Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which okapk ("okapk", "we", "us", "our") — the operator of the online betting and casino information platform accessible at okapk.cam — collects, uses, stores, and protects personal data provided by or generated through users ("you", "your") of the platform.

okapk is an English-language platform designed for Pakistani users, offering sports betting markets, live casino games, and slot titles with PKR balance display, mobile-first performance, and 24/7 English-language support. As part of operating this platform responsibly, we are committed to handling your personal data with the highest standards of care, integrity, and transparency.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated into this Policy by reference. Where any conflict arises between this Policy and a more specific data-processing notice, the more specific notice shall prevail in respect of the data processing activities it describes.

okapk processes personal data in accordance with the data protection laws applicable in the jurisdiction where it holds its operating licence. This Policy does not constitute legal advice regarding Pakistani law. Users in Pakistan should be aware that the Prevention of Gambling Act 1977 and other applicable legislation may affect online gambling activity in their jurisdiction.

The following terms carry specific meanings throughout this Privacy Policy:

• "Account" — your registered user account on the okapk platform.
• "Controller" — the entity that determines the purposes and means of processing personal data; in this context, okapk.
• "Data Subject" — an identified or identifiable natural person whose personal data is processed; in this context, you as a registered or prospective user.
• "KYC" — Know Your Customer; the regulatory process by which okapk verifies your identity, age, address, and source of funds.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, phone number, device identifiers, and financial information.
• "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "Processor" — any third party that processes personal data on behalf of okapk under a contractual data-processing agreement.
• "Sensitive Data" — a subset of personal data that receives enhanced protection, including identity document details and financial account information.

okapk collects personal data across three primary categories: data you provide directly, data generated automatically through your use of the platform, and data received from authorised third parties. The specific data collected depends on how you interact with okapk.

• Registration data: Full legal name, date of birth, email address, phone number, residential address (including city — e.g., Karachi, Lahore, Rawalpindi, Islamabad, Faisalabad, Multan, or Peshawar), username, and password hash.
• KYC documents: Copies of government-issued photo identity (e.g., CNIC, passport, driving licence), proof of address documents, and, where required, proof of payment method ownership.
• Financial data: Deposit and withdrawal transaction records, preferred payment method references, and PKR balance history. Note: we do not store full bank account numbers or card PAN numbers directly — these are handled by PCI-compliant payment processors.
• Support communications: Content of messages sent to our support team via live chat, email, or contact forms, including any attachments you choose to share.
• Responsible gambling data: Self-exclusion requests, deposit limit settings, session time limits, and cool-off period requests. This category of data is processed with enhanced care given its sensitive nature.

• Device & technical data: IP address, browser type and version, operating system, screen resolution, device type (mobile, tablet, desktop), and device identifiers.
• Usage data: Pages visited, features used, game sessions played, bets placed, session duration, click paths, and referring URLs.
• Cookies and similar technologies: Session cookies, persistent cookies, and local storage objects. See Clause 9 for full details.
• Geolocation data: Approximate location derived from your IP address, used for jurisdictional compliance checks. We do not access precise GPS-level location data.

• KYC verification providers: Identity verification outcomes and fraud-risk scores from authorised third-party KYC service providers.
• Payment processors: Transaction status confirmations, partial payment method reference data, and chargeback notifications.
• Fraud prevention services: Device fingerprint data and behavioural analytics used to detect multi-accounting, bonus abuse, and other prohibited conduct.

When you create an Account on okapk, you actively provide personal data through our registration form. This data is transmitted over an encrypted HTTPS connection and stored securely. We collect only what is necessary to create and verify your Account.

As you navigate the okapk platform — browsing game categories, placing bets on Pakistan cricket matches, PSL T20 fixtures, ICC tournaments, international football, or UFC events — our systems automatically generate usage and technical data logs. This data is essential for platform performance, security monitoring, and fraud detection.

Our platform uses cookies and browser local storage to maintain your session, remember your preferences, and collect aggregate analytics data. You can manage cookie preferences at any time. See Clause 9 for the full cookie policy.

When you contact our support team — whether via live chat (available 24/7 in English, with Urdu assistance available on request) or by email — we record the contents of those interactions for quality assurance, training, and dispute-resolution purposes.

When you initiate a deposit or withdrawal, our payment processing partners receive transaction data directly. okapk receives a transaction status confirmation and a partial payment method reference only — we do not receive or store complete financial account credentials. Payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah are mentioned as familiar local context for Pakistani users only and do not imply endorsement, affiliation, or a formal payment integration with those institutions.

okapk processes personal data for specific, documented purposes only. We do not process your data in a manner incompatible with the purposes for which it was originally collected.

Processing your registration data, KYC documents, financial transaction data, and Account activity records is necessary to perform our contract with you — i.e., to provide the okapk platform and its associated services. Without this processing, we cannot create or maintain your Account.

We are required by applicable law and our operating licence conditions to verify user identities (KYC), maintain transaction records for anti-money-laundering (AML) compliance, detect and report suspicious activity, and implement responsible gambling controls. Processing personal data for these purposes is a legal obligation we cannot waive.

Where we process personal data on the basis of legitimate interests, those interests include: fraud detection and prevention, platform security monitoring, improving user experience through aggregate analytics, and enforcing our Terms & Conditions. We carry out a balancing assessment to ensure that our legitimate interests do not override your rights and freedoms.

Where we rely on consent as the legal basis for processing — for example, for sending promotional emails, push notifications, or SMS marketing — we will obtain your explicit opt-in consent before processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

okapk does not sell, rent, or trade personal data to any third party for marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

We share personal data with carefully selected third-party service providers who process data strictly on our behalf and under contractual data-protection obligations. These include:

• KYC & identity verification providers — to verify user identity, age, and address.
• Payment processors — to facilitate deposits and withdrawals.
• Cloud hosting & infrastructure providers — to store and serve platform data securely.
• Fraud prevention & AML screening services — to detect and prevent prohibited conduct.
• Customer support platform providers — to manage live chat and support ticket workflows.
• Analytics providers — to collect aggregated, anonymised usage data for platform improvement.

All Processors are contractually bound to process data only as directed by okapk, to maintain appropriate security standards, and to delete or return data upon termination of the service relationship.

We may be required to disclose personal data to regulatory authorities, law enforcement agencies, courts, or other public bodies where we have a legal obligation to do so — for example, in response to a valid court order, AML reporting obligation, or licence condition. Such disclosures are made only to the extent required and are logged internally.

In the event that okapk is subject to a merger, acquisition, or sale of all or substantially all of its assets, personal data held by okapk may be transferred to the successor entity as part of that transaction. Users will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

okapk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements.

While your Account remains active, we retain all data necessary to provide you with platform services, process transactions, and comply with regulatory obligations. You may request Account closure at any time in accordance with our Terms & Conditions.

Following Account closure, certain categories of data are retained for defined periods as required by applicable law and regulation:

Where possible, rather than retaining identifiable personal data beyond the necessary period, okapk will anonymise the data so that it can no longer be linked to an individual. Anonymised data is not subject to the same retention limits and may be used for aggregate statistical analysis.

okapk implements a layered security architecture designed to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. Our key security measures include:

• Encryption in transit: All data transmitted between your device and our servers is protected by TLS 1.2+ encryption. We enforce HTTPS across the entire okapk domain.
• Encryption at rest: Sensitive data fields — including identity document references and financial data — are encrypted at the database level using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations and regular security training.
• Two-factor authentication (2FA): 2FA is available for all user Accounts and is mandatory for all okapk staff with system access.
• Penetration testing & vulnerability management: Our platform undergoes regular security assessments conducted by qualified third-party security professionals.
• Incident response: We maintain a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.

okapk uses cookies and similar browser storage technologies to operate the platform effectively, remember your preferences, and collect aggregate analytics. We do not use third-party advertising or cross-site tracking cookies.

You can manage or disable optional cookies through the cookie preferences panel available on the okapk platform. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in or using Account features. For guidance on browser-level cookie management, refer to your browser's help documentation.

okapk respects browser-level "Do Not Track" signals where technically feasible. When a Do Not Track signal is detected, we disable all optional analytical cookies for that session automatically.

As a Data Subject, you hold a number of rights in relation to the personal data okapk holds about you. We are committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights below, please contact our support team at [email protected] or via live chat.

You have the right to request a copy of the personal data okapk holds about you, together with information about how it is processed. We will provide this information within 30 days of a verified request, free of charge for the first request in any 12-month period.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data directly within your Account settings; for data that requires formal correction — such as KYC documents — please contact our support team.

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you believe the data has been unlawfully processed. Note that erasure requests may be declined where retention is required by law — for example, AML transaction records must be retained for the regulatory minimum period even after Account closure.

You may request that we restrict processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.

Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV). You may also request that this data be transmitted directly to another controller where technically feasible.

You have the right to object to processing based on legitimate interests, including profiling for fraud prevention purposes. okapk will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

okapk is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or under the higher minimum age required by the operator/license jurisdiction. Access to the platform is restricted to verified adults only.

As part of our KYC process, every user is required to verify their date of birth and provide a government-issued identity document confirming their age. Accounts that cannot be verified as belonging to an adult are suspended immediately and any funds held are returned through the deposit method used.

If you believe that a minor has registered an Account on okapk, or if you are a parent or guardian with concerns about underage access, please contact us immediately at [email protected]. We will investigate and act promptly. Please also review our Responsible Gambling Policy for information on parental controls and underage access prevention tools.

okapk operates from and holds its operating licence in a jurisdiction outside Pakistan. As a result, your personal data may be transferred to, and processed in, countries other than your country of residence. These countries may have different data protection laws to those in your jurisdiction.

Where personal data is transferred internationally, okapk ensures that appropriate safeguards are in place to protect your data in accordance with applicable data protection law. These safeguards may include:

• Transfers to countries deemed to have an adequate level of data protection by the relevant supervisory authority.
• Execution of standard contractual clauses or equivalent data transfer agreements with the recipient entity.
• Binding corporate rules where the recipient is a member of the same corporate group.

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting our support team.

okapk reserves the right to update or amend this Privacy Policy at any time. We will notify you of material changes by posting a prominent notice on the okapk platform and, where we hold a valid email address for your Account, by sending you an email notification in English at least 14 days before the changes take effect.

The "Last updated" date at the top of this page reflects the date on which the most recent version of this Policy came into effect. Your continued use of the okapk platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

If you do not agree with any amendment, you must stop using the platform and may request Account closure in accordance with our Terms & Conditions. Previous versions of this Policy are available on request from our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data-processing practices, or if you wish to exercise any of your data rights, please reach out to our support team. We aim to acknowledge all privacy-related enquiries within 24 hours and to resolve them within 30 days.

Email is displayed as plain text only. Do not send sensitive documents, passwords, KYC materials, or financial information by email.