BPL season promotions or Eid special campaigns), new game launches, and platform updates. You will only receive direct marketing communications if you have opted in to receive them. You may withdraw your consent at any time by contacting support at [email protected] or by updating your communication preferences in your account settings.
ok baja does not use your personal data to make fully automated decisions that produce significant legal or similarly consequential effects without human review. Where automated tools assist in fraud or AML detection, a qualified compliance team member reviews flagged cases before any account action is taken.
3. Data Sharing & Third Parties
ok baja does not sell your personal data. We share personal data with third parties only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.
3.1 Game Technology Providers
To deliver the live casino, slot, crash game, and fishing game experiences available on ok baja, we share necessary technical session data with our game studio partners, which include Evolution Gaming, Ezugi, Microgaming, Pragmatic Play, Spribe, and NetEnt. These providers receive session tokens and anonymous player identifiers but do not receive your full personal profile. All game technology partners are bound by contractual data processing obligations.
3.2 Payment Service Providers
To process deposits and withdrawals in BDT, ok baja shares transactional data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard. These providers receive only the minimum data required to execute the specific transaction and are governed by their own published privacy policies and applicable financial regulations.
3.3 Identity Verification Services
ok baja uses third-party identity verification platforms to assist with KYC document verification and liveness checks. These providers process the identity documents and selfies you submit during the verification process under strict data processing agreements and may not retain your data beyond the period required to complete verification.
3.4 Legal and Regulatory Authorities
ok baja may be required by law to disclose personal data to government bodies, financial intelligence units, law enforcement agencies, or courts. In such cases, ok baja will disclose the minimum data required to comply with the legal obligation and will, where permitted by law, notify the relevant player of any such disclosure.
3.5 Business Transfers
In the event that ok baja undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by ok baja may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and the applicable privacy terms of the successor entity via email at the address registered to their account.
International Data Transfers: Some of ok baja's technology partners may process personal data outside Bangladesh. Where such transfers occur, ok baja ensures that appropriate safeguards are in place — including contractual data transfer clauses — to maintain a standard of protection equivalent to that applied within Bangladesh. If you have concerns about international data transfers involving your personal information, contact [email protected].
5. Data Security & Retention
ok baja implements a layered approach to data security, combining technical, organisational, and procedural safeguards designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure.
Technical Safeguards
- All data in transit between your device and ok baja's servers is encrypted using TLS 1.2 or higher (SSL encryption visible in your browser's address bar).
- Stored personal data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
- Passwords are stored as salted cryptographic hashes — ok baja staff cannot read your plain-text password at any time.
- Access to personal data within ok baja's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls and monitored via audit logs.
- ok baja's platform undergoes regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses.
Data Retention Periods
ok baja retains personal data for the following periods, after which data is securely deleted or anonymised:
- Active account data: Retained for the lifetime of your ok baja account plus a minimum of five years following account closure, to meet anti-money laundering record-keeping obligations.
- KYC verification documents: Retained for a minimum of five years following account closure or the completion of the last transaction, in accordance with applicable financial regulations.
- Transaction records: Retained for five years from the date of each transaction.
- Marketing consent records: Retained for as long as the consent remains valid and for three years thereafter as a compliance record.
- Support interaction records: Retained for three years from the date of the interaction.
- Technical and analytical data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes; individual-level technical logs are deleted after 24 months.
Data Breach Response
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, ok baja will take immediate steps to contain the breach, assess the risk, and notify affected players without undue delay. ok baja will also comply with all applicable regulatory notification obligations. If you suspect that your ok baja account has been compromised, please contact support at [email protected] immediately.
6. Your Privacy Rights
As a registered player at ok baja, you hold a number of rights in relation to the personal data we hold about you. ok baja is committed to honouring these rights promptly and transparently. To exercise any of the rights described in this section, please contact our support team at [email protected] with your account username and a description of your request. ok baja aims to respond to all privacy rights requests within 30 days of receipt.
Right of Access
You have the right to request a copy of the personal data ok baja holds about you, along with information about how that data is processed. This is sometimes called a Subject Access Request (SAR). ok baja will provide a structured summary of your data in a commonly used, machine-readable format where technically feasible.
Right to Rectification
If any personal data ok baja holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that certain data fields — such as your registered name — may require submission of updated identity documentation before corrections can be applied, to maintain the integrity of our KYC records.
Right to Erasure
In certain circumstances, you may request that ok baja delete the personal data it holds about you. This right is not absolute — ok baja is required by law to retain certain data categories (particularly KYC records and transaction histories) for defined minimum periods regardless of an erasure request. Where erasure is not possible in full, ok baja will explain why and will delete all data that is not subject to a legal retention obligation.
Right to Restrict Processing
You have the right to ask ok baja to restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed. During a processing restriction, ok baja will continue to store the relevant data but will not actively use it except where required by law or with your consent.
Right to Object
You may object to ok baja processing your personal data for direct marketing purposes at any time, with no requirement to provide justification. You may also object to processing carried out on the basis of ok baja's legitimate interests, though ok baja may be entitled to continue processing if compelling legitimate grounds exist that override your interests.
Right to Withdraw Consent
Where ok baja processes your personal data on the basis of your consent (for example, for direct marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
How to Submit a Privacy Rights Request: Email [email protected] with the subject line "Privacy Rights Request — [Your Username]". Include a brief description of the right you wish to exercise and, where relevant, the specific data or processing activity concerned. ok baja may ask you to verify your identity before processing the request to protect against unauthorised access to another player's data.
7. Children & Underage Users
ok baja is strictly an adult-only platform. No person under the age of 18 years is permitted to register an account, deposit funds, place bets, or participate in any game or promotion available on ok baja. This restriction applies universally across all sections of ok-baja.net.
ok baja does not knowingly collect personal data from any individual under the age of 18. During registration, all players are required to confirm their date of birth and agree to the age declaration. Following registration, ok baja operates a mandatory KYC identity verification process that includes document-based age confirmation. Any account found to have been registered by or used by a person under 18 will be closed immediately, all winnings will be voided, and any deposited funds will be returned to the originating payment account following verification.
If you are a parent or guardian and believe that a minor in your care has registered an ok baja account or accessed the platform, please contact us immediately at [email protected]. ok baja treats all reports of potential underage access as high-priority and will investigate and resolve such reports as quickly as possible.
Parental Controls: ok baja recommends that parents and guardians of minors use available device-level parental control software and internet filtering tools to restrict access to online gambling platforms. ok baja supports responsible use of technology and encourages all adults who share devices with minors to apply appropriate access restrictions.
8. Policy Updates & Contact
ok baja reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the structure of our platform and technology partnerships. When material changes are made to this Privacy Policy, ok baja will notify registered players via email to the address associated with their account and will update the "Effective Date" displayed at the top of this page. We encourage you to review this Privacy Policy each time you visit ok-baja.net to stay informed about how we protect your data.
Minor clarifications, editorial corrections, and non-substantive updates may be made without specific player notification. The version of this Privacy Policy published at ok-baja.net/privacy-policy at any given time is the authoritative and current version. Continued use of the ok baja platform following the publication of any updated Privacy Policy constitutes your acknowledgment of the revised terms.
Contact Our Privacy Team
If you have any questions, concerns, or requests relating to this Privacy Policy or the way ok baja handles your personal data, please contact us using the details below. Our support team operates during Bangladesh Standard Time (BST, UTC+6) business hours and aims to respond to all privacy-related enquiries within 48 hours.
- Email: [email protected] (plain text — not a clickable link)
- Subject Line (recommended): "Privacy Enquiry — [Your Username]"
- Response Time: Within 48 business hours (BST, UTC+6)
- Postal Address: Available upon request for formal legal correspondence
Last Updated: 1 January 2026. This Privacy Policy is effective as of the date stated above and supersedes all prior versions. The full history of material policy changes is available upon written request submitted to [email protected].
Play With Confidence at ok baja
Your privacy is protected every step of the way at ok baja. Explore our full game library — live casino, cricket betting, premium slots, and more — knowing your personal data is handled with care. All transactions in BDT via bKash, Nagad, and Rocket. 18+ only.