ok33 Privacy Policy

ok33 ("ok33", "we", "us", "our") is the operator of the online casino and sports betting platform available at ok33.lol. In the course of providing our services to registered players in Pakistan and other eligible markets, ok33 necessarily collects and processes certain categories of personal data. This Privacy Policy describes those data processing activities in full.

For the purposes of this Privacy Policy, "personal data" means any information that identifies or could reasonably be used to identify a natural person, either directly or in combination with other information. This includes your name, email address, telephone number, CNIC number, payment details, and device identifiers, among other categories described below.

ok33 acts as the data controller in respect of the personal data collected through the ok33 platform. This means that ok33 determines the purposes and means by which your personal data is processed. Where ok33 engages third-party processors to process data on its behalf (such as payment providers and KYC verification services), those processors act under written instructions from ok33 and are bound by appropriate data protection obligations.

This Privacy Policy should be read together with the ok33 Terms & Conditions and the ok33 Responsible Gaming Policy, both of which are incorporated by reference.

ok33 collects the following categories of personal data from account holders and platform users:

ok33 collects personal data through the following channels and mechanisms:

• Direct collection: Information you provide voluntarily when registering an ok33 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotional activities.
• Automated collection: Technical and usage data collected automatically as you interact with the ok33 platform, including through cookies, web beacons, log files, and similar tracking technologies described in Section 10 of this Policy.
• Third-party sources: Information received from KYC verification partners (for identity and document verification), payment processors (for transaction confirmation), and fraud prevention services. ok33 ensures that any third party providing data to ok33 has a lawful basis to share that data.

ok33 does not collect sensitive personal data (such as health information, biometric data, or political opinions) except where this is strictly necessary to fulfil a specific legal obligation, such as administering a self-exclusion request made on responsible gaming grounds.

ok33 uses the personal data it collects for the following purposes:

• To create, verify, and manage your ok33 player account, including identity verification and age confirmation (21+ requirement).
• To process your deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB, and bank transfer.
• To provide access to the ok33 gaming platform, including the casino, cricket betting, sportsbook, live dealer games, and slot products.
• To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable legal and regulatory obligations.
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited conduct on the platform.
• To monitor player activity for responsible gaming purposes, including identifying potentially problematic gambling behaviour and administering self-exclusion or deposit limit requests.
• To communicate with you about your account, including transactional notifications, security alerts, and customer support responses.
• To send you marketing communications about ok33 promotions, bonuses, and cricket betting offers — where you have provided your consent to receive such communications and have not subsequently withdrawn that consent.
• To analyse platform usage, improve the ok33 product, and conduct internal research and analytics.
• To enforce the ok33 Terms & Conditions and other applicable policies.

ok33 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform our contract with you — i.e. to provide you with an ok33 account and the associated gaming and betting services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and age verification.
• Legitimate interests: Processing necessary for the legitimate interests of ok33, such as fraud detection, platform security, responsible gaming monitoring, and improving our services — provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally in relation to direct marketing communications. You may withdraw consent at any time by contacting ok33 customer support or using the unsubscribe option in any marketing email.

ok33 does not sell your personal data. ok33 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual data protection safeguards:

• KYC and identity verification providers: To verify your identity, age, and document authenticity as part of the account registration and ongoing KYC process.
• Payment processors: Including JazzCash, EasyPaisa, and partner banking institutions (HBL, UBL, Meezan Bank, MCB), to process deposits and withdrawals in PKR.
• Fraud prevention and AML services: To screen transactions and player activity against sanctions lists and fraud databases as required by applicable regulation.
• Game and software providers: Certified third-party game studios whose games are available on ok33 may receive limited technical data necessary to deliver their game products to your device.
• Regulatory and law enforcement authorities: ok33 will disclose personal data to competent authorities where required to do so by law, court order, or lawful regulatory request. ok33 will, where legally permitted, notify affected players of any such disclosure.
• Professional advisers: Including lawyers, auditors, and insurers, where necessary in connection with legal proceedings, regulatory enquiries, or risk management.

ok33 retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, and in any event for no longer than the following periods unless a longer retention period is required by applicable law:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and financial record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable tax and financial regulation.
• Communications and support data: Retained for three (3) years from the date of the last communication, unless the communication relates to a dispute or legal claim, in which case it is retained until final resolution.
• Technical and usage data: Retained for up to twenty-four (24) months from collection, after which it is aggregated or anonymised for analytical purposes.
• Marketing consent records: Retained for the duration of the consent, plus three (3) years following withdrawal of consent, as evidence of the consent having been obtained.

Where personal data is no longer required, ok33 will securely delete or irreversibly anonymise it in accordance with industry best practices.

ok33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and ok33 servers.
• Encryption of sensitive data at rest, including financial and identity data.
• Role-based access controls ensuring that personal data is accessible only to ok33 personnel who have a legitimate operational need.
• Regular security audits, penetration testing, and vulnerability assessments of ok33 systems.
• Multi-factor authentication options for player accounts to protect against unauthorised logins.
• Incident response procedures designed to detect, contain, and notify affected parties of any data breach in a timely manner.

Whilst ok33 takes its security obligations seriously, no online platform can guarantee absolute security. You play a role in keeping your account secure by maintaining strong, unique passwords and not sharing your login credentials with any other person.

As an ok33 account holder, you have the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of access: You may request a copy of the personal data that ok33 holds about you, along with information about how that data is used.
• Right to rectification: You may request that ok33 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure: You may request that ok33 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to ok33's legal retention obligations.
• Right to restriction: You may request that ok33 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to ok33 processing your personal data for direct marketing purposes at any time. You may also object to processing based on ok33's legitimate interests, subject to ok33 demonstrating compelling grounds for continued processing.

To exercise any of the above rights, please contact ok33 customer support via the live chat facility in your account dashboard or by writing to: [email protected]. ok33 will respond to all valid requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, with notice provided to you.

ok33 will not charge a fee for processing rights requests unless a request is manifestly unfounded or excessive, in which case ok33 reserves the right to charge a reasonable administrative fee.

ok33 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a website. ok33 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the ok33 platform to function. They enable core features such as account authentication, session management, and security. These cookies cannot be disabled without impairing your ability to use ok33.
• Functional cookies: These cookies remember your preferences (such as language settings and display preferences) to provide a more personalised experience on the ok33 platform.
• Analytics cookies: ok33 uses analytics tools to understand how players interact with the platform — for example, which games are most popular and where navigation issues arise. Analytics data is aggregated and does not identify individual players.
• Security cookies: These cookies help ok33 detect and prevent fraudulent activity, including bot access and credential stuffing attacks.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the ok33 platform. ok33 does not use third-party advertising or retargeting cookies that track your browsing activity across unrelated websites.

The ok33 platform is strictly intended for persons aged 21 years or older. ok33 does not knowingly collect, process, or retain the personal data of any person under the age of 21. Age is verified as a mandatory step during the account registration process using a valid Pakistani CNIC.

If ok33 discovers or is notified that an account has been registered by or on behalf of a person under the age of 21, ok33 will immediately suspend the account, delete the personal data associated with it to the extent permitted by applicable law, and take appropriate action in accordance with its Responsible Gaming Policy.

If you are a parent or guardian and have reason to believe that a person under 21 has registered an ok33 account using your or their details, please contact ok33 customer support immediately at: [email protected]

ok33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. The effective date at the top of this page will be updated each time a material change is made.

Where a change is material — meaning it significantly affects the way in which ok33 processes your personal data or your rights in relation to that data — ok33 will make reasonable efforts to notify you in advance via email or a notice displayed upon login. For non-material changes, the updated Privacy Policy will simply be published on this page.

Your continued use of the ok33 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept any changes, you must discontinue use of the platform and close your account in accordance with the account closure procedure in the ok33 Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ok33 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly from your ok33 account dashboard — the fastest way to get a response.
• Email: [email protected] — for written enquiries, data rights requests, or privacy complaints.

ok33 is committed to resolving privacy-related enquiries promptly and transparently. All formal data rights requests will receive a written response within thirty (30) days of receipt.