ok37 Privacy Policy

Introduction

ok37 operates as a fully licensed online casino and sports betting platform serving players across Pakistan. We understand that Pakistani users are increasingly aware of how their personal information is handled online — and rightly so. This Privacy Policy has been written in plain, clear English to ensure every ok37 player knows exactly what happens to their data from the moment they visit our site to the moment they close their account.

This Privacy Policy applies to all personal data collected by ok37 through the ok37.biz website, mobile browser experience, customer support channels, and any other ok37-branded service or communication. By creating an ok37 account or continuing to use the ok37 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

If you do not agree with any part of this Privacy Policy, you should stop using the ok37 platform and may request closure of your ok37 account by contacting our support team. Closing your account does not automatically erase all data — please refer to Section 8 (Data Retention) for details on how long ok37 retains your information after account closure.

Data Controller

For the purposes of applicable data protection legislation, ok37 is the data controller in respect of all personal data collected through the ok37 platform. As data controller, ok37 determines the purposes and means by which your personal data is processed.

ok37 is operated by its licensed parent entity, which holds a valid international gaming licence issued by a recognised gambling regulatory authority. ok37's data processing activities are conducted in compliance with the applicable data protection framework of the jurisdiction in which ok37 is licensed.

Information We Collect

ok37 collects personal data from you directly when you register an account, make a deposit or withdrawal, contact ok37 support, or interact with the ok37 platform. We also collect certain data automatically when you browse the ok37 website. The categories of personal data ok37 collects are set out in the table below:

ok37 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and anti-money laundering compliance (e.g., CNIC data). ok37 does not collect biometric data except where a liveness selfie is required as part of enhanced KYC, and such images are deleted once the verification check is completed.

How We Use Your Data

ok37 uses the personal data we collect for the following purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law:

• Account Registration & Management: To create and manage your ok37 account, verify your identity, process your ok37 login, and maintain accurate account records.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and USDT TRC20, and to verify that payment methods belong to the account holder.
• KYC & AML Compliance: To verify your age (21+), identity, and source of funds in accordance with applicable anti-money laundering and know-your-customer obligations.
• Platform Operation: To deliver ok37 games and betting markets, settle bets, credit winnings, apply bonus offers, and maintain the integrity of the ok37 gaming environment.
• Customer Support: To respond to your queries, complaints, and support requests via live chat, email, or any other ok37 support channel.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, collusion, and other prohibited conduct on the ok37 platform.
• Responsible Gaming: To monitor player activity for signs of problem gambling, enforce responsible gaming tools (deposit limits, self-exclusion), and contact players where ok37 has concerns about their gaming behaviour.
• Legal & Regulatory Obligations: To comply with applicable laws, court orders, regulatory instructions, and requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve ok37's features, performance, and user experience for players across Pakistan.
• Marketing Communications: To send you ok37 promotional offers, bonus alerts, and platform updates — only where you have opted in to receive such communications. You may opt out at any time via your ok37 account settings.

Legal Basis for Processing

ok37 processes your personal data on the following legal bases, as applicable under data protection law:

• Contractual Necessity: Processing required to perform ok37's contractual obligations to you under the ok37 Terms & Conditions — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification (21+), and reporting obligations to regulatory authorities.
• Legitimate Interests: Processing necessary for ok37's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

ok37 does not sell, rent, or trade your personal data to any third party. ok37 shares your personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: ok37 shares transaction data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT processing partners solely to facilitate deposits and withdrawals on your ok37 account.
• KYC & Identity Verification Providers: ok37 uses accredited third-party identity verification services to validate CNIC documents and conduct liveness checks as part of the ok37 KYC process. These providers process your data under strict data processing agreements with ok37.
• Game Providers: ok37's third-party game providers receive limited technical data (such as a player reference ID and session token) required to deliver game content. Game providers do not receive your personal identity or financial data.
• Fraud & AML Prevention Services: ok37 uses industry-standard fraud detection and AML screening tools that process transaction and behavioural data to identify suspicious activity.
• Regulatory & Law Enforcement Authorities: ok37 will disclose personal data to competent regulatory authorities, courts, or law enforcement agencies where required by law, court order, or regulatory instruction — without prior notice to you where prohibited by law.
• Affiliated Companies: ok37 may share data with its parent company and directly affiliated entities for group-level compliance, risk management, and operational support purposes, subject to the same data protection standards described in this policy.
• Business Transfers: In the event of a merger, acquisition, or sale of ok37's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations being assumed by the acquirer.

All third parties with whom ok37 shares personal data are required to handle that data securely, process it only for the specified purpose, and comply with applicable data protection obligations. ok37 does not permit third-party service providers to use your data for their own marketing purposes.

Cookies & Tracking Technologies

ok37 uses cookies and similar tracking technologies to operate the ok37 platform, analyse usage patterns, and — where you have consented — personalise your experience and deliver relevant ok37 promotional content. Cookies are small text files placed on your device when you visit ok37.biz.

You can manage your cookie preferences through your browser settings or the ok37 cookie consent tool. Disabling essential cookies will prevent you from accessing the ok37 platform, including the ok37 login page. Disabling analytics or marketing cookies will not affect your ability to use the core ok37 platform.

Data Retention

ok37 retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your ok37 account being active, plus a minimum of 5 years following account closure to satisfy regulatory and anti-money laundering record-keeping obligations.
• KYC Documents (CNIC, proof of address): Retained for a minimum of 5 years from the date of account closure or the date of the last transaction on your ok37 account, whichever is later, in accordance with AML regulatory requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, including deposit records, withdrawal records, and bonus transaction history.
• Customer Support Records: Live chat transcripts and email correspondence retained for 2 years from the date of the interaction, or longer where the interaction is related to an active dispute or regulatory investigation.
• Marketing Consent Records: Records of your marketing opt-in and opt-out history retained for 3 years from the date of the last consent action.
• Self-Exclusion Records: Records of self-exclusion requests and responsible gaming limit settings are retained for a minimum of 5 years from the end of the self-exclusion period to allow ok37 to enforce re-registration cooling-off periods.

Upon expiry of the applicable retention period, ok37 will securely delete or permanently anonymise your personal data in accordance with our data destruction procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated from further processing until deletion is completed.

Data Security

ok37 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ok37 platform;
• Encryption of sensitive data fields (including CNIC numbers and payment account details) at rest in ok37's database systems;
• Role-based access controls ensuring that ok37 staff can only access personal data relevant to their specific job functions;
• Multi-factor authentication requirements for all ok37 administrative system access;
• Regular third-party penetration testing and security audits of the ok37 platform infrastructure;
• Dedicated security incident response procedures, including breach notification protocols compliant with applicable regulatory requirements.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ok37 will notify affected players without undue delay and will report the breach to the relevant regulatory authority as required by applicable law.

Your Data Rights

As an ok37 player, you have the following rights in relation to your personal data. ok37 is committed to facilitating the exercise of these rights promptly and without unnecessary obstacles:

To exercise any of these rights, please contact ok37's Data Protection team at [email protected] with the subject line "Data Rights Request — [Your ok37 Account Reference]". ok37 will verify your identity before processing any data rights request. ok37 will respond to all valid requests within 30 calendar days. Where a request is complex or involves a large volume of data, ok37 may extend this period by a further 30 days with notice to you.

ok37 does not charge a fee for processing data rights requests unless requests are manifestly unfounded, excessive, or repetitive, in which case ok37 may apply a reasonable administrative fee or decline to act on the request, with written notice to you explaining the reason.

Children & Minors

ok37 is strictly an adults-only platform. ok37 does not knowingly collect personal data from individuals under the age of 21. The ok37 registration process requires all applicants to confirm they are aged 21 or above, and ok37 conducts CNIC-based age verification as part of its KYC process to enforce this requirement.

If ok37 discovers or has reasonable grounds to believe that personal data has been submitted by a person under the age of 21, ok37 will:

• Immediately suspend the relevant ok37 account and freeze all associated funds;
• Conduct enhanced identity verification to confirm the account holder's age;
• If the account holder is confirmed to be under 21, permanently close the account, refund any deposits to the original payment method, and forfeit any winnings generated;
• Securely delete all personal data associated with the underage account, except where retention is required by applicable law or regulatory obligation.

International Data Transfers

ok37 is operated by an internationally licensed gaming entity. As a result, certain personal data collected from Pakistani players may be transferred to, stored in, and processed in countries outside Pakistan. These transfers may include countries where the data protection laws differ from those applicable in Pakistan.

ok37 ensures that all international transfers of personal data are conducted with appropriate safeguards in place, including:

• Data processing agreements with all third-party processors that impose equivalent data protection obligations to those described in this Privacy Policy;
• Standard contractual clauses or equivalent transfer mechanisms approved under applicable data protection frameworks;
• Transfer only to third parties who have demonstrated compliance with internationally recognised data security standards.

By using the ok37 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan as described in this section. ok37 will always take reasonable steps to ensure your data is protected to the standard described in this Privacy Policy regardless of where it is processed.

Third-Party Links

The ok37 platform may contain links to third-party websites or services, including payment processors and game providers. This Privacy Policy applies solely to data collected by ok37 through the ok37 platform. ok37 has no control over and accepts no responsibility for the privacy practices of any third-party website or service.

ok37 encourages all players to review the privacy policies of any third-party service they interact with in connection with their ok37 account — including JazzCash, EasyPaisa, HBL, UBL, and SadaPay — to understand how those services collect and use personal data independently of ok37.

Policy Updates

ok37 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or applicable law. When material changes are made to this Privacy Policy, ok37 will notify registered players by email to their registered address and by a prominently displayed notice on the ok37 platform.

The updated Privacy Policy will take effect 7 days after the notification date for material changes. Your continued use of the ok37 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. The version number and effective date of the current Privacy Policy are always displayed at the top of this page.

If you do not agree with any changes to this Privacy Policy, you must stop using the ok37 platform and may request account closure in accordance with the ok37 Terms & Conditions. ok37 will retain your data following closure in accordance with the retention periods described in Section 8.

Contact Us

For all privacy-related queries, data rights requests, or concerns about how ok37 processes your personal data, please contact ok37's Data Protection team using the details below:

• Email: [email protected] — Subject line: "Data Protection Request — [Your ok37 Account Reference]"
• Live Chat: Available 24/7 from within your ok37 account after ok37 login — for urgent privacy concerns, live chat is the fastest channel.
• Response Time: ok37 acknowledges all data protection queries within 48 hours and provides a substantive response within 30 calendar days.