onexch
Privacy Policy

1.1 The data controller responsible for the personal data of onexch players is the operator of the onexch platform at onexch.club, operating under an internationally recognised gaming licence (the "Operator," "we," "us," or "our").

1.2 As data controller, the Operator determines the purposes for which and the means by which personal data is processed. All data processing activities described in this Privacy Policy are carried out by the Operator or by vetted third-party processors acting on the Operator's documented instructions.

1.3 If you have any questions or concerns about how your personal data is being handled, you may contact us at any time. Our contact details are provided in Section 15 of this Policy.

2.1 onexch collects the following categories of personal data from players and prospective players:

2.2 onexch does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than document photographs required for CNIC verification), or health data — except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request.

3.1 Directly From You. The majority of personal data we hold is provided directly by you when you: register an onexch account; complete KYC verification; make a deposit or request a withdrawal; contact our support team; participate in a promotion; or set responsible gaming limits from your account dashboard.

3.2 Automatically. When you access the onexch platform, our servers and analytics tools automatically collect Technical Data and Usage Data. This includes your IP address, device identifiers, browser characteristics, and detailed records of your navigation and gameplay activity. This data is collected using cookies and similar tracking technologies — see Section 8 for full details.

3.3 From Third Parties. In certain circumstances, onexch receives personal data from third-party sources, including:

• Identity verification service providers who cross-check CNIC information against official databases.
• Payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK) who confirm transaction status and account ownership.
• Fraud prevention and anti-money laundering (AML) screening services that flag high-risk accounts or suspicious transaction patterns.
• Responsible gaming databases that record player self-exclusion registrations across licensed operators.

3.4 From Publicly Available Sources. onexch may, on occasion, verify information you have provided against publicly available data sources, including public records and sanctions lists maintained by relevant financial intelligence authorities.

4.1 onexch processes your personal data only where we have a valid legal basis for doing so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each purpose:

5.1 We Do Not Sell Your Data. onexch does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Full stop.

5.2 Service Providers. We share personal data with carefully selected third-party service providers who process data on our behalf and under our documented instructions. These include:

• KYC & Identity Verification Providers: To verify CNIC documents and confirm player identity as required by our gaming licence.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and debit card processors — solely to facilitate PKR transactions.
• Fraud & AML Screening Services: To detect suspicious transaction patterns and comply with anti-money laundering obligations.
• Cloud Infrastructure Providers: For secure hosting, data storage, and platform availability.
• Customer Support Platforms: To manage live chat and email support interactions with players in English and Urdu.
• Game Studio Partners: Live dealer game and slot providers receive limited technical session data necessary to deliver games to your device.
• Analytics Providers: Aggregated, pseudonymised usage data is shared with analytics partners to help us improve the onexch platform experience.

5.3 Regulatory & Legal Disclosure. onexch may disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts where we are legally required to do so — for example, in connection with AML reporting obligations or pursuant to a valid court order.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of the onexch business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given an opportunity to close your account if you do not consent to the transfer.

5.5 All third-party processors are bound by data processing agreements that require them to implement appropriate technical and organisational security measures and to process your data only as instructed by onexch.

6.1 onexch retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required by law or regulation.

6.2 Active Accounts. While your onexch account remains active, we retain all account data, transaction records, and KYC documentation necessary to manage your account and comply with our ongoing regulatory obligations.

6.3 Closed Accounts. Upon account closure, onexch retains your data for a minimum period of five years from the date of closure. This retention is necessary to meet our obligations under anti-money laundering legislation, gaming licence conditions, and applicable financial record-keeping requirements.

6.4 Self-Excluded Accounts. Where an account is closed under the responsible gaming self-exclusion programme, we retain sufficient data to enforce the exclusion period and prevent re-registration during that period.

6.5 Marketing Data. Where you have consented to receive marketing communications, we retain your marketing preferences until you withdraw consent. Withdrawal of marketing consent does not affect other data we hold for contractual or legal purposes.

6.6 At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual player.

7.1 onexch takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure.

7.2 Technical Measures include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and onexch servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Multi-factor authentication options for player accounts.
• Network firewalls, intrusion detection systems, and continuous security monitoring.
• Regular third-party penetration testing and vulnerability assessments of the onexch platform.

7.3 Organisational Measures include:

• Access controls ensuring that only authorised personnel can access player data, on a strict need-to-know basis.
• Staff training on data protection obligations and secure handling of personal information.
• Data processing agreements with all third-party service providers.
• Documented incident response procedures for managing data breaches.

7.4 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, onexch will notify you without undue delay and will report the breach to the relevant supervisory authority as required under applicable law.

8.1 onexch uses cookies and similar technologies (such as pixels and local storage) to operate the platform, improve your experience, and — where you have consented — to deliver relevant promotional content. A cookie is a small text file placed on your device when you visit our website.

8.2 We use the following categories of cookies:

8.3 Cookie Control. You can manage your cookie preferences through the onexch cookie consent banner displayed on your first visit. You may also control cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the onexch platform and may prevent you from accessing your account.

8.4 onexch does not use cookies to collect sensitive personal data such as health information, political opinions, or religious beliefs.

9.1 onexch operates under an internationally recognised gaming licence and uses cloud infrastructure and service providers that may be located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

9.2 Where personal data is transferred internationally, onexch ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under applicable data protection law. These safeguards include contractual clauses in our data processing agreements with international service providers.

9.3 By using the onexch platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred, stored, and processed internationally in connection with the provision of our services.

10.1 As an onexch player, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data onexch holds about you, free of charge, within 30 days of your request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain information directly from your account settings panel.
• Right to Erasure: You may request that onexch delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations described in Section 6.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a dispute about data accuracy.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another provider.
• Right to Object: You may object at any time to the processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10.2 How to Exercise Your Rights. To exercise any of the rights listed above, please contact onexch support. We will acknowledge your request within 48 hours and provide a substantive response within 30 days. We may need to verify your identity before processing your request.

11.1 21+ onexch is strictly an adult platform. Persons under the age of 21 are prohibited from registering an account, placing bets, or accessing any real-money gaming feature on the onexch platform.

11.2 onexch does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the KYC process using CNIC documentation, which confirms date of birth. Any account found to belong to a person under the age of 21 will be immediately suspended, all balances forfeited, and all associated data permanently deleted.

11.3 If you are a parent or guardian and believe that a person under the age of 21 has registered an onexch account using false information, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act on any such report without delay.

12.1 With your consent, onexch may send you promotional communications about new games, PSL cricket betting markets, casino bonuses, deposit offers, and other platform news. These communications may be delivered by email or SMS to your registered contact details.

12.2 Opting Out. You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email, updating your communication preferences from within your account settings, or contacting onexch support directly.

12.3 Opting out of marketing communications will not affect transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, and responsible gaming notifications.

12.4 onexch does not share your contact details with third parties for their own direct marketing purposes.

13.1 The onexch platform integrates third-party game studio content and payment service providers. When you play a live dealer game powered by an independent studio, limited technical session data is exchanged with that studio's servers in order to stream the game to your device. This data exchange is governed by contractual terms between onexch and its game studio partners.

13.2 onexch is not responsible for the privacy practices of independent game studios, payment processors, or any other third-party service. We encourage you to review the privacy policies of any third-party service you interact with directly.

13.3 The onexch website does not currently contain links to external third-party websites for general browsing purposes. If any such links are added in future, they will be clearly identified and this Policy will be updated accordingly.

14.1 onexch reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via the platform or by email to your registered address at least 14 days before the changes take effect.

14.2 The "Last Reviewed" date at the top of this Policy will be updated whenever changes are made. We encourage you to review this Policy periodically to stay informed about how we protect your data.

14.3 Your continued use of the onexch platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the platform and request account closure.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or to the personal data onexch holds about you, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week
• Languages: English and Urdu
• Response Time: Acknowledgement within 48 hours; substantive response within 30 days

15.2 If you are not satisfied with how onexch has handled your personal data or responded to a data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction under which onexch holds its gaming licence. Details of the applicable supervisory authority are available from our support team on request.

15.3 We take all privacy complaints seriously and will make every effort to resolve your concern fairly and promptly. We encourage players to contact us directly in the first instance before escalating a complaint to a supervisory authority.