0k37 Privacy Policy

Overview & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by 0k37 in connection with the operation of the 0k37 online casino and sports betting platform, accessible at 0k37.org. It covers every interaction you have with 0k37 — from your first visit to the website through to account registration, 0k37 Login sessions, PKR deposits and withdrawals, gameplay, bonus participation, and customer support communications.

This policy applies to:

• All registered 0k37 account holders, regardless of whether their account is active, dormant, or suspended
• Visitors to the 0k37 website who have not yet registered an account
• Individuals who have initiated but not completed the 0k37 registration process
• Former account holders whose data 0k37 retains for regulatory compliance purposes following account closure

This policy does not apply to third-party websites, payment platforms, or services that you may access via links from 0k37. Each of those services operates under its own separate privacy policy, and 0k37 accepts no responsibility for their data practices. In particular, JazzCash and EasyPaisa — the primary PKR payment methods available on 0k37 — maintain their own independent privacy frameworks.

Data We Collect

0k37 collects the following categories of personal data in the course of providing its platform and services to Pakistani players:

How Data Is Collected

0k37 collects personal data through the following channels and mechanisms:

• Directly from You: When you complete the 0k37 registration form, use the 0k37 Login page, submit identity verification documents, contact support, or update your account settings, you provide data to us directly.
• Automatically: When you visit the 0k37 website or use the platform, technical data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device fingerprint, and browsing behaviour on the 0k37 platform.
• From Payment Providers: When you initiate a PKR deposit or withdrawal via JazzCash, EasyPaisa, or a supported bank, the relevant payment provider confirms transaction status and associated account reference data to 0k37 for the purpose of crediting or debiting your 0k37 balance.
• From Identity Verification Services: Where 0k37 engages a third-party KYC (Know Your Customer) service provider to verify your identity documents, that provider returns a verification result — and in some cases supplementary identity data — to 0k37 to complete the verification process.
• From Fraud Prevention Tools: 0k37 may receive risk signals or device reputation data from third-party fraud detection services in order to protect the platform and its players from fraudulent account activity.

Purposes of Processing

0k37 processes your personal data for the following defined purposes only. We do not use your data for any purpose that is incompatible with those listed below:

• Account Creation & Management: To create, maintain, and operate your 0k37 account, authenticate your 0k37 Login sessions, and provide you with access to the full range of 0k37 platform services.
• Identity Verification (KYC): To verify your identity, age (21+ requirement), and payment method ownership in compliance with our international gaming licence obligations and anti-money-laundering regulations.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20, and to maintain accurate financial records of all transactions.
• Platform Provision: To deliver casino games, PSL cricket betting markets, live dealer sessions, slot games, and all other 0k37 platform features to your device.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, enforce deposit and wagering limits you have set, and give effect to any self-exclusion request you make.
• Fraud & Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, unauthorised account access, and other prohibited conduct as defined in the 0k37 Terms and Conditions.
• Customer Support: To receive, process, and respond to your support enquiries, complaints, and disputes via live chat, email, or any other support channel.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable gaming regulations, anti-money-laundering laws, and any lawful requests from regulatory or law enforcement authorities.
• Service Improvement: To analyse aggregated, anonymised usage data to improve the 0k37 platform, identify technical issues, and develop new features — such as new PSL betting markets or slot game categories — that better serve our Pakistani player base.
• Marketing Communications: To send you promotional emails, SMS notifications, or in-platform messages about 0k37 bonuses, PSL promotions, and new game launches — but only where you have provided your consent to receive such communications and only to the extent permitted by applicable law.

Legal Basis for Processing

Every data processing activity conducted by 0k37 is grounded in one of the following lawful bases under applicable data protection law:

• Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you under the 0k37 Terms and Conditions — including operating your account, processing your PKR transactions, and delivering platform services.
• Legal Obligation: Processing that is required for 0k37 to comply with its obligations under applicable gaming regulation, anti-money-laundering legislation, and other relevant legal requirements — including identity verification, transaction reporting, and data retention mandates.
• Legitimate Interests: Processing that is necessary for 0k37's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, and aggregated analytics for service improvement.
• Consent: Processing that is based on your specific, informed, and freely given consent — including the sending of marketing communications. You may withdraw your consent at any time via account settings or by contacting support, without affecting the lawfulness of processing conducted prior to withdrawal.

Data Sharing & Disclosure

0k37 does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 processors receive transaction-specific data necessary to execute your PKR deposits and withdrawals. These providers are contractually bound to use your data only for payment processing purposes.
• Identity Verification Partners: Third-party KYC service providers receive your identity documents and personal details for the sole purpose of verifying your identity and age. These partners are GDPR-compliant data processors operating under strict data processing agreements with 0k37.
• Fraud Prevention Services: Specialist fraud detection platforms may receive technical data (IP address, device fingerprint, behavioural signals) to assess risk and protect the 0k37 platform from fraudulent activity.
• Gaming Software Providers: The third-party game studios and live casino operators whose games appear on the 0k37 platform receive session data necessary for game delivery and outcome verification. These providers do not receive your full identity or payment data.
• Regulatory & Law Enforcement Authorities: 0k37 will disclose personal data to regulators, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.
• Professional Advisers: Legal, accounting, and audit professionals engaged by 0k37 may access personal data on a need-to-know basis subject to professional confidentiality obligations.

PKR Payments & Financial Data

Given the financial nature of the 0k37 platform, the handling of payment-related personal data warrants specific explanation. The following practices apply to all PKR financial data processed through 0k37:

• Payment Data Minimisation: 0k37 does not store full bank account numbers, JazzCash PINs, EasyPaisa mPIN codes, or full debit/credit card numbers. Only the minimum reference data necessary to link a transaction to your account is retained — such as the last 4 digits of an account number or a masked mobile number.
• Transaction Records: A full record of all PKR deposits, withdrawals, and adjustments to your 0k37 account balance is maintained for a minimum of 5 years in compliance with anti-money-laundering record-keeping requirements.
• Source of Funds: For large transactions or where required by 0k37's AML programme, we may request documentation confirming the lawful source of funds used for 0k37 deposits. This information is processed under our legal obligation basis and stored securely for the statutory retention period.
• Payment Method Matching: 0k37 requires that withdrawal payments are made to the same payment method used for deposits wherever possible. This is a security measure to prevent money laundering and protect players from fraudulent redirection of funds.
• Chargeback Data: Where a chargeback is initiated against a 0k37 transaction, relevant transaction data will be shared with the relevant payment network as part of the dispute resolution process.

Cookies & Tracking

The 0k37 website uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are used on the 0k37 platform:

• Strictly Necessary Cookies: These cookies are essential for the 0k37 platform to function correctly. They enable 0k37 Login session management, security token validation, and core platform functionality. These cookies cannot be disabled without impairing your ability to use 0k37.
• Functional Cookies: These cookies remember your preferences — such as your preferred game category, language settings, and responsible gaming limit configurations — so that your 0k37 experience is consistent across sessions.
• Analytical Cookies: 0k37 uses first-party analytical cookies to collect aggregated, anonymised data about how players navigate and use the platform. This data is used solely for internal product improvement and is not shared with third-party analytics providers.
• Security Cookies: Device fingerprinting and session integrity cookies are used to detect suspicious login patterns, prevent account takeover, and identify fraud signals in real time during each 0k37 Login session.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from accessing your 0k37 account. Blocking functional or analytical cookies will not prevent account access but may affect the quality of your experience on the platform.

Data Retention

0k37 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: All personal data associated with an active 0k37 account is retained for the full duration of the account's active life, plus a mandatory post-closure retention period.
• Post-Closure Retention: Following account closure — whether voluntary or by 0k37 — identity data, financial transaction records, and KYC documentation are retained for a minimum of 5 years in compliance with AML record-keeping requirements under international gaming regulation.
• Gaming Activity Logs: Detailed game session logs, wager history, and bonus usage records are retained for 5 years following the date of each transaction to support dispute resolution and regulatory audit requirements.
• Support Communications: Live chat transcripts and support ticket records are retained for 3 years from the date of the communication to support complaint resolution and service quality monitoring.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained indefinitely to demonstrate compliance with applicable marketing regulations, even if your account is closed.
• Technical & Log Data: Server log data, including IP access logs and 0k37 Login timestamps, is retained for 12 months and then automatically purged.

Once the applicable retention period has expired, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised, aggregated data derived from player activity may be retained indefinitely for statistical and product development purposes.

Data Security

0k37 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the 0k37 platform is encrypted using TLS 1.3 (Transport Layer Security). The 0k37 website is served exclusively over HTTPS.
• Encryption at Rest: Personal data and financial records stored in 0k37's databases are encrypted using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to player personal data within 0k37's systems is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is authenticated, role-based, and subject to comprehensive audit logging.
• Two-Factor Authentication: 0k37 Login supports two-factor authentication (2FA). Players are strongly encouraged to enable 2FA on their accounts to provide an additional layer of protection against unauthorised access.
• Penetration Testing: The 0k37 platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential security weaknesses.
• Incident Response: In the event of a personal data breach that poses a risk to player rights, 0k37 will notify affected players and relevant regulatory authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection law.

Your Rights

You have the following rights in respect of the personal data that 0k37 holds about you. To exercise any of these rights, please contact us at support at 0k37.org. All requests will be acknowledged within 24 hours and fulfilled within 30 calendar days.

Children & Minors

The 0k37 platform is strictly restricted to individuals aged 21 years and above. 0k37 does not knowingly collect personal data from individuals under the age of 21, and we actively implement age verification measures during the registration process to prevent underage access.

If 0k37 becomes aware that personal data has been collected from an individual under the age of 21, the following actions will be taken immediately:

• The associated 0k37 account will be permanently suspended
• All personal data associated with the account will be securely deleted, subject only to any legal retention obligations that may require temporary retention for investigation or regulatory reporting purposes
• Any PKR balance held in the account will be returned to the originating payment method, less any winnings generated, which are forfeited
• Where required by applicable law, the incident will be reported to relevant child protection or regulatory authorities

If you believe that a minor has registered on the 0k37 platform, please report this immediately to support at 0k37.org. We take underage access extremely seriously and will act on all credible reports without delay.

International Data Transfers

As an internationally operated platform, 0k37 may transfer your personal data to servers, service providers, or regulatory bodies located outside Pakistan. Such transfers occur in the following circumstances:

• To servers operated by 0k37 or its hosting providers in the jurisdiction of 0k37's international gaming licence
• To third-party KYC and identity verification providers whose processing infrastructure may be located outside Pakistan
• To fraud prevention and security service providers operating internationally
• To gaming software providers and live casino operators whose back-end systems may be hosted across multiple international data centres

Wherever personal data is transferred internationally, 0k37 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions recognised as providing an adequate level of data protection.

Policy Amendments

0k37 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the expansion of 0k37 platform services. When material changes are made to this policy, 0k37 will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on the 0k37 platform informing registered players of the change
• Send a notification to your registered email address summarising the key changes, where the amendments materially affect your rights or the way we use your personal data

Your continued use of the 0k37 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically to stay informed about how 0k37 protects your data. The current version is always available at 0k37.org/privacy-policy.

Contact & Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 0k37 handles your personal data, please contact the 0k37 data protection team using the details below:

For formal data subject rights requests — including access, erasure, portability, or rectification requests — please include your full name, registered mobile number, and a brief description of your request. Identity verification will be required before any request is processed.

If you are not satisfied with 0k37's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction governing this policy.