ok2222 Privacy Policy

2.1 Registration Data

When you create an ok2222 account, we collect the following information that you provide directly:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you meet the 21+ age requirement)
• Pakistani mobile phone number (used as your primary login identifier and for OTP authentication)
• Residential address
• CNIC (Computerised National Identity Card) number, for identity verification and age confirmation
• Username and password (password is stored in irreversibly hashed form — ok2222 cannot read your actual password)
• Email address (optional but recommended for account recovery purposes)

2.2 Identity Verification (KYC) Data

To comply with our international gaming license obligations and applicable anti-money laundering regulations, ok2222 may request copies of:

• Government-issued photo identification (CNIC or equivalent)
• Proof of residential address (utility bill, bank statement, or similar document dated within three months)
• Proof of payment method ownership (screenshot, statement, or similar)
• Source of funds documentation for accounts with high transaction volumes

2.3 Transaction & Gaming Data

ok2222 automatically records the following data as a result of your use of the platform:

• All deposit and withdrawal transactions — amounts, timestamps, payment methods, and reference numbers
• All bets placed — game type, market, stake, odds, outcome, and timestamp
• Bonus activation and wagering history
• Account balance movements and statement history

2.4 Technical & Device Data

When you access ok2222 from any device, our systems automatically collect certain technical information:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session duration, login timestamps, and navigation patterns within the platform
• Cookie identifiers (see Section 7 for full cookie policy details)

3.1 Purposes of Processing

ok2222 processes your personal data for the following clearly defined purposes, each of which is described alongside the data categories involved:

3.2 Marketing Communications

ok2222 will only send you promotional communications — including bonus offers, cricket betting promotions, and new game announcements — where you have explicitly opted in to receive such communications during registration or through your account preferences. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account dashboard or contacting support.

4.1 Contractual Necessity

The majority of data processing carried out by ok2222 is necessary for the performance of the contract between you and ok2222 — that is, the Terms and Conditions you agreed to when registering your account. Without processing your personal data on this basis, ok2222 could not create your account, process your deposits and withdrawals, record your bets, or provide customer support.

4.2 Legal Obligation

ok2222 operates under an international gaming license that imposes specific data collection and retention obligations, particularly in relation to identity verification (KYC), anti-money laundering (AML), and responsible gaming monitoring. Processing on this basis is mandatory and cannot be refused without forfeiting the ability to hold an account.

4.3 Legitimate Interests

ok2222 processes certain categories of technical and behavioral data on the basis of its legitimate business interests — specifically in maintaining platform security, preventing fraud, and ensuring the integrity of its gaming operations. ok2222 has assessed that these interests are not overridden by your fundamental rights and freedoms, given the proportionate and privacy-protective manner in which such processing is conducted.

4.4 Consent

Where ok2222 relies on your consent as the legal basis for processing — principally in relation to marketing communications and certain optional analytics — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent can be effected through your account preferences or by contacting support.

5.1 Categories of Third Parties

ok2222 shares your personal data with third parties only to the extent necessary to deliver its services, comply with legal obligations, or protect its legitimate interests. The categories of third parties with whom data may be shared are as follows:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network processors — solely to execute your deposit and withdrawal instructions
• Identity verification providers: Third-party KYC platforms used to verify CNIC authenticity and confirm age eligibility
• Game software providers: Certified gaming content providers whose games are hosted on the ok2222 platform — they receive only the minimum technical data necessary to deliver gameplay
• Cloud infrastructure providers: Secure, certified hosting and data storage providers operating under contractual data processing agreements
• Regulatory and law enforcement authorities: Where required by applicable law, a court order, or our international gaming license obligations
• Anti-fraud and AML screening services: For transaction monitoring and suspicious activity detection purposes

5.2 No Sale of Personal Data

ok2222 does not sell, rent, lease, or otherwise transfer your personal data to any third party for that party's own commercial or marketing purposes. Any transfer of data to third parties is governed by written data processing agreements that impose equivalent data protection obligations on the receiving party.

5.3 International Transfers

As an internationally licensed operator, some of ok2222's service providers may process your data in countries outside Pakistan. In all cases where international data transfers occur, ok2222 ensures that appropriate safeguards are in place — including contractual protections equivalent to international data protection standards — to ensure your data remains protected regardless of where it is processed.

6.1 General Retention Principle

ok2222 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any minimum retention periods imposed by our international gaming license, applicable AML regulations, or other legal obligations. The following table sets out the principal retention periods applied to each data category:

6.2 Account Closure and Data

When your ok2222 account is closed — whether at your request, due to inactivity, or as a result of a breach of Terms — the retention periods described above continue to apply. You will not have active access to the platform following account closure, but ok2222 is legally required to retain certain records for the minimum periods specified above. At the end of the applicable retention period, data is securely and irreversibly deleted from ok2222's systems.

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. ok2222 uses cookies and similar tracking technologies (including local storage and session identifiers) to operate the platform, remember your preferences, maintain session security, and — where consent is given — to analyse platform usage and improve the player experience.

7.2 Categories of Cookies Used by ok2222

• Strictly Necessary Cookies: Required for the ok2222 platform to function. These include session authentication cookies that keep you logged in during an active session, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without making the platform non-functional.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and notification preferences. These improve your experience but are not essential to platform operation.
• Analytics Cookies: Where you have consented, these cookies collect anonymised data about how you navigate the ok2222 platform — which pages you visit, how long sessions last, and which features are most used. This data informs product improvements.
• Security Cookies: Used specifically to detect fraudulent account activity, unusual login patterns, and potential bot behaviour. These are classified as strictly necessary for platform security.

7.3 Managing Cookies

You may control non-essential cookie categories through your browser settings or through the ok2222 cookie preference centre accessible on the platform. Note that disabling functional or analytics cookies may affect your experience. Strictly necessary and security cookies cannot be disabled without significantly impacting platform functionality and account security.

8.1 Technical Security Measures

ok2222 implements a comprehensive suite of technical security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data in transit between your device and ok2222's servers is encrypted using Transport Layer Security (TLS) with a minimum 256-bit key length
• Encryption at Rest: Sensitive data categories — including identity documents, payment details, and authentication credentials — are encrypted when stored on ok2222's servers
• Password Hashing: Account passwords are stored using a strong, irreversible cryptographic hashing algorithm. ok2222 cannot retrieve your actual password; only a new password can be set through the verified recovery process
• Two-Factor Authentication: ok2222 offers and recommends 2FA for all accounts, adding an additional layer of security beyond the username and password combination
• Intrusion Detection: Automated systems monitor for unusual login patterns, multiple failed authentication attempts, and other indicators of potential account compromise
• Access Controls: Internal access to player data is restricted to authorised personnel on a documented need-to-know basis, with all access events logged and subject to periodic audit

8.2 Incident Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ok2222 will notify affected players without undue delay, providing information about the nature of the breach, the data involved, and the steps being taken to mitigate any potential harm.

9.1 Summary of Your Rights

As a player on the ok2222 platform, you have the following rights in relation to your personal data. All requests must be submitted through the ok2222 support channels and will be responded to within 30 calendar days:

10.1 Right to Update

ok2222 reserves the right to update, amend, or replace this Privacy Policy at any time. Privacy policy changes may be necessitated by updates to our services, changes in applicable data protection law, modifications to our licensing obligations, or improvements to our internal data handling practices.

10.2 Notification of Material Changes

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your data is used — ok2222 will provide at least 14 days' advance notice via the email address associated with your account (if provided) or through a prominent on-platform notification. For non-material changes such as formatting corrections or minor clarifications, the updated policy will be published with a revised effective date.

10.3 Continued Use as Acceptance

Your continued use of the ok2222 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised Privacy Policy, you must cease using the platform and close your account. Account closure requests can be submitted at any time through the ok2222 live chat support channel.

10.4 Governing Language

This Privacy Policy is drafted and published in the English language. In the event of any inconsistency between the English version and any translated version, the English version shall prevail. This policy is the complete and authoritative statement of ok2222's privacy practices in relation to the ok2222.app platform.