onex99 Privacy Policy — Protecting Your Personal Data on Our Platform

onex99 operates an online casino and sports betting platform accessible at onex99.bet, serving players across Pakistan. In the course of operating this platform, we collect and process personal data about our users. This Privacy Policy sets out the legal framework and practical procedures governing that data processing.

We take our data protection obligations seriously — not merely as a legal requirement, but as a fundamental element of the trust that Pakistan-based players place in onex99 when they create an account, deposit PKR, and share personal information with us during the KYC verification process.

This policy is written in plain, natural English so that every onex99 account holder — whether in Karachi, Lahore, Islamabad, Peshawar, or anywhere else across Pakistan — can understand exactly what happens to their personal data and what choices they have.

For the purposes of this Privacy Policy, onex99 — the operator of the onex99.bet platform — acts as the data controller in respect of personal data collected from Pakistan-based players. As the data controller, onex99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have questions about how onex99 handles your personal data, or if you wish to exercise any of the rights described in Section 11 of this policy, you may contact our Data Protection team at the address set out in Section 14.

onex99 collects the following categories of personal data from its users:

onex99 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a PKR deposit or withdrawal request, contact our support team, or submit any form or communication through the onex99 platform.
• Automatically via the platform: When you visit and navigate onex99.bet, our servers automatically record technical data including your IP address, device characteristics, pages visited, time on site, and session activity. This data is collected via server logs, cookies, and similar technologies as described in Section 8.
• From payment processors: When you transact through Easypaisa, JazzCash, Raast, or a Pakistan bank, the payment processor confirms transaction details to onex99 as necessary to complete and reconcile PKR payments.
• From identity verification services: In some cases, onex99 uses third-party identity verification partners to cross-reference KYC documents. These partners operate under strict data processing agreements and may confirm whether the identity information you provided is consistent with official records.
• From fraud prevention services: onex99 may receive risk-related signals from fraud detection services to identify potentially fraudulent account activity or payment irregularities.

onex99 uses the personal data it collects for the following defined purposes:

• Account creation and management: To create your onex99 account, verify your identity, maintain accurate account records, and enable your onex99 login sessions.
• KYC compliance: To verify your age (18+ requirement), identity, and right to use the platform, as required by our responsible gaming obligations and applicable anti-money laundering (AML) regulations.
• Payment processing: To process PKR deposits and withdrawals through your chosen channel (Easypaisa, JazzCash, Raast, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, or crypto).To match incoming and outgoing payments to your onex99 account.
• Platform security: To detect and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct outlined in the onex99 Terms & Conditions.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling, enforce deposit and session limits you have set, and process self-exclusion requests. Your responsible gaming data is used to protect you, not to profile you for commercial purposes.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality and compliance purposes.
• Legal and regulatory compliance: To meet AML, Know Your Customer (KYC), and record-keeping obligations applicable to online gaming operations serving Pakistan-based players.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and the overall onex99 user experience.
• Marketing communications (opt-in only): To send promotional offers, bonus notifications, and new game announcements — but only where you have explicitly opted in. You may withdraw this consent at any time.

onex99 processes personal data under the following legal bases, depending on the purpose:

• Contractual necessity: Processing required to enter into and fulfil the contract between onex99 and you (including account creation, KYC, payment processing, and game settlement).
• Legal obligation: Processing required to comply with applicable laws and regulations (including AML obligations, age verification requirements, and record-keeping mandates).
• Legitimate interests: Processing carried out in pursuit of onex99's legitimate business interests (including fraud prevention, platform security, and aggregated analytics) where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit opt-in consent (including marketing communications). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

onex99 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only under the following defined circumstances, and only to the minimum extent necessary for the specified purpose:

• Payment processors: Easypaisa, JazzCash, Raast, designated Pakistan banks, and USDT blockchain network processors receive the financial data necessary to execute PKR deposits and withdrawals on your behalf. Each processor operates under their own privacy policy and security standards.
• Game providers: Studios including Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming receive the game session data (wager amounts, game identifiers, session timestamps) required to operate fair games and settle wagers. These providers do not receive your full personal identity profile.
• KYC verification services: Third-party identity verification partners receive the documents and data submitted for KYC review, subject to data processing agreements that restrict their use of this data to the verification purpose only.
• Fraud prevention and security services: Risk and fraud prevention partners may receive technical data (IP addresses, device fingerprints, transaction patterns) to help detect and prevent fraudulent activity.
• Regulatory and legal authorities: onex99 will disclose personal data to law enforcement, regulatory bodies, or courts where legally compelled to do so by a valid legal instrument or order. Where permitted, onex99 will notify affected account holders of such disclosures.
• Responsible gaming partners: In cases where a player's self-exclusion or problem gambling support request involves a third-party responsible gaming body, limited data may be shared to facilitate that support, with the player's awareness.

The onex99 platform uses cookies and similar technologies to operate correctly, remember your preferences, maintain session security, and gather anonymised analytics data. Below is a summary of the cookie categories used:

• Essential / Functional cookies: Required for the platform to operate — including maintaining your authenticated login session, remembering your language and currency preferences, and enabling security features like 2FA. These cannot be disabled without impairing platform functionality.
• Security cookies: Used to detect suspicious sessions, prevent cross-site request forgery (CSRF) attacks, and protect your onex99 account from unauthorised access attempts.
• Analytics cookies: Used to collect anonymised, aggregated data about how players navigate and use the onex99 platform — including which games are most popular, where players encounter difficulties, and how performance can be improved. This data does not identify individual users.
• Marketing / preference cookies (opt-in): Where you have opted in, these cookies allow onex99 to personalise promotional content displayed within the platform based on your gaming history and stated preferences. You may withdraw consent for these cookies at any time through your account settings.

You may manage most cookie preferences through your browser settings. Note that disabling essential cookies will affect the onex99 platform's ability to function correctly, including maintaining your login session. For mobile browser users in Pakistan — the primary access method for most onex99 players — cookie management is available through your browser's privacy settings menu.

onex99 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL 256-bit TLS encryption on all data transmitted between your device and the onex99 servers — ensuring your login credentials, PKR transaction details, and KYC documents are never exposed during transmission.
• Encrypted database storage for sensitive personal data fields including CNIC numbers, payment account identifiers, and KYC document images.
• Hashed password storage using industry-standard algorithms — onex99 staff cannot read your account password; only a cryptographic hash is stored and compared at login.
• Role-based access controls ensuring that only authorised personnel — with a documented need — can access personal data, and that all such access is logged with timestamp and user ID for audit purposes.
• Regular security audits of platform infrastructure, including vulnerability assessments and penetration testing, conducted by independent security professionals.
• Incident response procedures defining how onex99 responds to any suspected data breach — including notification timelines and communication to affected account holders.

onex99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any overriding legal or regulatory retention requirements. The following retention guidelines apply:

• Active account data: Retained for the lifetime of your onex99 account and for a period of up to 5 years following account closure, to comply with AML record-keeping obligations and to handle any retrospective legal or regulatory enquiries.
• KYC documents (CNIC, proof of address): Retained for a minimum of 5 years from the date of submission or from account closure (whichever is later), as required by standard AML record-keeping requirements applicable to online gaming operators.
• Financial transaction records: PKR deposit and withdrawal records, including Easypaisa, JazzCash, and bank transfer documentation, are retained for a minimum of 5 years to satisfy financial record-keeping requirements.
• Gaming activity logs: Individual game round records and sports betting histories are retained for a minimum of 2 years for dispute resolution and integrity monitoring purposes.
• Support and communications records: Live chat transcripts and support email records are retained for 2 years from the date of the interaction.
• Marketing consent records: Records of opt-in and opt-out decisions for marketing communications are retained for 3 years from the date of the consent event, as evidence of lawful marketing practices.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so it can no longer be attributed to an identifiable individual.

As an onex99 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request":

• Right of access: You may request a copy of the personal data onex99 holds about you, along with information about how it is processed. We will respond to access requests within 30 days.
• Right to rectification: You may request correction of inaccurate personal data held about you. For identity data that has been verified through KYC, corrections may require re-verification.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request that onex99 delete your personal data. This right is subject to limitations where retention is required by legal or regulatory obligations — for example, AML record-keeping requirements override erasure requests for transaction and KYC data during the applicable retention period.
• Right to restrict processing: You may request that onex99 restrict the processing of your personal data in certain defined circumstances — for example, while a rectification request is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you provided to onex99 for portability to another service provider, where technically feasible.
• Right to object: You may object to processing based on onex99's legitimate interests, including objecting to use of your data for aggregated analytics purposes. You have an absolute right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (including marketing communications and preference cookies), you may withdraw that consent at any time through your account settings or by contacting support.

onex99 enforces age verification through the KYC process — every account holder must submit a valid CNIC, which includes a date of birth. Accounts whose KYC review identifies the holder as under 18 are immediately suspended and referred for further review.

If you believe that a minor may have created an onex99 account using falsified documents, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action, including permanent account closure and return of any deposited PKR funds to the verified legitimate source.

Parents and guardians concerned about a minor's online gaming activities in Pakistan may also benefit from using internet filtering tools available through major Pakistan ISPs and mobile operators (Jazz, Zong, Ufone, Telenor) which allow restriction of access to online gambling platforms at the network level.

onex99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or platform features. When we make material changes — particularly changes that affect how we collect or use personal data — we will notify registered account holders via their registered Pakistan mobile number or email address at least 7 days before the revised policy takes effect.

The current version of the Privacy Policy is always available on this page with its effective date clearly displayed. Minor updates — such as formatting corrections or clarifications that do not change the substantive content — may be made without individual notification but will be reflected on this page with an updated date.

Your continued use of the onex99 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you disagree with any change to the Privacy Policy, you should stop using the platform and request account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights as described in Section 11, or wish to submit a privacy-related complaint, please contact the onex99 Data Protection team:

When submitting a privacy rights request, please include: your registered Pakistan mobile number, the specific right you wish to exercise, and sufficient detail to allow us to identify and locate the relevant personal data. We may ask for identity verification before processing your request to ensure that data is not disclosed to unauthorised parties.

We aim to acknowledge all privacy enquiries within 2 business days and to resolve them fully within 30 days. If you are not satisfied with onex99's response to your privacy complaint, you may escalate the matter to an independent data protection authority or dispute resolution body.

Policy version: 1 January 2026. This Privacy Policy supersedes all prior versions. The English-language version is the authoritative text in the event of any inconsistency with a translated version.