ok777 Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for the personal data of ok777 platform users is ok777, operating ok777.lol under an international gaming license. When you create an ok777 account, deposit funds, place bets, or interact with any feature of the ok777 platform, you are providing personal data to ok777 as the data controller.

ok777 processes personal data collected from players in Pakistan and from players accessing the platform internationally. ok777 is committed to handling all such data with the transparency, security, and integrity required by its gaming license obligations and the data protection principles described in this Policy. For all privacy-related inquiries, the primary contact channel is the ok777 support team, details of which are provided in Section 14 of this Policy.

ok777 collects the following categories of personal data from players:

ok777 does not collect sensitive special categories of personal data such as biometric data, health information, political opinions, or religious beliefs. ok777 collects only the minimum data necessary to operate the platform, fulfil regulatory obligations, and provide the services described in the ok777 Terms and Conditions.

ok777 collects personal data through the following channels:

• Direct submission: Data you actively provide when registering an ok777 account, completing KYC, making deposits or withdrawals, or contacting support.
• Automated platform collection: Technical and usage data collected automatically when you access ok777.lol, including through cookies, server logs, and analytics tools embedded in the platform. See Section 8 for detailed cookie information.
• Payment provider data: Confirmation data returned by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when a deposit or withdrawal transaction is processed. ok777 receives only transaction reference numbers and status confirmations — it does not receive your full payment account credentials.
• Identity verification partners: Where ok777 uses a third-party KYC service provider to verify the authenticity of identity documents, that provider may return verification status data to ok777. The provider operates under a data processing agreement with ok777.
• Fraud detection systems: Automated signals generated by ok777's fraud prevention infrastructure, including device fingerprinting and behavioural analysis, which may indicate risk indicators associated with your account session.

ok777 processes personal data only where a lawful basis for doing so exists. The following table sets out the primary purposes for which ok777 processes personal data, together with the corresponding legal basis:

• Account creation and management: Processing is necessary for the performance of a contract between you and ok777 (i.e., the ok777 Terms and Conditions).
• Payment processing: Necessary for contract performance. ok777 cannot credit deposits or process withdrawals without the financial data described in Section 2.
• Identity and age verification (KYC): Necessary for compliance with ok777's obligations under its international gaming license, which requires verification that all players are aged 21 or above and are who they claim to be.
• Fraud prevention and platform security: Necessary for ok777's legitimate interests in protecting the integrity of the platform, other players, and the financial system against fraud, money laundering, and abuse.
• Customer support: Necessary for contract performance — ok777 cannot resolve account issues or disputes without processing the relevant player data.
• Responsible gaming monitoring: Necessary for compliance with ok777's gaming license responsible gaming obligations, and for ok777's legitimate interests in protecting player welfare.
• Platform improvement and analytics: ok777's legitimate interests in understanding how the platform is used in order to improve it for Pakistani players.
• Marketing communications: Based on your consent, where you have opted in to receive promotional communications from ok777. You may withdraw this consent at any time. See Section 9.
• Legal compliance: Necessary for compliance with applicable laws, court orders, or requests from regulatory or law enforcement authorities.

ok777 does not sell personal data to any third party. ok777 does not share personal data with third-party marketers, data brokers, or advertising networks. ok777 shares personal data with third parties only in the following limited circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum data required to process your deposit or withdrawal transaction. Each provider is subject to its own privacy policy and applicable Pakistani financial data protection regulations.
• KYC and identity verification providers: ok777 may use a third-party identity verification service to authenticate CNIC documents. This provider acts as a data processor for ok777 under a contractual data processing agreement and is not permitted to use your data for its own purposes.
• Game content providers: Third-party game studios whose titles are available on ok777 may receive limited technical data (such as session tokens and game round identifiers) necessary to operate their games. These providers do not receive your identity or financial data.
• Regulatory and law enforcement authorities: ok777 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts in connection with investigations into fraud, money laundering, or other illegal activity, or in response to a valid legal order. ok777 will notify affected players of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of ok777's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments being maintained.

ok777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by ok777's gaming license and applicable law. The following general retention schedule applies:

• Account and identity data: Retained for the lifetime of your ok777 account plus a minimum of five years following account closure, as required by anti-money laundering regulations applicable under ok777's gaming license.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• KYC documents: Retained for the same period as account and identity data — account lifetime plus five years.
• Customer support communications: Retained for three years from the date of the final communication in each support interaction.
• Technical and usage data (logs): Retained for up to 13 months from the date of collection, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your account and for three years following any withdrawal of marketing consent, as evidence of the consent given.

Upon expiry of the applicable retention period, ok777 will either securely delete your personal data or anonymise it such that it can no longer be associated with your identity. Where deletion is not immediately possible due to backup storage cycles, data will be isolated from further processing until deletion can be completed.

ok777 implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your device and ok777.lol is protected by 256-bit SSL/TLS encryption. Connections using outdated protocol versions are rejected.
• Encryption at rest: Sensitive personal data stored in ok777's databases — including CNIC data and financial identifiers — is encrypted at rest using industry-standard symmetric encryption.
• Password security: Player passwords are stored as salted cryptographic hashes. ok777 does not store passwords in recoverable plain text under any circumstances.
• Access controls: Access to personal data within ok777's systems is restricted on a need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Fraud detection systems: ok777 operates automated systems that monitor account activity for indicators of fraud, identity theft, and account compromise, generating alerts for review by the security team.
• Penetration testing: ok777's platform infrastructure is subject to periodic penetration testing by qualified third-party security professionals.

Notwithstanding these measures, no internet transmission is completely secure. ok777 cannot guarantee the absolute security of data transmitted to ok777.lol over public networks. Players are responsible for maintaining the confidentiality of their own ok777 login credentials and for notifying ok777 promptly if they suspect their account has been compromised.

ok777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse platform usage, and support security functions. The following categories of cookies are used on ok777.lol:

• Strictly necessary cookies: Required for the ok777 platform to function. These include session authentication cookies that keep you logged in during your ok777 session. These cookies cannot be disabled without preventing the platform from working correctly.
• Functional cookies: Remember your language preferences, display settings, and other platform configuration choices to personalise your ok777 experience on return visits.
• Analytics cookies: Collect anonymised data about how players navigate and use ok777.lol — pages visited, time spent on each section, and features accessed. This data is used to improve the platform's design and performance for Pakistani players.
• Security cookies: Used by ok777's fraud detection infrastructure to identify and flag unusual account behaviour. These cookies do not track you across third-party websites.

ok777 does not use third-party advertising cookies or allow external advertising networks to set cookies via ok777.lol. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect the functionality of the ok777 platform.

ok777 may send promotional communications to players who have consented to receive them at the point of account registration or subsequently through their account notification preferences. Marketing communications from ok777 may include information about:

• New bonus offers and promotional campaigns available to your account
• New game releases and sports betting market additions relevant to Pakistani players
• PSL season promotions and cricket-related betting offers
• Platform feature updates and service announcements

You may withdraw your consent to receive marketing communications from ok777 at any time by updating your notification preferences in your account settings or by contacting ok777 support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and it does not affect the receipt of essential service communications (such as transaction confirmations, security alerts, or account verification messages), which ok777 is obligated to send regardless of marketing preferences.

ok777 will not send marketing communications to players who are self-excluded from the platform, regardless of prior consent status.

ok777 does not knowingly collect personal data from individuals under the age of 21. ok777's minimum age requirement of 21 years is enforced at account registration through age declaration and at account verification through KYC document checks. Where ok777 identifies or is notified that an account is held by a person under 21 years of age, it will immediately suspend the account, cease all processing of that person's data for gaming purposes, and delete collected data to the extent permitted by anti-money laundering and fraud prevention retention obligations.

ok777 encourages parents and guardians in Pakistan to utilise parental control software to restrict access to gambling websites on devices used by minors. If you believe a minor has accessed ok777 using falsified age information, please contact ok777 support immediately at [email protected] so that the account can be investigated and closed without delay.

As a player whose personal data is processed by ok777, you hold the following rights with respect to your data. To exercise any of these rights, contact ok777 support using the details in Section 14:

• Right of access: You may request a copy of all personal data ok777 holds about you. ok777 will respond to verified access requests within 30 days.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data ok777 holds about you. Standard account information (name, contact details) may also be updated directly within your ok777 account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that ok777 is obligated to retain certain data (transaction records, KYC documents) for regulatory periods described in Section 6, and the right to erasure does not apply to data subject to these retention obligations.
• Right to restrict processing: You may request that ok777 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to data portability: Where processing is based on your consent or contract performance, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on ok777's legitimate interests where your individual circumstances warrant it. You have an absolute right to object to processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

ok777 will respond to all data subject rights requests within 30 days of receipt. In complex cases this period may be extended by up to a further 60 days, in which case ok777 will notify you of the extension and the reasons for it within the initial 30-day period.

ok777 may process and store personal data in jurisdictions outside Pakistan, including in the jurisdiction where its international gaming license is issued and where its cloud infrastructure providers are located. Where personal data is transferred outside of Pakistan, ok777 implements appropriate safeguards to ensure that data continues to receive a level of protection consistent with this Privacy Policy and applicable data protection standards, including contractual data transfer mechanisms with recipient entities.

If you wish to obtain more information about the specific safeguards applicable to any international transfer of your personal data, you may contact ok777's privacy team using the details in Section 14.

ok777 reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, regulatory requirements, or platform services. Where changes are material, ok777 will provide notice to all registered players via the email address or mobile number associated with their ok777 account at least 7 days before the changes take effect. For minor or clarificatory changes, the updated Policy will be published on this page with a revised effective date, and continued use of ok777 following publication constitutes acceptance of the updated Policy.

ok777 recommends that players review this Privacy Policy periodically. The effective date at the top of this page indicates when the current version was last revised. If you disagree with any changes to this Policy, you should discontinue use of ok777 and contact support to request account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights described in Section 11, or need to report a privacy concern, you may contact ok777 using the following details:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, from within the ok777 platform following ok777 Login
• Response Time: Privacy-related requests will receive an acknowledgment within 2 business days and a substantive response within 30 days

When submitting a data subject rights request, please provide your registered email address or mobile number so that ok777 can verify your identity before processing the request. ok777 may ask for additional verification where there is reasonable doubt as to your identity, to protect against unauthorised disclosure of personal data.

For questions about responsible gaming data tools, deposit limits, or self-exclusion, please visit the Responsible Gaming section of the ok777 platform.