ok333 Privacy Policy

ok333 (referred to in this Privacy Policy as "ok333", "we", "us", or "our") operates the online gaming platform accessible at ok333.cam. ok333 is the data controller responsible for the personal data of members who register and use its platform.

ok333 is operated under an international gaming licence and serves members primarily based in Pakistan, including those accessing the platform from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities across the country.

This Privacy Policy applies to all personal data collected through the ok333 website at ok333.cam, through the ok333 member dashboard, through communications with ok333 support staff, and through any other means by which you interact with ok333 as a member or prospective member.

ok333 collects personal data from members through several channels. The categories of personal data we collect are described below:

ok333 uses the personal data it collects for the following specific purposes:

• Account management: To register your ok333 account, verify your identity, manage your account settings, and provide you with access to the ok333 platform and all its gaming products.
• Identity verification (KYC): To confirm your identity and age in accordance with ok333's licensing obligations. ok333 strictly enforces a 21+ age requirement across all products and relies on KYC data to fulfil this obligation.
• Transaction processing: To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all cashier activity on your account.
• Customer support: To respond to your queries, handle complaints, resolve disputes, and maintain records of support interactions for quality assurance and audit purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the ok333 platform and its members.
• Regulatory compliance: To meet ok333's obligations under its international gaming licence, including anti-money laundering (AML) reporting, responsible gaming programme administration, and audit record maintenance.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving ok333's products, identifying technical issues, and enhancing the overall member experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform news — but only where you have opted in to receive such communications and have not subsequently withdrawn that consent.

ok333 processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Performance of a contract: The majority of ok333's data processing is necessary for the performance of the Member Agreement between you and ok333. This includes account registration, identity verification, transaction processing, and customer support.
• Legal obligation: Certain processing activities — particularly KYC verification, AML record-keeping, and responsible gaming programme administration — are carried out to fulfil ok333's obligations under its international gaming licence and applicable laws.
• Legitimate interests: ok333 processes Technical Data and Gaming Activity Data for fraud prevention, platform security, and aggregated analytics purposes, on the basis of its legitimate interest in maintaining a safe and well-functioning gaming platform.
• Consent: Where ok333 sends you marketing communications or uses non-essential cookies, this processing is carried out on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ok333 does not sell your personal data. We share your data only in the following limited circumstances:

• Payment processors: Financial data necessary to process your deposits and withdrawals is shared with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank as required to complete those transactions. These providers are bound by their own privacy and security obligations.
• KYC and identity verification providers: ok333 may use third-party identity verification service providers to assist with KYC checks. These providers process your identity documents solely for the purpose of verification and are contractually prohibited from using your data for any other purpose.
• Fraud and AML screening services: ok333 may share account and transaction data with specialist fraud detection and anti-money laundering screening providers as part of its regulatory compliance obligations.
• Regulatory and licensing authorities: ok333 may be required to disclose member data to its licensing authority, financial regulators, or law enforcement agencies where required by law or by the conditions of its international gaming licence.
• IT and hosting providers: ok333's platform infrastructure is supported by contracted technology providers who may process personal data on ok333's behalf as data processors. All such providers are bound by strict data processing agreements.

Given the financial nature of the ok333 platform, payment data and KYC documentation are among the most sensitive categories of information we handle. ok333 applies the following specific safeguards to this data:

• Payment account numbers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) are stored in encrypted form and are accessible only to ok333's cashier system and the relevant payment processor during transaction processing. They are never visible to ok333 customer support staff in full.
• KYC documents (copies of CNIC, proof of address, or other identity documents) are uploaded via a secure, encrypted channel and stored in an access-controlled document repository. Access is restricted to ok333's compliance team and authorised verification service providers.
• Transaction records are retained for a minimum of five years from the date of the transaction in accordance with ok333's AML obligations under its international gaming licence. After this period, records are securely deleted unless a longer retention period is required by applicable law or ongoing regulatory proceedings.
• No full payment card numbers are stored on ok333's servers at any time. ok333's cashier does not support credit or debit card payments; this provision applies to any card-adjacent data that may inadvertently be submitted.

ok333 uses cookies and similar tracking technologies on the ok333.cam website. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the ok333 platform to function. They manage your login session, maintain your account security state, and enable core platform features such as the cashier and game loading. These cookies cannot be disabled without rendering the platform non-functional.
• Functional cookies: These cookies remember your preferences — such as your preferred language, currency display settings, and responsible gaming tool configurations — so that you do not need to reset them on every visit.
• Analytics cookies: ok333 uses anonymised analytics cookies to understand how members navigate the platform, which features are most used, and where technical issues occur. This data is aggregated and does not identify individual members.
• Marketing cookies: Where you have consented, ok333 may use cookies to track which promotional offers you have viewed, to avoid showing you the same promotion repeatedly and to measure the effectiveness of ok333's own on-platform marketing. ok333 does not use third-party advertising cookies.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use the ok333 platform normally.

ok333 retains personal data only for as long as is necessary for the specific purpose for which it was collected, and in accordance with applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active membership with ok333, plus a post-closure period of five years to satisfy AML and regulatory record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of submission, or five years from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five years in accordance with ok333's licensing obligations.
• Customer support communications: Retained for three years from the date of the most recent interaction, for quality assurance, dispute resolution, and audit purposes.
• Marketing preferences: Retained for the duration of your membership. If you opt out of marketing, your opt-out status is retained indefinitely to ensure no further marketing communications are sent.
• Technical and log data: Typically retained for 12 months for platform security and fraud detection purposes, after which it is anonymised or deleted.

ok333 respects and upholds the privacy rights of all members. You have the following rights in relation to your personal data held by ok333:

• Right of access: You have the right to request a copy of the personal data ok333 holds about you. ok333 will respond to verified access requests within 30 days.
• Right to rectification: If any personal data ok333 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details can be updated directly within your ok333 account settings.
• Right to erasure: You may request that ok333 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. Note that ok333 may be unable to erase certain data where retention is required by its licensing obligations.
• Right to restrict processing: You may request that ok333 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to ok333's processing of your personal data where that processing is based on legitimate interests. ok333 will consider your objection and cease processing unless it can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without penalty.

To exercise any of these rights, please contact the ok333 Data Protection team using the contact details in Section 14. ok333 will respond to all verified rights requests within 30 calendar days of receipt. ok333 may ask you to verify your identity before processing a rights request to protect against unauthorised data access.

ok333's services are strictly for adults aged 21 and above. ok333 does not knowingly collect personal data from individuals under the age of 21, and takes robust steps to prevent minors from accessing its platform.

ok333 enforces mandatory age verification (KYC) for all members before any withdrawal is permitted and during periodic account review processes. Where ok333 discovers or has reason to believe that a member is under 21 years of age, the member's account will be immediately suspended, all pending withdrawals will be frozen pending investigation, and the matter will be referred to ok333's compliance team.

If you have reason to believe that a minor has registered an ok333 account or is accessing the ok333 platform, please report this immediately by contacting ok333 support. ok333 treats all such reports with the utmost seriousness.

ok333 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:

• Encryption: All data transmitted between your device and ok333's servers is protected by TLS (Transport Layer Security) encryption. Sensitive data at rest — including financial records and KYC documents — is encrypted using AES-256 standard encryption.
• Access controls: ok333's internal systems operate on a strict need-to-know access model. Personal data is accessible only to those ok333 staff members and contracted service providers who genuinely require it to perform their specific role.
• Two-factor authentication: ok333 supports two-factor authentication (2FA) for member account logins and requires 2FA for all ok333 staff access to systems containing personal data.
• Regular security audits: ok333's platform undergoes regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential security weaknesses before they can be exploited.
• Incident response: ok333 maintains a documented security incident response plan. In the event of a data breach, the response team is activated immediately, affected systems are isolated, and affected members are notified in accordance with ok333's breach notification procedure.

ok333 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new game releases, PSL cricket betting promotions, and other ok333 offers — but only where you have consented to receive such communications at the time of registration or subsequently via your account settings.

You may opt out of marketing communications at any time using any of the following methods:

• Clicking the "Unsubscribe" link included in every ok333 marketing email.
• Updating your communication preferences in the Notifications section of your ok333 account settings.
• Contacting ok333 support via live chat or email and requesting that all marketing communications be stopped.

Opting out of marketing communications does not affect your ability to use the ok333 platform, and does not affect the receipt of transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts — these are sent on the basis of contract performance and cannot be disabled while your account is active.

ok333 reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, changes in applicable law, or changes in ok333's operational structure. When material changes are made to this Policy, ok333 will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the ok333 platform informing members that the Privacy Policy has been updated.
• Where required by applicable law or licensing conditions, notify affected members directly by email.

Continued use of the ok333 platform after any changes to this Privacy Policy are published constitutes your acceptance of the updated terms. ok333 recommends that all members review this Privacy Policy periodically to remain informed about how their personal data is being used and protected.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how ok333 has handled your personal data, please contact the ok333 Data Protection team using the following details:

• Email: [email protected] — please use the subject line "Privacy / Data Rights Request" so your query is routed to the correct team.
• Live Chat: Available inside your ok333 member dashboard 24 hours a day, 7 days a week. Ask to speak to the Data Protection team.

ok333 aims to acknowledge all privacy-related queries within 24 hours and to resolve them fully within 30 calendar days. If your query relates to a data rights request, ok333 will confirm receipt, verify your identity, and provide a substantive response within the 30-day statutory period.

If you are not satisfied with ok333's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority designated under ok333's international gaming licence, or to seek independent legal advice.