okliv Privacy Policy — How We Handle Your Data

okliv ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses our platform at okliv.io. This Privacy Policy sets out in clear and precise terms what personal information okliv collects from you, the purposes for which that information is processed, how long it is retained, and the rights you hold in relation to your data.

This policy applies to all users of the okliv platform, including registered account holders and unregistered visitors browsing the site. It covers data collected through the okliv website, any mobile-optimised interface, and communications between you and our support team via live chat or email.

By accessing okliv.io, registering an account, or using any part of our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, you should discontinue use of the platform and may request account closure as described in the okliv Terms & Conditions.

For the purposes of applicable data protection legislation, okliv acts as the data controller in respect of the personal information collected through okliv.io. As data controller, okliv is responsible for determining the purposes and means by which your personal data is processed.

okliv operates as an internationally based offshore platform serving English-speaking players in Bangladesh and other markets. Queries relating to data protection, privacy rights, or this Privacy Policy should be directed to our support team using the contact details provided in Section 14 of this document.

okliv collects personal data through several channels: directly from you when you register an account or contact support; automatically through your use of the platform; and, in limited cases, from trusted third-party sources for identity verification purposes. The categories of data we collect are described below.

3.1 Registration and Identity Data. When you create an okliv account, we collect:

• Full legal name
• Date of birth (to verify that you meet the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, district, and country)
• Username and encrypted password

3.2 Verification Documents. Where identity or age verification is required, we may collect:

• Scanned or photographed copies of government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement, or similar, dated within the last three months)
• Proof of payment method ownership (screenshot or statement confirming the bKash, Nagad, Rocket, or Upay account belongs to you)

3.3 Financial Transaction Data. For every deposit and withdrawal processed through your okliv account, we record:

• Transaction amount in Bangladeshi Taka (৳ BDT)
• Payment method type and identifier (e.g., bKash mobile number, Nagad account reference)
• Transaction timestamp (Bangladesh Standard Time, UTC+6)
• Transaction status and reference number

3.4 Betting and Gaming Activity Data. We maintain a record of all activity conducted through your account, including:

• Bets placed, including stake amount, market selected, odds accepted, and outcome
• Casino and slot sessions, including game title, session duration, and results
• Bonus claims, wagering progress, and promotion usage history

3.5 Technical and Device Data. When you access okliv.io, our systems automatically collect:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type and version
• Session timestamps, pages visited, and click-path data
• Referral source (if you arrived at okliv via a link or partner referral)

3.6 Communications Data. If you contact okliv's support team via live chat or email, we retain a record of:

• The content of your messages and our responses
• The date, time, and channel of each interaction
• Any attachments or supporting documents you share with the support team

okliv processes personal data for the following purposes. Each purpose is matched to its legal basis in Section 5.

okliv processes your personal data on one or more of the following legal bases, depending on the purpose of the processing activity:

• Contractual necessity — processing required to create and maintain your account, process transactions, and deliver the betting and gaming services you have requested from okliv. Without this processing, we cannot provide our services to you.
• Legal obligation — processing required to comply with applicable laws and regulations, including anti-money-laundering requirements, age-verification mandates, financial record-keeping obligations, and responses to lawful authority requests.
• Legitimate interests — processing conducted for okliv's legitimate business interests, including fraud prevention, platform security, product analytics, and responsible gaming monitoring, provided those interests are not overridden by your own privacy rights. We conduct a balancing assessment before relying on this basis.
• Consent — processing carried out on the basis of your explicit agreement, most commonly in relation to marketing communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

okliv does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the circumstances described below, and only to the extent necessary for the relevant purpose.

6.1 Game Providers. To deliver casino, slots, crash, and specialty game content, okliv integrates with licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive limited session-level data necessary to authenticate your gameplay session. They do not receive your full identity or financial profile.

6.2 Payment Processors. To process deposits and withdrawals, okliv shares transaction data with the relevant payment service providers — including bKash, Nagad, Dutch-Bangla Bank Rocket, and Upay — to the extent required to complete each transaction. Each payment processor operates under its own privacy policy and data protection obligations.

6.3 Identity Verification Partners. Where okliv uses a third-party identity verification service to confirm your age or identity, your submitted documents are processed by that partner on okliv's behalf under strict data processing terms. Verification partners do not retain your documents beyond the period required to complete the check.

6.4 Legal and Regulatory Authorities. okliv will disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where required to do so by law, in response to a valid legal request, or where we believe disclosure is necessary to prevent fraud, money laundering, or harm to any individual.

6.5 Business Transfers. In the event of a merger, acquisition, or transfer of all or part of okliv's business operations, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any such transfer and the implications for their data in advance where practicable.

okliv uses cookies and similar tracking technologies on its platform to support essential functions, improve your user experience, and analyse how the site is used. A cookie is a small text file placed on your device by a website you visit. It allows the website to recognise your device on subsequent visits and to store preferences or session information.

7.1 Types of Cookies We Use.

7.2 Managing Cookies. You can manage or disable non-essential cookies through your browser's settings at any time. Most modern browsers (Chrome, Firefox, Safari, Edge) provide options to view, block, or delete cookies. Please note that disabling certain categories of cookies may affect the functionality of the okliv platform.

okliv employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated on a regular basis to keep pace with evolving security standards and threat landscapes.

8.1 Encryption in Transit. All data exchanged between your device and the okliv platform is encrypted using Transport Layer Security (TLS). This ensures that your login credentials, personal details, and financial data cannot be intercepted during transmission.

8.2 Encryption at Rest. Sensitive stored data, including passwords (which are hashed and salted, never stored in plaintext), identity documents, and financial records, is encrypted at rest using industry-accepted encryption standards.

8.3 Access Controls. Access to systems containing personal data is restricted to okliv personnel with a legitimate need to access that data as part of their job function. All access is logged, and access privileges are reviewed regularly. Multi-factor authentication is required for all administrative access.

8.4 Security Monitoring. okliv operates continuous security monitoring of its infrastructure to detect and respond to potential intrusions, anomalous behaviour, and data breach indicators. Our security team operates around the clock, consistent with our commitment to 24/7 platform availability.

8.5 Data Breach Response. In the unlikely event of a data breach that poses a risk to your rights or freedoms, okliv will notify affected users promptly and take all necessary steps to contain the breach, investigate its cause, and prevent recurrence. We will also notify the relevant competent authorities where required by applicable law.

okliv retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods applied to each major category of data are outlined below.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

As a data subject whose personal information is processed by okliv, you hold a number of rights in relation to your data. okliv is committed to facilitating the exercise of these rights promptly and without undue complication. The rights available to you are set out below.

• Right of access — You have the right to request a copy of the personal data okliv holds about you, together with information about how that data is being used. We will respond to access requests within thirty days of receipt.
• Right to rectification — If any personal data held by okliv is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details directly within your account settings, or contact support for assistance with changes that cannot be self-serviced.
• Right to erasure ("right to be forgotten") — You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Erasure requests are subject to okliv's legal retention obligations — data that must be kept for compliance reasons cannot be deleted on request.
• Right to restrict processing — You may ask okliv to suspend the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or have objected to processing and a determination is pending.
• Right to data portability — Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to object — You have the right to object to processing carried out on the basis of okliv's legitimate interests, including direct marketing. Where you object to marketing, we will cease that processing immediately. Where you object to other legitimate-interest processing, we will review the objection and respond with our determination.
• Right to withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time by contacting our support team or updating your communication preferences within your account settings. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact the okliv support team via live chat or by email at [email protected]. We may ask you to verify your identity before processing your request to ensure that personal data is not disclosed or amended in response to a fraudulent or unauthorised request. We will respond to all verified data rights requests within thirty calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty days, in which case we will notify you of the extension and the reason for it.

The okliv platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. This restriction reflects both our own responsible gaming standards and our commitment to protecting young people from the potential harms associated with online gambling.

During the account registration process, all applicants are required to confirm that they are aged 21 or above. Where we have reason to believe that a registered account holder may be under 21, the account will be suspended pending identity and age verification. If verification confirms that the account holder is underage, the account will be permanently closed, any deposits will be returned via the original payment method, and the data associated with that account will be retained only to the extent required by our legal obligations before being deleted.

If you become aware that a minor has registered an account on okliv or has provided personal data to us without appropriate consent, please contact us immediately at [email protected] so that we can take prompt action.

okliv is an internationally operated offshore platform, and as a result your personal data may be transferred to, stored in, or processed in countries outside Bangladesh. This occurs in particular when data is shared with game providers, payment processors, and identity verification partners who may operate data centres or processing infrastructure in various jurisdictions around the world.

Wherever personal data is transferred internationally, okliv takes steps to ensure that an adequate level of protection is applied to that data. This may include requiring the recipient to be bound by data processing agreements that impose obligations equivalent to those described in this Privacy Policy, or ensuring the transfer is covered by recognised international data transfer mechanisms.

By using the okliv platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to other countries for processing as described in this section. If you have questions about the safeguards applied to international transfers of your data, please contact the support team.

13.1 Right to Update. okliv reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The revised policy will be published at okliv.io/privacy-policy with an updated "Last updated" date at the top of the document.

13.2 Notification of Material Changes. Where we make a material change to this Privacy Policy — one that significantly affects your rights or how your personal data is used — we will notify registered account holders by email or via a notification within the platform in advance of the change taking effect. The notice period will be no less than seven days except where a shorter period is required by law or to address an urgent operational matter.

13.3 Continued Use. Your continued use of the okliv platform following the effective date of any update to this Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change, you should discontinue use of the platform and may request account closure as described in the Terms & Conditions.

13.4 Policy Archive. Previous versions of this Privacy Policy are available upon written request to the support team, so that you can review how our data practices have evolved over time.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way okliv handles your personal data, please reach out to us using the contact details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Live Chat: Available 24 hours a day, 7 days a week, directly within the okliv platform. Live chat is the fastest way to reach our English-language support team for any privacy or data-related question.
• Email: [email protected] — for formal written privacy requests, data rights exercises, or detailed enquiries. We aim to acknowledge all emails within one business day and to provide a full response within thirty calendar days.
• Support Hours: 24/7, including Bangladeshi public holidays such as Eid, Pohela Boishakh, Victory Day (16 December), and Independence Day (26 March).

When contacting us regarding a data rights request or privacy concern, please include your registered username and a clear description of your query or request. This will help us locate your account records promptly and ensure that your request is handled as efficiently as possible.