onexch Privacy Policy –
How We Protect Your Personal Data

1 Who We Are

onexch is an online sports betting exchange and gaming platform operating at onexch.win, serving players in Pakistan. We are the data controller for all personal information collected through the platform. This means we determine how and why your personal data is processed, and we are responsible for ensuring it is handled appropriately under this Privacy Policy.

When this policy refers to "onexch", "we", "us", or "our", it means the platform operated at onexch.win. When it refers to "you" or "your", it means any person who accesses or uses the onexch platform in any capacity — whether as a registered player or a visitor browsing the site.

If you have any questions about how your data is being used, or if you want to make a request relating to your personal data, you can reach us through the support channels listed at the end of this policy.

2 What Data We Collect

onexch collects personal data in several ways — information you provide directly when registering or using the platform, information generated automatically through your use of the site, and in some cases information from third parties such as payment processors.

Information you provide directly:

• Full name, date of birth, and gender as entered during account registration.
• Contact details including your mobile number and email address.
• Pakistani National Identity Card (CNIC) number or passport details when identity verification is required.
• Payment method details including JazzCash account numbers, Easypaisa wallet references, Raast IDs, bank account details, or card information submitted during deposit or withdrawal requests.
• Any documents you upload for identity verification purposes, such as scanned CNIC, utility bills, or bank statements.
• Messages and queries sent to the onexch support team via chat or email.

Information collected automatically:

• IP address and approximate geographic location at the time of login or transactions.
• Device type, operating system, browser version, and screen resolution.
• Pages visited on the onexch website, time spent on each page, and clickstream data.
• Session start and end times, login frequency, and account activity patterns.
• Betting history, game play records, deposit and withdrawal transaction logs, and bonus activity.
• Cookies and similar tracking technologies — see Section 6 for full details.

Information from third parties:

• Transaction confirmation data from payment providers such as JazzCash, Easypaisa, and Raast to verify deposits and withdrawals.
• Identity verification results from any third-party verification service used to confirm CNIC or passport details.
• Fraud and risk screening data from fraud prevention services used to protect the platform and its players.

3 How We Use Your Data

onexch uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and allow you to log in securely.
• Processing transactions: To handle PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, and other supported payment methods.
• Providing platform services: To allow you to place bets on cricket, PSL, T20 internationals, football, esports, and other markets, and to play slot games, live casino, and bingo.
• Customer support: To respond to your queries, complaints, and account-related requests in a timely manner.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multiple account creation, and other prohibited conduct outlined in the Terms and Conditions.
• Responsible gaming compliance: To monitor account activity and apply any deposit limits, self-exclusion settings, or cooling-off periods you have activated, and to flag patterns that may indicate problem gambling.
• Legal and regulatory obligations: To retain records as required by applicable law, respond to legal requests, and cooperate with investigations by authorised authorities where legally required.
• Platform improvement: To analyse how the platform is used, identify technical issues, and improve the overall experience for all players.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive these. You can opt out at any time.

We do not use your personal data for automated decision-making that produces significant legal effects without human review. Any account-level decisions — such as suspension or closure — involve review by onexch staff before action is taken.

4 Legal Basis for Processing

onexch processes your personal data on the following legal grounds:

• Contract performance: Processing your registration details, transactions, and account activity is necessary to deliver the services you signed up for on onexch.
• Legal obligation: Retaining transaction records, identity verification documents, and account histories to meet applicable legal retention and anti-money laundering requirements.
• Legitimate interests: Fraud prevention, platform security, abuse detection, and improving the platform experience — where these interests do not override your fundamental privacy rights.
• Consent: For marketing communications and optional analytics cookies, we rely on your explicit consent. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Sharing Your Data

onexch does not sell or rent your personal data to third parties. We share your data only in the following limited and necessary circumstances:

• Payment processors: Your payment details are shared with JazzCash, Easypaisa, Raast, and other relevant payment providers solely to process your PKR deposits and withdrawals.
• Identity verification services: CNIC or passport details may be shared with a third-party verification provider to confirm your identity as required during account review.
• Fraud prevention partners: We may share account data with fraud screening and risk management services to detect suspicious activity and protect all players on the platform.
• Game providers: Certain technical data (such as session identifiers) may be passed to third-party game providers to load and operate slot games, live casino titles, and bingo rooms within the platform.
• Legal authorities: If required by a court order, legal process, or legitimate law enforcement request, onexch may disclose relevant account information. We will only do so to the extent legally required and will not disclose more data than necessary.
• Business transfers: In the event of a merger, acquisition, or sale of the onexch platform, your personal data may be transferred to the new operator. You will be notified of any such change and your rights under this policy will continue to apply.

6 Cookies and Tracking

onexch uses cookies and similar technologies on the platform. A cookie is a small text file placed on your device when you visit a website. Here is how we use them:

You can control cookie settings through your browser preferences at any time. Disabling essential cookies may prevent some platform features from working correctly. onexch does not use cookies to track your activity across unrelated external websites.

7 Data Retention

onexch retains your personal data for as long as your account is active and for a defined period after account closure. The main retention periods are as follows:

• Account registration data: Retained for the lifetime of your account and for up to 5 years following account closure, in line with standard record-keeping practices.
• Transaction and betting records: Retained for a minimum of 5 years following the date of the transaction to meet financial record-keeping obligations.
• Identity verification documents: Retained for the duration of your account and for up to 5 years after closure. Copies are stored securely and accessed only when required for compliance purposes.
• Customer support conversations: Retained for up to 3 years after the conversation closes, unless the subject matter requires longer retention for legal or dispute purposes.
• Marketing preferences and consent records: Retained for as long as your account is active and for 1 year after account closure.

When data is no longer required and its retention period has expired, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

8 Your Rights Over Your Data

As a player on onexch, you have the following rights over your personal data. To exercise any of these rights, contact the onexch support team with your account details and a description of your request.

onexch will respond to all data rights requests within 5 working days. Complex requests may take longer, and we will keep you informed of progress. We may need to verify your identity before actioning a request to protect your account security.

9 Data Security

onexch takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it from unauthorised access, loss, or misuse:

• All data transmitted between your device and the onexch platform is encrypted using TLS (Transport Layer Security) protocols.
• Passwords are stored using strong one-way hashing algorithms — they are never stored in plain text and cannot be retrieved even by onexch staff.
• Access to personal data within onexch is restricted to staff who genuinely need it to carry out their role. All such access is logged and monitored.
• Payment credentials processed through JazzCash, Easypaisa, Raast, or card payments are handled through secure, encrypted payment gateways and are not stored on onexch servers.
• Regular security reviews and system monitoring are carried out to detect and respond to potential threats.

While onexch uses best-practice security measures, no system connected to the internet can be guaranteed 100% secure. If you suspect your account has been compromised, change your password immediately and contact our support team without delay.

10 Children and Minors

onexch is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you are not permitted to create an account or use the onexch platform in any capacity.

If we become aware that personal data has been collected from a person under 18 years of age, we will close the associated account immediately, delete the data, and return any funds deposited to the original payment source. Parents and guardians are encouraged to use parental controls and monitor device usage to prevent minors from accessing online gaming platforms.

If you believe a minor has registered on onexch, please contact our support team right away with the relevant account details so we can investigate and act promptly.

11 Changes to This Policy

onexch may update this Privacy Policy from time to time to reflect changes in how we handle data, changes to the platform's services, or updates to applicable legal requirements. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

Where changes are significant — for example, if we start processing data in a new way or sharing it with new categories of third parties — we will notify registered players by email or via a notice on the platform before the changes take effect.

We recommend reviewing this Privacy Policy periodically to stay informed about how onexch protects your information. Your continued use of the platform after any updated policy comes into effect constitutes acceptance of those changes. If you do not agree with the updated policy, you should close your account before the new policy takes effect.

12 How to Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how your personal data has been handled, please get in touch with the onexch support team:

• Live chat: Available 24/7 directly within your onexch account once you are logged in.
• Email: Contact us at the support email address displayed in the website footer — this is a plain-text address and not a clickable link.
• FAQ: Visit the FAQ page for answers to common questions about accounts, payments, and data.

Privacy-related requests and complaints are treated as a priority. We acknowledge all privacy requests within 24 hours and aim to resolve them within 5 working days. If a request is particularly complex, we will keep you informed of our progress throughout.