Olxoto's Privacy Policy — Your information is completely safe

Olxoto is one of Bangladesh's most trusted online gaming platforms. We believe that trust is the foundation of a great gaming experience — and that trust is built on transparency and security. This Privacy Policy ("Policy") explains in detail how your personal information is handled while you use the Olxoto platform.

By registering on or using Olxoto, you are agreeing to this privacy policy. Please read it carefully before creating an account. Olxoto always puts user privacy first and adheres to international data protection standards.

This privacy policy applies to the Olxoto website, mobile app, and all related services. We reserve the right to update this policy at any time, and any changes will be announced on the platform.

Olxoto collects only the data necessary to provide you with the best gaming experience and to keep your account secure. The categories of data collected are listed below:

Olxoto uses your information only for specific, legitimate purposes. Details are outlined below:

• Account management: Your information is used to create, verify, and manage your account.
• Payment Processing: Financial information is securely used to process deposits and withdrawals.
• Customer Support: Information is needed to resolve issues and provide support.
• Security Protection: Data is used to prevent fraud, money laundering, and other forms of abuse.
• Service Improvement: User preferences are analyzed to enhance and personalize the gaming experience.
• Legal compliance: Certain data is retained to comply with applicable laws and regulations.
• Promotional Communications: With your consent, notifications about bonuses and offers will be sent to you.
• Responsible Gaming: Gaming behavior is monitored to identify and address potential issues.

Olxoto never sells your information. However, in certain specific circumstances, limited data sharing may be necessary:

• Payment Provider: Only the information required to complete transactions is shared with bKash, Nagad, and Rocket.
• Game Provider: Limited data may be shared with providers to operate licensed games.
• Legal authorities: Disclosure of information is mandatory upon a valid court order or lawful request from a government authority.
• Security Partner: Limited technical information may be shared to prevent fraud and cyberattacks.

Outside of the cases above, Olxoto does not share your information with anyone under any circumstances. All partners operate under strict confidentiality agreements.

Olxoto protects your data using industry-leading technology and practices. Our security framework operates across multiple layers:

• All web traffic is secured with 256-bit TLS/SSL encryption.
• Sensitive data is stored in the database with AES-256 encryption.
• Two-factor authentication (2FA) is available for your account.
• 24/7 security monitoring is active across servers and networks.
• Regular security audits and penetration testing are conducted.
• Automatic alerts are triggered if suspicious login attempts or activity are detected.
• Strict limited-access policy — only authorized personnel can view the data they need.

Olxoto uses cookies on its website and app. Cookies are small text files stored in your browser. Olxoto uses the following types of cookies:

• Essential cookies: Required to maintain login sessions and keep the platform running properly. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language and theme.
• Analytics Cookie: Helps us understand how the platform is being used — no personal data is collected.
• Security Cookie: Used to detect fraud and bot activity.

You can manage non-essential cookies from your browser settings. However, disabling certain cookies may limit some features of the platform.

Olxoto respects your right to data protection. You may exercise the following rights:

• Right to Know: You can find out exactly what information Olxoto holds about you.
• Right to Correction: You may request corrections to any inaccurate or outdated information.
• Right to Erasure: You may request deletion of your data under certain conditions.
• Right to Restrict Processing: In certain circumstances, you may request that the processing of your information be restricted.
• Right to Portability: You may request a copy of your information in a structured format.
• Right to object: You may object to the use of your data for specific purposes.
• Right to Withdraw Consent: You may withdraw your consent to marketing messages at any time.

To exercise any of these rights, contact the Olxoto support team. We will respond within 30 business days. Please note that certain information may need to be retained due to legal obligations.

Olxoto conducts KYC verification in compliance with international AML (Anti-Money Laundering) standards. All information collected through this process is kept under strict protection.

• KYC documents (NID, passport) are stored in a separate, secure storage system.
• Only authorized compliance team members can access these documents.
• Copies of documents are deleted after verification is complete.
• KYC information is never used for marketing or any other purpose.
• KYC records must be retained for a specified period as required by law.
• If KYC verification fails, the submitted documents are securely destroyed.

Olxoto strictly prohibits anyone under 18 from using the platform. Protecting children and minors is one of our highest priorities.

• Age verification is a mandatory step in the registration process.
• If a minor is identified, the account is closed immediately.
• Olxoto never intentionally collects information from anyone under the age of 18.
• If you have concerns, contact our support team — action will be taken promptly.

Olxoto reserves the right to update this privacy policy as needed. For any changes, we follow the process outlined below:

• Members will be notified via the platform and email before any significant changes take effect.
• The effective date of the updated policy will be shown at the top of the page.
• Continued use of the platform after any changes will be considered acceptance of the updated policy.
• Previous versions of the policy are available upon request.