ok333 Privacy Policy —
Your Data, Protected and Respected

This Privacy Policy describes how ok333 ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your") who access or use the ok333 platform at ok333.co, including through the ok333 mobile browser interface and Android application.

This Policy applies to all ok333 account holders, including registered Pakistan players who use the platform for sports betting (cricket, football, and other sports), casino gaming, jackpot slots, and all other platform services. It also applies to individuals who browse the ok333 platform without registering an account, to the extent that data is collected during such visits.

This Privacy Policy should be read alongside the ok333 Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with ok333.

ok333 acts as the data controller in respect of the personal data described in this Privacy Policy. As data controller, ok333 determines the purposes for which and the manner in which your personal data is processed. Where ok333 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations that restrict their use of your data to the specific purpose for which ok333 has engaged them.

For all privacy-related enquiries, data subject access requests, or concerns regarding ok333's handling of your personal data, you may contact ok333 directly:

• Via 24/7 Live Chat on the ok333 platform
• Via WhatsApp or Telegram support
• By email at: [email protected] (plain text — not a clickable link)

ok333 collects personal data in the following categories depending on how you interact with the platform:

ok333 does not collect sensitive personal data such as biometric data (other than document photographs submitted during CNIC-based KYC), health information, or political opinions unless required by a specific legal obligation.

ok333 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your ok333 account, verifying your identity, processing login authentication, and managing account settings.
• Service delivery: Processing sports bets, settling casino game outcomes, crediting and processing PKR deposits and withdrawals via Easypaisa, JazzCash, Raast, and connected Pakistani bank accounts.
• KYC and fraud prevention: Verifying that account holders are aged 18 or over, confirming the identity of withdrawal recipients, and detecting and preventing fraudulent account activity, money laundering, and underage access.
• Customer support: Responding to your enquiries, resolving account issues, processing complaints, and providing technical assistance.
• Responsible gaming: Monitoring gaming patterns that may indicate problematic behaviour, communicating responsible gaming reminders, and administering self-exclusion and limit requests in accordance with the ok333 Responsible Gaming Policy.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how Pakistan players use the platform and to improve product features, performance, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only to players who have opted in to receive such communications.
• Legal compliance: Meeting obligations under applicable anti-money laundering, financial record-keeping, and data retention laws.

ok333 processes personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations to you under the ok333 Terms & Conditions — including account management, bet processing, and PKR payment handling.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC identity verification, anti-money laundering checks, and financial record-keeping obligations.
• Legitimate interests: Processing conducted for the legitimate business interests of ok333, including fraud detection, security monitoring, platform analytics, and responsible gaming monitoring — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, which occurs only where you have given your explicit, informed consent during registration or via your account settings. Consent can be withdrawn at any time.

ok333 processes all financial transactions exclusively in Pakistani Rupees (PKR) via Easypaisa, JazzCash, Raast, HBL, UBL, MCB Bank, and SadaPay. The financial data you provide during deposit and withdrawal transactions is used solely to process those transactions and to verify that funds are being transferred to and from accounts registered in your own name.

Transaction records — including deposit amounts, withdrawal requests, and account balance history in PKR — are retained as part of your account record for the period specified in Section 10 (Data Retention) of this Policy. These records are used for account administration, dispute resolution, and anti-money laundering compliance.

ok333 does not sell your personal data to third parties. ok333 may share your personal data with the following categories of recipients, strictly limited to the purposes described:

• Payment processors: Easypaisa, JazzCash, Raast-connected banks (HBL, UBL, MCB Bank), and SadaPay — to process your PKR deposits and withdrawals. These providers receive only the data necessary to execute the specific transaction.
• Identity verification providers: Third-party KYC and identity verification services engaged by ok333 to validate CNIC documents and confirm account holder identity in accordance with anti-money laundering obligations.
• Casino game providers: Third-party game studios that supply casino titles on the ok333 platform. These providers may receive anonymised session data necessary to deliver game functionality but do not receive personally identifiable player data beyond what is required for technical game delivery.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers who process data on ok333's behalf under binding data processing agreements that restrict use to authorised purposes only.
• Legal and regulatory authorities: ok333 may disclose personal data to law enforcement, financial intelligence agencies, or other regulatory bodies where required by applicable law or where ok333 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other illegal activity.

In all cases where ok333 engages third-party processors, those processors are contractually bound to handle personal data only in accordance with ok333's instructions and applicable data protection standards.

ok333 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ok333 platform.
• AES-256 encryption for personal and financial data stored in ok333's database infrastructure.
• Access controls that restrict internal access to personal data on a strict need-to-know basis, with all access logged and monitored.
• Two-factor authentication available for all ok333 account logins, delivered via SMS to registered Pakistani mobile numbers.
• Regular security audits and penetration testing of the ok333 platform infrastructure.
• Staff training on data security obligations and incident response procedures.

Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a data security incident that materially affects the privacy of your personal data, ok333 will notify you via your registered contact details as promptly as possible.

You are responsible for maintaining the security of your ok333 account credentials. Do not share your password or OTP codes with anyone — ok333 support staff will never ask for these details.

As an ok333 account holder and data subject, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact ok333 support via Live Chat, WhatsApp, Telegram, or email at [email protected]. ok333 will respond to valid requests within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data ok333 holds about you, including your account data, transaction history, and gaming activity records.
• Right to Rectification: If any personal data ok333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly through your ok333 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to ok333's legal obligations to retain certain data (see Section 10).
• Right to Restrict Processing: In certain circumstances, you may request that ok333 restricts the processing of your data — for example, while a data accuracy dispute is being resolved.
• Right to Object: You have the right to object to processing of your personal data based on ok333's legitimate interests, including profiling for responsible gaming purposes, where your personal situation makes such processing inappropriate.
• Right to Withdraw Marketing Consent: You may withdraw consent to receive marketing communications at any time via your account settings or by contacting ok333 support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

ok333 retains personal data for the following periods, after which it is securely deleted or anonymised unless a longer retention period is required by law:

• Active account data: Retained throughout the duration of your ok333 account.
• Closed account data: Account data — including KYC records, transaction history, and gaming activity — is retained for a minimum of five years following account closure to satisfy anti-money laundering, financial record-keeping, and dispute resolution obligations. ok333 may retain data beyond this period if required by applicable law.
• Support communications: Support chat transcripts and email correspondence are retained for a period of two years from the date of the communication, unless the subject matter requires longer retention for legal or compliance reasons.
• Marketing data: If you withdraw marketing consent, your name and contact details will be retained on a suppression list to ensure you are not inadvertently contacted again. All other marketing preference data will be deleted.
• Technical log data: IP address logs and session data are retained for a maximum of 12 months from the date of the session.

ok333 uses cookies and similar tracking technologies on the platform to support its operation and improve the user experience for Pakistan players. A cookie is a small data file stored on your device by your browser when you visit a website. ok333 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your ok333 session and security cookies used for fraud prevention. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences — such as your language setting, preferred sports markets, and recently viewed casino games — to provide a more personalised experience. These are optional but disabling them may reduce convenience.
• Analytics cookies: Collect anonymised information about how Pakistan players navigate and use the ok333 platform, helping ok333 identify areas for improvement. Data collected is aggregated and does not identify individual users.
• Responsible gaming cookies: Track session duration to support ok333's responsible gaming alert system, which notifies players who have been playing for extended periods.

ok333 does not use third-party advertising cookies or retargeting cookies that track your activity across other websites for advertising purposes.

ok333 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, ok333 will notify registered Pakistan players via their registered contact details at least seven days before the updated Policy takes effect. The current version of this Privacy Policy is always available on the ok333 platform at ok333.co/privacy-policy.

Your continued use of the ok333 platform following notification of an updated Privacy Policy constitutes your acceptance of the updated version. If you do not agree with the changes, you should close your account before the effective date of the updated Policy.