okx8 Privacy Policy — How We Protect Your Personal Data in Bangladesh

Introduction & Scope

okx8 ("the Platform", "we", "us", "our") takes the privacy of every user seriously. This Privacy Policy sets out how okx8 collects, processes, stores, shares, and protects the personal data of individuals ("Players", "Users", "you") who access or use the okx8 platform, including its website, account services, casino games, sports betting products, and customer support channels.

This policy applies to all personal data we process regardless of the medium through which it is submitted — whether via account registration forms, deposit and withdrawal transactions, live chat conversations, email correspondence, or automatic data collection technologies such as cookies and server logs.

This Privacy Policy should be read alongside the okx8 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this policy and any other document, this Privacy Policy shall prevail on all matters relating to personal data.

Data Controller Identity

For the purposes of applicable data protection law, okx8 is the data controller in respect of the personal data of registered users of the okx8 platform. As data controller, okx8 determines the purposes for which personal data is processed and the means by which that processing is carried out.

All data protection queries, rights requests, and complaints should be directed to the okx8 Data Protection contact at [email protected]. Correspondence should include the subject line "Data Protection Request" and, where applicable, the registered email address associated with your okx8 account to enable efficient handling.

What Data We Collect

okx8 collects the following categories of personal data from players and, where applicable, from third-party sources such as payment processors and identity verification providers.

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Registered email address
• Mobile phone number (Bangladesh-registered, capable of receiving SMS)
• Residential address, city, and postal code within Bangladesh
• National Identity Card number, passport number, or driving licence number (collected during KYC verification)

3.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Bangladeshi Taka (৳), timestamps, and payment method identifiers
• bKash, Nagad, Rocket, or Upay mobile wallet account references (not full wallet credentials)
• Visa or Mastercard details in tokenised form, as processed by our PCI-DSS-compliant payment partners
• Account balance history and wagering activity records

3.3 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Pages visited, features accessed, session duration, and click-stream data
• Game session logs including game titles, wager amounts, and outcomes
• Login timestamps and authentication event logs

3.4 Communications Data

• Records of live chat conversations with the okx8 support team
• Email correspondence submitted to [email protected]
• Feedback, complaints, and dispute resolution correspondence

How We Collect Your Data

okx8 collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotional activities
• Automated Technologies: Data collected automatically when you access the platform, including cookies, server logs, web beacons, and similar tracking technologies (see Section 8)
• Third-Party Sources: Data received from identity verification providers, payment processing partners (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors), and fraud prevention services where necessary to complete account verification or transaction processing
• Public Sources: In limited circumstances, publicly available information may be referenced for the purpose of fraud detection or AML compliance checks

Legal Basis for Processing

okx8 processes your personal data on the following legal bases, each of which applies to specific processing activities as described below.

How We Use Your Data

okx8 uses the personal data it collects for the following purposes, each of which is consistent with the legal bases described in Section 5.

6.1 Account Management

To create, maintain, and secure your okx8 account; to verify your identity and age (21+); to process login authentication; and to manage account-level settings including deposit limits, responsible gaming tools, and communication preferences.

6.2 Payment Processing

To facilitate deposits in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to process withdrawal requests to your registered payment method; to maintain accurate transaction records; and to investigate disputed transactions where required.

6.3 Regulatory Compliance

To fulfil our obligations under applicable anti-money laundering regulations, including customer due diligence, enhanced due diligence for high-value accounts, and suspicious activity monitoring and reporting to relevant financial intelligence authorities where legally required.

6.4 Platform Improvement

To analyse aggregated, anonymised usage patterns across the okx8 platform; to identify technical issues and improve performance; and to develop and test new features, game categories, and responsible gaming tools that better serve Bangladeshi players.

6.5 Marketing Communications

Where you have provided explicit consent, to send you promotional communications about okx8 offers, bonuses, cricket betting markets (including BPL and IPL events), and platform updates. You may withdraw your marketing consent at any time by updating your communication preferences in the account settings panel or by contacting [email protected].

6.6 Responsible Gaming

To monitor gameplay patterns for indicators of problem gambling behaviour; to enforce self-exclusion requests and cooling-off periods; to apply deposit limits set by the player; and to contact players proactively where our monitoring systems identify a potential risk to their wellbeing.

Sharing Your Data

okx8 does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

7.1 Payment Service Providers

Personal and financial data is shared with payment processing partners — including the operators of bKash, Nagad, Rocket, Upay, and card network processors for Visa and Mastercard — solely to the extent necessary to authorise and complete your deposit or withdrawal transactions. These partners are contractually prohibited from using your data for any other purpose.

7.2 Identity Verification Providers

During KYC verification, identity data including your name, date of birth, and document reference may be shared with accredited third-party identity verification services. These providers process your data under strict contractual data processing agreements and are permitted to use it only for the purposes of completing your verification check.

7.3 Fraud Prevention & AML Services

Transaction data and account activity information may be shared with specialist fraud prevention and anti-money laundering analytics providers to protect the integrity of the platform. In cases where suspicious activity is identified, relevant data may be disclosed to financial intelligence authorities as required by applicable law.

7.4 Legal Obligations

okx8 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, legal process, or binding regulatory instruction. We will, where legally permissible, notify affected users of such disclosures.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the okx8 business, personal data held by okx8 may be transferred to the acquiring entity as part of that transaction. Affected users will be notified in advance and afforded the opportunity to exercise applicable data rights prior to any such transfer taking effect.

Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the okx8 platform. They enable the platform to recognise your device across sessions, remember your preferences, and collect usage data to improve platform performance.

8.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery attacks. These cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your account preferences, including selected game categories, responsible gaming settings, and communication language. These improve your experience but are not essential to basic operation.
• Analytics Cookies: Used to collect anonymised data about how players navigate the platform, which features are most used, and where technical errors occur. This data is used exclusively for internal performance improvement purposes and is not shared with advertising networks.

8.3 Managing Cookies

You may manage or disable non-essential cookies via your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the okx8 platform, including logging into your account. Detailed instructions for managing cookies in all major browsers are available in your browser's help documentation.

Data Retention

okx8 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, data is archived in a restricted-access environment with access limited to compliance personnel only.

Data Security

okx8 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Transport Layer Security: All data transmitted between your device and okx8 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption, ensuring that data in transit cannot be intercepted by third parties
• Data at Rest Encryption: Personal data stored within okx8's database infrastructure is encrypted at rest using AES-256, with encryption keys managed through a dedicated key management system
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All staff with data access privileges are subject to background checks, confidentiality agreements, and regular security awareness training
• Intrusion Detection: okx8's infrastructure is protected by real-time intrusion detection systems, automated anomaly alerting, and regular third-party penetration testing
• Incident Response: okx8 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected users will be notified without undue delay

Your Privacy Rights

As an okx8 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". okx8 will respond within 30 days of receiving a valid, verifiable request.

11.1 Right of Access

You have the right to request a copy of all personal data that okx8 holds about you, together with information about the purposes for which it is processed, the categories of data involved, and the third parties to whom it has been disclosed.

11.2 Right to Rectification

You have the right to request the correction of any personal data held by okx8 that is inaccurate or incomplete. Where data is used for identity verification or AML compliance, corrections may require submission of updated supporting documentation.

11.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to any overriding legal retention obligations, such as AML transaction record-keeping requirements.

11.4 Right to Restriction of Processing

You have the right to request that okx8 restricts its processing of your personal data in certain circumstances — for example, while a rectification request is under review, or where you have objected to processing based on legitimate interests pending verification of our grounds.

11.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format so that you can transmit it to another controller.

11.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming purposes. okx8 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for the establishment or defence of legal claims.

11.7 Right to Withdraw Consent

Where processing is based on your consent — for example, the sending of marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Children & Minors

The okx8 platform is strictly intended for adults aged 21 years and above. okx8 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use this platform, register an account, or submit any personal data to okx8.

If okx8 becomes aware that it has collected personal data from an individual under the age of 21, it will take immediate steps to delete that data, close the associated account, and void any transactions or balances associated with it. If you believe that a minor has registered an account on okx8, please contact us immediately at [email protected].

International Data Transfers

Your personal data may be processed on servers or by service providers located outside of Bangladesh. Where such international transfers occur, okx8 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles. These safeguards include contractual data processing agreements incorporating standard data protection clauses and, where relevant, supplementary technical measures such as encryption and pseudonymisation.

In all cases, okx8 conducts a transfer impact assessment prior to engaging any data processor located outside of Bangladesh, and will only proceed where it is satisfied that your data will receive an adequate level of protection.

Changes to This Privacy Policy

okx8 reserves the right to update or amend this Privacy Policy at any time. Where a change is material — that is, where it alters the type of data collected, the purposes for which it is used, the third parties with whom it is shared, or your rights — okx8 will provide at least 14 days' advance notice by posting a prominent notice on the platform and, where possible, sending a notification to your registered email address.

The "Last Updated" date at the top of this policy will always reflect the date on which the most recent version came into effect. We recommend reviewing this policy periodically. Your continued use of the okx8 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

How to Contact Us

For all privacy-related queries, rights requests, or complaints regarding okx8's handling of your personal data, please contact us through the following channels. Our data protection team will acknowledge your request within 5 business days and provide a substantive response within 30 days.

• Email: [email protected] — Subject line: "Privacy Rights Request" or "Data Protection Enquiry"
• Live Chat: Available 24/7 via the in-platform chat widget, staffed in Bangladesh Standard Time (BST, UTC+6)
• Response Time Target: Acknowledgement within 5 business days; full response within 30 calendar days

If you are dissatisfied with the outcome of your request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.