olx17
Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by olx17 ("we", "us", "our", "the Platform") and applies to all personal data collected through the olx17 website at olx17.im and through any related services, mobile interfaces, customer support channels, promotional communications, and payment processing flows (collectively, the "Services").

This Policy explains in plain English what categories of personal information olx17 collects from players located in Bangladesh and elsewhere, the purposes for which that information is processed, the legal bases relied upon, the circumstances in which data may be shared with third parties, and the rights available to you as a data subject.

By registering an account on olx17.im, depositing funds, placing wagers, or otherwise engaging with the Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described here, you should not use the olx17 platform.

This Policy applies to all registered players and visitors to the olx17 website, regardless of their location. Where specific provisions of applicable data protection law impose additional obligations on olx17, those obligations are respected in full.

2 Data We Collect

olx17 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through technical systems as you use the Services, and from third parties such as payment processors and identity verification providers. The categories of data we collect are set out below.

2.1 Registration & Identity Data

When you create an olx17 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are aged 18 or above)
• Residential address in Bangladesh or your country of residence
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, ৳)

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to confirm your eligibility to gamble, olx17 may request:

• National Identity Card (NID) number and scanned copy
• Passport or government-issued photo identification
• Proof of residential address (utility bill, bank statement)
• Source-of-funds documentation for large withdrawals above ৳50,000

2.3 Financial & Transaction Data

When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, or supported bank channels, we collect:

• Mobile wallet account numbers (masked after verification)
• Bank account details where applicable
• Transaction amounts, dates, and reference numbers
• Full deposit and withdrawal history associated with your account

2.4 Gaming Activity Data

• Games played, bet amounts, win/loss outcomes, and session durations
• Bonus activations, wagering progress, and promotional participation records
• Sports betting market selections and settlement records

2.5 Technical & Device Data

Automatically collected when you access olx17.im:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session start/end times and pages visited within the platform
• Referring URL and exit URL
• Cookie identifiers and similar tracking technology data (see Section 5)

2.6 Communications Data

• Content of messages sent to olx17 customer support via email
• Records of promotional communications sent to you and your engagement with them
• Responses to surveys or feedback requests

3 How We Use Your Data

olx17 processes personal data only where a valid legal basis exists. The table below maps each primary use of your data to its corresponding legal basis. The legal bases relied upon are: (A) Performance of a Contract — processing necessary to deliver the Services you signed up for; (B) Legal Obligation — processing required by applicable law; (C) Legitimate Interests — processing that serves a genuine business purpose that does not unfairly override your privacy rights; and (D) Consent — where you have freely given, specific, and informed agreement.

4 Data Sharing & Third Parties

olx17 does not sell, rent, or otherwise commercialise your personal data to third parties. We may share your data with carefully selected categories of third parties only where strictly necessary and in accordance with this Policy.

4.1 Payment Service Providers

To process deposits and withdrawals in Bangladeshi Taka (৳), olx17 shares the minimum necessary financial data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers act as independent data controllers for their own transaction processing activities and are governed by their own privacy policies.

4.2 Game Content Suppliers

olx17 integrates games and live-dealer content from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Habanero, and Ezugi. These providers receive session tokens and anonymised player identifiers as required to serve game content and compute RNG outcomes. They do not receive your full personal profile or payment details.

4.3 Identity Verification Providers

To fulfil KYC obligations, olx17 may share identity documents and personal details with regulated third-party verification service providers. These providers process data solely for identity and age verification purposes under contractual obligations that require data protection standards equivalent to those applied by olx17.

4.4 Legal & Regulatory Authorities

olx17 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid legal order, or where disclosure is necessary to prevent fraud, money laundering, or harm to third parties. We will notify you of any such disclosure to the extent permitted by law.

4.5 Business Transfers

In the event that olx17's business or assets are acquired by, merged with, or transferred to another entity, personal data held by olx17 may be transferred as part of that transaction. Affected players will be notified prior to any transfer and will have the opportunity to close their accounts if they do not wish their data to be processed by the acquiring entity.

5 Cookies & Tracking Technologies

olx17 uses cookies and similar tracking technologies to operate the platform effectively, to remember your preferences, to analyse site performance, and to deliver relevant content. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot carry viruses or access other files on your device.

5.1 Types of Cookies Used

5.2 Managing Cookies

You may control and manage cookies through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete cookies after each session. Please note that disabling strictly necessary cookies will prevent you from logging in to your olx17 account and using core platform features.

Instructions for managing cookies in popular browsers are provided by each browser's support documentation. olx17 does not control third-party cookies placed by game content suppliers; those cookies are governed by the respective supplier's cookie policy.

5.3 Local Storage & Similar Technologies

In addition to cookies, olx17 may use browser local storage and session storage to retain small amounts of preference data on your device. This data is not transmitted to olx17 servers automatically; it is read only when you access the platform. You may clear local storage through your browser's developer tools or site settings at any time.

6 Data Retention

olx17 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law. The specific retention periods for each category of personal data are set out in the table in Section 2 of this Policy.

Key retention principles applied by olx17 are as follows:

• Account data is retained for the full duration of your account and for a period of five years following account closure, to facilitate the resolution of any late-arising disputes or regulatory enquiries.
• Financial transaction records are retained for a minimum of seven years in compliance with anti-money laundering record-keeping obligations.
• KYC verification documents are retained for five years from the date of submission or from the date of the last verification event, whichever is later.
• Technical and device data (IP logs, session logs) is retained on a rolling 13-month basis and then permanently deleted or anonymised.
• Marketing consent records are retained for three years from the date consent was last recorded, even if you have subsequently opted out, in order to demonstrate compliance.

When data is no longer required for any lawful purpose, olx17 will delete it securely or anonymise it in a way that permanently prevents re-identification. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

7 Data Security Measures

olx17 implements a comprehensive, layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our principal technical and organisational security measures include:

• Encryption in transit: All data exchanged between your browser or device and the olx17 platform is encrypted using TLS 1.3. Connection attempts over insecure HTTP are automatically redirected to HTTPS.
• Encryption at rest: Personal data stored in olx17's databases is encrypted using AES-256, an industry-standard symmetric encryption algorithm. Encryption keys are stored separately from the data they protect.
• Access controls: Internal access to personal data is governed by a strict role-based access control (RBAC) framework. Employees can access only the data necessary for their specific job function. All access events are logged and audited.
• Password security: Player passwords are hashed using a modern, salted hashing algorithm (bcrypt). olx17 never stores passwords in plain text and cannot retrieve your password — only reset it.
• Infrastructure security: olx17's server infrastructure is hosted in data centres with physical security controls including 24/7 surveillance, biometric access, and redundant power systems.
• Vulnerability management: olx17 conducts regular security assessments and penetration testing of its platform to identify and remediate vulnerabilities before they can be exploited.
• Incident response: olx17 maintains a documented data breach response procedure. In the event of a breach that is likely to affect your rights, we will notify you within the timeframe required by applicable law.

While olx17 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. Do not share your olx17 password with anyone, and contact [email protected] immediately if you suspect your account has been compromised.

8 Your Rights Over Your Data

As a user of the olx17 platform, you hold a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of them, please submit a written request to [email protected]. olx17 will respond to all valid rights requests within 30 calendar days of receipt. We may request identity verification before processing a rights request to protect your data from being disclosed to or modified by unauthorised parties.

8.1 Right of Access

You have the right to request a copy of all personal data that olx17 holds about you. We will provide this in a structured, commonly used, and machine-readable format. Your first access request in any 12-month period is fulfilled free of charge; subsequent requests within the same period may attract a reasonable administrative fee.

8.2 Right to Rectification

If any personal data olx17 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details (such as your email address or phone number) directly through your account settings page.

8.3 Right to Erasure ("Right to Be Forgotten")

You may request that olx17 delete your personal data. We will honour this request where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where the processing has no other lawful basis. Deletion requests may be declined or partially fulfilled where data must be retained to comply with legal obligations (such as the seven-year retention requirement for financial records) or to defend against legal claims.

8.4 Right to Restriction of Processing

In certain circumstances — for example, while the accuracy of your data is being contested — you may request that olx17 restrict the processing of your data to storage only, pending resolution of the relevant issue.

8.5 Right to Data Portability

Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a portable format and, where technically feasible, to request that we transmit it directly to another controller.

8.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on olx17's legitimate interests. olx17 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

8.7 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

9 Minors & Age Verification

olx17 is an adult-only platform. Our Services are strictly restricted to individuals who are 18 years of age or older. olx17 does not knowingly collect, process, or retain personal data belonging to minors under the age of 18.

During the registration process, all applicants are required to confirm that they are aged 18 or above. Where olx17 has reasonable grounds to suspect that a registered user may be under the age of 18, we will immediately suspend that account and initiate a mandatory age verification review. The account will remain suspended until satisfactory proof of age is provided, or will be permanently closed and any funds returned if the user is confirmed to be a minor.

As part of our standard Know Your Customer (KYC) process, olx17 requires documentary proof of age — such as a valid National Identity Card (NID) or passport — from all players before any withdrawal of funds is permitted and in certain other circumstances determined by our risk management procedures. This process helps ensure that no minor is able to participate in real-money gaming activity on the platform.

If you are a parent or guardian and have reason to believe that a person under the age of 18 has registered an account with olx17 using false information, please contact us immediately at [email protected]. We will investigate the matter promptly, close the account if the concern is substantiated, and securely delete all personal data associated with that account to the fullest extent permitted by our legal obligations.

10 Policy Updates & Contact

10.1 Policy Updates

olx17 reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The "Last Updated" date at the top of this Policy will always reflect the date on which the most recent changes were made.

Where any amendment is material — meaning it significantly affects your rights or the way olx17 processes your personal data — we will notify registered players by email to the address on file at least 14 days before the updated Policy comes into effect. Your continued use of the olx17 platform after the effective date of any updated Policy constitutes your acknowledgement of the changes.

We encourage all players to review this Policy periodically to stay informed about how olx17 protects their personal information. The most current version of this Policy is always available at olx17.im/privacy-policy.

10.2 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way olx17 handles your personal data, please contact our privacy support team. We are committed to resolving all privacy-related enquiries promptly and transparently.

Our support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays, to assist players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations in Bangladesh and beyond.