olx23 Privacy Policy
— How We Protect Your Data

1.1 olx23 is an internationally licensed online gaming operator offering casino games, live dealer tables, sports betting, cricket and PSL betting, fishing games, and related entertainment services to eligible players via the olx23.bid platform.

1.2 olx23 serves players in Pakistan and operates under an internationally recognised gaming licence framework. Our platform is designed to comply with applicable data protection standards as a condition of that licensing framework.

1.3 As the data controller, olx23 determines the purposes and means by which personal data collected through the platform is processed. Any data processing carried out by third-party service providers on our behalf is subject to binding data processing agreements that impose strict obligations on those providers consistent with this Privacy Policy.

2.1 olx23 collects personal data in the following categories. The specific data points collected may vary depending on the nature of your interaction with the platform:

2.2 olx23 does not collect sensitive personal data (such as health information, political opinions, or religious beliefs) except where specifically required for responsible gaming assessments, and only with your explicit consent in those instances.

3.1 Directly from you. The majority of personal data olx23 holds about you is provided directly by you during:

• Account registration on the olx23 platform;
• KYC document submission during identity or age verification;
• Deposit and withdrawal transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard;
• Communications with the olx23 support team via live chat or email;
• Completion of responsible gaming tools such as deposit limit setting or self-exclusion requests.

3.2 Automatically. When you access and use the olx23 platform, certain technical and usage data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, device type, browser version, and session activity. For full details see Section 9 (Cookies).

3.3 From third parties. olx23 may receive data about you from third-party payment processors (such as JazzCash and EasyPaisa) for transaction verification purposes, and from fraud prevention and identity verification services as part of our KYC obligations.

4.1 olx23 uses the personal data we collect for the following purposes, each of which is supported by a lawful basis described in Section 5:

• Account creation and management — to register, maintain, and administer your olx23 player account;
• Identity and age verification — to confirm you are 21 years of age or older, as required by our licensing obligations;
• Payment processing — to facilitate deposits and withdrawals via your selected payment method in PKR;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct;
• Legal and regulatory compliance — to satisfy anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and record-keeping mandates under our international gaming licence;
• Platform personalisation — to tailor the olx23 experience to your preferences, game history, and betting behaviour;
• Customer support — to respond to queries, resolve complaints, and provide Urdu-language assistance;
• Responsible gaming — to monitor play patterns for signs of problem gambling and to administer responsible gaming tools at your request;
• Marketing communications — to send you promotional offers, bonus notifications, and PSL or cricket betting alerts where you have consented;
• Platform improvement — to analyse aggregated usage data to improve the olx23 game library, website performance, and payment experience.

5.1 olx23 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

6.1 olx23 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share your data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard, and cryptocurrency processing partners, for the purpose of completing your deposit or withdrawal transactions;
• KYC and identity verification providers — third-party services contracted to assist with CNIC verification and age confirmation, as required by our licensing obligations;
• Fraud prevention services — specialist AML screening and fraud detection service providers who process data under strict data processing agreements with olx23;
• Game software providers — providers such as Pragmatic Play, PG Soft, and other certified studios may receive gameplay session data necessary for game operation; they do not receive your full account or identity data;
• Regulatory and licensing authorities — our international gaming licence issuer and relevant regulatory bodies may require access to player data as part of regulatory oversight;
• Law enforcement and legal proceedings — where olx23 is legally required to disclose data by court order, government authority, or applicable law;
• Affiliated companies — where applicable, data may be shared with entities within the olx23 corporate group for internal administrative purposes, subject to the same protections in this Policy.

7.1 As an internationally licensed operator, olx23 may transfer your personal data to countries outside Pakistan for storage, processing, or service delivery purposes. This may include servers located in the jurisdiction of our licensing authority and the data centres of our technology and payment service partners.

7.2 Where personal data is transferred internationally, olx23 implements appropriate safeguards to ensure that your data receives a level of protection consistent with this Privacy Policy and applicable data protection standards. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to countries recognised as providing adequate data protection under applicable frameworks.

7.3 By registering and using the olx23 platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan. If you have questions about specific data transfer safeguards, please contact the olx23 privacy team at the email provided in Section 15.

8.1 olx23 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following general retention periods apply:

8.2 Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised in a manner that permanently prevents re-identification is not subject to this Privacy Policy and may be retained for statistical and analytical purposes indefinitely.

9.1 The olx23 platform uses cookies and similar tracking technologies to operate core platform functions, personalise your experience, analyse usage patterns, and support fraud prevention. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the basic operation of the olx23 platform — including maintaining your login session, processing transactions, and ensuring platform security. These cannot be disabled without affecting core functionality.
• Functional Cookies: Remember your preferences such as language settings and game display preferences to personalise your olx23 experience.
• Analytics Cookies: Collect anonymised data about how players interact with the olx23 platform — pages visited, features used, time spent — to help us improve the service. Data collected via analytics cookies does not identify you personally.
• Security Cookies: Used to detect unusual session behaviour, prevent cross-site request forgery, and support fraud detection systems.

9.2 olx23 does not use cookies to track your activity across third-party websites unrelated to olx23 for advertising purposes. We do not participate in cross-site behavioural advertising networks.

10.1 olx23 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the olx23 platform;
• Encrypted storage of sensitive personal data, including financial records and identity documents;
• Access controls — personal data is accessible only to olx23 staff who require it to perform their specific job functions;
• Multi-factor authentication for olx23 system access by employees and contractors;
• Regular security audits and penetration testing conducted by independent third-party security specialists;
• Incident response procedures to detect, contain, and respond to data security incidents within required timeframes.

10.2 In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, olx23 will notify affected players without undue delay via their registered mobile number, including information about the nature of the incident and steps you should take to protect yourself.

11.1 As a player on the olx23 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact olx23 support as described in Section 15:

• Right of Access: You may request a copy of all personal data that olx23 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected promptly.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that financial transaction records must be retained for 7 years under AML regulations regardless of erasure requests.
• Right to Restriction: You may request that olx23 restrict the processing of your personal data in certain circumstances, such as while a dispute regarding its accuracy is being resolved.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to olx23 in a structured, commonly used, and machine-readable format, and to transfer it to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for personalisation purposes.
• Right to Withdraw Consent: Where olx23 processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 olx23 will respond to all verified data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, with notification to you of the extension and the reasons for it.

12.1 olx23 may send you promotional communications — including bonus offers, PSL betting alerts, free spin notifications, and platform updates — via SMS to your registered Pakistani mobile number, where you have given your consent to receive such communications at registration or at a later date.

12.2 You may withdraw your consent to receive marketing communications from olx23 at any time by:

• Updating your communication preferences in your olx23 account settings;
• Replying STOP to any SMS marketing message sent by olx23;
• Contacting olx23 support directly and requesting removal from marketing lists.

12.3 Withdrawal of marketing consent will be processed within 48 hours. Note that even after withdrawal of marketing consent, olx23 may still send you transactional communications that are necessary for the operation of your account — such as withdrawal confirmations, security alerts, and responsible gaming notifications.

13.1 olx23 implements age verification procedures at point of first withdrawal, requiring CNIC documentation to confirm that the player is 21 years of age or older. Where olx23 discovers that it has inadvertently collected personal data from a person under the age of 21:

• The account will be immediately suspended and permanently closed;
• All personal data associated with the underage account will be securely deleted;
• Any deposits made to the account will be returned to the originating payment source;
• Any winnings generated will be forfeited.

13.2 If you believe that a minor has registered an account on the olx23 platform, please contact olx23 support immediately at the contact details provided in Section 15.

14.1 olx23 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The revised Policy will be published on the olx23 platform at olx23.bid/privacy-policy with an updated "Last Revised" date.

14.2 Where changes to this Policy are material — meaning they significantly affect your privacy rights or how we use your personal data — olx23 will notify registered players via SMS to their registered Pakistani mobile number at least 14 days before the changes take effect.

14.3 Your continued use of the olx23 platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the revised Policy, you must cease using the olx23 platform and may contact support to request account closure.

15.1 If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about how olx23 handles your personal data, please contact our Privacy and Data Support Team:

15.2 olx23 takes all privacy complaints seriously. If you submit a formal privacy complaint and remain dissatisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority under the regulatory framework of our international gaming licence.

15.3 Please note that olx23 support is available 24 hours a day, 7 days a week via live chat on the olx23 platform for general account queries. Privacy rights requests and formal complaints should be submitted via the email address above to ensure proper recording and handling.