Account Registration
Data collected at sign-up is identical regardless of which section you enter from — no section collects more than another.
LEGAL REFERENCE
How 22ok Handles Your Personal Information
At 22ok, we take the handling of your personal data seriously. This policy explains exactly what we collect when you open an account, how we use it, and...
Data encrypted in transitAccount info never soldPakistani payment data protectedCookie controls availablePolicy reviewed regularly
What This Privacy Policy Covers and Why
This policy applies to every interaction you have with 22ok — from the moment you open your account through every deposit made via JazzCash, Easypaisa, SadaPay, or Raast. We collect your name, contact details, device identifiers, and transaction records strictly to operate your account, process payments, and meet our obligations under applicable law. We do not sell your personal data to third
parties. Retention periods vary by data category: transaction logs are kept for the period required under financial regulations, while marketing preferences are held only as long as your account remains active. You may request access to, correction of, or deletion of your personal data by contacting our support team directly. This policy is governed by the laws of the jurisdiction under which
22ok operates, and your continued use of the platform in supported regions constitutes acceptance of these terms.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
POLICY TRUST SIGNALS
Why You Can Rely on This Policy
We built our privacy framework to be transparent, auditable, and consistent with the standards your account deserves. These are the concrete practices behind that commitment.
Encrypted Storage
All personal data stored on our servers is encrypted at rest using industry-standard protocols. Payment credentials processed through JazzCash and...
Access Controls
Only staff with a verified operational need can access your account data. Access events are logged and reviewed regularly to...
No Data Selling
We do not sell, rent, or trade your personal information to advertisers or data brokers under any circumstances. Your account...
Transparent Updates
Whenever we update this policy in a material way, we notify you via email and display a banner in your...
Cookie Consent
You choose which non-essential cookies run on your session. Our cookie preference centre lets you accept, reject, or customise tracking...
Withdrawal Data Integrity
Your SadaPay and Raast withdrawal details are verified against your account identity once at setup and are not re-shared or...
POLICY PAGE CONSISTENCY
How This Policy Aligns Across Our Platform
Our privacy commitments are consistent whether you arrive at this page from our sportsbook, slot lobby, or live casino section. The same data standards apply across every area of 22ok.
Payment Processing
JazzCash, Easypaisa, SadaPay, and Raast transactions all follow the same data-minimisation approach — we request only what is needed.
Session Tracking
The same anonymised session analytics tool runs across the sportsbook and casino sections, with no differentiation in scope.
Marketing Preferences
Your email and notification opt-ins apply platform-wide. Opting out from one section opts you out across all 22ok communications.
Data Retention
Retention schedules are uniform: active account data is held while your account is open; inactive account data is reviewed at 24-month intervals.
Third-Party Sharing
The same restricted list of processors — payment rails, identity verification, fraud screening — applies equally to every section of the platform.
Policy Version Control
A single versioned policy document governs the entire platform. We do not maintain separate policies per product section, reducing inconsistency risk.
Key Elements Shaping Our Privacy Approach
Our privacy architecture reflects deliberate design choices rather than minimum compliance. These six elements define how your data experience feels when you use 22ok in supported...
Data Minimisation
We collect only what is genuinely needed to run your account and process transactions. Fields that are optional at registration are clearly marked, and unused data categories are not stored.
Purpose Limitation
Data collected for identity verification is not reused for marketing profiling. Each data category in our system is tagged with a single permitted purpose and cannot be repurposed without your consent.
Portability Ready
You can request a full export of your account data in a structured, machine-readable format at any time. Requests submitted through the account portal are processed within seven working days.
Audit Logging
Every access to your personal record by our internal systems generates an immutable log entry. These logs are available to our compliance team and used in routine privacy audits.
Breach Response Plan
We maintain a documented response plan for data incidents. If a breach affects your account data, we will notify you within 72 hours of confirming the scope of the incident.
Consent Management
Your consent choices are recorded with a timestamp and version reference. If we need a new consent category, we ask again — prior consent does not carry over to new processing activities.
Frequently Asked Questions About Your Data
We collect your name, email address, date of birth, and a government-issued ID for identity verification. Once active, we also log your device identifiers, session timestamps, and transaction records tied to your chosen payment method.
Payment data flows directly through the respective payment gateway. We receive a transaction reference and status code confirming completion, but we do not store your full mobile wallet credentials on our servers.
Yes. You can submit a deletion request through your account portal or by emailing our privacy team. We will process it within 30 days, subject to any legal retention obligations that require us to keep certain transaction records.
We share data only with processors required to operate the platform — identity verification providers, fraud screening services, and payment rails including SadaPay and Raast. We do not share data with advertisers or data brokers.
Active account data is retained for the lifetime of your account. After an account is closed, we keep the minimum data required by applicable financial regulations, then delete the remainder on a scheduled review cycle.
We use essential cookies to keep your session running, and optional analytics and preference cookies to improve your experience. You can accept, reject, or customise non-essential cookie categories at any time through the preference centre in your account settings.
We will notify you by email within 72 hours of confirming that your personal data was affected. The notification will describe what data was involved, what we have done to contain it, and the steps we recommend you take to protect your account.