oj365 Privacy Policy

oj365 is an online casino and sports betting platform operating at https://oj365.io and serving players primarily located in Bangladesh. In the context of this Privacy Policy, oj365 ("we", "us", "our") acts as the data controller — meaning we determine the purposes for which, and the means by which, your personal data is processed.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you may contact our support team at any time. The contact email address is listed in the footer of this website as plain text. Our support team operates 24 hours a day, 7 days a week, with a target response time of under two hours for privacy-related enquiries.

This policy should be read alongside the oj365 Terms & Conditions and Responsible Gaming Policy, all of which together form the complete framework governing your relationship with the oj365 platform.

oj365 collects personal data from you through several channels. The categories of data we collect are described below, grouped by collection method.

Data you provide directly:

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number provided when you create an oj365 account.
• Identity verification documents: Copies of government-issued identification such as a National Identity Card (NID), passport, or birth certificate, submitted when you complete the Know Your Customer (KYC) verification process.
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used to make deposits or receive withdrawals. Full card numbers are never stored by oj365 directly — payment processing is handled by certified payment partners.
• Support communications: The content of messages you send to our support team via email or live chat, including any attachments you choose to submit.
• Responsible gaming declarations: Information you provide when setting deposit limits, loss limits, or requesting self-exclusion.

Data we collect automatically:

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone.
• Usage data: Pages visited, games played, session duration, betting history, deposit and withdrawal records, and click-stream data.
• Cookie data: Information stored in cookies and similar tracking technologies placed on your device when you access the oj365 platform. See Section 06 for full details.

oj365 uses the personal data it collects for the following purposes. Each purpose is supported by a corresponding legal basis, which is described in Section 04.

• Account management: Creating and maintaining your oj365 account, authenticating your identity when you log in, and communicating with you about account-related matters such as deposit confirmations, withdrawal updates, and security alerts.
• Identity verification (KYC): Verifying that you meet the minimum age requirement of 21 years and confirming that the identity you registered with is genuine, in accordance with our obligations to prevent fraud and underage gambling.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), reconciling transaction records, and investigating payment disputes.
• Fraud and security monitoring: Detecting and preventing fraudulent activity, money laundering, collusion, bonus abuse, and unauthorised account access by analysing behavioural and technical data patterns.
• Responsible gaming compliance: Monitoring betting activity for signs of problem gambling, enforcing deposit limits and self-exclusion orders you have requested, and fulfilling our obligations under responsible gaming standards.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the oj365 platform, identify technical issues, and improve the overall user experience.
• Marketing communications (opt-in only): Sending promotional emails, SMS messages, or in-platform notifications about bonuses, new games, tournaments, and seasonal offers — but only where you have given explicit consent and have not subsequently withdrawn it.
• Customer support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance purposes.

oj365 does not use personal data to make fully automated decisions that produce significant legal effects on individual players without appropriate human oversight.

oj365 processes your personal data on the following legal grounds, depending on the specific activity involved:

• Contractual necessity: Processing your registration data, verifying your identity, and facilitating deposits and withdrawals is necessary to perform our contractual obligations to you as an account holder.
• Legal obligation: Retaining KYC documents, transaction records, and responsible gaming records is required to comply with applicable anti-money laundering obligations and age verification requirements.
• Legitimate interests: Fraud detection, security monitoring, platform analytics, and quality assurance activities are conducted on the basis of oj365's legitimate interest in maintaining a safe, fair, and well-functioning gaming environment — provided those interests are not overridden by your rights and freedoms.
• Consent: Sending optional marketing communications by email or SMS is carried out only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time via your account settings.

oj365 does not sell, rent, or trade your personal data. We may share data with the following categories of third party only where strictly necessary and under appropriate data protection safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network partners (Visa, Mastercard) receive only the transaction data required to process your deposit or withdrawal. These providers operate under their own privacy policies and are independently regulated.
• Game providers: Studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive session identifiers and game result data to deliver live and RNG game experiences. Game providers do not receive your full personal profile.
• Identity verification providers: Third-party KYC services that assist in verifying the authenticity of identity documents submitted during account verification. These providers are contractually bound to use your data solely for verification purposes.
• IT infrastructure providers: Cloud hosting, content delivery, and cybersecurity providers who process data on oj365's behalf under data processing agreements that prohibit any independent use of your information.
• Regulatory and law enforcement bodies: Where oj365 is required by applicable law, court order, or regulatory authority to disclose personal data, we will comply with such mandatory disclosures. We will notify you of such disclosures where we are legally permitted to do so.

oj365 uses cookies and similar technologies (such as local storage and session tokens) to ensure the platform functions correctly, to maintain your login session, and to gather anonymous analytics data that helps us improve the service.

Essential and security cookies are necessary for the platform to function and cannot be disabled. Functional and analytics cookies may be managed through your browser settings. Disabling functional cookies may affect certain personalisation features of the oj365 platform. oj365 does not use advertising or cross-site tracking cookies.

oj365 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any overriding legal obligation to retain records for a defined minimum period. The general retention periods applied by oj365 are as follows:

• Active account data (registration details, contact information, login history): Retained for the duration of your account and for a period of 5 years following permanent account closure.
• Identity verification documents (NID scans, passport copies): Retained for a minimum of 5 years from the date of verification, in line with applicable anti-money laundering record-keeping standards.
• Transaction records (deposit and withdrawal history): Retained for a minimum of 5 years from the date of each transaction.
• Support communications (chat transcripts, email threads): Retained for 3 years from the date of the last interaction in a given support thread.
• Marketing consent records: Retained for the duration of your marketing subscription and for 3 years following withdrawal of consent, to demonstrate compliance.
• Analytics data (aggregated, non-identifiable): Retained indefinitely in anonymised form for platform improvement purposes.

When the applicable retention period expires, oj365 will securely delete or irreversibly anonymise the relevant personal data. You may request early deletion of your data (subject to any mandatory retention obligations) by contacting our support team.

As a player registered on the oj365 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the email address displayed in the footer of this website. We will respond to all verifiable requests within a reasonable timeframe and at no charge for standard requests.

• Right of access: You may request a copy of all personal data that oj365 holds about you, together with information about how that data is used and with whom it has been shared.
• Right to rectification: If any personal data held by oj365 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You may request that oj365 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations to retain certain records.
• Right to restriction: You may request that oj365 restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
• Right to data portability: You may request that oj365 provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to object: You may object to the processing of your personal data where oj365 relies on legitimate interests as its legal basis, or where your data is used for direct marketing purposes.
• Right to withdraw consent: Where oj365 processes your data on the basis of consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

oj365 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security controls in place include:

• Transport encryption: All data in transit between your device and oj365 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Encryption at rest: Sensitive personal data fields — including identity document content and payment reference details — are encrypted in the database using AES-256 encryption.
• Access controls: Access to personal data within oj365's internal systems is restricted to personnel who require it to perform their specific job functions. All internal access is logged and audited.
• Two-factor authentication: oj365 supports and encourages the use of two-factor authentication (2FA) on all player accounts to reduce the risk of unauthorised access resulting from compromised passwords.
• Intrusion detection: oj365 employs automated systems to monitor for unusual login patterns, high-velocity transactions, and other indicators of account compromise or fraud.
• Penetration testing: The oj365 platform undergoes regular security assessments by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.

While oj365 takes all reasonable steps to protect your data, no internet-based system is entirely immune from security risk. In the event of a data breach that poses a risk to your rights and freedoms, oj365 will notify affected account holders as promptly as practicable and will take immediate steps to contain the breach and mitigate its impact.

oj365 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, operational requirements, or the nature of the services we offer. When a material update is made, we will notify registered account holders by email at least seven days before the revised policy takes effect. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Your continued use of the oj365 platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you should close your account and cease using the platform prior to the new policy's effective date.

All privacy-related enquiries, data rights requests, and complaints regarding oj365's data handling practices should be directed to our support team. The contact email address is displayed as plain text in the footer section of this website. We aim to provide an initial response to all privacy enquiries within two hours and to resolve substantive requests within a reasonable period appropriate to their complexity.