1. Scope and roles
OKEYHAN processes business contact and account information to evaluate applications, operate the partner platform, secure integrations and meet legal obligations. Casino operators remain responsible for their players’ account, KYC, AML and wallet data. Runtime player references supplied to OKEYHAN must be opaque.
2. Data we process
Application, corporate, contact, authentication, support, integration, device/security and commercial records may be processed. Game and transaction evidence is operator-scoped and retained for integrity, reconciliation and contractual purposes.
3. Purposes and legal basis
Purposes include pre-contract steps, contract performance, platform security, fraud prevention, support, accounting and compliance. The final publication must map each purpose to the applicable legal basis and legal entity.
4. Sharing and transfers
Access is restricted to authorized personnel and approved subprocessors. Cross-border transfer mechanisms, hosting regions and the final subprocessor register require counsel review.
5. Retention and rights
Records are retained by category under a documented schedule. Applicable access, correction, deletion, restriction and objection rights can be requested through the published privacy contact, subject to financial, security and legal retention duties.
6. Security and contact
Controls include tenant isolation, least privilege, MFA for privileged users, encryption in transit, append-only evidence and audited access. Entity name, registered address, DPO/privacy contact and supervisory-authority details must be inserted before publication.