ok67 Privacy Policy

1. Who We Are

ok67 is Pakistan's premier online gaming platform, accessible at ok67.app. For the purposes of this Privacy Policy, "ok67", "we", "us", and "our" refer to the ok67 platform and its operating entity responsible for processing the personal data of registered players and site visitors.

This Privacy Policy applies to all personal data collected and processed through the ok67 website, mobile site, and any associated applications or services. It applies to all users accessing ok67 from any location, with particular relevance to players based across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities.

If you have questions about data control or wish to exercise any of your privacy rights, you may contact ok67's data team directly at [email protected].

2. Personal Data We Collect

ok67 collects only the personal data that is necessary for lawful, legitimate purposes in operating a regulated online gaming platform. The categories of personal data we collect include:

3. How We Collect Your Data

ok67 collects personal data through the following channels:

• Direct registration: When you create an ok67 account, you provide identity, contact, and account data directly through the registration form.
• KYC submission: When you upload identity documents (CNIC, passport, utility bill) to complete our Know Your Customer verification process.
• Financial transactions: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20, or cash deposit, relevant financial data is captured.
• Platform usage: Technical and usage data is collected automatically as you navigate ok67, use gaming features, and interact with the platform.
• Customer support interactions: When you contact ok67 via live chat, email, or any other support channel, we collect and retain the content of those communications.
• Cookies and tracking technologies: ok67 uses cookies and similar technologies to collect session and behavioural data as described in Section 7 of this Policy.
• Third-party verification providers: Identity and age verification data may be supplemented by information obtained from regulated KYC and anti-fraud service providers.

4. How We Use Your Personal Data

ok67 uses personal data for the following specific, legitimate purposes:

• Account creation and management: To register your ok67 account, verify your identity and age (21+), manage account settings, and maintain accurate records.
• Transaction processing: To process deposits and withdrawals in PKR via your registered payment methods, and to maintain an accurate financial transaction history.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct on the ok67 platform.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering, counter-terrorism financing, and Know Your Customer regulations.
• Responsible gaming: To monitor gaming patterns, identify indicators of problem gambling, enforce deposit limits and self-exclusion requests, and proactively reach out to players who may need support.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and improve the overall ok67 support experience.
• Platform personalisation: To tailor the ok67 experience to your preferences, including game recommendations and relevant promotional offers where you have consented to receive them.
• Communications: To send you transactional communications (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about ok67 bonuses and offers.
• Analytics and improvement: To analyse aggregated usage data, identify platform issues, and develop improvements to the ok67 gaming experience.

5. Legal Basis for Processing

ok67 processes your personal data on one or more of the following legal grounds, depending on the purpose of the processing activity:

• Contractual necessity: Processing that is necessary to fulfil our obligations under the ok67 Terms & Conditions — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, KYC requirements, and regulatory reporting duties.
• Legitimate interests: Processing carried out for ok67's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional personalisation features. You may withdraw consent at any time without affecting prior processing.

6. Data Sharing and Disclosure

ok67 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and only to the extent necessary:

• Payment processors: Financial data is shared with regulated payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT payment rails — solely for the purpose of processing your transactions.
• KYC and identity verification providers: Identity data is shared with regulated third-party KYC providers to fulfil our age and identity verification obligations. These providers are contractually bound to process data solely for verification purposes.
• Fraud prevention and security services: Technical and usage data may be shared with anti-fraud and cybersecurity service providers to protect the ok67 platform and its players.
• Regulatory authorities: Where required by applicable law, a court order, or a regulatory authority with jurisdiction over ok67, we may be obliged to disclose player data. ok67 will only make such disclosures where legally compelled to do so.
• Professional advisers: Legal, financial, and audit advisers engaged by ok67 may access limited personal data on a confidential basis in the course of providing professional services.
• Business transfers: In the event of a merger, acquisition, or sale of ok67's business assets, player data may be transferred to a successor entity, subject to equivalent privacy protections being maintained. Players will be notified of any such transfer.

All third-party processors engaged by ok67 are subject to contractual data processing agreements that require them to handle your data in accordance with applicable privacy standards and solely for the purposes specified by ok67.

7. Cookies and Tracking Technologies

ok67 uses cookies and similar tracking technologies to enhance your experience on the platform, ensure security, and gather analytics data. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the ok67 platform to function correctly. They enable core features such as session management, login state, and security tokens. These cookies cannot be disabled.
• Functional cookies: These cookies remember your preferences — such as language settings and display options — to provide a more personalised experience across sessions.
• Analytics cookies: ok67 uses analytics tools to understand how players interact with the platform, which features are most used, and where technical issues arise. Analytics data is aggregated and does not identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, multiple account creation, and other prohibited conduct, by recognising devices and session patterns.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ok67 platform. ok67 does not use third-party advertising cookies or allow external ad networks to place tracking cookies on our platform.

8. Data Retention

ok67 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your ok67 account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering and record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction to satisfy regulatory and audit requirements.
• KYC documentation: Retained for the period required by applicable identity verification and anti-money laundering regulations from the date of the last transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the communication is relevant to an unresolved dispute or regulatory matter.
• Technical and usage data: Typically retained for twelve (12) months in identifiable form, after which it may be anonymised and retained for analytical purposes indefinitely.
• Marketing consent records: Retained for the duration of your consent plus three (3) years to evidence compliance with consent requirements.

Where ok67 is no longer required to retain your data and no legitimate purpose justifies continued storage, your personal data will be securely deleted or irreversibly anonymised.

9. Your Privacy Rights

As an ok67 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact ok67 at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data ok67 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. This right is subject to overriding legal retention obligations.
• Right to restriction: You may request that ok67 restrict its processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested.
• Right to data portability: Where processing is based on consent or contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on ok67's legitimate interests, including direct marketing, at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

10. Data Security

ok67 implements a layered security framework to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• TLS (Transport Layer Security) encryption for all data in transit between your device and ok67's servers.
• Encryption of sensitive data at rest, including financial and identity data stored in our systems.
• Strict access controls ensuring that personal data is accessible only to ok67 personnel and authorised processors who have a documented need to access it.
• Regular security assessments, penetration testing, and vulnerability scanning of the ok67 platform.
• Multi-factor authentication requirements for administrative access to ok67's data systems.
• Continuous monitoring for anomalous access patterns and potential data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights, ok67 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

While ok67 takes all reasonable steps to secure your data, no online platform can guarantee absolute security. You also have a role to play: keep your ok67 login credentials confidential, use a strong unique password, and contact [email protected] immediately if you suspect any unauthorised access to your account.

11. Children's Privacy

The ok67 platform is strictly intended for adults aged 21 years and above. ok67 does not knowingly collect personal data from any person under the age of 21.

All registration attempts are subject to age verification checks. Where ok67 has reason to believe that a person under 21 has registered or attempted to register an account, that account will be immediately suspended, any deposits returned where possible, and all associated data deleted.

ok67 strongly encourages parents and guardians to use parental control software to prevent minors from accessing online gaming platforms. The ok67 Responsible Gaming page provides further guidance on protecting young people from gambling-related harm.

12. International Data Transfers

ok67 primarily stores and processes player data within systems accessible to its operations. Where personal data is transferred to or processed by service providers located outside Pakistan — for example, cloud hosting providers or international KYC verification services — ok67 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, ensuring the receiving party is bound by obligations that protect the security and confidentiality of your personal information.

If you wish to obtain information about the safeguards in place for a specific international transfer, please contact ok67 at [email protected].

13. Updates to This Privacy Policy

ok67 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The effective date at the top of this Policy will be updated with each revision.

Where changes are material — meaning they affect your rights or the way ok67 processes your personal data in a significant way — ok67 will notify registered players via the contact details associated with their account or by displaying a prominent notice on the ok67 platform prior to the changes taking effect.

Your continued use of ok67 following the publication of an updated Privacy Policy constitutes your acknowledgement of the revisions. We encourage you to review this page periodically to stay informed of how ok67 protects your data.

14. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way ok67 handles your personal data, please contact us:

• Email: [email protected]
• Subject Line for Data Matters: "Privacy Enquiry" or "Data Rights Request"
• Response Time: Acknowledgement within 2 business days; substantive response within 10 business days
• Support Hours: 24 hours a day, 7 days a week

For responsible gaming concerns specifically — including self-exclusion requests, deposit limit adjustments, or problem gambling support — please visit our Responsible Gaming page or email [email protected] with the subject line "Responsible Gaming".