Onexch Privacy Policy

Onexch is an online betting and gaming platform built for Pakistan's players. We offer sports betting on cricket, PSL, T20 internationals, football and esports, alongside slot games, fish games and live casino entertainment. All deposits and payouts are handled in PKR through trusted local payment channels including JazzCash, Easypaisa, Raast and bank transfer.

Because we handle real money transactions and account information, we understand that privacy is not just a legal requirement – it is a basic expectation that every player deserves. We collect only what we genuinely need, we use it only for the purposes stated here, and we do not sell your personal information to anyone.

This policy uses straightforward language so you can make informed decisions about your use of the platform. We have deliberately avoided the kind of dense legal language that nobody actually reads, while still covering all the important points.

Onexch collects personal data in two broad categories: information you provide directly, and information generated automatically when you use the platform.

Information You Provide Directly

• Registration details: Your full name, date of birth, email address and mobile number provided when you create your account.
• Identity verification documents: A copy of your CNIC or other accepted identity document, requested when you submit your first withdrawal.
• Payment information: Your JazzCash or Easypaisa mobile number, bank account details or card information used to deposit or withdraw PKR. We do not store full card numbers on our servers.
• Communication records: Messages sent to our support team, including any attachments, feedback forms or complaint submissions.
• Responsible gaming preferences: Deposit limits, self-exclusion requests and session reminder settings that you configure within your account.

Information Generated Automatically

• Device and browser data: IP address, device type, operating system, browser version and screen resolution.
• Usage data: Pages visited, time spent on each section, bets placed, games played, deposit and withdrawal history, and session duration.
• Location data: General geographic location derived from your IP address. We do not collect precise GPS coordinates unless you explicitly grant permission via the app.
• Cookie data: Identifiers stored in your browser to maintain your session, remember preferences and measure platform performance. See Section 07 for details.

We collect your personal data through the following means:

• Account registration: The details you enter when signing up for an Onexch account.
• Deposit and withdrawal forms: Payment details entered when adding funds or requesting a payout in PKR.
• Customer support interactions: Information shared when you contact us via live chat, email or any other support channel.
• Automated platform tracking: Server logs, analytics tools and cookies that record how you interact with the website and app.
• Third-party payment processors: Confirmation data returned by JazzCash, Easypaisa, Raast or bank transfer services after a transaction is completed. We receive confirmation and reference numbers, not your full payment credentials.

We use the personal data we collect strictly for the following purposes:

We do not use your personal data for any purpose not listed above without first updating this Privacy Policy and, where required, obtaining your consent.

Onexch does not sell, rent or trade your personal information to third parties for commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the minimum information required to process your PKR transactions. This typically includes your name, mobile number or account details.
• Identity verification services: Where we use a third-party service to assist with CNIC or document verification, only the specific data needed for that check is shared.
• Technology service providers: Hosting, database, analytics and security providers who process data on our behalf under strict contractual data protection obligations.
• Legal and compliance requirements: Where we are required by applicable law or a valid legal process to disclose information. We will only do so to the extent strictly necessary.
• Business transfers: In the event of a merger, acquisition or sale of Onexch's business assets, your data may be transferred as part of that process. You would be notified of any such change.

In all cases where we share data with third parties, we require those parties to handle your information in a manner consistent with this Privacy Policy and applicable data protection standards.

Because Onexch handles real PKR deposits and withdrawals, we maintain detailed records of all financial transactions associated with your account. This includes deposit timestamps, amounts, payment method references, withdrawal requests and the outcome of each transaction.

These records serve several purposes:

• Resolving any dispute about a deposit or withdrawal that you raise with our support team.
• Confirming that withdrawal requests are being sent to the correct verified payment method.
• Detecting unusual financial patterns that may indicate fraud, money laundering or bonus abuse.
• Maintaining an accurate audit trail of all PKR activity on your account.

Full debit or credit card numbers are never stored on Onexch servers. Where card details are required, they are processed directly by our payment partner's secure environment. JazzCash and Easypaisa transactions are confirmed via tokenised references rather than storing your wallet PIN or full credentials.

Onexch uses cookies and similar tracking technologies to make the platform work properly and to understand how players use it. Here is a breakdown of the types of cookies we use:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language and currency settings, and ensure bets are processed correctly. You cannot opt out of essential cookies without losing access to core platform features.
• Analytics cookies: Help us understand which pages are most visited, how long players spend on each section and where technical issues occur. This data is aggregated and does not identify you personally.
• Performance cookies: Used to measure platform load times, identify slow-loading pages and optimise the experience for players on mobile networks commonly used in Pakistan.
• Preference cookies: Remember your display preferences, notification settings and any customisations you have made to your account view.

You can manage cookie preferences through your browser settings. Please note that disabling non-essential cookies will not affect your ability to place bets, deposit PKR or access your account, but may limit some personalisation features.

Protecting your personal information is something we take seriously at Onexch. We have implemented a range of technical and organisational measures to prevent unauthorised access, accidental loss or misuse of your data:

• Encryption in transit: All data exchanged between your device and our servers is encrypted using TLS (Transport Layer Security), the same standard used by banks and major financial platforms.
• Encryption at rest: Sensitive personal data stored in our databases is encrypted so that even in the unlikely event of a server breach, your information cannot be read without the decryption keys.
• Access controls: Access to player data is restricted to Onexch staff who genuinely need it to perform their role. All staff with data access undergo regular security awareness training.
• Two-factor authentication: Available for your Onexch account to add an extra layer of protection beyond your password. We strongly recommend enabling this, especially if you regularly access the platform on shared devices.
• Intrusion detection: Automated systems monitor our platform for unusual access patterns, brute-force login attempts and other suspicious activity around the clock.

While we do everything technically reasonable to protect your data, no platform can guarantee absolute security. You play an important role too – keeping your password strong, not sharing your login details and logging out on shared devices all make a real difference.

Onexch retains your personal data for as long as your account remains active and for a reasonable period thereafter, to allow for dispute resolution and to meet our operational obligations. Specifically:

• Active accounts: Your registration data, transaction history and betting records are retained for the full duration of your account's activity.
• Closed accounts: Following account closure, we retain your data for a period necessary to resolve any outstanding disputes, process final withdrawals and meet applicable record-keeping requirements.
• Identity verification documents: Retained for the period needed to confirm your identity in relation to any withdrawal or compliance inquiry, after which they are securely deleted.
• Support communications: Chat logs and email correspondence with our support team are retained for a reasonable period to provide context for future queries and quality assurance purposes.

When data is no longer required for any of the above purposes, we delete or anonymise it so it can no longer be linked to you personally.

As an Onexch account holder, you have the following rights in relation to your personal data:

• Right to access: You can request a copy of the personal data we hold about you at any time by contacting our support team.
• Right to correction: If any of your personal information is inaccurate or out of date, you can update most details directly in your account settings. For changes to identity-linked data such as your registered name or date of birth, contact support with supporting documentation.
• Right to deletion: You can request that we delete your personal data. Please note that where we have a legitimate reason to retain certain records – such as outstanding transaction disputes or legal obligations – we may not be able to fulfil a deletion request in full immediately.
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances, for example while a dispute is under investigation.
• Right to withdraw consent: Where our use of your data is based on your consent (for example, receiving promotional emails), you can withdraw that consent at any time through your account notification settings.

To exercise any of these rights, contact our support team with your registered account details. We will respond within a reasonable timeframe and will not charge you for legitimate data access requests.

Onexch is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age is requested at registration and may be verified through identity documentation before the first withdrawal is processed.

If we discover that personal data has been collected from a player who was under 18 at the time of registration, we will take the following steps:

• Immediately suspend the account.
• Delete or anonymise the personal data collected in connection with that account.
• Return any remaining balance at our discretion, consistent with our Terms and Conditions.

If you are a parent or guardian and believe that a minor has registered on Onexch, please contact our support team immediately with the relevant account details so we can investigate and act promptly.

Onexch may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features or evolving operational requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where practicable, notify active players via an in-platform message or to their registered contact details.

We encourage you to revisit this page periodically so you are always aware of how your data is being handled. Continuing to use Onexch after an updated Privacy Policy has been published constitutes your acceptance of the revised terms.