on5t Privacy Policy — Your Data, Your Rights

01Who We Are

on5t is an online casino and sports betting platform operating at on5t.net, serving players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities. The on5t platform provides cricket betting, live dealer casino games, slots, Dragon Tiger, Arcade games, and related entertainment services to eligible adult players aged 21 and above.

For all data protection matters relating to your on5t account, the responsible entity is the on5t operator as identified in the platform's Terms and Conditions. You may contact our dedicated privacy team at any time via the contact details provided in Section 13 of this policy.

02Personal Data We Collect

on5t collects personal data from you in several ways — directly when you register or interact with the platform, automatically through your use of the site, and occasionally from third-party sources such as payment processors. The table below summarises the categories of data we collect and the context in which each is collected.

on5t does not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health information, or biometric data, except where explicitly required by applicable law or where you voluntarily provide such information in a support context.

03How We Use Your Personal Data

on5t uses the personal data we collect strictly for the purposes outlined below. We do not use your data for purposes that are incompatible with those for which it was originally collected without your knowledge and, where required, your additional consent.

• Account Management: To create, maintain, and administer your on5t player account, including verifying your identity, managing your login credentials, and maintaining your transaction history.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to reconcile payment records.
• KYC & Compliance: To comply with anti-money laundering obligations, verify player identity and age (21+), and meet any other applicable regulatory requirements.
• Responsible Gaming: To monitor play patterns and identify indicators of problem gambling, and to enforce self-exclusion and account restriction requests made by players.
• Platform Improvement: To analyse aggregate usage data, fix technical issues, improve game performance, and develop new features tailored to Pakistani players.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct.
• Customer Support: To respond to your support queries, resolve complaints, and maintain records of support interactions.
• Marketing Communications: To send you promotional offers related to cricket betting, PSL promotions, casino bonuses, and slot offers — but only where you have provided explicit consent to receive such communications.

on5t makes decisions relating to responsible gaming monitoring and fraud detection using automated systems. Where an automated process produces a decision that significantly affects your account — such as a temporary suspension for suspected fraud — you have the right to request human review of that decision by contacting our support team.

04Legal Basis for Processing

on5t processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and on5t — i.e., to provide you with a functioning on5t player account, process your bets and transactions, and deliver the services you have signed up for.
• Legal Obligation: Processing that on5t is required to carry out in order to comply with applicable law, including anti-money laundering requirements, age verification obligations, and regulatory reporting duties.
• Legitimate Interests: Processing carried out for on5t's legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your rights and interests.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — most commonly for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05Data Sharing & Disclosure

on5t does not sell your personal data to third parties. We may share your personal data with third parties only in the circumstances described below, and only to the extent necessary for the specific purpose in question:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network operators receive the transaction data necessary to process your deposits and withdrawals. These processors are contractually bound to handle your data securely and only for payment processing purposes.
• Identity Verification Providers: Third-party KYC service providers may receive copies of your identity documents to assist with age and identity verification. These providers operate under strict data processing agreements.
• Game Technology Providers: on5t's casino game and sports betting technology providers may receive anonymised or pseudonymised technical data necessary to operate games and betting markets on the platform.
• Legal Authorities: on5t will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive. Where legally permissible, on5t will notify you of such a disclosure.
• Fraud Prevention Services: on5t may share data with fraud prevention and anti-money laundering database operators where necessary to investigate or prevent financial crime.

All third parties with whom on5t shares personal data are required to implement appropriate technical and organisational security measures to protect that data. on5t does not permit third-party recipients to use your data for their own marketing purposes.

06Cookies & Tracking Technologies

on5t uses cookies and similar tracking technologies on the on5t.net website to ensure the platform functions correctly, to remember your preferences, to analyse how Pakistani players use the site, and — where you have consented — to deliver relevant promotional content.

The following categories of cookies are used on the on5t platform:

• Strictly Necessary Cookies: Required for the platform to function. These cannot be disabled and include cookies that maintain your login session, remember your currency preference (PKR), and ensure secure page navigation.
• Functional Cookies: Remember your preferences such as language, notification settings, and last-used payment method to improve your experience on the platform.
• Analytics Cookies: Collect anonymised information about how players interact with the on5t platform — which games are most popular, which pages are visited most, and where technical errors occur. This data is used to improve the platform.
• Marketing Cookies: Used to deliver relevant on5t promotional offers to you across the platform, based on your betting and gaming preferences. These cookies are only set with your prior consent.

on5t does not use third-party advertising cookies that track your activity across unrelated external websites. Our tracking is limited to activity within the on5t platform itself.

07Data Retention Periods

on5t retains your personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Active Account Data: Retained for the full duration of your account being active on the on5t platform, plus a post-closure period as required by applicable law.
• KYC Documents: Retained for a minimum of five years following the closure of your account, in accordance with standard anti-money laundering record-keeping requirements.
• Financial Transaction Records: PKR deposit and withdrawal records, including JazzCash and EasyPaisa transaction references, are retained for a minimum of five years following each transaction date.
• Support Communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction, after which they are deleted unless required for an ongoing dispute or legal matter.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained indefinitely to demonstrate compliance with consent obligations.
• Technical and Usage Data: Anonymised analytics data may be retained indefinitely for platform improvement purposes. Non-anonymised technical logs are deleted after 12 months.

Where you submit an erasure request and on5t is legally permitted to comply, we will delete or anonymise your data within 30 calendar days of the request being validated. Where legal retention obligations prevent full erasure, we will inform you of the specific data categories that must be retained and the applicable retention period.

08Data Security Measures

on5t implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following controls:

• AES-256 encryption of all personal and financial data at rest in on5t's databases.
• TLS 1.3 encryption for all data in transit between your device and on5t's servers.
• Multi-factor authentication options for player accounts, strongly recommended for all players.
• Role-based access controls that restrict on5t staff access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the on5t platform infrastructure.
• Dedicated fraud monitoring systems that operate continuously to detect and respond to suspicious account activity.
• Comprehensive incident response procedures to manage and contain any data security incidents promptly.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, on5t will notify affected players without undue delay and will take all necessary steps to mitigate the impact of the breach.

09Exercising Your Data Rights

As described in the overview section of this policy, you hold a number of rights in relation to the personal data on5t holds about you. To exercise any of these rights, please submit a written request to our support team via live chat or by email to [email protected] with the subject line "Data Rights Request".

Your request should include your registered on5t username, the email address associated with your account, and a clear description of the right you wish to exercise and the specific data it relates to. on5t may need to verify your identity before processing your request to ensure we do not disclose or delete data in response to a fraudulent request.

• Response Timeframe: on5t will acknowledge receipt of your request within two business days and will provide a substantive response within 30 calendar days. Where a request is complex or on5t receives a high volume of requests, this period may be extended by a further 30 days, of which you will be notified.
• No Fee: on5t does not charge a fee to process data rights requests in ordinary circumstances. Where requests are manifestly unfounded or excessive, on5t reserves the right to charge a reasonable administrative fee or decline the request, with written justification provided to you.
• Refusal: Where on5t is unable to fulfil a request — for example, because legal retention obligations require us to keep certain data — we will explain the specific reason for the refusal and advise you of your right to escalate to a supervisory authority.

10Children & Minors

on5t is strictly an adult platform. Access to and use of the on5t casino and sports betting services is permitted only to individuals who are aged 21 years or older. on5t does not knowingly collect personal data from anyone under the age of 21, and the platform is not directed at, designed for, or intended to be used by minors.

All player registrations on the on5t platform are subject to mandatory age verification as part of the KYC process. Where on5t discovers that personal data has been collected from a player who is under 21 years of age, we will immediately close the relevant account, void any bets placed, return any deposited funds where possible, and delete all personal data associated with the account.

on5t takes its responsibilities in relation to the protection of minors extremely seriously and cooperates fully with any investigation by relevant authorities into underage access to the platform.

11Third-Party Services & Links

The on5t platform integrates with a number of third-party service providers to deliver its full range of features, including payment processing, identity verification, game content, and customer support technology. Each of these third-party providers operates under its own privacy policy and data protection practices, and on5t requires all such providers to maintain appropriate security standards through contractual data processing agreements.

on5t is not responsible for the privacy practices of third-party service providers beyond the requirements set out in those agreements. Where a third-party provider suffers a data breach that affects data processed on on5t's behalf, on5t will notify affected players in accordance with the procedure described in Section 8 of this policy.

The on5t website does not contain links to external third-party websites for general browsing. All links within the on5t platform navigate within the on5t.net domain. Accordingly, on5t's privacy practices govern your entire experience on the platform without cross-site tracking concerns.

12Updates to This Privacy Policy

on5t reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. The "Last Updated" date at the top of this page will be revised each time a material change is made to the policy.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — on5t will notify registered players by email to the address associated with their account and/or via a prominent in-platform notification, at least 14 days prior to the changes taking effect.

Your continued use of the on5t platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this policy, you may request account closure in accordance with on5t's Terms and Conditions and request deletion of your personal data as described in Section 9.

13Contact & Complaints

If you have any questions, concerns, or complaints relating to this Privacy Policy or on5t's handling of your personal data, please contact our dedicated privacy support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on any page of the on5t platform. Live chat is the fastest channel for urgent privacy matters.
• Email: [email protected] — use the subject line "Privacy Enquiry" for general questions or "Data Rights Request" for formal data subject rights requests. Please allow up to two business days for a response.
• Peak Support Hours: 10:00 AM to 2:00 AM PKT, during which response times across all channels are fastest.

on5t is committed to resolving all privacy-related complaints promptly and transparently. If you submit a formal complaint and are not satisfied with the resolution provided by on5t's support team within 28 calendar days, you have the right to escalate your complaint to the relevant supervisory or regulatory authority in your jurisdiction.

When contacting on5t about a privacy matter, please include your registered on5t username and the email address on your account to assist with identity verification. on5t staff will never ask for your account password or full payment details during a privacy enquiry.