on14t Privacy Policy — How We Handle Your Personal Data

on14t ("we," "us," "our") is the operator of the online casino and sports betting platform accessible at on14t.net. on14t is the data controller responsible for the personal data of Players collected and processed in connection with the use of the on14t platform and its associated services. Where on14t engages third-party processors to handle personal data on its behalf — such as payment processors, KYC verification providers, and game software providers — on14t remains the data controller and is responsible for ensuring that those processors handle data in accordance with this Privacy Policy and applicable data protection standards.

For all data protection enquiries, requests, and complaints, Players may contact on14t's data protection point of contact using the details provided in Section 17 of this Privacy Policy.

This Privacy Policy applies to all personal data collected by on14t from or relating to:

• Registered Players who hold an active or inactive on14t account.
• Individuals who visit the on14t website at on14t.net without registering an account.
• Individuals who contact on14t's customer support team via any channel, including Live Chat, email, Messenger, or Viber.
• Individuals who interact with on14t in the context of any promotional activity, survey, or feedback request.

This Policy does not govern the data practices of third-party service providers, game software studios, or payment processors that operate their own independent privacy policies. Where on14t's platform contains links to third-party services, on14t is not responsible for the privacy practices of those third parties.

on14t collects personal data in several categories. The specific data collected depends on the nature of your interaction with the platform. The following table sets out the principal categories of personal data we collect and the context in which that collection occurs:

on14t does not collect data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes (beyond the CNIC selfie-match process), health data beyond that relevant to responsible gaming disclosures, or data concerning sexual orientation or gender identity. Where a Player voluntarily provides information in these categories — for example, via a free-text support message — on14t will handle such data with particular care and will not process it beyond what is necessary to respond to the Player's enquiry.

on14t collects personal data through the following primary methods:

• Direct provision by the Player: The majority of personal data held by on14t is provided directly by Players during the registration process, during KYC verification, when making deposits or withdrawal requests, when contacting on14t support, or when completing any promotional or survey participation.
• Automatic technical collection: When a Player visits or interacts with the on14t website, technical data including IP address, device characteristics, session data, and usage patterns are automatically collected through cookies and similar tracking technologies, as described in Section 10 of this Policy.
• Third-party verification providers: In the course of conducting KYC and AML compliance checks, on14t may receive additional identity verification data from third-party identity verification services. This data is used solely for verification purposes and is handled in accordance with our agreements with those providers.
• Payment processors: When a Player initiates a deposit or withdrawal, on14t receives confirmation and transaction reference data from JazzCash, EasyPaisa, or the relevant banking partner to record the transaction in the Player's account ledger.
• Public sources: In limited circumstances related to fraud prevention or AML compliance, on14t may cross-reference Player information against publicly available sources or industry fraud-prevention databases.

on14t processes personal data on one or more of the following legal bases, which are assessed individually for each processing activity:

• Contractual necessity: Processing that is necessary to fulfil on14t's obligations under the Player Agreement — including account creation, payment processing, game delivery, and customer support — is carried out on the basis of contractual necessity. Without this processing, on14t cannot deliver the Services.
• Legal obligation: Processing carried out to comply with on14t's obligations under applicable laws and regulatory requirements — including KYC identity verification, anti-money laundering record keeping, and age verification — is carried out on the basis of legal obligation compliance.
• Legitimate interests: Processing activities such as platform security monitoring, fraud detection, analysis of usage patterns to improve the platform, and responsible gaming monitoring are carried out on the basis of on14t's legitimate interests, balanced against the privacy interests and rights of Players.
• Consent: Where on14t sends marketing communications via SMS or email, or where on14t uses non-essential cookies, this processing is carried out on the basis of the Player's freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of any prior processing.

on14t uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your on14t Player account, processing login authentication (including OTP and 2FA verification), maintaining your account settings and preferences, and managing your PKR wallet balance.
• Service delivery: Enabling your access to all on14t gaming products including cricket and PSL betting, slot games, live dealer tables, and fishing games; processing bets, settling outcomes, and crediting winnings to your account.
• Payment processing: Processing deposits from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20; processing withdrawal requests to your nominated payment method; maintaining a complete transaction history in your account.
• KYC and AML compliance: Verifying your identity via CNIC documentation, confirming that you meet the 21+ age requirement, monitoring transactions for signs of money laundering or other financial crime, and maintaining the records required by on14t's licensing obligations.
• Customer support: Responding to queries, complaints, and technical issues submitted via Live Chat, email, Messenger, or Viber; maintaining support records for quality assurance and dispute resolution purposes.
• Security and fraud prevention: Detecting and investigating suspicious account activity, preventing the creation of duplicate accounts, identifying and responding to attempted fraud, and enforcing on14t's Terms and Conditions.
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling behaviour, enforcing deposit and loss limits set by the Player, processing self-exclusion requests, and complying with responsible gaming requirements under on14t's gaming licence.
• Platform improvement: Analysing anonymised and aggregated usage data to understand how Players use the on14t platform, identify areas for improvement, and develop new features and services.
• Marketing communications (with consent): Sending promotional information about on14t bonuses, events, and new features to Players who have opted in to receive such communications. Marketing communications are sent via the contact details registered to the Player's account.

on14t does not sell, rent, or trade Player personal data to third parties for any commercial or marketing purpose. We share personal data only in the following circumstances and only to the extent necessary for the specified purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and cryptocurrency processing partners receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and under data processing agreements with on14t.
• KYC and identity verification providers: Third-party providers engaged to assist with identity document verification and age verification during the KYC process receive relevant identity data solely for verification purposes.
• Game software providers: on14t's game content providers receive the minimum technical data necessary to deliver game functionality — including session identifiers and bet records — in connection with their software operating within on14t's platform.
• Regulatory and law enforcement authorities: on14t may disclose personal data to regulatory bodies, government authorities, tax authorities, or law enforcement agencies where required to do so by applicable law, court order, or regulatory obligation. on14t will, where legally permitted, notify affected Players of such disclosures.
• Fraud prevention agencies and industry databases: Where on14t identifies or suspects fraudulent activity, relevant data may be shared with industry fraud prevention databases or agencies for the purpose of protecting on14t and other operators from fraud.
• Professional advisers: on14t's legal, financial, and compliance advisers may access personal data in the course of providing professional services to on14t, subject to binding professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of on14t's business, Player personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any changes to data controller responsibilities resulting from it.

on14t's platform infrastructure and certain third-party service providers operate in jurisdictions outside Pakistan. As a result, personal data collected from Pakistani players may be transferred to, stored in, or processed in countries other than Pakistan. Where such international transfers occur, on14t ensures that appropriate safeguards are in place to protect the security and confidentiality of the transferred data. These safeguards include:

• Data processing agreements with third-party processors that include data protection obligations equivalent to the standards set out in this Privacy Policy.
• Technical security measures including end-to-end encryption for all data in transit and encryption at rest for all stored personal data.
• Compliance with the data protection and privacy requirements of on14t's gaming licensing jurisdiction.

By using the on14t platform, Pakistani players acknowledge and consent to the international transfer of their personal data as described in this section. If you have questions about how on14t handles international data transfers or wish to obtain further information about the safeguards in place, please contact us at the details provided in Section 17.

on14t retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal, regulatory, or licensing obligations. The following retention guidelines apply:

• Active account data: Personal data relating to an active on14t account is retained for the duration of the account's active status.
• Closed account data: Following account closure, personal data is retained for a minimum of five (5) years to comply with AML record-keeping requirements and to facilitate the resolution of any disputes or regulatory investigations that may arise after closure.
• KYC documentation: Identity documents submitted during the KYC process — including CNIC copies and selfie photos — are retained for a minimum of five (5) years from the date of submission, in line with standard AML compliance requirements.
• Financial transaction records: Full records of all deposits, withdrawals, bonus transactions, and bet settlements are retained for a minimum of seven (7) years from the date of the transaction for financial record-keeping and regulatory compliance purposes.
• Support communications: Customer support transcripts and email correspondence are retained for three (3) years from the date of the communication, or longer where relevant to an ongoing dispute or investigation.
• Marketing preference records: Records of marketing consent or opt-out are retained for a minimum of three (3) years from the date of the consent or opt-out, regardless of any subsequent account closure.

When personal data is no longer required and no legal or regulatory obligation requires its retention, on14t will securely delete or irreversibly anonymise that data. Anonymised data — data from which all personally identifying information has been removed — may be retained indefinitely for statistical and analytical purposes.

on14t uses cookies and similar tracking technologies on the on14t.net website to provide core platform functionality, to understand how Players use the platform, and — where consent is given — to deliver relevant promotional content. The following categories of cookies are used on on14t:

Most web browsers allow you to control cookie settings through the browser's preferences or settings menu. You can set your browser to refuse some or all cookies, or to alert you when a website attempts to set cookies. If you disable essential cookies, certain features of the on14t platform will not function correctly. Disabling non-essential cookies will not prevent you from using the platform's core functionality.

Players have the following rights in relation to their personal data held by on14t. To exercise any of these rights, contact on14t using the details provided in Section 17 of this Privacy Policy. on14t will respond to all rights requests within thirty (30) days of receipt, and within a reasonable extended period of up to ninety (90) days where the complexity or volume of requests requires additional time (in which case on14t will notify you of the extension within the initial 30-day period).

• Right of Access: You have the right to request a copy of the personal data that on14t holds about you, along with information about how that data is used, where it is stored, and with whom it is shared. Access requests are fulfilled free of charge for one request per 12-month period; additional requests within the same period may incur a reasonable administrative fee.
• Right to Rectification: If any personal data held by on14t is inaccurate or incomplete, you have the right to request that it be corrected or updated. For most account data, this can be done directly through your on14t account settings. For data that cannot be self-corrected — such as KYC documentation — please contact on14t support.
• Right to Erasure ("Right to be Forgotten"): You may request that on14t delete your personal data where: the data is no longer necessary for the purposes for which it was collected; you withdraw your consent (where consent is the basis for processing); or you object to processing and on14t has no overriding legitimate grounds. Note that erasure requests cannot be fulfilled for data that on14t is required to retain under AML, KYC, or other legal obligations — in such cases, on14t will inform you of the data that must be retained and the legal basis for that retention.
• Right to Restriction of Processing: You may request that on14t restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you object to processing but on14t needs to verify whether it has overriding legitimate grounds. During a restriction period, on14t may store but not actively process the restricted data.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that on14t transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, on14t will cease processing for that purpose immediately. Where you object to processing based on legitimate interests, on14t will assess whether it has compelling grounds to continue.
• Right to Withdraw Consent: Where on14t processes your data on the basis of consent — including marketing communications and non-essential cookies — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal. To withdraw marketing consent, use the opt-out mechanism in any marketing communication or contact on14t support.

on14t implements a range of technical and organisational security measures designed to protect Player personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the on14t platform, providing the same level of encryption used by major financial institutions and banks.
• Encryption at rest for all sensitive personal data stored in on14t's databases, including identity documents, financial data, and CNIC information.
• Access controls and least-privilege principles, ensuring that on14t staff can only access Player data to the extent strictly necessary for their specific role. Access to sensitive Player data is logged and audited.
• Two-factor authentication requirements for on14t staff accessing administrative systems that contain Player personal data.
• Regular security assessments including vulnerability scanning and penetration testing of on14t's platform infrastructure.
• Secure deletion procedures for all personal data that has reached the end of its retention period, including secure wiping of digital storage media and certified destruction where required.
• Incident response procedures, including a defined process for identifying, containing, and notifying affected Players of any data security breach within the timeframes required by applicable law.

In the event of a data breach affecting Player personal data, on14t will notify affected Players and relevant authorities in accordance with applicable legal requirements, and will take immediate steps to contain the breach and prevent further unauthorised access.

Parents or guardians who become aware that a person under 21 in their household has registered or attempted to register an on14t account should contact on14t immediately via Live Chat or email at [email protected]. on14t will take immediate action to close the account and delete the minor's personal data.

on14t does not direct any marketing, advertising, or promotional activity toward individuals under 21 years of age. All marketing communications are directed only toward adults who have explicitly opted in to receive them and whose age has been confirmed.

on14t may send marketing and promotional communications to Players who have expressly opted in to receive such communications. Marketing communications from on14t may include information about:

• Welcome bonuses, reload bonuses, free spins, and other promotional offers.
• New game launches and platform feature updates.
• Seasonal promotions, PSL-related betting offers, and special events.
• VIP tier updates and loyalty programme benefits.

Marketing communications are sent via the Pakistani mobile number and/or email address registered to the Player's on14t account. on14t does not send marketing via third-party channels or share Player contact details with external marketing companies.

Players may opt out of marketing communications at any time by:

• Updating marketing preferences in the on14t Account Settings.
• Using the opt-out or unsubscribe mechanism included in any marketing email.
• Replying STOP to any marketing SMS received from on14t.
• Contacting on14t support via Live Chat and requesting removal from marketing communications.

Opting out of marketing communications does not affect a Player's ability to use on14t's services or to receive transactional communications relating to their account — such as deposit confirmations, withdrawal notifications, and support responses. Transactional communications are not marketing and will continue regardless of marketing opt-out status.

The on14t platform integrates with third-party services including payment processors, game software providers, and identity verification services. Each of these third-party providers operates under its own privacy policy and data protection framework. on14t is not responsible for the data practices of third-party providers beyond the scope of the data processing agreements in place between on14t and those providers.

While on14t takes care to partner only with third-party providers who meet appropriate data security standards, Players are encouraged to review the privacy policies of any third-party services they interact with in connection with their use of on14t — including JazzCash, EasyPaisa, and banking partners used for deposits and withdrawals.

Where the on14t platform references or links to third-party content for informational or contextual purposes — such as cricket match results or PSL schedule information — on14t exercises no control over and accepts no responsibility for the privacy practices of those third-party sources. Players who follow any links to third-party websites from on14t do so at their own risk and are subject to those third parties' privacy policies from the point of leaving the on14t domain.

on14t may update this Privacy Policy from time to time to reflect changes in the Services, changes in applicable data protection law, or changes in on14t's operational practices. The "Effective Date" and "Last Reviewed" dates at the top of this Policy indicate when the current version came into effect and when it was most recently reviewed.

Where on14t makes material changes to this Privacy Policy — changes that significantly affect how we collect, use, or share your personal data — we will notify Players through one or more of the following:

• A prominent notice displayed on the on14t website on or before the effective date of the changes.
• An SMS notification sent to the registered Pakistani mobile number on the Player's account.
• An in-platform notification displayed on the Player's next login following the policy update.

Players are encouraged to review this Privacy Policy periodically to remain informed of how on14t handles their personal data. Continued use of the on14t platform following the effective date of any updated Privacy Policy constitutes acceptance of the updated Policy.

For all data protection queries, rights requests, and privacy complaints, please contact on14t through the following channels. All contact information is provided as plain text — no clickable links are provided for privacy contact:

• Privacy enquiries by email: [email protected] — mark your message with the subject line "Privacy Policy Enquiry" or "Data Rights Request" so it can be directed to the appropriate team. on14t acknowledges all privacy-related emails within 3 business days.
• Live Chat: Available 24/7 on the on14t website. For urgent privacy concerns — such as suspected unauthorised access to your account — Live Chat is the fastest contact channel with an average response time of 3–5 minutes.
• Messenger and Viber: Available 24/7 for general privacy queries. For formal data rights requests, email is preferred as it creates a written record of the request.

When contacting on14t about a data rights request, please include your registered mobile number and account username so on14t can identify the account to which the request relates. on14t may need to verify your identity before fulfilling a data access or deletion request, to ensure that data is not disclosed to or deleted at the request of an unauthorised third party.