Your privacy matters to ok37. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we protect it, and what rights you have over your information as an ok37 player based in Pakistan.
Our Commitment to You
Every data exchange between your device and ok37.onl is protected by 256-bit SSL/TLS encryption. Your login credentials, financial details, and personal information are never transmitted in plain text.
ok37 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used only for operating and improving the ok37 platform and meeting legal obligations.
ok37 collects only the personal data that is genuinely necessary — for account operation, identity verification, payment processing, responsible gaming monitoring, and regulatory compliance. Nothing more.
You have the right to access, correct, or request deletion of the personal data ok37 holds about you. ok37 provides a clear process for exercising these rights, detailed in this Privacy Policy.
ok37 stores personal data on secured servers with access restricted to authorized personnel only. Data at rest is encrypted and access logs are maintained and reviewed regularly.
ok37's data practices comply with the requirements of its international gaming license, which mandates player data protection standards equivalent to internationally recognized privacy frameworks.
This Privacy Policy is issued by ok37 (referred to as "ok37," "we," "us," or "our") and applies to all personal data collected, processed, and stored in connection with your use of the ok37.onl website and all associated services, applications, and features (collectively, the "Platform").
For the purposes of this Policy, the following definitions apply:
This Policy applies to all users of the ok37 Platform, including registered account holders and unregistered visitors who browse ok37.onl. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy should be read alongside the ok37 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions regarding data matters, this Privacy Policy takes precedence.
ok37 is the data controller for personal data collected through the ok37.onl Platform. As data controller, ok37 determines the purposes and means by which your personal data is processed.
ok37 operates under an international gaming license, and its data protection practices are subject to the compliance requirements associated with that license. The licensing authority imposes data security and player protection standards that inform ok37's data governance framework.
For all privacy-related inquiries, requests, and complaints, please contact ok37's Data Protection contact via the channels listed in Section 15 of this Policy.
ok37 is a gaming and entertainment platform, not a financial institution. Personal data submitted to ok37 for KYC purposes is used solely for identity verification, fraud prevention, and regulatory compliance — never for credit assessments or financial profiling.
ok37 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below sets out the categories of data collected and their purpose:
| Data Category | Specific Data Points | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | KYC verification, age compliance, AML checks |
| Contact Data | Pakistani mobile number, email address, city of residence | Account communication, OTP delivery, support |
| Financial Data | JazzCash/EasyPaisa account references, bank account details (where applicable), transaction history | Payment processing, fraud prevention, AML compliance |
| KYC Documents | CNIC front and back images, proof of payment method ownership | Identity and age verification before withdrawals |
| Gaming Activity Data | Game sessions, bet history, win/loss records, deposit and withdrawal history | Account operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Security, fraud detection, platform optimization |
| Communications Data | Live chat transcripts, email correspondence, support tickets | Customer service, dispute resolution, quality assurance |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and SMS | Delivering promotional communications where consented |
ok37 does not collect sensitive personal data such as biometric data (other than CNIC photographs used for identity verification), health data, or political opinions.
ok37 collects personal data through the following means:
4.1 Data You Provide Directly
4.2 Data Collected Automatically
When you visit ok37.onl, ok37's systems automatically collect certain technical data including your IP address, browser type and version, device model, operating system, session start and end times, pages visited, and referring URL. This data is collected via server logs and cookies (see Section 7 for cookie details).
4.3 Data Received from Third Parties
ok37 may receive personal data from third-party sources in certain circumstances, including:
ok37 does not purchase personal data from data brokers or acquire player data from other gaming platforms. All third-party data sources are directly relevant to operating a secure and compliant gaming platform.
ok37 processes personal data only for defined, legitimate purposes. The following table sets out the purposes for which ok37 processes personal data and the corresponding legal basis:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (the ok37 Terms & Conditions) |
| Processing deposits and withdrawals | Performance of contract; legal obligation (AML compliance) |
| Identity and age verification (KYC) | Legal obligation (gaming license compliance, 21+ enforcement) |
| Fraud detection and prevention | Legitimate interests of ok37 and protection of other players |
| Anti-money laundering monitoring | Legal obligation |
| Responsible gaming monitoring | Legal obligation (gaming license); legitimate interests |
| Customer support | Performance of contract; legitimate interests |
| Platform security and integrity | Legitimate interests of ok37 |
| Sending promotional communications | Consent (opt-in only) |
| Legal compliance and regulatory reporting | Legal obligation |
Where ok37 relies on legitimate interests as a legal basis, those interests are balanced against your rights and interests. If you wish to request more information about this balancing assessment for any specific processing activity, please contact ok37 via the details in Section 15.
ok37 does not sell, rent, or disclose your personal data to third parties for their independent commercial purposes. ok37 shares personal data only in the following limited circumstances:
6.1 Service Providers
ok37 engages carefully selected third-party service providers who process personal data on ok37's behalf and under ok37's instructions, subject to data processing agreements. These include:
6.2 Regulatory and Legal Authorities
ok37 will disclose personal data to regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law, a court order, or a binding regulatory request. ok37 will notify affected users of such disclosures where legally permitted to do so.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of ok37's assets, player personal data may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections set out in this Policy.
ok37 does not share personal data with other gambling platforms, betting syndicates, advertising networks, or any entity not directly involved in operating ok37's services.
ok37.onl uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a website you visit. ok37 uses the following categories of cookies:
ok37 does not use advertising or cross-site tracking cookies. No cookie data from ok37.onl is shared with advertising networks or used to build profiles for display advertising on other websites.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect Platform functionality and may prevent you from logging in or accessing core features. Analytics and functional cookies can be disabled without affecting core account access.
ok37 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The following retention periods apply as a general guide:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Regulatory and legal compliance |
| KYC documents | Duration of account + 5 years post-closure | AML legal obligation |
| Transaction records | Duration of account + 5 years post-closure | AML and financial record-keeping obligations |
| Gaming activity logs | Duration of account + 2 years post-closure | Dispute resolution, responsible gaming monitoring |
| Customer support records | 3 years from last interaction | Service quality, dispute resolution |
| Technical/session logs | 90 days | Security monitoring and fraud detection |
| Marketing preferences | Until opt-out + 1 year | Consent management |
After the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be associated with any individual.
Where ok37 is required to retain data beyond these standard periods due to an ongoing investigation, legal proceedings, or regulatory instruction, data will be retained until that requirement is resolved.
ok37 implements a layered approach to personal data security combining technical, administrative, and physical controls:
9.1 Technical Controls
9.2 Administrative Controls
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ok37 will notify affected players as soon as reasonably practicable after becoming aware of the breach, consistent with applicable legal obligations.
As a data subject, you have the following rights in relation to the personal data ok37 holds about you. ok37 will respond to valid requests within 30 days of receipt.
Request a copy of the personal data ok37 holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your ok37 Account.
Request deletion of your personal data where ok37 no longer has a legal basis or legitimate need to retain it.
Request that ok37 restrict processing of your personal data in certain circumstances, such as while a dispute is being resolved.
Request a structured, machine-readable copy of personal data you have provided to ok37, where technically feasible.
Object to processing based on legitimate interests, including the right to opt out of marketing communications at any time.
To exercise any of the above rights, please contact ok37 via live chat or at [email protected]. ok37 may request verification of your identity before processing a data rights request to protect against unauthorized requests.
Some rights are subject to exceptions — for example, ok37 cannot delete KYC or transaction records during the mandatory retention period required by its gaming license and AML obligations. ok37 will explain any such limitations when responding to your request.
ok37 sends promotional communications — including bonus offers, tournament announcements, and platform updates — only to players who have opted in to receive such communications. Marketing consent is collected during the registration process and can be updated at any time via Account Settings or by contacting ok37 support.
ok37 may communicate with you via the following channels where you have consented:
You have the right to withdraw marketing consent at any time by:
Withdrawing marketing consent does not affect transactional communications. ok37 will continue to send account-related messages — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts — regardless of your marketing opt-out status, as these are necessary for account operation.
ok37 uses gaming activity data to support responsible gaming obligations. This includes monitoring deposit frequency, session duration, betting patterns, and account balance changes to identify indicators of potentially problematic gambling behavior. Where such indicators are identified, ok37 may:
ok37 maintains a register of self-excluded players. When a player requests self-exclusion, their details are retained in the exclusion register for the duration of the exclusion period and used to prevent account access and marketing contact. This processing is a legal obligation and cannot be circumvented by a data erasure request during the self-exclusion period.
Responsible gaming data processing is designed to protect players, not penalize them. If ok37 contacts you regarding your gaming activity, it is a genuine welfare measure — not a commercial decision. For more details, visit the ok37 Responsible Gaming page.
The ok37 Platform integrates third-party services necessary for its operation. These include game content from licensed game studios (Evolution Gaming, Pragmatic Play, Ezugi, and others), payment gateway services, and identity verification tools. When you interact with these integrated third-party services — for example, by launching a live dealer game or initiating a JazzCash deposit — the relevant third party may process certain technical data to deliver that service.
ok37 selects third-party service providers based on their compliance with applicable data protection standards and requires them to process personal data only in accordance with ok37's instructions. However, once data passes to a third party for their operational purposes (for example, when you load a game or complete a payment), that third party's own privacy policy governs their processing.
ok37 recommends reviewing the privacy policies of integrated third-party services where you have concerns about their data practices. ok37 cannot be held responsible for the data handling practices of independent third parties beyond the scope of our contractual data processing agreements with them.
ok37 does not embed third-party advertising networks, social media tracking pixels, or analytics providers that track you across multiple websites. The only third-party technologies integrated into ok37.onl are those strictly necessary for platform operation.
ok37 reserves the right to update this Privacy Policy from time to time to reflect changes in its data practices, legal obligations, or platform features. Where a material change is made that affects how ok37 processes your personal data, ok37 will notify you by one or more of the following methods:
The "Last Updated" date at the top of this document reflects the most recent revision. It is your responsibility to review this Privacy Policy periodically to stay informed of any updates.
Continued use of the ok37 Platform following notification of a Privacy Policy update constitutes your acceptance of the revised Policy. If you do not accept the changes, you should cease using the Platform and contact ok37 support to request account closure.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how ok37 has handled your personal data, please contact ok37 via the following channels:
ok37 aims to respond to all privacy-related inquiries within 48 hours and to complete data rights requests within 30 days of receipt. Where a request is complex or ok37 requires additional information to verify your identity, ok37 may extend this period by a further 30 days and will notify you accordingly.
If you are not satisfied with ok37's response to a data protection complaint, you have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction where ok37 holds its gaming license. Contact details for the relevant authority will be provided upon request.
ok37 takes data protection seriously and will investigate all privacy complaints thoroughly and in good faith. Your right to lodge a complaint with a supervisory authority does not affect your ability to seek a judicial remedy.
Now that you know how seriously ok37 takes your personal data, join thousands of Pakistani players who trust ok37 for secure, transparent, and fair online gaming.