ojpk Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how ojpk ("we", "us", "our") collects, uses, stores, shares, and protects personal data provided by or generated about players ("you", "your") who register for or use the ojpk platform accessible at ojpk.org. By creating an account or using the Platform you acknowledge that you have read and understood this Policy and agree to the collection and processing of your personal data as described herein.

ojpk may update this Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes we will post the updated Policy on this page with a revised effective date. Continued use of the Platform after such changes constitutes your acceptance of the updated Policy. We encourage you to review this page regularly.

1. What Personal Data We Collect

When you register for an ojpk account, make deposits, play games, or contact support, we collect personal data that falls into the following categories:

• Identity data: full name, date of birth, and a copy of your government-issued photo ID (National ID Card, Passport, or Driving Licence) provided during KYC verification.
• Contact data: mobile number used to register the account, and email address if provided.
• Financial data: deposit amounts, withdrawal amounts, transaction dates, payment method references (bKash account number, Nagad account number, Rocket account number, bank account details), and transaction IDs.
• Gaming activity data: game history, bet amounts, win/loss records, session start and end times, session durations, bonus usage, and responsible gaming tool settings.
• Technical data: IP address, device type (phone model, operating system version), browser type and version, screen resolution, time zone, and connection type (3G, 4G, Wi-Fi).
• Communications data: the content of support emails you send to ojpk, including any attachments, and records of our responses.

We collect only the data that is necessary for the purposes described in this Policy. We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity document data is required for age and identity verification as part of KYC compliance.

2. How We Collect Your Data

ojpk collects personal data through the following means:

• Directly from you: when you complete the registration form, submit KYC documents, make deposits or withdrawals, contact support, or update your account profile.
• Automatically: when you access the Platform, our servers log technical data including your IP address, device identifiers, session timestamps, pages visited, and game interactions. This data is collected for security, fraud prevention, and platform performance purposes.
• From payment providers: when you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment provider confirms transaction status and account reference details to ojpk.
• From game providers: licensed game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others may share anonymised session and RNG outcome data with ojpk for auditing, dispute resolution, and responsible gaming monitoring.
• From identity verification services: if we engage a third-party KYC verification provider to assist with age and identity checks, that provider will share the result of the verification (pass, fail, or refer) with ojpk.

3. How We Use Your Data

ojpk processes personal data only for specific, legitimate purposes. The lawful basis for each purpose is set out below:

• Account management and service delivery: to register your account, process deposits and withdrawals, provide access to games, and send account-related notifications. Basis: performance of a contract.
• Identity and age verification (KYC): to confirm that you are aged 21 or above and that the identity you have provided is accurate, as required by our anti-money-laundering and responsible gaming obligations. Basis: legal obligation and legitimate interest.
• Fraud prevention and security: to detect and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities. Basis: legal obligation and legitimate interest.
• Responsible gaming monitoring: to identify patterns in gaming activity that may indicate problem gambling, and to make responsible gaming tools available and effective. Basis: legal obligation and legitimate interest.
• Marketing communications: to send you promotional offers, bonus notifications, and seasonal promotions where you have not opted out of marketing. Basis: legitimate interest (with opt-out available at any time by emailing [email protected]).

ojpk does not use automated decision-making or profiling in any way that produces legal or similarly significant effects on players, such as automated account closure or credit scoring. Where automated tools are used for fraud detection, human review is available upon request.

4. Who We Share Your Data With

ojpk shares personal data only with the following categories of recipient, and only to the extent necessary for the purpose stated:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum data necessary to process your deposit or withdrawal transaction (account reference, amount, transaction ID).
• Game providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other certified game providers receive a pseudonymous player ID and session token to load games and record outcomes. They do not receive your name, contact details, or financial data.
• KYC and compliance service providers: third-party identity verification providers receive copies of your identity documents for the sole purpose of verifying your age and identity on our behalf.
• Law enforcement and regulatory authorities: ojpk will disclose personal data to competent authorities when required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.

5. Data Retention

ojpk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods: account data and KYC documents are retained for a minimum of five years following account closure; transaction records are retained for a minimum of five years from the date of each transaction; gaming activity logs are retained for a minimum of three years; support email correspondence is retained for a minimum of two years from the date of last contact.

Once the applicable retention period expires and there is no overriding legal or compliance reason to retain the data further, ojpk will securely delete or anonymise the data so that it can no longer be associated with you as an individual. Anonymised, aggregated data (where no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

6. Data Security

ojpk takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ojpk servers, ensuring that your account credentials, financial data, and session data cannot be intercepted in transit.
• Access controls that restrict ojpk staff access to personal data on a strict need-to-know basis, with audit logs maintained for all data access events.
• Regular security reviews and penetration testing of the Platform infrastructure to identify and address vulnerabilities before they can be exploited.

No security system is completely impenetrable, and ojpk cannot guarantee absolute security. If you become aware of any unauthorised access to your account, you must notify ojpk immediately by emailing [email protected]. You are responsible for keeping your account credentials confidential and for any activity that occurs under your account while your credentials remain uncompromised.

7. International Data Transfers

ojpk primarily stores and processes personal data on servers located within or serving the Asia-Pacific region. Some of our service providers, including certain game providers and KYC verification partners, may process data outside Bangladesh. Where such transfers occur, ojpk ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those described in this Policy.

By using the Platform you acknowledge and consent to the transfer of your personal data as described in this section. If you have concerns about cross-border data transfers, please contact us at [email protected].

8. Third-Party Links

The ojpk Platform does not contain links to third-party websites. All content, games, and services accessible through ojpk.org are provided directly by ojpk or by contracted game providers operating within the Platform environment. If you navigate away from ojpk.org by typing a different address or following a link from outside the Platform, ojpk is not responsible for the privacy practices or content of any external site.

• Links from game providers' logos or promotional images within the Platform environment are internal navigation only and do not direct you to the game provider's own website.
• Payment method buttons (bKash, Nagad, Rocket, Upay) within the deposit and withdrawal flow launch a secure in-Platform payment widget; they do not redirect you to the payment provider's standalone website.
• If in doubt about whether you are still on the ojpk Platform, always check that the address bar shows ojpk.org before entering any credentials or payment information.

ojpk is not responsible and accepts no liability for any loss, damage, or privacy breach arising from your use of any site or service outside the ojpk.org domain.

9. Children and Minors

The ojpk Platform is strictly for players aged 21 and above. ojpk does not knowingly collect personal data from any person under the age of 21. If you believe that a person under 21 has registered an account on ojpk or has provided personal data to us, please notify us immediately at [email protected]. Upon verified notification, ojpk will delete all personal data associated with the minor's account and close the account permanently.

Parents and guardians in Bangladesh who are concerned that a minor in their household may be accessing online gaming platforms are encouraged to use the parental control features available in their mobile operating system (Android and iOS both provide app restriction and screen-time management tools) to prevent access to ojpk.org.

10. Changes to This Policy

ojpk reserves the right to modify this Privacy Policy at any time. When changes are made, we will update the effective date at the top of this page. Where changes are material — such as changes to the categories of data we collect, the purposes for which we process it, or the third parties with whom we share it — we will make reasonable efforts to notify registered players by email at least 7 days before the changes take effect.

Your continued use of the Platform after the revised Policy's effective date constitutes your acceptance of the changes. If you do not accept the revised Policy you must stop using the Platform and may request account closure by contacting [email protected].

11. Contact and Data Enquiries

For all privacy-related enquiries, data subject rights requests, or concerns about how ojpk handles your personal data, please contact our support team at [email protected]. Include your registered mobile number, a clear description of your enquiry or request, and your preferred response timeframe. ojpk aims to acknowledge all data-related requests within 48 hours and to provide a substantive response within 14 calendar days.

If you are not satisfied with ojpk's response to a privacy complaint, you may have the right to escalate your complaint to a relevant data protection authority or consumer rights body under applicable Bangladesh law. ojpk will cooperate fully with any such authority in connection with any complaint or investigation relating to your personal data.

12. Governing Law

This Privacy Policy and any disputes arising out of or relating to it shall be governed by and construed in accordance with the laws applicable to online services and data protection in the jurisdiction in which ojpk operates. By using the Platform you submit to the jurisdiction of the relevant courts for the resolution of any dispute relating to this Policy that cannot be resolved through direct contact with [email protected].

If any provision of this Policy is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable.