ok37 Privacy Policy

ok37 ("we", "us", "our", "Platform") is an English-language online betting and casino information platform accessible at https://ok37.cam. This Privacy Policy ("Policy") sets out how ok37 collects, uses, discloses, stores and protects the personal information of individuals ("you", "User") who visit, register on or otherwise interact with the ok37 platform.

This Policy applies to all personal data processed in connection with the ok37 Services, including data collected via the website, mobile applications and any correspondence you conduct with our support team. It forms part of the broader contractual framework between you and ok37, which also includes our Terms & Conditions and Responsible Gambling Policy.

ok37 has a significant user base in Pakistan — players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and across the country. While Pakistan's personal data legislation continues to evolve, ok37 applies GDPR-aligned data protection principles as the baseline standard for all users, regardless of their country of access.

ok37 acts as the Data Controller for the personal data collected and processed through the ok37 platform. As Data Controller, ok37 determines the purposes for which your personal data is processed and the manner in which it is handled.

For any privacy-related enquiry, to exercise your data subject rights, or to raise a concern regarding the handling of your personal data, you may contact ok37 using the details provided in Section 15 (Contact Us) of this Policy.

ok37 collects personal data through several distinct channels. The categories of data collected and the context of collection are set out below:

4.1 Data You Provide Directly

When you register an account, complete KYC verification or contact support, you may provide:

• Identity data: Full legal name, date of birth, gender, nationality.
• Contact data: Email address, mobile number, residential address (including city — e.g., Karachi, Lahore, Islamabad).
• Identity documents: CNIC number and copy, passport details, proof of address.
• Financial data: Payment method details (e.g., bank account reference numbers, mobile wallet identifiers for services such as Easypaisa, JazzCash or Raast), deposit history and transaction records in PKR.
• Source-of-funds information: Where required by our AML obligations, supporting evidence of the origin of funds used to deposit on the platform.
• Support correspondence: Any communications you send to the ok37 support team via live chat, email or other channels.

4.2 Data Collected Automatically

When you access and use the ok37 platform, we automatically collect:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution.
• Usage data: Pages visited, features accessed, session duration, click paths, search queries, time zone (e.g., PKT UTC+5) and locale settings.
• Betting activity data: Markets accessed, wagers placed, stakes, odds accepted, settlement results and bonus participation records.
• Cookie and tracker data: As described in Section 8 of this Policy.

4.3 Data From Third Parties

We may receive personal data about you from third-party sources, including KYC/AML verification providers, fraud prevention databases, payment processors and, where applicable, responsible gambling exclusion registers. Data received from these sources is used only to the extent necessary to verify your identity, prevent financial crime or fulfil our responsible gambling obligations.

ok37 processes personal data only where a valid lawful basis exists. The applicable lawful bases are as follows:

ok37 uses the personal data we collect for the following specific purposes:

• Account Management: Creating, verifying and maintaining your ok37 account; authenticating your identity at login; managing your account settings and security preferences.
• Service Delivery: Processing deposits and withdrawals; settling wagers; managing bonus credits and loyalty tier status; providing personalised account dashboards in PKR.
• KYC & AML Compliance: Verifying your identity and age; conducting ongoing transaction monitoring to detect and prevent money laundering, terrorist financing and fraud.
• Responsible Gambling: Monitoring gambling behaviour patterns for indicators of potential harm; administering self-exclusion, deposit limit and cool-off requests; complying with any jurisdiction-specific responsible gambling obligations.
• Customer Support: Responding to queries, complaints and dispute escalations received through live chat or email at [email protected].
• Platform Security: Detecting and preventing unauthorised access, account takeover, bonus abuse and technical exploitation.
• Analytics and Improvement: Analysing aggregated usage data to improve platform performance, content relevance and user experience — for example, optimising cricket and PSL market presentation for Pakistani users.
• Marketing Communications: Sending promotional messages about offers and new features, where you have provided explicit consent and not subsequently withdrawn it. You may withdraw consent at any time by contacting support.
• Legal and Regulatory Obligations: Retaining records as required by applicable law; responding to lawful requests from regulatory or law enforcement authorities.

ok37 does not sell your personal data. We may share personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• KYC and AML Providers: Identity verification and fraud screening services engaged to perform mandatory customer due-diligence checks. These providers act as Data Processors under binding data processing agreements.
• Payment Processors: Third-party payment service providers engaged to facilitate deposit and withdrawal transactions. Data shared is limited to what is required to process the transaction and comply with financial crime prevention obligations.
• Cloud and Hosting Infrastructure: Secure cloud service providers on whose infrastructure ok37's platform and data are hosted. These providers act under strict data processing agreements and are prohibited from accessing customer data for their own purposes.
• Legal and Regulatory Authorities: Where ok37 is subject to a binding legal obligation — such as a court order, regulatory disclosure requirement or lawful law enforcement request — we may disclose personal data to the relevant authority.
• Responsible Gambling Registers: Where applicable, ok37 may submit self-exclusion data to operator-mandated exclusion registers to prevent circumvention of self-exclusion through alternative platforms.
• Business Transfers: In the event of a merger, acquisition or sale of ok37's business, personal data held by ok37 may be transferred to the successor entity, subject to equivalent privacy protections.

ok37 uses cookies and similar tracking technologies to support the operation, security and improvement of the platform. The categories of cookies we use are described below:

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary or security cookies may impair the functionality and security of your ok37 account. ok37 does not use cookies to serve third-party advertising.

ok37 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and contractual obligations. The retention schedules below are indicative; specific retention periods are determined by the most stringent applicable legal requirement.

ok37 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or destruction. Key security measures include:

• TLS/SSL encryption — All data transmitted between your device and the ok37 platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted data storage — Personal data stored on our servers is encrypted at rest. Sensitive fields (such as identity document data) are subject to additional field-level encryption.
• Access controls — Access to personal data is restricted on a strict need-to-know basis. Personnel with access to customer data are subject to confidentiality obligations and regular security training.
• Two-factor authentication — Available to all account holders and mandatory for privileged internal administrative accounts.
• Penetration testing and vulnerability scanning — ok37's infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities.
• Incident response procedures — In the event of a personal data breach, ok37 has documented response procedures, including notification obligations to affected individuals and relevant supervisory authorities where required by law.

While ok37 employs robust security measures, no internet-based platform can guarantee absolute security. You also play a role in protecting your data — please ensure your account password is strong, enable two-factor authentication, and report any suspected unauthorised access to our support team immediately.

Subject to applicable law and the limitations described below, you have the following rights in respect of your personal data held by ok37:

ok37 may transfer personal data to countries outside Pakistan or outside the European Economic Area (EEA) in connection with our platform operations, including to cloud hosting providers, KYC verification services and payment processors located in various jurisdictions.

Where personal data is transferred internationally, ok37 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to the protections afforded in the jurisdiction from which the data originated. Safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Binding corporate rules where transfers occur within a corporate group.
• Adequacy decisions recognising the destination country's data protection framework as equivalent.
• Specific consent, where no other appropriate safeguard is available and the transfer is necessary for the performance of the contract.

You may request further information about the specific safeguards in place for any particular international transfer by contacting our Data Protection team.

The ok37 platform is strictly for adults aged 18 years or older — or the higher minimum age required by the applicable operator license jurisdiction. ok37 does not knowingly collect, retain or process personal data belonging to individuals under the applicable minimum age.

Age verification is conducted as part of the KYC process at account registration and may be repeated at any time where ok37 has reason to believe the age restriction may not have been satisfied. If ok37 discovers that an account has been registered by a minor, the account will be immediately suspended, all associated funds will be frozen pending investigation, and personal data collected will be deleted to the extent permitted by our legal obligations.

Being 18 years of age does not, of itself, make gambling lawful in Pakistan or in any other jurisdiction. Users remain responsible for verifying the legal position in their specific location.

ok37 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform functionality. Where an amendment is material — meaning it changes your rights or the way we use your personal data in a significant manner — we will provide reasonable advance notice by email to your registered address and/or by posting a prominent notice on the platform.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Minor amendments — such as clarifications, typographical corrections or updated contact details — may be made without specific notification.

Your continued use of the ok37 platform following the effective date of any amended Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you should close your account and cease using the platform before the amendment takes effect.

For all privacy-related enquiries — including data subject rights requests, questions about this Policy, concerns about how your data is handled, or to report a suspected data breach — please contact the ok37 Data Protection team through the following channels: