okpkr Privacy Policy

okpkr collects personal data from you in several ways: directly when you register and use our platform, automatically when you interact with our services, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are set out below.

okpkr uses personal data collected from Pakistani players for the following specific purposes. Each purpose is tied to a legal basis, which is explained in Section 3 below.

okpkr processes your personal data only where a valid legal basis exists. The legal bases we rely on are set out below. Where we rely on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4.1 General Principle. okpkr does not sell, rent, or trade your personal data. We share personal data with third parties only to the extent necessary to deliver our services, meet our legal obligations, or protect the integrity of our platform. All third-party processors engaged by okpkr are contractually required to process your data only in accordance with okpkr's instructions and to maintain appropriate security standards.

4.2 Payment Processors. Your financial data is shared with payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast — solely for the purpose of processing your deposit and withdrawal transactions in PKR. These providers operate under their own privacy policies and are regulated financial institutions.

4.3 Identity Verification Providers. To fulfil our KYC obligations, okpkr works with third-party identity verification services. These services receive the minimum identity data necessary to verify your CNIC details, age, and address, and are contractually prohibited from using your data for any other purpose.

4.4 Game Software Providers. Where games are supplied by third-party studios, aggregated and pseudonymised game session data may be shared with those providers for audit, RNG certification, and dispute resolution purposes. No individually identifiable personal data is shared beyond what is strictly necessary.

4.5 Regulatory and Law Enforcement. okpkr may disclose personal data to gaming regulators, tax authorities, financial intelligence units, and law enforcement agencies where required to do so by law or under our gaming licence conditions. Such disclosures are logged and reviewed by our compliance team.

4.6 Business Transfers. In the event of a merger, acquisition, or sale of all or part of okpkr's business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via your registered email address and will retain all rights described in this Privacy Policy.

5.1 What Are Cookies. Cookies are small text files placed on your device when you visit the okpkr platform. They allow okpkr to recognise your device, maintain your session, remember your preferences, and collect usage analytics. okpkr also uses similar tracking technologies such as web beacons and local storage objects.

okpkr retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, including our legal and regulatory obligations. The following retention periods apply:

okpkr respects and upholds your rights as a data subject. The following rights are available to all okpkr players. To exercise any of these rights, contact our Data Protection team via live chat (login required) or by email at the address in Section 12. We will respond to all requests within 30 calendar days.

8.1 Technical Measures. okpkr implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication options for player accounts, role-based access controls limiting internal staff access to personal data, and regular independent security audits and penetration testing of our platform infrastructure.

8.2 Organisational Measures. Access to personal data within okpkr is restricted on a strict need-to-know basis. All staff with access to player data undergo data protection training and are bound by confidentiality obligations. okpkr maintains a documented information security policy that is reviewed at least annually.

8.3 Payment Security. okpkr does not store full card details on its own systems. PKR payment processing via JazzCash, EasyPaisa, and banking partners is handled through PCI-DSS compliant payment gateways. Tokenisation is used to reference payment instruments without exposing sensitive financial data.

8.4 Data Breach Response. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, okpkr will notify affected players and the relevant supervisory authority within 72 hours of becoming aware of the breach, in line with applicable notification requirements. okpkr maintains a formal Incident Response Plan for this purpose.

8.5 Your Responsibility. You are responsible for keeping your okpkr account credentials — username, password, and any two-factor authentication codes — confidential. Do not share your login details with any other person. If you suspect unauthorised access to your account, contact our support team via live chat immediately.

9.1 Age Restriction. The okpkr platform is strictly intended for players who are 21 years of age or older. okpkr does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been submitted by an individual under 21, we will immediately suspend the relevant account, delete all associated personal data, and reverse any transactions processed.

9.2 Age Verification. As part of our KYC process, all players are required to submit valid identity documentation confirming their date of birth before being permitted to deposit funds or access real-money games. This verification step is mandatory and cannot be bypassed. Players in Pakistan are required to submit their CNIC, which confirms both identity and age.

9.3 Parental Controls. If you believe a minor under your supervision has registered an account with okpkr, please contact our support team immediately via live chat. We will investigate and take action without delay. We also strongly encourage parents and guardians in Pakistan to make use of internet filtering tools to prevent access to online gaming platforms by minors.

10.1 Cross-Border Processing. As an internationally licensed gaming operator, okpkr processes and stores personal data on servers located outside Pakistan. Your data may be transferred to and processed in countries where okpkr's infrastructure partners, payment processors, game providers, and identity verification services are based.

10.2 Transfer Safeguards. Where personal data is transferred internationally, okpkr ensures that appropriate safeguards are in place. These safeguards include: Standard Contractual Clauses (SCCs) with third-party processors; contractual data protection obligations requiring recipients to maintain equivalent security standards; and onward transfer restrictions preventing further sharing beyond what okpkr has authorised.

10.3 Pakistani Data. okpkr acknowledges the specific context of Pakistani player data and applies data minimisation and access controls to ensure that only the minimum necessary data crosses international borders. Payment data related to JazzCash, EasyPaisa, and local banking partners is processed in accordance with those providers' local infrastructure requirements.

11.1 Right to Update. okpkr reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The effective date at the top of this document will be updated accordingly whenever changes are made.

11.2 Notification of Material Changes. Where changes are material — for example, a new category of data collection, a new sharing arrangement, or a change to your rights — okpkr will notify you via your registered email address or via an in-platform banner at least 14 days before the changes take effect. Non-material clarifications may be made without advance notice.

11.3 Continued Use. Your continued use of the okpkr platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any changes, please cease using the platform and contact our support team to arrange account closure.

11.4 Previous Versions. Previous versions of this Privacy Policy are archived and available upon request from our Data Protection team. Please contact us via live chat or the email address in Section 12 to request a prior version.

12.1 General Privacy Enquiries. If you have any questions, concerns, or requests relating to this Privacy Policy or the way okpkr handles your personal data, please contact our support team in the first instance via the live chat function on the okpkr platform (available 24/7, login required). The majority of privacy queries are resolved by our support team on first contact.

12.2 Formal Data Protection Requests. For formal data subject rights requests — including access, erasure, portability, or rectification requests — please contact okpkr's Data Protection team by email. Our team will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

12.3 Contact Details. You can reach the okpkr Data Protection team at: support [at] okpkr.bio — please include "Data Protection Request" in the subject line of your message, along with your registered username and the nature of your request.

12.4 Response Times. okpkr aims to respond to all privacy-related enquiries within 5 business days and to complete formal data subject rights requests within 30 calendar days. Where additional time is needed due to the complexity or volume of a request, we will inform you within the initial 30-day period and provide an extended timeline.