onexh Privacy Policy

01 Who We Are

onexh operates Pakistan's premier online cricket betting and casino platform, accessible at onexh.net. The platform provides sports betting markets — with a primary focus on cricket and PSL — alongside a full live casino suite, slot games, Super Bingo rooms, and Color Prediction rounds, all denominated in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, "onexh", "we", "us", and "our" refer to the operator of the onexh platform. onexh acts as the data controller in respect of the personal data of registered players and platform visitors described in this policy — meaning we determine the purposes and means by which your personal data is processed.

onexh operates under an international gaming license. Our data processing practices are shaped by the requirements of that licensing framework, applicable anti-money laundering regulations, and international data protection best practices. While Pakistan does not currently have a comprehensive data protection statute equivalent to the GDPR, onexh voluntarily applies rigorous data protection standards that align with internationally recognised principles.

02 Data We Collect

onexh collects personal data through several channels: directly from you when you register, deposit, or contact support; automatically through platform usage; and from third-party identity verification providers during KYC processing. The categories of personal data we collect are as follows:

onexh does not collect special categories of sensitive personal data — such as biometric data for identification, health data, religious beliefs, or political opinions — except where identity document verification incidentally involves such data as part of a standard government-issued ID document. In such cases, we process only the minimum data required to verify your identity and age.

03 How We Use Your Data

onexh processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or updating this policy.

• Account Creation & Management: To register your player account, authenticate your identity at login, manage your account settings, and maintain your player profile throughout your relationship with onexh.
• Age & Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required under our international gaming license and AML obligations. KYC is mandatory and non-negotiable.
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate financial records of all account activity.
• Game & Betting Services: To operate cricket betting markets, casino games, slots, Super Bingo, and Color Prediction rounds; to settle bets accurately; and to apply wagering limits and rules correctly to your account.
• Fraud Detection & Security: To identify and prevent fraudulent activity, multi-accounting, bonus abuse, match-fixing exploitation, and unauthorized account access through automated and manual monitoring systems.
• AML Compliance: To monitor transactions for patterns associated with money laundering, to conduct enhanced due diligence where required, and to meet our reporting obligations under applicable financial crime regulations.
• Responsible Gaming: To monitor player activity for signs of problem gambling, to enforce self-imposed limits and exclusions, and to proactively reach out to players whose behavioural patterns may indicate harm.
• Customer Support: To respond to your queries, complaints, and requests through live chat and email, and to maintain a record of your support history for quality and compliance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve game offerings, platform performance, and user experience. This analytics activity does not involve decisions made about you individually.
• Legal & Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, financial intelligence units, and law enforcement agencies, and to defend or pursue legal claims where necessary.

04 Legal Bases for Processing

onexh processes your personal data under the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and onexh — i.e., to operate your account, process bets, handle deposits and withdrawals, and provide gaming services.
• Legal Obligation: Processing required to comply with our obligations under our international gaming license, AML regulations, KYC requirements, and any applicable financial reporting duties.
• Legitimate Interests: Processing necessary for onexh's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics — where these interests are not overridden by your rights and interests.
• Consent: Where onexh relies on your consent for specific processing activities — such as receiving promotional communications — you have the right to withdraw that consent at any time by contacting support or updating your communication preferences in account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

05 Cookies & Tracking Technologies

onexh uses cookies and similar tracking technologies on the platform to support essential functionality, security, and analytics. Cookies are small data files placed on your device when you visit the platform. They allow us to recognise your browser across sessions, maintain your login state, and understand how the platform is being used.

The categories of cookies used by onexh are as follows:

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your account security state, and support core platform operations. These cookies cannot be disabled without breaking fundamental platform functionality.
• Functional Cookies: These remember your preferences — such as language settings, display preferences, and responsible gaming settings — so that you do not have to re-enter them each session.
• Analytics Cookies: These help onexh understand how players navigate the platform in aggregate — which game categories are most popular, where players encounter friction, and how long sessions last on average. Data collected through analytics cookies is aggregated and anonymised.
• Security Cookies: These support fraud detection and bot prevention systems by identifying unusual navigation patterns or device characteristics that are inconsistent with legitimate human use.

onexh does not use third-party advertising or retargeting cookies. We do not allow external ad networks to place tracking cookies on the platform. Your browsing activity on onexh is not used to serve you targeted advertising elsewhere on the internet.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the platform. For browsers commonly used in Pakistan — Chrome, Firefox, Samsung Internet — cookie management options are accessible via the browser's privacy or settings menu.

06 Sharing Your Data

onexh does not sell, rent, or trade your personal data. We share personal data only where it is necessary to operate the platform, comply with our legal obligations, or protect the interests of players and the platform. The categories of recipients with whom onexh may share your data are:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 gateway operators receive the minimum financial data required to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and data security standards.
• KYC & Identity Verification Providers: Licensed third-party identity verification services that process your CNIC, passport, proof of address, and selfie data to complete age and identity verification on our behalf. These providers are contractually bound to process data only for the purpose of verification and to apply appropriate security measures.
• Game Content Providers: Where third-party casino game and slot providers supply game content via integration with the onexh platform, limited technical data (such as player session tokens, bet amounts, and game outcomes) may be shared with those providers for game operation and dispute resolution purposes.
• Regulatory Authorities & Licensing Bodies: onexh provides player data to its licensing authority and relevant regulatory bodies as required under its gaming license conditions. This includes periodic reporting and responses to specific regulatory inquiries.
• Financial Intelligence Units & Law Enforcement: Where onexh has a legal obligation to report suspicious transactions or respond to a lawful law enforcement request, relevant data will be disclosed in accordance with applicable law. onexh will notify affected players of such disclosures only where it is legally permitted to do so.
• Fraud Prevention Networks: Aggregated, anonymised fraud signals may be shared with cross-platform fraud prevention networks to protect the broader online gaming ecosystem from organised fraud and multi-accounting schemes.
• Professional Advisers: Legal, compliance, and financial advisers engaged by onexh may access personal data on a strictly need-to-know basis under professional confidentiality obligations.

07 International Data Transfers

onexh operates under an international gaming license and may engage service providers — including KYC verification platforms, game content providers, and infrastructure services — whose servers are located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where such international transfers occur, onexh ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this policy. These safeguards include:

• Contractual data processing agreements with all third-party processors that impose binding data protection obligations.
• Preference for processors located in jurisdictions with recognised data protection frameworks.
• Encryption of data in transit and at rest regardless of processing location.
• Regular vendor assessments to confirm continued compliance with agreed security and privacy standards.

Players who have concerns about international data transfers or who wish to understand which specific countries their data may be transferred to may submit a query to the support team. We will provide a substantive response within 14 business days.

08 Data Retention

onexh retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply by data category:

On expiry of the applicable retention period, onexh will securely delete or anonymise the relevant data. Anonymised data — from which all identifying characteristics have been irreversibly removed — may be retained indefinitely for aggregate analytics purposes without limitation, as it no longer constitutes personal data.

09 Security Measures

onexh implements a multi-layered security programme to protect your personal and financial data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• TLS Encryption in Transit: All data transmitted between your device and onexh servers is encrypted using TLS 1.2 or higher, preventing interception during transmission.
• Encryption at Rest: Sensitive data — including KYC documents, financial account details, and identity data — is encrypted at the storage layer using AES-256 encryption.
• Access Controls: Access to personal data within onexh's systems is restricted on a strict need-to-know basis. Staff roles are granted the minimum permissions required for their function, and all access is logged and auditable.
• Multi-Factor Authentication: Internal systems containing player data are protected by multi-factor authentication for all staff access. Players are also strongly encouraged to enable two-factor authentication on their onexh accounts.
• Intrusion Detection & Monitoring: onexh operates continuous network monitoring and intrusion detection systems. Anomalous activity triggers automated alerts and incident response procedures.
• Penetration Testing: The platform undergoes periodic security assessments, including penetration testing by independent security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All onexh staff with access to personal data undergo mandatory data protection and information security training as part of their onboarding and on an annual basis thereafter.

While onexh applies robust security measures, no online platform can guarantee absolute security against all threats. You also have a responsibility to protect your own account by using a strong, unique password, enabling two-factor authentication, and not sharing your credentials with anyone.

10 Your Rights

As a player whose personal data is processed by onexh, you hold the following rights in relation to that data. onexh is committed to honouring these rights promptly and without obstruction:

• Right of Access: You have the right to request confirmation of whether onexh holds personal data about you, and to receive a copy of that data together with information about how it is processed. We will provide this within 30 days of a valid request.
• Right to Rectification: If any personal data onexh holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating your address or mobile number — can often be made directly in account settings.
• Right to Erasure: In certain circumstances, you may request that onexh delete your personal data. This right is not absolute — we are required to retain certain data under our gaming license and AML obligations (see Section 8). Where erasure is not possible due to legal retention requirements, we will inform you of this and explain the basis for retention.
• Right to Restriction: You may request that onexh restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or where you have objected to processing and we are considering your objection.
• Right to Data Portability: You have the right to request a copy of personal data you have provided to onexh in a structured, commonly used, machine-readable format, for the purpose of transferring it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data conducted on the basis of legitimate interests. We will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before your withdrawal.

To exercise any of the above rights, please contact the onexh support team by email. Your request will be acknowledged within 48 hours and actioned within 30 days. Complex requests may require an extension of up to a further 60 days, in which case you will be informed of the extension and the reason for it.

11 Children & Minors

The onexh platform is strictly for adults aged 21 years and over. onexh does not knowingly collect personal data from individuals under the age of 21, and does not permit individuals under 21 to register accounts or participate in any gaming or betting activity on the platform.

If you are a parent or guardian and believe your child has registered on the onexh platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay. Please also consider using parental control software to prevent underage access to online gaming platforms — resources such as GamBlock and Betfilter are available for this purpose.

12 Third-Party Services

The onexh platform may contain links to or integrations with third-party services — including payment processors, game providers, and identity verification platforms — that operate independently of onexh and are governed by their own privacy policies.

onexh is not responsible for the privacy practices of third-party services. When you interact with a third-party payment gateway — for example, completing a JazzCash or EasyPaisa transaction — you are also subject to that provider's terms and privacy policy. We encourage you to review the privacy policies of any third-party services you use in connection with your onexh account.

onexh conducts due diligence on all third-party service providers before integration and requires contractual commitments to data protection standards as a condition of any data processing relationship. However, onexh cannot control how third parties handle data that passes through their own independent systems in the course of providing their services.

13 Policy Updates

onexh reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, product offerings, or applicable law. When updates are made, the revised policy will be published on this page with an updated effective date at the top of the document.

Where changes are material — meaning they significantly affect your rights, the categories of data we collect, or the purposes for which we use your data — onexh will notify registered players by email to their registered address and display a prominent in-platform notice at next login.

Non-material changes — such as clarifications, corrections to typographical errors, or rewording that does not alter substantive meaning — may be made without advance notice. Your continued use of the onexh platform following any update to this policy constitutes your acknowledgement of the revised terms.

We recommend bookmarking this page and reviewing it periodically. The effective date at the top of this document always reflects when the current version came into force.

14 Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way onexh handles your personal data, please contact us through the following channels:

• Email: [email protected] — response within 4 hours for general queries; data rights requests acknowledged within 48 hours and actioned within 30 days
• Live Chat: Available 24 hours a day, 7 days a week, directly on the onexh platform — response under 2 minutes for general support enquiries

Please note that all email addresses on the onexh platform are displayed as plain text and are not clickable links. Copy the address and paste it into your email client to send your message.

For responsible gaming enquiries — including self-exclusion requests, limit adjustments, and access to problem gambling support resources — please visit the Responsible Gaming section of the onexh platform.