ok555 Privacy Policy

This Privacy Policy ("Policy") is issued by ok555 ("we", "us", "our", "ok555") and applies to all personal data collected through the ok555 website at ok555.vin, any associated mobile applications, and all services provided through those platforms to players based in Pakistan and other jurisdictions where ok555 operates.

ok555 acts as the data controller in respect of the personal data described in this Policy. This means ok555 determines the purposes for which your personal data is collected and processed, and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

This Policy should be read alongside ok555's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to the processing of your personal information in specific contexts.

By registering an ok555 account, making a deposit, or otherwise using the ok555 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

ok555 collects the following categories of personal data from players:

ok555 does not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where age verification or responsible gaming obligations specifically require the collection of health-related self-disclosure from a player (for example, a self-exclusion request citing gambling harm).

ok555 collects personal data through the following means:

• Direct provision by you: Data you enter during account registration, KYC document uploads, deposit and withdrawal requests, support conversations, and preference settings;
• Automated technical collection: Server logs, cookies, session tracking, and device fingerprinting technologies that operate when you access the ok555 platform;
• Third-party identity verification providers: Where you submit documents for KYC purposes, our verification partner returns a structured data record confirming or rejecting identity;
• Payment processors: Transaction confirmation data, including references, timestamps, and amount values returned by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank upon completion of a transaction;
• Fraud and AML screening services: Risk scores and screening flags returned by anti-money-laundering and fraud detection systems integrated with the ok555 platform.

ok555 processes your personal data only where a lawful basis exists for doing so. The table below sets out the primary purposes of processing and the corresponding legal basis:

Where ok555 relies on consent as the lawful basis for processing, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5.1 Third-Party Service Providers. ok555 shares personal data with carefully selected service providers who assist in the operation of the platform. These include identity verification companies, payment processors, anti-fraud and AML screening vendors, cloud hosting providers, and customer support platform operators. All such providers are bound by data processing agreements that prohibit them from using ok555 player data for any purpose other than the specific service they have been engaged to provide.

5.2 Regulatory and Law Enforcement Authorities. ok555 may disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. ok555 will not provide more data than is strictly required to satisfy the specific legal request.

5.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of ok555's assets, player personal data may be transferred to the acquiring entity as part of that transaction. ok555 will notify affected players of any such transfer and the data protection terms applicable to the acquiring entity before the transfer takes effect.

5.4 No Sale of Data. ok555 does not sell, rent, licence, or otherwise commercially transfer player personal data to third parties for their own marketing or commercial use. This prohibition is absolute and applies regardless of the format or anonymisation status of the data.

ok555 handles all payment data — including transactions processed via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — with the highest standards of financial data security.

6.1 Tokenisation. ok555 does not store raw payment instrument details on its own servers. At the point of entry, payment credentials are tokenised by our PCI-DSS-compliant payment processing partners. ok555 retains only a non-sensitive transaction reference token, timestamp, currency, and amount value.

6.2 Transaction Records. ok555 maintains a record of all deposit and withdrawal transactions associated with a player account for a minimum of five years from the date of the transaction, in compliance with applicable anti-money-laundering record-keeping requirements.

6.3 Withdrawal Verification. ok555 may request additional verification of your financial identity before processing withdrawal requests above defined thresholds. This is a standard KYC and AML requirement and does not imply any allegation of wrongdoing.

ok555 uses cookies and similar tracking technologies to operate the platform, enhance user experience, and gather anonymised analytics data. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cookies cannot be disabled without rendering the platform non-functional.
• Performance & Analytics Cookies: Collect anonymised data about how players interact with the ok555 platform — pages visited, time on site, error events — to help us improve platform performance and navigation.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming limit configurations to personalise your platform experience.
• Marketing Cookies: Used only where you have provided consent, these cookies help ok555 deliver relevant promotional content based on your platform activity and preferences.

You may manage cookie preferences through your browser settings. Please note that disabling cookies beyond the strictly necessary category may affect the functionality of certain ok555 platform features. ok555 does not use third-party advertising network cookies to track players across external websites.

ok555 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your ok555 account and for a period of five years following account closure;
• KYC and identity documents: Retained for a minimum of five years from the date of verification, in accordance with anti-money-laundering legislation;
• Transaction records: Retained for a minimum of five years from the date of each transaction;
• Customer support correspondence: Retained for three years from the date of the final communication in a support thread;
• Marketing consent records: Retained for the duration of active consent and for two years following withdrawal of consent, as evidence of the consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ok555's data destruction procedures. Anonymised, aggregated data that can no longer be attributed to any individual player may be retained indefinitely for statistical and platform improvement purposes.

ok555 implements a layered technical and organisational security framework to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS 1.3 encryption for all data in transit between player devices and ok555 servers;
• AES-256 encryption for all personal data stored at rest in ok555 databases;
• Multi-factor authentication requirements for all ok555 internal staff who access player data systems;
• Role-based access controls that restrict data access to personnel with a demonstrated operational need;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security firms;
• Automated anomaly detection systems that flag unusual account activity, login patterns, and data access events for review;
• Incident response procedures that require affected players to be notified within 72 hours of discovery of a data breach that carries a high risk to their rights and freedoms.

Despite these measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their ok555 account and to enable two-factor authentication from the account security settings page.

ok555 recognises the following data subject rights for all registered players:

• Right of Access: You may request a copy of all personal data ok555 holds about you. ok555 will respond to verified access requests within 30 days;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (e.g. address updates) can be made directly through your account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ok555's legal retention obligations under AML and gaming regulations;
• Right to Restriction: You may request that ok555 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing;
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transmission to another service provider;
• Right to Object: You may object to processing based on ok555's legitimate interests, including direct marketing. Marketing opt-outs take effect within 48 hours of request;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact ok555 at the email address listed in Section 14 of this Policy. ok555 may request proof of identity before actioning a data subject request to protect against unauthorised disclosure.

ok555 is strictly an adult platform. The minimum age to register an account and participate in any gaming activity on ok555 is 21 years. ok555 does not knowingly collect personal data from individuals under the age of 21.

If ok555 discovers or is notified that personal data has been collected from an individual under the age of 21, it will immediately suspend the associated account, delete the personal data of the minor in question, and reverse any transactions associated with that account, subject to any legal obligations that require retention of certain records.

Parents and guardians who believe their child may have accessed or registered on ok555 are encouraged to contact our support team immediately. ok555 will treat all such reports as a priority and will respond within 24 hours.

ok555 may transfer personal data to service providers and infrastructure partners located outside Pakistan. Where such transfers occur, ok555 ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that which applies within Pakistan.

Safeguards used by ok555 for international data transfers include contractual clauses in data processing agreements with all third-party service providers, restricting their use of personal data to the specific purpose for which it was shared and requiring them to maintain equivalent security standards.

By using the ok555 platform and accepting this Privacy Policy, you consent to the transfer of your personal data to third-party service providers in jurisdictions outside Pakistan where necessary for the operation of the platform.

ok555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data protection law, regulatory guidance, platform functionality, or ok555's internal data processing practices. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are significant, ok555 will notify active players via email or an in-platform notification prior to the amended policy taking effect. Continued use of the ok555 platform following the effective date of an amended Privacy Policy constitutes acceptance of the updated terms.

Players who do not accept an amended Privacy Policy should contact ok555 support to discuss account closure and the return of any real-money balance.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a data protection complaint, please contact ok555 using the details below. All data-related queries are handled by ok555's designated data protection function.

ok555 aims to resolve all privacy complaints internally. If you are not satisfied with ok555's response to a data complaint, you retain the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. ok555 will provide details of the applicable authority upon request.

For responsible gaming tools including self-exclusion and deposit limits, please visit our Responsible Gaming page. For general platform rules, see the Terms & Conditions.