ok37 Privacy Policy

01 Introduction

ok37 ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who visits or registers on the ok37 Platform at ok37.asia. This Privacy Policy sets out the basis on which we collect, process, store, and share personal data relating to players, prospective players, and visitors to the Platform.

This Privacy Policy should be read alongside the ok37 Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the ok37 Platform. By accessing ok37 or creating an account, you confirm that you have read and understood this Privacy Policy.

02 Data Controller

For the purposes of applicable data protection law, the data controller responsible for personal data collected through the ok37 Platform is ok37, operating under its international gaming licence. ok37 determines the purposes for which and the manner in which personal data is processed in connection with the Platform.

If you have any questions about how ok37 handles your personal data, or if you wish to exercise any of your data rights described in Section 11, you may contact ok37's Data Protection contact via the support email address listed in Section 15 of this policy. Please include "Data Privacy" in the subject line of your message so it is directed to the correct team without delay.

03 Data We Collect

3.1 Identity & Registration Data

When you register an ok37 account, we collect your full legal name as it appears on your Pakistani CNIC or passport, your date of birth, your gender, and your nationality. This information is required to verify that you meet the 21+ age requirement and are eligible to use the ok37 Platform.

3.2 Contact Data

We collect your email address, Pakistani mobile phone number, and residential address (including city, province, and postal code) for account communication, KYC verification, and fraud prevention purposes.

3.3 Identity Verification (KYC) Documents

As part of our obligations under our international gaming licence, ok37 may collect copies of identity documents including your CNIC, passport, driving licence, and proof of address such as a recent utility bill or bank statement. We may also collect selfie photographs for liveness verification where required.

3.4 Financial Data

We collect transactional data including deposit amounts, withdrawal requests, payment method identifiers (such as your JazzCash mobile number or bank account number mask), and transaction histories. ok37 does not store full bank account numbers, debit or credit card numbers, or internet banking passwords.

3.5 Gaming & Betting Activity Data

We record details of all bets placed, games played, session durations, game outcomes, bonus activations, and responsible gaming tool usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

3.6 Technical & Device Data

When you access the ok37 Platform, we automatically collect your IP address, device type and model, operating system, browser type and version, screen resolution, and referring URL. This data is used for security monitoring, fraud detection, and platform optimisation.

3.7 Communications Data

If you contact ok37's support team by email or live chat, we retain records of your communications, including the content of messages and the date and time of contact, for quality assurance, dispute resolution, and regulatory compliance purposes.

04 How We Collect Your Data

ok37 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or filling in any form on the Platform.
• Automated collection: Data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access or interact with the ok37 Platform.
• Third-party sources: Data received from KYC and identity verification providers, payment processors such as JazzCash and EasyPaisa, fraud prevention services, and credit reference agencies where required for AML compliance.
• Publicly available sources: In limited circumstances, ok37 may cross-reference data against publicly available databases for the purposes of sanctions screening or politically exposed person (PEP) checks.

05 How We Use Your Data

ok37 uses the personal data it collects for the following purposes:

• To create and manage your ok37 player account;
• To verify your identity and age in compliance with our licensing obligations;
• To process deposits, withdrawals, and other financial transactions in PKR;
• To detect and prevent fraud, money laundering, and other unlawful activity;
• To monitor gaming activity for responsible gaming purposes and to apply player-requested limits;
• To communicate with you regarding your account, transactions, and support queries;
• To send you promotional communications about ok37 offers and products, where you have consented to receive such communications;
• To comply with our obligations under our international gaming licence and applicable law;
• To improve the ok37 Platform, games offering, and user experience through anonymised analytics;
• To resolve disputes and enforce our Terms & Conditions.

06 Legal Basis for Processing

ok37 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account registration, payment processing, and game operation.
• Legal obligation: Processing required to comply with applicable law and our licensing obligations, including KYC/AML checks, age verification, and regulatory reporting.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time by contacting ok37 support or adjusting your account preferences.

07 Data Sharing & Disclosure

ok37 does not sell, rent, or trade your personal data to any third party. ok37 may share your data in the following limited circumstances:

7.1 Service Providers

ok37 shares data with carefully selected third-party service providers who assist in operating the Platform. These include KYC and identity verification providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast), fraud detection services, cloud hosting providers, and customer support software vendors. All service providers are contractually bound to process data only on ok37's instructions and to maintain appropriate security standards.

7.2 Regulatory & Legal Disclosure

ok37 may disclose personal data to its regulatory authority, relevant government bodies, law enforcement agencies, or courts where required to do so by law, by court order, or by the terms of our gaming licence. ok37 will notify affected players of such disclosures where permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ok37's assets, player data may be transferred to the successor entity as part of the transaction. Players will be notified of any such transfer and the applicable privacy terms in advance where practicable.

08 International Data Transfers

ok37 operates under an international gaming licence and may process or store data on servers located outside of Pakistan. Where personal data is transferred internationally, ok37 ensures that appropriate safeguards are in place to protect your data to at least the same standard as required under applicable data protection law.

These safeguards may include data transfer agreements incorporating standard contractual clauses, adequacy decisions, or equivalent mechanisms recognised under applicable law. If you wish to obtain further information about the safeguards in place for international transfers of your personal data, please contact ok37 via the details in Section 15.

09 Data Retention

ok37 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account relationship with ok37 and for a minimum of five (5) years following account closure, as required for AML compliance and regulatory audit purposes.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications and support records: Retained for three (3) years from the date of the last communication.
• Technical and device logs: Retained for up to twelve (12) months from the date of collection.
• Marketing consent records: Retained for as long as you hold an ok37 account, or until you withdraw consent, whichever is earlier.

Following the expiry of the applicable retention period, ok37 will securely delete or irreversibly anonymise your personal data.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the ok37 Platform. They allow the Platform to recognise your device across visits, maintain your session, and remember your preferences.

10.2 Types of Cookies ok37 Uses

• Essential cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in to your ok37 account. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, currency display, and game lobby layout to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how players navigate the Platform to help ok37 identify usability improvements. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats.

10.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ok37 Platform. ok37 does not use third-party advertising or retargeting cookies.

11 Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to the personal data ok37 holds about you:

To exercise any of the above rights, please contact ok37's support team at [email protected] with the subject line "Data Rights Request". ok37 will acknowledge your request within 48 hours and respond in full within 30 calendar days. In complex cases this period may be extended by a further 30 days, in which case ok37 will notify you of the extension and the reason for it.

12 Children's Privacy

The ok37 Platform is strictly for individuals aged 21 years and above. ok37 does not knowingly collect personal data from anyone under the age of 21. If ok37 discovers or is notified that personal data has been collected from a person under 21, it will immediately delete that data and close the associated account.

ok37 actively employs age verification procedures at the point of registration and at the time of first withdrawal to prevent underage access. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling content.

13 Security Measures

ok37 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• End-to-end 256-bit SSL/TLS encryption for all data transmitted between your device and the ok37 Platform;
• Encrypted storage of all sensitive personal and financial data at rest;
• Role-based access controls ensuring that ok37 staff can only access personal data that is necessary for their specific job function;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third-party specialists;
• Two-factor authentication (2FA) options available to all players to protect account access;
• Automated monitoring systems for detection of suspicious login activity, unusual transaction patterns, and potential data breaches;
• Staff training on data protection obligations and security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, ok37 will notify affected players without undue delay and will take all appropriate steps to contain the breach and mitigate its effects.

14 Changes to This Privacy Policy

ok37 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. Where changes are material, ok37 will notify registered players by email to their registered address and by displaying a prominent notice on the Platform for a minimum of seven (7) days prior to the changes taking effect.

The effective date at the top of this page will be updated each time this Privacy Policy is revised. We encourage you to review this page periodically. Your continued use of the ok37 Platform after any update to this Privacy Policy constitutes your acceptance of the revised terms.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which ok37 handles your personal data, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, including PSL match days and public holidays.

ok37 is committed to resolving all privacy-related queries and complaints fairly and promptly. If you are not satisfied with ok37's response to your complaint, you may have the right to escalate the matter to the relevant data protection authority or dispute resolution body applicable under ok37's gaming licence jurisdiction.