ok37 Privacy Policy

This Privacy Policy applies to all players who use the ok37 platform, whether through the website at ok37.vu or through the ok37 mobile app. It covers how we handle personal information collected during registration, identity verification, deposits and withdrawals in PKR, and your general use of our sports betting, slots, live casino and VIP services.

ok37 is built for players in Pakistan. We are aware that privacy matters deeply to our users, and we want to be straightforward about what we collect and why. This policy is written in plain language — not legal jargon — so you can actually understand what you are agreeing to.

By creating an ok37 account and using the platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle data, please do not register or use the platform. For questions about any part of this policy, our support team is available around the clock.

ok37 collects personal data in several ways — information you provide directly when registering, data generated when you use the platform, and technical data from your device and browser. Here is a breakdown of each category:

Information You Provide

• Registration details: Full name, date of birth, email address, mobile number and preferred username.
• Identity verification (KYC): Copy of national identity card (CNIC), passport or other government-issued ID. Proof of address may also be requested in certain circumstances.
• Payment method details: Your JazzCash or Easypaisa account number, Raast ID, bank account details or card information as required for PKR deposits and withdrawals.
• Account preferences: Responsible gaming limits you set, communication preferences and any voluntary information you provide to support when raising a query.

Data Generated by Your Use of ok37

• Betting history — sports markets wagered on, stakes, odds and settlement results across cricket, PSL, T20, football, esports and other markets.
• Gaming history — slot games played, live casino sessions, bet sizes and outcomes.
• Transaction history — PKR deposits, withdrawals, bonus claims and VIP cashback records.
• Login activity — timestamps, IP addresses and device identifiers associated with account access.
• Session data — time spent on the platform, pages visited and features used.

Technical and Device Data

• IP address and approximate geographic location.
• Device type, operating system, browser type and version.
• App version if you access ok37 through the mobile app.
• Cookie identifiers and session tokens (see Section 4 for full cookie details).

The data ok37 collects is used for specific, legitimate purposes related to running the platform for Pakistan players. We do not use your data for purposes beyond what is described here.

ok37 does not use your personal data to make fully automated decisions that significantly affect you without human oversight. Where automated processes are used — for example, in fraud detection flagging — a member of the ok37 team will review flagged cases before action is taken.

Given that all ok37 transactions are processed in Pakistani Rupees and involve payment services that are widely used across Pakistan — JazzCash, Easypaisa, Raast, bank transfer and cards — we want to be specific about how payment data is handled.

When you add a payment method to your ok37 account, the details are passed securely to our payment processing partners. ok37 does not store full card numbers, JazzCash PINs, Easypaisa PINs or any other authentication credentials for these services. We retain a tokenised reference to your payment method — enough to process future transactions — but not the raw sensitive data itself.

• Payment method data is encrypted both in transit and at rest using industry-standard TLS and AES-256 protocols.
• Withdrawal requests are matched to your verified payment method to prevent misdirected payments. ok37 will not process a withdrawal to a payment method that does not match your verified identity.
• Your PK R payment history is retained for the period specified in Section 6 (Data Retention) and is accessible to you at any time from your account transaction history.
• ok37 does not share your PKR payment details with any third party other than the payment provider required to process the specific transaction.

ok37 uses cookies and similar tracking technologies to keep the platform functioning correctly, to remember your preferences and to understand how players use the site so we can improve the experience over time.

Types of Cookies We Use

• Essential cookies: Required for the platform to work. These include session authentication tokens that keep you logged in, CSRF protection tokens and load-balancing cookies. You cannot opt out of essential cookies without losing access to the platform.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limit configurations and your last-visited section of the platform.
• Analytics cookies: Collect anonymised and aggregated data about how players navigate the site — which pages are visited most, where players drop off, and how long sessions typically last. This data is used exclusively for platform improvement and is never linked back to individual player identities.
• Security cookies: Used to detect unusual login activity, identify bot traffic and protect your account from unauthorised access attempts.

ok37 does not use third-party advertising cookies or retargeting pixels that track you across external websites. When you close your browser or log out of ok37, session cookies are cleared automatically.

You can manage cookie preferences through your browser settings. Note that blocking essential cookies will prevent you from logging in and using the platform. For analytics and functional cookies, opt-out via your browser will be respected.

ok37 does not sell personal data. We do not share your information with advertisers, data aggregators or marketing companies. The only circumstances in which ok37 shares player data with third parties are the following:

• Payment processors: JazzCash, Easypaisa, Raast and bank/card processing partners receive the minimum data necessary to process your PKR transaction. These partners operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity verification providers: Where KYC verification is carried out through a third-party identity verification service, your ID document and personal details are shared with that provider solely for the purpose of verification. The provider is contractually prohibited from using this data for any other purpose.
• Fraud prevention and security: ok37 may share data with fraud prevention services or law enforcement agencies where there is a reasonable basis to believe fraudulent or criminal activity is taking place. This is done on a case-by-case basis and only to the extent necessary.
• Legal obligations: ok37 will disclose personal data if required to do so by a valid legal process, court order or other binding legal obligation.
• Platform service providers: Technical partners who support the running of ok37 — such as cloud hosting, customer support tooling and analytics infrastructure — may have access to platform data in the course of providing their services. These partners are bound by strict data processing agreements and are prohibited from using ok37 player data for their own purposes.

ok37 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply:

• Active account data: Retained for the full duration that your ok37 account is open and active. This includes registration details, betting history, transaction records and communication history.
• Identity verification documents: Retained for a minimum period of five years from the date of verification, in line with standard anti-money laundering record-keeping expectations. After this period, documents are securely deleted.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years to support financial record-keeping and dispute resolution obligations.
• Closed account data: When an account is voluntarily closed, core account and transaction data is retained for five years from the date of closure, after which it is permanently deleted. If an account is closed due to fraud or prohibited conduct, data may be retained for longer to support ongoing investigations or legal proceedings.
• Self-excluded accounts: Where a player has permanently self-excluded, their details are retained on an exclusion list for a minimum of five years to prevent re-registration. This is a responsible gaming safeguard, not a commercial retention.
• Analytics data: Anonymised and aggregated analytics data does not contain personal identifiers and may be retained indefinitely for platform improvement purposes.

When data reaches the end of its retention period, ok37 securely deletes or anonymises it so that it can no longer be linked to a specific individual.

As an ok37 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team and we will respond within a reasonable timeframe.

• Right of access: You can request a copy of the personal data ok37 holds about you at any time. We will provide this in a clear, readable format.
• Right to rectification: If any of the data we hold about you is inaccurate or out of date, you have the right to ask us to correct it. You can update many details directly from your account settings.
• Right to erasure: You may request that ok37 delete your personal data. This right is subject to legal retention obligations — for example, we cannot delete transaction records that we are required to keep for a minimum period. Where deletion is not possible in full, we will anonymise the data instead.
• Right to restrict processing: You can ask ok37 to stop using your data for certain purposes while retaining it — for example, during a dispute about the accuracy of your data.
• Right to data portability: You can request your personal data in a structured, commonly used format so that you can transfer it if needed.
• Right to withdraw consent: Where data processing is based on your consent — such as receiving promotional emails — you can withdraw that consent at any time. Withdrawing consent does not affect processing carried out before the withdrawal.
• Right to object to marketing: You can opt out of receiving promotional communications from ok37 at any time by updating your account communication preferences or by contacting support.

ok37 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been created by or on behalf of a minor, the account will be immediately closed, all balances will be forfeited, and any personal data associated with the account will be deleted as soon as practically possible.

If you believe that a minor has registered an ok37 account using false information, please contact our support team immediately so we can investigate and take appropriate action.

Parents and guardians who are concerned about underage access to online betting and gaming platforms are encouraged to use device-level parental control tools available on Android and iOS devices, as well as content filtering options offered by internet service providers in Pakistan.

ok37 takes the security of player data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure.

• Encryption in transit: All data exchanged between your device and ok37 servers is encrypted using TLS 1.2 or higher. This applies to the website, the mobile app and all API communications.
• Encryption at rest: Sensitive personal data and payment records stored in ok37 databases are encrypted using AES-256 encryption.
• Access controls: Access to player data within ok37 is restricted to staff who genuinely need it to perform their role. All internal access is logged and audited.
• Two-factor authentication: ok37 supports two-factor authentication (2FA) for player accounts. We strongly recommend enabling this from your account security settings, particularly if you use the platform on mobile.
• Fraud detection: Automated systems monitor login activity and transaction behaviour for signs of account compromise or unusual activity. Suspicious activity triggers internal review before any funds are moved.
• Vulnerability management: ok37 conducts regular security reviews of its platform and infrastructure. Identified vulnerabilities are remediated promptly.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to players, ok37 will notify affected accounts promptly and take immediate steps to contain the breach and prevent further exposure.

ok37 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable requirements or improvements to how we explain our data practices. When updates are made, the "Last updated" date at the top of this page will be revised.

For significant changes that materially affect how we use player data, ok37 will notify registered players via the platform or by email before the changes take effect. Minor clarifications or wording improvements that do not change the substance of the policy will take effect immediately upon publication.

We encourage you to review this page periodically. Continued use of ok37 after a policy update constitutes acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how ok37 is handling your personal information, please reach out to our support team.

You can contact our support team 24/7 through the live chat feature available on the ok37 platform and app, or by emailing us directly. Our privacy-related queries are handled by a dedicated team member and you can expect a response within two working days.

Email: [email protected]

Please include your registered email address and a brief description of your query when contacting us so we can locate your account and respond efficiently.