0n4t Privacy
Policy

This Privacy Policy ("Policy") is issued by 0n4t ("the Platform", "we", "us", "our") and governs all personal data collected from individuals ("you", "your", "User") who access or use the 0n4t website, mobile-optimised platform, and any associated services, including sports betting, cricket wagering, PSL markets, online casino games, live dealer tables, slots, and payment services.

This Policy applies regardless of the device or network you use to access 0n4t, whether via a desktop browser in Karachi, a mobile connection in Lahore, or any other Pakistani city. It covers data collected during registration, during active gameplay, during financial transactions, and during any interaction with the 0n 4t support team.

This Policy should be read alongside the 0n4t Terms & Conditions, which govern the overall contractual relationship between you and the platform, and the Responsible Gaming policy, which covers your rights in relation to self-exclusion and gaming behaviour data.

0n4t collects only the personal data necessary to provide its services securely and in compliance with applicable regulations. The categories of data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, or biometric data, except where identity verification technology requires a facial comparison against a submitted document photograph, in which case you will be explicitly informed and asked to consent at the time of that verification step.

0n4t collects personal data through the following mechanisms:

• Direct Submission: Data you provide during account registration, identity verification (KYC), deposit and withdrawal requests, support ticket submissions, and responsible gaming tool activations.
• Automated Technologies: Cookies, session tokens, server logs, and analytics scripts collect technical and usage data automatically as you navigate the platform.
• Payment Processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, our payment processing partners share transaction confirmation data with 0n4t necessary to credit your account and comply with AML obligations.
• Third-Party Verification Services: Where identity verification is conducted via a third-party KYC provider, that provider shares the outcome of the verification check with 0n4t. The raw document images are handled per that provider's own data processing terms, which are disclosed at the time of verification.
• Fraud and Security Systems: Risk management tools may collect device fingerprinting data and cross-reference it against known fraud databases to protect the platform and its users.

0n4t processes personal data for the following clearly defined purposes:

• Account Management: Creating, maintaining, and securing your 0n4t account, including password resets and session management.
• Service Delivery: Processing bets, settling winnings, operating casino games, and maintaining your PKR wallet balance.
• Identity Verification & KYC: Confirming that you are who you say you are, that you are 21 or older, and that your payment methods are registered in your own name — all as required under our international gaming licence obligations.
• Payment Processing: Executing deposits and withdrawals via your chosen Pakistani payment method accurately and securely.
• Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns for suspicious activity and reporting to relevant authorities where legally required.
• Responsible Gaming: Storing your deposit limit, session limit, self-exclusion, and cooling-off preferences so they are enforced consistently across all your sessions.
• Customer Support: Responding to your queries, resolving disputes, and maintaining support records.
• Platform Security: Detecting and preventing fraud, collusion, account takeover attempts, and bot activity.
• Marketing Communications: Sending you information about promotions, PSL seasonal offers, and platform updates — but only where you have given explicit consent, and only via email or in-platform notifications.
• Legal Obligations: Complying with applicable laws, regulatory requirements, court orders, and gaming licence conditions.

0n4t processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and 0n4t — including account creation, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with our international gaming licence conditions, AML regulations, and applicable law — including identity verification and transaction monitoring.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications, where you have provided a freely given, specific, and informed opt-in. You may withdraw this consent at any time from your account settings.

0n4t shares personal data only where strictly necessary and only with the following categories of recipient:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners receive transaction data necessary to execute your requested deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services receive document images and personal details for the purposes of age and identity confirmation.
• Fraud & Risk Management Platforms: Transaction and behavioural data may be shared with risk assessment partners for the purpose of fraud detection and prevention.
• Regulatory and Law Enforcement Authorities: Where required by our gaming licence, applicable law, or a valid court order, 0n4t will disclose personal data to relevant governmental or regulatory bodies.
• Technical Infrastructure Providers: Hosting, cloud storage, and platform infrastructure providers process data on our behalf under strict data processing agreements that prohibit independent use of your data.

All third parties with whom 0n4t shares personal data are contractually obligated to maintain appropriate technical and organisational security measures and to process your data only for the specified purpose for which it was disclosed.

0n4t retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations. The following retention periods apply as a general guide:

Where data is retained solely to comply with a legal obligation, access to that data within 0n4t is restricted to personnel whose role requires it. Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised.

0n4t implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• Transport Layer Security (TLS): All data transmitted between your device and the 0n4t platform is encrypted in transit using industry-standard TLS protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored on 0n4t infrastructure is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data within 0n4t is restricted on a strict need-to-know basis. All staff access is logged and audited.
• Two-Factor Authentication: Users are encouraged to enable two-factor authentication (2FA) on their 0n4t accounts as an additional layer of protection.
• Penetration Testing: 0n4t's platform undergoes regular independent security assessments to identify and remediate vulnerabilities.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights, 0n4t will notify affected users without undue delay.

0n4t uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to understand how users interact with the site. The types of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about how users navigate the platform, which pages are most visited, and where users encounter difficulties. Used to improve the platform experience.
• Fraud Prevention Cookies: Used to detect suspicious login patterns, bot activity, and potential account takeover attempts.

You can manage non-essential cookie preferences through your browser settings. Note that disabling functional or analytics cookies may affect your platform experience. Strictly necessary cookies cannot be disabled as they are essential for the platform to operate securely.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by 0n4t:

To exercise any of these rights, contact the 0n4t privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days. Note that some requests — particularly erasure requests — may be limited where retention is required by our gaming licence or AML obligations.

The 0n4t platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under this age. If we discover or are notified that an account has been registered by a person under 21, we will immediately suspend that account, initiate an investigation, and permanently close the account upon confirmation.

Any data collected from an underage user will be deleted as promptly as practicable, except where retention is required by law for the purposes of reporting the incident to regulatory authorities. Winnings accrued during any period of underage use will be forfeited.

Parents and guardians who believe their child may have accessed 0n4t are encouraged to contact our support team immediately at [email protected]. We also recommend use of third-party parental control software to restrict access to online gambling platforms on shared or family devices.

As 0n4t operates under an international gaming licence and uses globally distributed infrastructure, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, 0n4t ensures that appropriate safeguards are in place, including contractual obligations on data processors that reflect recognised data protection standards.

All third-party service providers engaged by 0n4t — including payment processors, KYC providers, and cloud infrastructure partners — are contractually required to maintain data protection standards at least equivalent to those described in this Policy, regardless of the jurisdiction in which they operate.

0n4t reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Where changes are material — for example, where we introduce a new purpose for processing your data or share your data with a new category of third party — we will notify you via your registered email address or via an in-platform notification before the change takes effect. Your continued use of the 0n4t platform following any amendment constitutes acceptance of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how 0n4t has handled your personal data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Policy" or "Privacy Rights Request" in the subject line.
• Live Chat: Available 24 hours a day, 7 days a week from inside your 0n4t account dashboard.
• Response Time: Privacy-related requests will be acknowledged within 5 business days and fully resolved within 30 calendar days.

If you are not satisfied with our handling of your complaint, you have the right to escalate the matter to the data protection supervisory authority relevant to our licensing jurisdiction. Details of the applicable authority will be provided upon request.