ok 68 Privacy Policy — How We Handle Your Personal Data

ok 68 operates the online casino and sports betting platform accessible at ok68.lol (the "Platform"). For the purposes of this Privacy Policy, ok 68 acts as the data controller — meaning we are responsible for deciding how and why your personal data is collected and processed. When we say "ok 68", "we", "us", or "our" in this Policy, we are referring to the ok 68 Platform and its operating entity.

ok 68 is an English-language platform built specifically for players in Pakistan. All data processing activities described in this Privacy Policy apply equally to all Pakistan-based Players regardless of the city or region they access the ok 68 Platform from, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and all other locations.

If you have questions about ok 68's data processing activities or wish to exercise any data rights described in this Policy, you may contact us at any time via Live Chat inside your ok 68 account dashboard or by emailing [email protected].

This Privacy Policy applies to all personal data collected and processed by ok 68 in connection with your use of the ok 68 Platform at ok68.lol. This includes data collected when you:

• Visit the ok 68 website at ok68.lol, whether or not you are a registered account holder.
• Register an ok 68 account and provide personal information during the registration process.
• Complete KYC (Know Your Customer) identity verification, including the submission of CNIC or other identity documents.
• Make a deposit to or withdrawal from your ok 68 PKR wallet via Easypaisa, JazzCash, SadaPay, Raast, or bank transfer.
• Play any game or place any bet on the ok 68 Platform.
• Contact ok 68 support via Live Chat or email.
• Participate in any ok 68 promotional offer or tournament.

This Privacy Policy does not apply to third-party websites or services linked from the ok 68 Platform, nor to the data practices of Third-Party Studios whose games are hosted on ok 68. Those parties operate under their own privacy policies.

ok 68 collects the following categories of personal data:

ok 68 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond what is inherent in CNIC document verification.

ok 68 collects personal data through the following channels:

• Directly from you — when you register an ok 68 account, complete KYC verification, make a payment transaction, contact support, or participate in a promotion. This is the primary source of identity and contact data.
• Automatically from your device — when you access ok68.lol, our servers automatically record technical data including your IP address, device type, browser, and the pages you visit. This is standard for all web-based platforms and is used for security monitoring and platform optimisation.
• From payment providers — when you initiate a deposit or withdrawal, ok 68 receives transaction confirmation data from Easypaisa, JazzCash, SadaPay, Raast, or your bank. This data is used solely to reconcile your PKR wallet balance and confirm payment settlement.
• From KYC verification partners — in some cases, ok 68 may use a third-party identity verification service to authenticate CNIC documents. These partners provide verification outcomes to ok 68 but do not retain your identity document data beyond their contractually defined processing window.
• Through cookies and similar technologies — as described in Section 8 of this Policy.

ok 68 uses your personal data for the following clearly defined purposes:

• Account management: Creating, maintaining, and securing your ok 68 account, including enabling your ok 68 Login and managing account settings.
• KYC & identity verification: Verifying your identity and age (18+) as required before enabling withdrawal functionality on your ok 68 account.
• Payment processing: Processing PKR deposits and withdrawals via your chosen payment method, reconciling your wallet balance, and maintaining accurate transaction records.
• Responsible gaming compliance: Monitoring account activity to identify patterns that may indicate problem gambling, enforcing self-exclusion periods, and administering deposit/loss limit settings that you configure in your account.
• Fraud prevention and anti-money-laundering: Detecting and investigating suspicious activity on the ok 68 Platform, including multiple account creation, unusual transaction patterns, and potential collusion in live games.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how Pakistan players interact with the ok 68 Platform and improve game library curation, interface design, and support quality.
• Marketing communications: Sending promotional offers and news about ok 68 to Players who have opted in to marketing communications. Opt-out is available at any time from account settings or by contacting support.

ok 68 processes your personal data on the following legal bases, depending on the activity involved:

• Contractual necessity: Processing required to enter into or perform the ok 68 Terms & Conditions with you — including account creation, payment processing, and game access — is necessary for us to deliver the service you have registered for.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations, responsible gaming regulatory requirements, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing conducted in pursuit of ok 68's legitimate business interests — including fraud prevention, platform security, and aggregated analytics — where those interests are not overridden by your privacy rights. We conduct a balancing test before relying on this basis and do not use it for intrusive processing activities.
• Consent: For marketing communications and non-essential cookies, ok 68 relies on your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

ok 68 shares personal data only with the following categories of third parties, and only for the purposes stated:

• Payment processors: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, and other payment partners receive transaction data necessary to process your PKR deposits and withdrawals. These providers process this data under their own privacy policies and are not permitted to use it for their own marketing purposes.
• KYC verification services: Third-party identity verification partners receive your CNIC data to perform document authenticity checks. These partners are bound by strict data processing agreements limiting their use of your data to the verification task.
• Cloud infrastructure providers: ok 68's Platform is hosted on secure cloud infrastructure. The infrastructure provider processes data solely as a processor acting under ok 68's instructions and does not have independent access to Player data for their own purposes.
• Regulatory and law enforcement authorities: ok 68 may disclose personal data to relevant authorities where we are legally required to do so, including in response to valid court orders, regulatory investigations, or AML reporting obligations. We do not proactively disclose Player data beyond our legal obligations.

ok 68 does not sell, rent, or otherwise transfer your personal data to any third party for their own commercial, marketing, or profiling purposes. This is an unconditional commitment and applies regardless of any business change, including change of ownership, restructuring, or acquisition.

ok 68 uses cookies and similar technologies on the ok68.lol Platform. Cookies are small data files stored on your device that help ok 68 operate the Platform correctly, remember your preferences, and analyse usage patterns. ok 68 uses the following categories of cookies:

• Strictly necessary cookies: Required for the ok 68 Platform to function — including session management, ok 68 Login authentication, and security token validation. These cannot be disabled without rendering the Platform non-functional.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limit displays, and interface configurations. Disabling these will affect your Platform experience but will not prevent access.
• Analytics cookies: Collect anonymised data about how Players navigate the ok 68 Platform — which game categories are most visited, how long sessions last, and which pages generate support contacts. This data informs Platform improvement and is never used to identify individual Players. ok 68 uses analytics cookies only with your consent.
• Security cookies: Used for fraud detection, device fingerprinting to identify suspicious ok 68 Login attempts, and rate limiting to prevent automated bot access. These are strictly necessary for Platform security.

You may manage cookie preferences through your browser settings. Note that disabling cookies beyond the strictly necessary category may affect your ability to use certain ok 68 Platform features. ok 68 does not use third-party advertising cookies or tracking pixels for cross-site behavioural advertising.

ok 68 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to key data categories:

• Account and identity data (including KYC documents): Retained for the duration of your active ok 68 account and for a minimum of 5 years after account closure, as required by standard anti-money-laundering regulatory obligations.
• Transaction and financial records: Retained for 7 years after each transaction in accordance with standard financial record-keeping requirements.
• Support communications: Live Chat transcripts and email correspondence are retained for 3 years after the date of the interaction, to support dispute resolution and quality assurance.
• Technical and session data: IP address logs and login history are retained for 12 months for security monitoring and fraud investigation purposes.
• Marketing preference data: Retained until you withdraw consent or close your ok 68 account, whichever occurs first.

When retention periods expire, ok 68 securely deletes or anonymises the relevant data so that it can no longer be linked to an individual Player. Anonymous, aggregated data may be retained indefinitely for statistical analysis purposes.

ok 68 applies the following technical and organisational security measures to protect your personal data:

• Encryption in transit: All data transmitted between your device and the ok 68 Platform is encrypted using TLS 1.3 (256-bit SSL), ensuring that your ok 68 Login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encryption at rest: Personal data stored in ok 68's databases is encrypted using AES-256 encryption at rest. KYC documents are stored in an encrypted, access-controlled document vault.
• Access controls: ok 68 employees access Player data only on a need-to-know basis, governed by role-based access control (RBAC) policies. Administrative access to production systems requires multi-factor authentication.
• Security monitoring: ok 68 operates continuous security monitoring across its infrastructure, including intrusion detection, anomaly detection, and 24/7 alerting for potential data breach events.
• Regular security assessments: ok 68 conducts periodic security assessments of its Platform and data processing infrastructure to identify and remediate vulnerabilities before they can be exploited.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ok 68 will notify affected Players without undue delay via their registered email address, providing details of the nature of the breach, the data involved, and the steps ok 68 has taken to contain and remediate it.

As an ok 68 Player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact ok 68 via Live Chat or email [email protected] with your registered email address and a description of your request:

• Right of Access: You may request a copy of all personal data ok 68 holds about you, along with information about how and why it is being processed. ok 68 will respond to access requests within 30 days.
• Right to Rectification: If any personal data ok 68 holds about you is inaccurate or incomplete, you may request that we correct or update it. Minor corrections — such as updating your contact email or phone number — can be made directly from your ok 68 account settings.
• Right to Erasure: You may request that ok 68 delete your personal data. This right is subject to limitations where ok 68 is required to retain data by law — for example, KYC and financial records subject to AML retention requirements cannot be deleted until the applicable retention period expires.
• Right to Restriction: You may request that ok 68 restrict processing of your data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Portability: You may request that ok 68 provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider where technically feasible.
• Right to Object: You may object to processing of your data on the basis of legitimate interests. ok 68 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before you withdrew.

The ok 68 Platform is an 18+ service and is not directed at children or young persons under the age of 18. ok 68 does not knowingly collect personal data from anyone under 18 years of age. Age verification is a mandatory component of the ok 68 KYC process and is designed to identify and prevent underage access.

If ok 68 discovers or is notified that personal data has been collected from an individual who is under 18 years of age, we will immediately suspend the account, delete the data associated with the underage access, and take appropriate steps to prevent future access from that individual.

Parents or guardians who become aware that their child has created an ok 68 account are urged to report this immediately to ok 68 support via email at [email protected]. ok 68 will investigate and take appropriate action within 24 hours of receiving a verified underage access report.

ok 68 is an international platform and some of the third-party service providers with which we share your data — including cloud infrastructure providers and KYC verification services — may be located in jurisdictions outside Pakistan. When your personal data is transferred outside Pakistan, ok 68 ensures that appropriate safeguards are in place to protect that data, including contractual data protection clauses that impose data security and use restrictions equivalent to those described in this Privacy Policy.

ok 68 does not transfer your personal data to any jurisdiction that ok 68's reasonable assessment identifies as offering materially inadequate data protection without implementing additional safeguards, including enhanced encryption and contractual protections, to compensate for the differential in regulatory standards.

ok 68 reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, applicable law, or regulatory guidance. When material changes are made to this Policy, ok 68 will update the "Last Updated" date at the top of this page and will make reasonable efforts to notify active ok 68 account holders via their registered email address.

Your continued use of the ok 68 Platform following publication of a revised Privacy Policy constitutes your acknowledgment of the revised Policy. ok 68 recommends bookmarking this page and reviewing it periodically, particularly before making significant account changes such as increasing deposit limits or initiating a large withdrawal. The most current version of the ok 68 Privacy Policy will always be accessible at ok68.lol/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or ok 68's data processing activities, please contact us using the following channels:

• Live Chat: Available 24/7 in English inside your ok 68 account dashboard. This is the fastest channel for data rights requests and privacy-related queries.
• Email: [email protected] — for formal written data requests, breach notifications, and privacy complaints. ok 68 aims to acknowledge all data-related emails within 24 hours and to provide a substantive response within 30 days.

When contacting ok 68 regarding a privacy matter, please include your registered ok 68 account email address, a clear description of your query or request, and — for data access or deletion requests — confirmation that you are the account holder (ok 68 may request identity verification for sensitive data requests).

ok 68 takes all privacy enquiries seriously. If you are dissatisfied with ok 68's response to a privacy complaint, you may escalate the matter through whatever data protection regulatory channels are available to you under applicable law.