OKZ Privacy Policy

This Privacy Policy ("Policy") describes how OKZ ("OKZ", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "Member") who register for and use the OKZ platform, including the website at okz.asia and the OKZ mobile application.

OKZ is committed to handling your personal data responsibly and transparently. We collect only what we need, use it only for the purposes described in this Policy, and protect it with appropriate technical and organisational measures at all times.

By registering an OKZ account or using any part of the OKZ platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with this Policy, please do not use the OKZ platform.

OKZ collects personal data in three main ways: data you provide directly when registering or using the platform, data generated automatically by your use of the platform, and data received from third parties such as payment processors during identity verification.

OKZ uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• Account Management: To create, maintain, and secure your OKZ account, including verifying your identity and age at registration.
• Payment Processing: To process your deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate transaction records.
• Platform Operation: To deliver the games, features, and services available on OKZ, and to personalise your experience where appropriate.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance when you contact the OKZ support team.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, money laundering, and other illegal or prohibited behaviour on the OKZ platform.
• Legal Compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) obligations and know-your-customer (KYC) requirements.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the OKZ platform and fix issues.
• Responsible Gaming: To monitor gaming behaviour and identify members who may need responsible gaming support, in line with OKZ's duty of care obligations.

OKZ processes your personal data on the following legal bases:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to fulfil the contract between you and OKZ — specifically, to operate your account and process your transactions.
• Legal Obligation: OKZ is required by law to collect and retain certain data for AML compliance, KYC verification, and regulatory reporting purposes.
• Legitimate Interests: OKZ processes technical and usage data on the basis of its legitimate interest in operating a secure, functional, and fraud-free platform.
• Consent: Where OKZ processes your data for purposes beyond those listed above — such as sending you promotional communications — it will first obtain your explicit consent, which you may withdraw at any time.

OKZ does not sell your personal data. OKZ may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Processors: bKash, Nagad, and Rocket receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• Identity Verification Providers: OKZ uses third-party KYC service providers to verify your identity and age. These providers receive only the data necessary to complete the verification process.
• Game Providers: The game studios whose titles are available on OKZ may receive anonymised technical data (such as session data) to support game functionality. They do not receive your personal identity or financial data.
• Legal and Regulatory Authorities: OKZ will disclose your data to law enforcement, regulatory bodies, or other authorities when required to do so by law, court order, or regulatory direction.
• IT and Security Service Providers: OKZ uses trusted third-party providers for hosting, security monitoring, and platform infrastructure. These providers are contractually bound to process your data only on OKZ's instructions and to maintain appropriate security standards.

OKZ uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. Cookies are small text files stored on your device when you visit the OKZ website.

OKZ uses the following types of cookies:

• Essential Cookies: Required for the OKZ platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies.
• Functional Cookies: Remember your preferences such as language settings and display options to improve your OKZ experience.
• Analytics Cookies: Collect anonymised data about how members use the OKZ platform — which pages are visited most, where members encounter errors, and how long sessions last. This data helps OKZ improve the platform.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the OKZ platform. OKZ does not use third-party advertising cookies or tracking pixels for ad targeting purposes.

OKZ retains your personal data for as long as your account is active and for a period after account closure as required by applicable law and regulation. The specific retention periods that apply to different categories of data are as follows:

• Account and Identity Data: Retained for the duration of your OKZ membership and for a minimum of five years after account closure, in line with AML regulatory requirements.
• Transaction Data: Retained for a minimum of five years from the date of each transaction, as required by financial regulations.
• Support Communications: Retained for two years from the date of the last communication, unless the communication relates to an ongoing dispute or legal matter.
• Technical and Usage Data: Retained for up to 12 months from collection, after which it is anonymised or deleted.

When your data is no longer required for the purposes for which it was collected and no legal retention obligation applies, OKZ will securely delete or anonymise it.

OKZ takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the OKZ platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls that restrict internal access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of the OKZ platform infrastructure.
• Multi-factor authentication for internal OKZ systems that handle personal data.
• Continuous monitoring for suspicious activity and automated alerts for potential security incidents.

As an OKZ member, you have the following rights in relation to your personal data. To exercise any of these rights, contact OKZ support at [email protected]. OKZ will respond to all valid requests within 30 days.

OKZ is strictly an 18+ platform. OKZ does not knowingly collect personal data from anyone under the age of 18. If OKZ discovers that it has inadvertently collected data from a person under 18, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has registered an OKZ account or provided personal data to OKZ, please contact OKZ support at [email protected] immediately. OKZ will investigate and take appropriate action without delay.

OKZ may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable law, or improvements to OKZ's privacy practices. When this Policy is updated, the revised version will be published on this page with an updated effective date.

For significant changes that materially affect how OKZ uses your personal data, OKZ will notify you via email or an in-platform notification before the changes take effect. Your continued use of the OKZ platform after any update to this Policy constitutes your acceptance of the revised terms.

OKZ encourages you to review this Privacy Policy periodically to stay informed about how your data is being protected. If you have any concerns about a change to this Policy, contact OKZ support before continuing to use the platform.

If you have any questions about this Privacy Policy, want to exercise any of your privacy rights, or have a concern about how OKZ is handling your personal data, please contact the OKZ privacy team using the details below.

For general account support, responsible gaming assistance, or questions about your OKZ account, visit the OKZ FAQ page or contact the support team directly via live chat on the OKZ platform.