okapk Privacy Policy

1 Introduction

okapk ("we," "us," "our") operates the online casino and sports betting platform accessible at okapk.club (the "Platform"). We are committed to protecting the personal data of every player who registers or interacts with the okapk Platform. This Privacy Policy describes our practices with respect to the collection, use, storage, sharing, and deletion of personal data in connection with your use of okapk.

This Privacy Policy applies to all users of the okapk Platform, regardless of the device, browser, or method used to access it. It should be read alongside okapk's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an okapk account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

okapk processes personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. Our practices align with the standards required under okapk's international gaming licence obligations.

2 Data We Collect

okapk collects personal data across several categories, depending on how you interact with the Platform. The categories below describe the data we may collect and the typical context in which it is collected.

2.1 Registration Data

When you create an okapk account, we collect: full legal name, date of birth, email address, mobile phone number, residential address, and preferred currency (PKR). This data is required to create and maintain your account, verify your identity, and communicate with you about your account activity.

2.2 Identity Verification Data

To comply with our anti-money laundering (AML) and Know Your Customer (KYC) obligations under our international gaming licence, okapk collects copies of identity documents including your Pakistani CNIC (Computerised National Identity Card). In cases requiring enhanced due diligence, we may also request proof of address (such as a utility bill or bank statement) and documentation evidencing source of funds.

2.3 Financial Data

When you make deposits or request withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT, okapk collects transaction identifiers, payment method details (such as JazzCash or EasyPaisa account numbers), transaction amounts in PKR, timestamps, and withdrawal destination information. We do not store full bank card numbers or complete mobile wallet PINs on our servers.

2.4 Gaming & Betting Activity Data

We record all gaming activity conducted through your okapk account, including: game sessions, bet amounts and outcomes, sports betting selections, bonus usage and wagering progress, and session duration. This data is used to operate the Platform, settle bets correctly, calculate bonus eligibility, and identify responsible gaming concerns.

2.5 Technical & Device Data

When you access okapk, our systems automatically collect: IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited and time spent, and login timestamps. This data helps us secure accounts, detect fraud, and optimise the Platform's performance across devices commonly used by Pakistani players.

2.6 Communications Data

If you contact our support team via email or live chat, we retain records of those communications, including message content, timestamps, and the support agent who handled your query. This data allows us to track the resolution of complaints and maintain quality of service.

3 How We Use Your Data

okapk uses the personal data collected from Pakistani players for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, device data
Identity verification (KYC/AML)	CNIC, registration data, financial data
Processing deposits and withdrawals (PKR)	Financial data, identity verification data
Operating casino games and sports betting	Gaming activity data, account data
Bonus allocation and wagering tracking	Gaming activity data, registration data
Fraud detection and account security	Technical data, financial data, gaming data
Responsible gaming monitoring	Gaming activity data, registration data
Customer support	Communications data, account data
Platform improvement and analytics	Technical data, gaming activity data (aggregated)
Marketing communications (where consented)	Registration data, gaming preferences

okapk will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for doing so.

4 Legal Basis for Processing

okapk processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and okapk — including account management, game operation, bet settlement, and payment processing — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legal obligation: Processing required to comply with our AML, KYC, and gaming licence obligations — including CNIC verification, transaction monitoring, and record retention — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out to detect and prevent fraud, secure the Platform, and improve our services is based on okapk's legitimate business interests, provided those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your explicit, freely given consent. You may withdraw consent at any time by contacting [email protected] or updating your account preferences.

5 PKR Banking & Payment Data

All financial transactions on okapk are denominated in Pakistani Rupees (PKR). When you deposit or withdraw via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT, your payment data is transmitted over SSL-encrypted connections. okapk works with licensed payment processing partners to handle transaction execution; these partners receive only the data necessary to process your specific transaction.

okapk retains transaction records — including amounts, timestamps, payment method identifiers, and PKR conversion rates applied to USDT transactions — for a minimum of five (5) years in compliance with AML record-keeping requirements. This data is accessible to authorised okapk compliance personnel and, where legally required, to relevant regulatory or law enforcement authorities.

6 CNIC & Identity Verification

okapk is required by its international gaming licence obligations to verify the identity of all players before processing withdrawal requests. Identity verification is conducted using your Pakistani CNIC. The CNIC image you submit is processed securely and used solely for the purposes of identity verification, age verification (21+ confirmation), and AML compliance.

CNIC data is stored on encrypted servers with restricted access controls. It is not shared with third parties except where required by law, by regulatory authority, or by the licensed identity verification service provider engaged by okapk to process KYC checks. okapk's identity verification provider is bound by contractual data protection obligations consistent with this Privacy Policy.

If your identity verification is unsuccessful, okapk will notify you and provide guidance on resubmission. In the event of a dispute regarding the outcome of identity verification, you may contact [email protected] to request a manual review.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. okapk uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform, maintain your login session, remember your preferences, and collect anonymous analytics data.

7.2 Types of Cookies We Use

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in and security tokens that protect your account. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand how players interact with the Platform in aggregate. This data is anonymised and used solely to improve Platform performance and user experience.
• Preference cookies: Store your Platform preferences such as language settings and notification preferences.
• Marketing cookies: Used only where you have provided explicit consent. These help okapk display relevant promotional content about bonuses, PSL betting markets, and new game releases.

7.3 Managing Cookies

You can control non-essential cookies through your browser settings or through the okapk cookie preference centre accessible from the Platform footer. Disabling essential cookies will impair your ability to use the Platform. Withdrawing consent for marketing cookies will not affect the delivery of core Platform services.

8 Data Sharing & Disclosure

okapk does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data may be shared in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT infrastructure providers receive the minimum data required to process your transaction.
• KYC / identity verification providers: Licensed third-party providers engaged to verify your CNIC and conduct AML screening. These providers are contractually bound to process your data only for verification purposes.
• Game software providers: Casino game and sports betting software providers may receive anonymised session data necessary to operate games and settle bets.
• Regulatory and law enforcement authorities: Where legally required, okapk will disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies. okapk will notify you of such disclosures where it is legally permitted to do so.
• Fraud prevention agencies: Where okapk has reason to suspect fraudulent activity, relevant data may be shared with fraud prevention networks and partner platforms for the purpose of protecting all players on the Platform.
• Corporate restructuring: In the event of a merger, acquisition, or asset sale involving okapk, player data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom okapk shares personal data are required to implement appropriate technical and organisational security measures and to use the data only for the stated purpose.

9 Data Retention

okapk retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following minimum retention periods apply:

• Account registration data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure.
• CNIC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, in compliance with AML record-keeping requirements.
• Financial transaction records (PKR deposits and withdrawals): Retained for a minimum of five (5) years from the date of each transaction.
• Gaming and betting activity logs: Retained for a minimum of three (3) years from the date of each session.
• Customer support communications: Retained for a minimum of two (2) years from the date of the interaction.
• Marketing consent records: Retained for as long as the consent remains active, plus one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifying information.

10 Your Data Rights

As an okapk player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact okapk's data team at [email protected] with the subject line "Data Rights Request" and a description of your request. okapk will respond within thirty (30) calendar days.

11 Children & Minors

The okapk Platform is strictly intended for users who are 21 years of age or older. okapk does not knowingly collect personal data from persons under the age of 21. If okapk discovers or is notified that personal data has been collected from a person under 21, that account will be immediately suspended, any balance forfeited, and all personal data associated with that account will be deleted as soon as reasonably practicable, except where retention is required by law.

Parents and guardians are strongly encouraged to use parental control software to prevent minors from accessing gambling platforms, including okapk. If you believe a minor has registered an okapk account, please contact us immediately at [email protected].

12 Security Measures

okapk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the okapk Platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted data storage: Sensitive data, including CNIC images and financial records, is stored using AES-256 encryption at rest.
• Access controls: Access to personal data is restricted to authorised okapk personnel on a need-to-know basis. All staff with access to player data undergo regular data protection training.
• Two-factor authentication (2FA): okapk offers 2FA for all player accounts and requires it for privileged internal systems.
• Fraud and anomaly detection: Automated systems monitor account activity for unusual patterns that may indicate unauthorised access or fraudulent behaviour.
• Regular security audits: The okapk Platform undergoes periodic security assessments and penetration testing conducted by qualified independent security professionals.

Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, okapk will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

13 Changes to This Privacy Policy

okapk reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the updated Privacy Policy will be published on the Platform with a revised effective date. Where practicable, okapk will notify registered players of significant changes by email to the address associated with their account.

Your continued use of the okapk Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Privacy Policy, you must cease using the Platform and contact okapk to close your account.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or okapk's data practices, please contact our team using the details below. All privacy-related enquiries are handled by okapk's compliance and data team.

• Email: [email protected]
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Response time: Within 30 calendar days of receiving a verified request
• Support Hours: 24/7, Pakistan Standard Time (PKT, UTC+5)
• Coverage: Serving players across Pakistan — Karachi, Lahore, Islamabad, Faisalabad & beyond