okvl Privacy
Policy
At okvl, protecting the personal data of every Bangladeshi player is a core responsibility — not an afterthought. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the rights you hold over your own data when using the okvl platform.
Six Pillars of Data Protection at okvl
okvl's approach to privacy rests on six fundamental commitments that govern how every piece of player data is handled across the platform.
Minimal Data Collection
okvl only collects personal data that is strictly necessary to operate the platform, verify player identity, process payments, and comply with applicable legal obligations. We do not collect data speculatively or for purposes unrelated to your use of the service.
No Third-Party Data Sales
okvl does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data sharing with third parties is limited strictly to service providers who assist in platform operations, and only under contractual confidentiality agreements.
256-Bit SSL Encryption
All data transmitted between your browser and the okvl platform is protected using 256-bit SSL (Secure Sockets Layer) encryption. Sensitive data including payment details and identity documents is stored using industry-standard encryption at rest.
Full Player Data Rights
Registered okvl players have the right to access, correct, export, and request deletion of their personal data, subject to okvl's legal retention obligations. All data rights requests can be submitted to [email protected] and will be acknowledged within 5 business days.
Bangladesh-Focused Storage
okvl prioritises secure data storage solutions suited to the Bangladesh market. Where data is processed by third-party service providers, those providers are contractually required to maintain security standards consistent with okvl's own data protection obligations.
Opt-Out Marketing Controls
okvl will only send promotional communications to players who have explicitly opted in to receive them. You may withdraw your marketing consent at any time by updating your account preferences or by contacting the support team at [email protected].
- 1. About This Policy
- 2. Data Controller
- 3. Data We Collect
- 4. How We Use Your Data
- 5. Legal Basis for Processing
- 6. Data Sharing & Disclosure
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Your Data Rights
- 10. Children & Minors
- 11. Payment Data Security
- 12. Third-Party Services
- 13. Policy Amendments
- 14. Contact & Complaints
About This Policy
This Privacy Policy ("Policy") sets out how okvl ("we", "us", "our") collects, stores, processes, and shares personal data in connection with the operation of the okvl online betting and casino platform, accessible at okvl.asia. This Policy applies to all registered players, prospective players who browse the platform, and any individual whose personal data is processed by okvl in connection with the services described herein.
okvl is committed to handling personal data responsibly, transparently, and securely. This Policy is written in plain English and structured to give you a clear understanding of exactly what data we hold about you and why. Where technical or legal terminology is unavoidable, we have provided plain-language explanations alongside it.
This Policy covers data collected through all touchpoints of the okvl platform, including the okvl.asia website, the okvl mobile-optimised browser interface, customer support interactions via live chat and email, and payment processing activities. It does not cover the data practices of third-party game providers (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Spribe, or Microgaming) operating within the okvl platform — those providers operate under their own privacy frameworks, which are accessible within each game's interface.
Data Controller
For the purposes of this Privacy Policy, okvl is the data controller — the entity that determines the purposes for which, and the manner in which, your personal data is processed. As data controller, okvl is responsible for ensuring that personal data held on the platform is processed in accordance with this Policy and applicable data protection principles.
okvl operates the platform as an online entertainment service targeting players in Bangladesh. All data-related enquiries, access requests, correction requests, and deletion requests should be addressed to the okvl data team via the contact details provided in Section 14 of this Policy.
Data We Collect
okvl collects personal data through the following channels: account registration, identity verification (KYC), payment processing, customer support interactions, and automated data collection via platform usage. The specific categories of data collected are described below.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID number, passport number | Account registration; KYC verification |
| Contact Data | Mobile number, email address, residential address (Dhaka, Chittagong, Sylhet, etc.) | Account registration; customer support |
| Financial Data | bKash/Nagad/Rocket mobile wallet numbers, bank account details, transaction history | Payment processing |
| Verification Documents | Photo ID scan, proof of address, selfie for liveness checks | KYC identity verification |
| Gaming Activity Data | Bet history, game session logs, win/loss records, bonus usage, wagering progress | Automated platform logging |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Automated cookies and server logs |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and SMS notifications | Account settings; registration form |
How We Use Your Data
okvl uses the personal data it collects for the following specific and documented purposes. Data is never used for purposes incompatible with those stated at the time of collection without obtaining fresh consent from the player concerned.
- Account Creation and Management: To register your player account, maintain accurate account records, and provide you with access to the platform's features.
- Identity Verification (KYC): To verify that you are who you say you are, that you meet the 21+ age requirement, and that your payment methods are registered in your own name — as required by okvl's anti-money-laundering and responsible gaming obligations.
- Payment Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and partner banks, and to process withdrawal requests to your registered payment method in Bangladeshi Taka (BDT).
- Platform Security: To detect, investigate, and prevent fraudulent activity, account takeovers, unauthorised access, bonus abuse, and other security threats to the okvl platform and its player community.
- Regulatory Compliance: To comply with anti-money-laundering (AML) obligations, including maintaining records of transactions and player identification as required by applicable law.
- Customer Support: To respond to your queries, complaints, and formal disputes submitted via live chat or email.
- Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to implement responsible gaming tools (deposit limits, self-exclusion) at the player's request or where okvl identifies a concern.
- Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the okvl platform experience, optimise game selection, and identify technical issues.
- Marketing Communications: To send promotional offers, bonus notifications, and seasonal promotions (Eid, Pohela Boishakh, BPL season, T20 World Cup, etc.) to players who have explicitly opted in to receive such communications.
Legal Basis for Processing
okvl processes personal data on the following legal bases, consistent with internationally recognised data protection principles:
- Contractual Necessity: Processing required to perform the contract between okvl and the player — including account management, payment processing, and game access.
- Legal Obligation: Processing required to comply with applicable legal requirements, including KYC identity verification, AML transaction records, and age verification.
- Legitimate Interests: Processing carried out for okvl's legitimate interests, including platform security, fraud prevention, and service improvement, where those interests do not override your fundamental data rights.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
Data Sharing & Disclosure
okvl does not sell, rent, or trade your personal data to third parties for their own commercial purposes. okvl may share your personal data with the following categories of third parties, strictly for the purposes described and subject to appropriate contractual protections:
- Payment Service Providers: bKash, Nagad, Rocket, Upay, and partner banking institutions in Bangladesh receive the payment data necessary to process your deposit and withdrawal transactions. These providers operate under their own regulated data frameworks.
- Identity Verification Partners: Third-party KYC and document verification service providers who assist okvl in verifying the identity and age of registered players. These partners are contractually prohibited from using your data for any purpose other than identity verification on okvl's behalf.
- Game Technology Providers: Certified game studios (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Spribe, PG Soft, and Microgaming) receive the minimum technical data necessary to deliver game sessions to your browser. No personally identifiable financial data is shared with game providers.
- Customer Support Technology: Third-party live chat and helpdesk platform providers who store and transmit support interaction records on okvl's behalf. These providers are bound by data processing agreements consistent with this Policy.
- Legal and Regulatory Authorities: Where required by law, court order, or regulatory instruction, okvl will disclose player data to competent legal or governmental authorities. okvl will inform the affected player of such a disclosure where it is legally permitted to do so.
- Business Transfers: In the event that the okvl business or a significant portion of its assets is acquired by, merged with, or transferred to another entity, player data may form part of that transfer. Affected players will be notified via the email address on their account in advance of any such transfer where possible.
Cookies & Tracking Technologies
okvl uses cookies and similar tracking technologies on the okvl.asia platform to support essential functionality, enhance the user experience, and gather aggregated analytics data. The categories of cookies used are as follows:
- Strictly Necessary Cookies: Essential to the operation of the platform. These include session authentication cookies, security tokens, and load-balancing cookies. The platform cannot function correctly without these cookies, and they cannot be disabled.
- Functional Cookies: Remember your account preferences, language settings, and recently played games to personalise your platform experience across sessions. These cookies do not track activity outside the okvl platform.
- Analytics Cookies: Collect anonymised, aggregated data about how players navigate and use the platform. This information helps okvl identify areas for improvement and optimise page performance. Individual players are not identifiable from analytics data.
- Marketing Cookies: Used to track the effectiveness of okvl's own promotional campaigns and to identify which acquisition channels deliver registered players to the platform. These cookies are only activated for players who have consented to marketing communications.
You may manage cookie preferences through your browser's built-in settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using core features of the okvl platform. okvl does not use third-party advertising networks or allow external advertisers to place cookies on the okvl.asia domain.
Data Retention
okvl retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to each data category are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML legal retention obligation |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping requirements |
| KYC Verification Documents | Duration of account + 5 years post-closure | Regulatory compliance |
| Gaming Activity Logs | 3 years from session date | Dispute resolution; responsible gaming monitoring |
| Customer Support Records | 2 years from ticket closure | Quality assurance; dispute resolution |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
| Technical / Log Data | 12 months from collection | Security monitoring; fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player. Where anonymised data is retained for analytical purposes, it is no longer considered personal data under this Policy.
Your Data Rights
As a registered okvl player whose personal data is held by okvl, you have the following rights in relation to your personal data. These rights can be exercised at any time by contacting okvl at [email protected]:
- Right of Access: You have the right to request a copy of all personal data that okvl holds about you. okvl will provide this information in a structured, commonly used, and machine-readable format within 15 business days of a verified access request.
- Right to Rectification: If any personal data okvl holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your email address and mobile number can be updated directly within your okvl account settings.
- Right to Erasure: You may request that okvl delete your personal data. This right is subject to okvl's legal obligation to retain certain records (see Section 8). Where a deletion request is received for an active account, the account will first be closed in accordance with the account closure procedure described in the okvl Terms and Conditions.
- Right to Restriction: You may request that okvl restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, while that accuracy is being verified.
- Right to Data Portability: Where processing is based on your consent or on a contractual basis, you have the right to receive your personal data in a structured, portable format and to transmit it to another service provider.
- Right to Object: You have the right to object to processing of your personal data that is based on okvl's legitimate interests. okvl will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
Children & Minors
The okvl platform is strictly restricted to individuals who are 21 years of age or older. okvl does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If okvl becomes aware that personal data has been collected from an individual under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed.
If you are a parent or guardian and believe that your child (or a person under 21 in your care) has registered an account on the okvl platform, please contact okvl immediately at [email protected]. okvl will investigate and take appropriate action, including account closure and deletion of all associated data, within 48 hours of receiving such a notification.
Payment Data Security
okvl takes the security of financial data with the utmost seriousness. All payment transactions on the okvl platform are processed through certified, regulated payment service providers. okvl does not store full payment card numbers, mobile financial service PINs, or online banking passwords on its own servers at any point.
The following security measures are applied to all financial data processed in connection with the okvl platform:
- Tokenisation: Where payment method details are stored for the purpose of processing future withdrawals, they are stored in tokenised form. The token references the payment method without exposing the underlying account credentials.
- 256-Bit SSL Encryption: All data transmitted between your browser and the okvl platform — including payment instructions — is encrypted using 256-bit SSL. The padlock icon visible in your browser's address bar confirms that an encrypted connection is active.
- Two-Factor Authentication (2FA): okvl supports and recommends enabling 2FA on your okvl account to add an additional layer of security against unauthorised access.
- Transaction Monitoring: okvl's payment systems automatically flag unusual transaction patterns — including large or rapid deposits, mismatched withdrawal destinations, and third-party payment attempts — for manual review by the okvl security team.
- Own-Name Payment Policy: In accordance with okvl's AML policy, all deposits and withdrawals must be made using a payment method registered in the player's own legal name. Third-party payments are strictly prohibited.
okvl will never ask you to share your bKash PIN, Nagad PIN, bank account password, or okvl account password via email, live chat, or any other channel. Any communication claiming to be from okvl and requesting such credentials should be treated as fraudulent and reported to [email protected] immediately.
Third-Party Services
The okvl platform integrates third-party services to deliver a complete gaming and betting experience. These third-party integrations involve limited, purpose-specific data sharing as described in this section. okvl is not responsible for the data practices of these third parties beyond the contractual obligations it imposes on them as data processors acting on okvl's behalf.
Third-party integrations on the okvl platform include:
- Game Studios: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Spribe, PG Soft, and Microgaming deliver game content through secure API integrations. These studios receive only the technical session data required to render the game (e.g., a session token and stake value) and do not receive personally identifiable information such as your full name, contact details, or payment information.
- Live Chat Support Platform: okvl uses a third-party helpdesk system to manage customer support interactions. This system stores the content of your live chat and email exchanges with okvl support agents. All support data is handled under a contractual data processing agreement.
- Analytics Services: okvl uses anonymised analytics tools to understand aggregate platform usage patterns. These tools are configured to anonymise IP addresses and do not create individual user profiles that can be linked back to a registered okvl account.
- KYC / Identity Verification Services: A certified third-party identity verification provider assists okvl in processing and authenticating the identity documents submitted by players during the KYC process. This provider operates under a strict data processing agreement and is prohibited from retaining verification documents beyond the period required to complete the verification.
Policy Amendments
okvl reserves the right to amend this Privacy Policy at any time to reflect changes in data practices, applicable law, or the services offered on the platform. When material amendments are made, okvl will notify registered players by email to the address associated with their account, or by displaying a notice on the platform at the time of login.
Amended versions of this Policy will be published at okvl.asia/privacy-policy and will take effect on the date stated in the amended document. We recommend that you review this page periodically to remain informed of how okvl handles your personal data. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.
Your continued use of the okvl platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any amendment, you must cease using the platform and may close your account in accordance with the procedure described in the okvl Terms and Conditions.
Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the okvl data team through the following channels:
- Email: [email protected] — use the subject line "Privacy / Data Request — [Your Username]" for all data-related correspondence.
- Live Chat: Available 24/7 directly from the okvl platform, staffed by English and Bengali-speaking support agents operating on Bangladesh Standard Time (BST, UTC+6).
okvl will acknowledge all privacy-related correspondence within 5 business days and aims to fully resolve data rights requests within 15 business days. For formal complaints that cannot be resolved through direct correspondence with okvl, you may seek independent advice from a qualified data protection professional in Bangladesh.
Ready to Play on Bangladesh's Trusted Platform?
Your data is protected. Your experience is secure. Explore cricket betting, live casino tables, slot games, and instant BDT payments — all under the same privacy-first framework described in this Policy.
21+ Only · Play Responsibly · SSL Encrypted · BDT Payments Supported