okx8 Privacy Policy

1. Information We Collect

When you register for and use an okx8 account, we collect personal data across several categories. The table below sets out the main types of data we collect, the source from which we collect them, and the legal basis for doing so.

1.1 Data We Do Not Collect

okx8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for identification purposes (other than identity photographs required for KYC). We do not knowingly collect data from persons under the age of 18. If we become aware that data has been collected from a minor, we will delete it immediately and close the associated account.

2. How We Use Your Data

okx8 uses your personal data exclusively for the following purposes. We will not use your data for any purpose that is incompatible with the reason it was originally collected without first obtaining your explicit consent.

2.1 Account Management and Service Delivery

The primary use of your personal data is to create and maintain your okx8 account, authenticate your identity at login, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank, deliver sports betting and casino services, and provide customer support. Without this processing, we cannot perform our contractual obligations to you as a registered player.

2.2 Identity Verification and Regulatory Compliance

We are obligated to verify the identity and age of all players who request withdrawals. Identity data and NID documentation are used exclusively for this purpose and for complying with anti-money laundering (AML) requirements. Verified documents are stored securely and are not used for any marketing or profiling activity.

2.3 Fraud Prevention and Security

Technical data including IP addresses, device fingerprints, and login timestamps are analysed to detect and prevent fraudulent activity such as multi-accounting, unauthorised account access, and bonus abuse. This processing is carried out on the basis of okx8's legitimate interest in maintaining a secure platform for all players.

2.4 Responsible Gaming Monitoring

Gameplay data including bet frequency, session duration, deposit patterns, and loss history may be used to identify players who may be exhibiting signs of problematic gambling behaviour. Where such patterns are detected, our responsible gaming team may reach out to offer support tools such as deposit limits or self-exclusion. This processing is carried out to fulfil our responsible gaming obligations. For more information, please visit our Responsible Gaming page.

2.5 Platform Improvement and Analytics

Aggregated and anonymised usage data may be used to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data cannot be used to identify individual players and is used solely to improve the okx8 experience for the Bangladeshi player community.

2.6 Marketing Communications

With your consent, we may send you promotional emails or SMS messages about new games, bonuses, and seasonal promotions — for example, BPL cricket season offers or Eid special promotions. You may withdraw your marketing consent at any time by contacting our support team or by following the unsubscribe instructions in any marketing message. Withdrawing marketing consent does not affect your ability to use the platform or our ability to send you essential account-related communications.

3. Data Sharing & Disclosure

okx8 does not sell, license, or trade your personal data. We share data only with the following categories of recipient, and only to the extent necessary for the stated purpose:

3.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary transaction and identity information with our payment partners, including mobile money providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank). These providers receive only the data required to execute and verify your specific transaction and are prohibited from using it for any other purpose.

3.2 KYC and Identity Verification Services

Identity documents submitted for KYC verification may be processed by a third-party verification service provider. These providers act as data processors under our instruction and are bound by data processing agreements that restrict their use of your data to the verification task alone.

3.3 Game Software Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a pseudonymous player identifier and session token to initialise game sessions. These providers do not receive your name, contact details, or financial information. Game session data is governed by both this Privacy Policy and the relevant provider's own data practices.

3.4 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the okx8 business, personal data held by okx8 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

4. Cookies & Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences, and collect information about how you interact with the site. okx8 uses cookies and similar technologies such as local storage and session tokens to operate the platform effectively.

4.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: Remember your preferences such as language settings, display options, and last-visited game categories. These improve your experience but are not essential to core platform operation.
• Analytics cookies: Collect anonymised information about how players navigate the platform — for example, which pages are visited most frequently or where users drop off during the deposit flow. This data is aggregated and cannot identify individual players.
• Security cookies: Used by our fraud detection systems to identify unusual access patterns or device anomalies that may indicate unauthorised account access.

4.3 Managing Cookies

You can manage or delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or receive a notification before a cookie is placed. Please be aware that disabling strictly necessary cookies will prevent you from logging into your okx8 account and using the platform. For instructions on managing cookies in your specific browser, please consult the browser's help documentation.

5. Data Retention

okx8 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and no longer. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to any individual. Where anonymisation is not technically feasible, data will be rendered inaccessible pending secure deletion at the next scheduled purge cycle.

6. Your Data Rights

As a registered okx8 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat inside your account or by email at [email protected]. We will respond to all verified requests within 10 business days.

Please note that some rights are subject to limitations. For example, we cannot delete financial transaction records that are required by law to be retained for a minimum period. Where a request cannot be fulfilled in full, we will explain the reason and advise on alternative options available to you.

7. Data Security

okx8 implements a layered approach to data security, combining technical safeguards, operational controls, and staff training to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Encryption in transit: All data transferred between your device and okx8 servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across the entire okx8.bet domain.
• Encryption at rest: Sensitive personal data and financial records stored in our databases are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data within okx8 is strictly role-based. Staff members can only access the data necessary to perform their specific job function. All access is logged and subject to periodic audit.
• Password security: Account passwords are stored as salted cryptographic hashes. okx8 staff cannot retrieve your password in plain text. If you forget your password, a secure reset process is initiated via your registered mobile number or email.
• Penetration testing: The okx8 platform undergoes periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Data breach response: In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, okx8 will notify affected players promptly by email or in-account notification, and will take immediate steps to contain the breach and mitigate harm.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

okx8 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When material changes are made, we will notify registered players via email or a prominent in-platform notice at least 14 days before the changes take effect. The updated policy will always be published on this page with a revised effective date at the top. Your continued use of the okx8 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.

8.2 How to Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy, about how okx8 processes your personal data, or if you wish to exercise any of your data rights, please contact our support team using the details below:

• Live chat: Available 24/7 in English inside your okx8 account dashboard.
• Email: [email protected] — please include "Privacy Request" in the subject line so your message reaches the correct team.
• Response time: We aim to acknowledge all privacy-related requests within 2 business days and to provide a full response within 10 business days. Complex requests involving large volumes of data may require additional time, in which case we will inform you of the extended timeline.

8.3 Relationship to Other okx8 Policies

This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, which together form the complete framework governing your relationship with okx8. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, the Privacy Policy will take precedence.