okvip7 Privacy Policy

okvip7, operating through the platform at https://okvip7.app, acts as the data controller in respect of all personal data collected from users of the okvip7 website and associated services. As data controller, okvip7 determines the purposes for which and the means by which personal data is processed.

All privacy-related enquiries, data subject requests, and complaints may be directed to our support team using the contact details set out in Section 13 of this policy. We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 calendar days of receipt.

okvip7 collects personal data across several categories, depending on the nature of your interaction with the platform. The table below sets out the categories of personal data we process:

okvip7 collects personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or update your account settings.
• Automated technologies: Technical data collected automatically when you visit okvip7, including cookies, server logs, and session tracking technologies. See Section 8 for full details on cookies.
• Payment processors: Transaction confirmation data received from payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard following a deposit or withdrawal instruction.
• Identity verification providers: Verification outcomes and document authenticity data returned by third-party KYC service providers during the identity verification process.
• Game providers: Game session data, round outcomes, and RTP-related activity logs provided by game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi as part of the casino platform integration.
• Fraud and security tools: Risk scores, device fingerprints, and behavioural signals generated by automated fraud detection systems operating in the background during platform sessions.

okvip7 processes your personal data only where a lawful basis exists. The table below identifies our primary processing purposes and the corresponding legal basis for each:

Where we rely on legitimate interests as the legal basis for processing, we have conducted a balancing test to ensure that our interests do not override your fundamental privacy rights. You may request a copy of our legitimate interests assessment by contacting us at the address in Section 13.

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

okvip7 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following circumstances and with the following categories of recipient:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for processing deposits and withdrawals. These providers receive only the transaction data necessary to execute and confirm the payment.
• Identity verification providers: Third-party KYC service providers that process your identity documents for the purpose of confirming your age, identity, and source of funds during the account verification process.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners — who receive session and bet data required to operate their games within the okvip7 platform environment.
• Fraud prevention and security partners: Automated risk management and device fingerprinting services that analyse technical data to detect suspicious activity across the platform.
• IT and infrastructure providers: Hosting providers, content delivery networks, and cloud infrastructure partners who process data on our behalf under strict data processing agreements and with no independent access rights.
• Legal and regulatory authorities: Where okvip7 is required by law, court order, or formal regulatory request to disclose personal data. In such cases, we will disclose only the minimum data required to comply with the obligation.

okvip7 retains personal data for no longer than is necessary for the purpose for which it was collected, taking into account applicable legal obligations, dispute resolution requirements, and operational needs. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of the active account relationship and for a period of 5 years following account closure or last activity, to satisfy anti-money-laundering and financial record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in compliance with applicable financial record-keeping regulations.
• KYC verification documents: Retained for 5 years following the completion of the KYC process or account closure, whichever is later.
• Bet and game activity logs: Retained for 3 years from the date of the relevant activity for dispute resolution and responsible gaming monitoring purposes.
• Support and communications data: Retained for 2 years from the date of the last communication, unless the matter relates to an ongoing legal dispute.
• Marketing preference data: Retained until you withdraw consent or request deletion, at which point it is removed from all active marketing lists within 10 business days.
• Technical and cookie data: Retained for varying periods depending on the specific cookie or log type — see Section 8 for details.

At the end of the applicable retention period, personal data is securely deleted from okvip7 systems or, where deletion is not technically feasible, anonymised so that it can no longer be attributed to an identified individual.

okvip7 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the okvip7 platform.
• Encrypted data storage for sensitive fields including passwords (stored as salted cryptographic hashes), payment credentials, and identity document data.
• Role-based access controls ensuring that okvip7 staff can access personal data only on a strict need-to-know basis relevant to their job function.
• Multi-factor authentication for internal system access by okvip7 personnel.
• Regular security audits and penetration testing of the okvip7 platform infrastructure.
• Automated intrusion detection and real-time monitoring of platform systems for anomalous behaviour.
• Secure data disposal procedures for physical and digital media containing personal data.

Players are also responsible for maintaining the security of their own account credentials. You should use a strong, unique password for your okvip7 account and must not share your login details with any third party. If you suspect your account has been compromised, contact okvip7 support immediately.

okvip7 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and detect fraudulent activity. A cookie is a small text file placed on your device by the okvip7 website when you visit. The following categories of cookies are in use on the okvip7 platform:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies, authentication tokens, and security cookies. They cannot be disabled without impacting core platform functionality. No consent is required for these cookies.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and responsible gaming reminder intervals. Retained for the duration of your account session or up to 12 months.
• Analytical cookies: Collect aggregated, anonymised data about how visitors use the okvip7 platform — pages visited, time on site, and navigation paths. This data helps us improve platform performance and content. Retained for up to 26 months.
• Fraud detection cookies: Support our fraud prevention systems by collecting device fingerprint data and behavioural signals. These cookies are strictly necessary for platform security and do not require separate consent.

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may affect the functionality of the okvip7 platform and your ability to log in or place bets.

Subject to applicable data protection law and certain legal limitations, okvip7 recognises the following privacy rights in respect of your personal data. You may exercise any of these rights by contacting our support team using the details in Section 13:

• Right of access: You have the right to request a copy of the personal data that okvip7 holds about you, along with information about how that data is used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate interest or legal obligation to retain it.
• Right to restriction of processing: You have the right to request that okvip7 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including processing for direct marketing purposes. Where you object to direct marketing, okvip7 will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

All data subject requests are handled free of charge. okvip7 will respond to your request within 30 calendar days. If your request is complex or numerous, this period may be extended by up to a further 60 days, in which case we will notify you within the initial 30-day period.

okvip7 does not knowingly collect personal data from any person under the age of 18. The okvip7 platform is strictly for adults aged 18 and above. Age verification checks are applied during account registration and at the point of KYC verification to confirm that all registered players meet this requirement.

If okvip7 becomes aware that personal data belonging to a person under the age of 18 has been collected, that data will be deleted immediately and the associated account will be permanently closed. Any winnings generated by an underage account will be forfeited in accordance with our Terms & Conditions.

In providing its services, okvip7 may transfer your personal data to service providers and infrastructure partners located in countries outside Bangladesh. Where such transfers occur, okvip7 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to applicable data protection law, including:

• Entering into Standard Contractual Clauses (SCCs) or equivalent contractual protections with the recipient organisation.
• Transferring data only to countries or organisations that have been assessed to provide an adequate level of data protection.
• Applying supplementary technical measures, such as end-to-end encryption, where required to mitigate transfer risks.

You may request information about the specific safeguards applied to any cross-border data transfer by contacting our support team.

okvip7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material, okvip7 will provide notice to registered players via the email address associated with their account, or through a prominent notice displayed on the platform prior to the changes taking effect.

The effective date displayed at the top of this document reflects the date on which the current version of the Privacy Policy came into force. We encourage you to review this policy periodically. Continued use of the okvip7 platform following the publication of any amendment constitutes your acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or okvip7's data processing activities, please contact our support team using the details below. We recommend communicating in English to ensure accurate and timely handling of your request.

• Support Email (plain text): [email protected]
• Live Chat: Available 24/7 via the okvip7 platform.
• Response Time: Privacy requests are acknowledged within 5 business days and resolved within 30 calendar days (Bangladesh Standard Time, UTC+6).

If you are not satisfied with okvip7's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. okvip7 will cooperate fully with any such regulatory enquiry.