1. Introduction
Welcome to the Onexch Privacy Policy. This document explains how Onexch — the online betting exchange and casino platform available at onexch.ws — collects, uses, stores, shares and protects the personal data of its registered players and website visitors.
Onexch is committed to handling your personal data responsibly and transparently. This policy has been written in plain, readable language so that every Pakistani player can understand exactly what happens with their information from the moment they visit our site to long after they have placed their first bet.
This Privacy Policy applies to all services offered through the Onexch platform, including sports betting, live casino games, poker, slots, esports markets and all associated account management functions. It should be read alongside the Terms and Conditions and the Responsible Gaming Policy, both of which are published on this website.
By registering an account on Onexch or by continuing to use the platform after this policy has been published, you acknowledge that you have read and understood how your data is handled. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to request account closure.
2. Data We Collect
Onexch collects only the personal data that is necessary to provide a safe, secure and functional betting and gaming service to Pakistani players. Below is a clear breakdown of the categories of data we may collect and the circumstances in which each category arises.
2.1 Registration Data
When you create an Onexch account, we collect the information you provide directly, which typically includes your full name, date of birth, mobile phone number, email address (where provided) and your preferred payment method details.
2.2 Identity Verification Data
As part of our KYC (Know Your Customer) process — which exists to protect players, prevent fraud and comply with anti-money laundering requirements — Onexch may request copies of identity documents. These may include your CNIC (Computerised National Identity Card), passport, driving licence or other government-issued photo ID, together with proof of address documents such as utility bills or bank statements.
2.3 Financial Transaction Data
We record details of all deposits and withdrawals processed through your Onexch account. This includes transaction amounts, timestamps, payment method identifiers (such as the last four digits of a card or a mobile wallet reference) and transaction outcomes. Full payment card numbers are never stored directly by Onexch — this data is handled by our certified payment processing partners.
2.4 Betting and Gaming Activity Data
We maintain records of all betting and gaming activity carried out through your Onexch account, including markets and games accessed, bet amounts, wager outcomes, bonus usage and session timestamps. This data is used for account management, dispute resolution and responsible gaming monitoring.
2.5 Technical and Device Data
When you access the Onexch platform, our servers automatically collect certain technical information. This includes your IP address, device type and operating system, browser type and version, pages visited, session duration and referring URL. This data is used for security purposes, fraud detection and platform performance optimisation.
3. How We Use Your Data
Onexch uses the personal data described above for the following specific purposes. We do not use your data for any purpose that is incompatible with these stated uses without obtaining your additional consent.
- Account creation and management: To register and maintain your Onexch player account, authenticate your identity at login and manage your preferences and settings.
- Payment processing: To process deposits from and withdrawals to your nominated PKR payment methods, including verification steps to confirm you are the authorised account holder.
- Identity verification (KYC/AML): To verify that you are who you say you are, that you meet the 18+ age requirement, and to fulfil our obligations under applicable anti-money laundering standards.
- Platform delivery and personalisation: To provide the betting, gaming and support services you access through Onexch, and to personalise your experience based on your preferences and activity history where you have consented to this.
- Customer support: To respond to queries, resolve disputes, investigate complaints and provide technical assistance when you contact the Onexch support team.
- Responsible gaming monitoring: To identify patterns that may indicate problem gambling behaviour, to enforce player-set limits and restrictions, and to ensure self-exclusion requests are honoured across all platform touchpoints.
- Security and fraud prevention: To detect, investigate and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering and any other activity that may harm the platform or other players.
- Legal and regulatory compliance: To retain records as required by applicable law, to respond to regulatory enquiries and to enforce our Terms and Conditions.
- Marketing communications: To send you promotional offers, bonus notifications and platform updates by SMS or email — but only where you have explicitly opted in to receive such communications. You can opt out at any time.
4. Legal Basis for Processing
Onexch processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity in question:
- Contractual necessity: Processing that is required to fulfil our obligations to you as a registered Onexch player — such as operating your account, processing your transactions and delivering the betting and gaming services you have signed up for.
- Legal obligation: Processing required to comply with applicable law, including KYC identity verification, anti-money laundering record-keeping and cooperation with regulatory or law enforcement authorities when legally required.
- Legitimate interests: Processing that serves Onexch's legitimate business interests — such as fraud detection, platform security and improving our services — where those interests are not overridden by your privacy rights.
- Consent: Processing activities where we have specifically asked for and received your consent, primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.
5. Data Sharing and Third Parties
Onexch does not sell, rent or commercially share your personal data with third parties. We share data only in the following limited and specific circumstances:
- Payment processors: When you make a deposit or request a withdrawal, your transaction details are shared with the relevant payment processor (such as Easypaisa, JazzCash or a card network) to the minimum extent necessary to complete the transaction.
- KYC and identity verification providers: When you submit verification documents, those documents may be processed by certified third-party identity verification services operating under strict data processing agreements with Onexch.
- Game and software providers: For live casino and third-party game products available through Onexch, certain game-play data may be shared with the game provider to facilitate the delivery of those services. Game providers are contractually obligated not to use this data for independent marketing purposes.
- Legal and regulatory authorities: Where Onexch is required by law, court order or regulatory directive to disclose player data, we will comply with such requirements after taking any legally permissible steps to notify the affected player.
- Business transfers: In the event of a merger, acquisition or sale of Onexch or its business assets, player data may be transferred as part of that transaction. You will be notified of any such transfer before your data becomes subject to a different privacy policy.
No data sales, ever. Onexch will never sell your personal data to data brokers, advertisers or any other commercial entity for their own marketing use. This is a firm commitment, not a qualified promise.
6. Cookies and Tracking Technologies
The Onexch platform uses cookies and similar tracking technologies to deliver a functional, secure and personalised experience. Here is a clear explanation of what we use and why:
6.1 Essential Cookies
These cookies are strictly necessary for the Onexch platform to function. They enable your login session to persist, keep your bet slip intact between pages and ensure that security features such as fraud detection operate correctly. You cannot opt out of essential cookies without also opting out of the platform entirely.
6.2 Analytics Cookies
Onexch uses analytics tools to understand how players use the platform — which features are most popular, where navigation issues occur and how overall platform performance can be improved. Analytics data is aggregated and anonymised wherever possible. You may opt out of analytics cookies through your browser settings or the cookie preference manager available on the platform.
6.3 Preference Cookies
These cookies remember your personal preferences — such as your chosen language, preferred stake amounts and interface settings — so that you do not need to re-configure them each time you log in to Onexch.
6.4 Marketing Cookies
Where you have consented to receive personalised marketing, Onexch may use cookies to track which promotions you have viewed or engaged with, in order to show you relevant offers rather than generic ones. You can withdraw consent for marketing cookies at any time.
Most browsers allow you to view, manage and delete cookies through their settings menus. However, disabling essential cookies will affect the functionality of the Onexch platform. For detailed guidance on managing cookies in your browser, consult your browser's official help documentation.
7. Data Retention
Onexch retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
- Active account data: Retained for the full duration of your Onexch account and for a period of at least five years after account closure, in accordance with standard anti-money laundering record-keeping requirements.
- KYC and identity documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later. These retention periods reflect regulatory requirements applicable to platforms offering financial services.
- Transaction records: All deposit and withdrawal records are retained for a minimum of seven years from the date of each transaction.
- Support communications: Records of customer support interactions are retained for two years from the date of the most recent communication in a given thread, unless a longer period is required for ongoing dispute resolution.
- Marketing preferences: Your opt-in or opt-out records are retained indefinitely to demonstrate compliance with marketing consent requirements, even if the underlying contact data has been deleted.
When personal data is no longer required and no legal obligation requires its continued retention, Onexch will securely delete or anonymise it. Anonymised data — which cannot be traced back to an individual — may be retained indefinitely for analytical purposes.
8. Your Data Rights
As a registered Onexch player, you have the following rights in relation to your personal data. These rights are genuine and Onexch is committed to honoring them promptly and without unnecessary friction.
Request a copy of the personal data Onexch holds about you. We will provide this within 30 days in a clear, readable format.
If any of your personal data held by Onexch is inaccurate or out of date, you have the right to have it corrected. Contact support to request corrections.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected and no legal obligation requires its retention.
Ask Onexch to pause processing of your data while a dispute is resolved or while you exercise another data right.
Request your personal data in a machine-readable, portable format so you can transfer it to another service provider if you choose to do so.
Object to processing carried out on the basis of legitimate interests, including profiling for personalised marketing, at any time.
To exercise any of the above rights, contact the Onexch data team at support@onexch.ws with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and fulfill it within 30 calendar days. In complex cases we may require up to 90 days, in which case we will notify you of the extension within the initial 30-day period.
9. Security Measures
Protecting your personal and financial data is one of Onexch's highest priorities. We implement multiple layers of technical and organisational security to safeguard the information we hold about you.
- Transport Layer Security (TLS): All data exchanged between your device and Onexch servers is encrypted in transit using TLS 1.2 or higher. Look for the padlock icon in your browser's address bar when using the platform.
- Encrypted data storage: Sensitive personal data including identity documents and financial records is stored in encrypted form in our databases. Even in the unlikely event of a database breach, this data would not be readable without the encryption keys.
- Two-factor authentication (2FA): Onexch offers optional two-factor authentication for player accounts. We strongly encourage all players to activate this feature for an additional layer of protection against unauthorised access.
- Access controls: Access to player data within the Onexch organisation is restricted on a strict need-to-know basis. Staff members can only access the minimum amount of data required to perform their specific job functions.
- Regular security audits: The Onexch technical infrastructure undergoes regular security testing, including penetration testing and vulnerability assessments, carried out by qualified independent security professionals.
- Incident response: Onexch maintains a documented data breach response plan. In the event of a security incident that affects your personal data, we will notify you as required by applicable law and take immediate steps to contain the breach and prevent recurrence.
Your role in security: While Onexch takes extensive measures to protect your data, you also play an important role. Please use a strong, unique password for your Onexch account, never share your login credentials with anyone, and contact support immediately if you suspect unauthorised access to your account.
10. Children's Privacy
Onexch is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. Registration is prohibited for minors and we take active steps to enforce this, including age verification checks during the KYC process.
If Onexch becomes aware that a player is under 18 years of age, their account will be immediately suspended, all pending bets will be voided and any deposited funds will be returned to the original payment method after verification that the refund can be processed safely. Marketing materials are never directed at under-18 audiences.
If you are a parent or guardian and believe that your child may have created an account on Onexch, please contact us immediately at support@onexch.ws so we can investigate and take prompt action.
11. Marketing Communications
Onexch sends marketing communications — including promotional bonus offers, game announcements and special event notifications — only to players who have explicitly opted in to receive them. This opt-in is typically captured during the registration process and can be changed at any time through your account settings or by contacting support.
If you have opted in to marketing, you may receive communications via SMS and/or email, depending on the contact details you have provided. Every marketing message sent by Onexch includes a clear and functional unsubscribe mechanism. Clicking unsubscribe will remove you from all marketing lists within 48 hours.
Opting out of marketing will never affect your ability to use the Onexch platform or to receive transactional and account communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications and security alerts.
Onexch will never send unsolicited marketing messages to individuals who have not opted in. If you receive a message claiming to be from Onexch that you did not sign up for, please report it to us immediately at support@onexch.ws.
12. Cross-Border Data Transfers
Some of the third-party service providers used by Onexch — such as cloud infrastructure providers, KYC verification services and game software partners — may process personal data in countries outside Pakistan. Where such transfers occur, Onexch takes appropriate steps to ensure that your data receives an adequate level of protection in the recipient country.
Transfers to third parties are governed by data processing agreements that require the recipient to implement security standards equivalent to those described in this policy. Onexch does not transfer personal data to jurisdictions that do not provide adequate data protection safeguards without additional contractual protections in place.
13. Updates to This Privacy Policy
Onexch may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or the structure of the platform. When we make material changes, we will notify registered players via the email address or mobile number associated with their account and will update the "Last Updated" date at the top of this page.
We encourage you to review this policy periodically so you are always aware of how your data is being handled. The version of this policy that was in effect at the time your data was collected governs the processing of that data unless you have consented to an updated version.
If you disagree with a material change to this policy, you have the right to request account closure and deletion of your personal data (subject to any legally mandated retention periods) by contacting support@onexch.ws.
14. Contact and Complaints
If you have any questions, concerns or complaints about how Onexch handles your personal data, please get in touch. Our support team is available 24 hours a day, seven days a week.
- Email (general support): support@onexch.ws
- Email (data rights requests): support@onexch.ws — subject line: "Data Rights Request"
- Live Chat: Available within your logged-in Onexch account, 24/7
- Platform: onexch.ws
We aim to respond to all privacy-related queries within 72 hours and to fully resolve data rights requests within 30 calendar days. If you are not satisfied with our response, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.
For responsible gaming concerns — including self-exclusion requests and gambling behaviour support — please visit our dedicated Responsible Gaming page, which contains additional contact options and resources specific to that topic.