olx14 Privacy Policy

1 Who We Are & How to Contact Us

olx14 ("we," "us," "our," or "the Company") is the operator of the online casino and sports betting platform accessible at olx14.biz. The Company acts as the data controller in respect of all personal data collected from players and visitors through the Platform, meaning we determine the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject line: Data Protection / Privacy Enquiry
• Response time: We aim to respond to all privacy-related enquiries within 5 business days
• Support languages: Urdu and English

2 What Personal Data We Collect

The categories of personal data we collect depend on how you interact with the olx14 Platform. The following table sets out the main categories of data we process:

We do not collect any special categories of sensitive personal data (such as health, biometric, or political data) except where strictly necessary for responsible gaming compliance — for example, where a player voluntarily discloses a gambling-related concern to our support team in order to activate self-exclusion tools.

3 How We Collect Your Data

olx14 collects personal data through the following channels:

• Direct collection: Data you provide when registering a Player Account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account preferences;
• Automated collection: Technical and usage data collected automatically when you visit the Platform, including IP address, device fingerprint, session data, and cookie-based identifiers;
• Third-party payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard processing networks when you initiate a deposit or withdrawal;
• Identity verification providers: Results and flags from our third-party KYC and identity verification partners during the document verification process;
• Fraud prevention and AML screening tools: Aggregated risk signals from fraud detection and anti-money laundering screening services we use to protect the integrity of the Platform;
• Analytics tools: Aggregated and pseudonymised behavioural analytics data from platform analytics services used to improve the user experience on olx14.

4 Why We Use Your Data (Legal Basis)

olx14 processes your personal data only where a lawful basis exists for doing so. The following table explains the primary purposes for which we use your data and the legal basis we rely on in each case:

5 Cookies & Tracking Technologies

olx14 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to remember your preferences, to keep your session secure, and to generate anonymised analytics that help us improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to operate. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without rendering the Platform non-functional;
• Functional Cookies: Remember your language preference, responsible gaming settings, and login state between sessions. Disabling these may reduce Platform functionality;
• Analytics Cookies: Collect pseudonymised data about how players navigate the Platform — which pages are visited most, how long sessions last, and where players exit the funnel. This data is aggregated and does not identify individual players;
• Marketing & Personalisation Cookies: Used only where you have provided explicit consent. These may track which bonus offers you have viewed and help us present relevant promotions based on your activity on the Platform.

You may manage your cookie preferences through the cookie consent banner displayed on your first visit to olx14.biz, or at any time by adjusting your browser settings. Please note that disabling certain cookies may affect how the Platform functions. olx14 does not use cookies to collect or store financial data or identity documents.

6 Sharing Your Data with Third Parties

olx14 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with carefully selected third parties only in the following circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard processing partners receive the transaction data necessary to process your PKR deposits and withdrawals securely;
• KYC and identity verification providers: Your identity documents and personal details are shared with our licensed identity verification partner solely for the purpose of confirming your identity and age (21+) in compliance with our licensing obligations;
• AML and fraud screening services: Anonymised or pseudonymised transactional data may be shared with fraud detection and anti-money laundering screening providers for risk assessment purposes;
• Game providers: Third-party casino game and live dealer providers may receive your Player Account identifier and relevant gaming session data in order to render games within the Platform. They do not receive your identity or payment data;
• Regulatory and law enforcement authorities: We are required to disclose personal data to relevant regulatory bodies or law enforcement agencies where legally obliged to do so. We will notify you of any such disclosure where permitted by law;
• Professional advisers: Lawyers, auditors, and insurers acting as processors or joint controllers under binding confidentiality obligations where necessary to manage our legal, financial, or compliance obligations.

All third-party service providers who process personal data on behalf of olx14 are required to execute a data processing agreement confirming they will protect your data to at least the same standard as set out in this Privacy Policy.

7 International Data Transfers

olx14 operates under an international gaming licence and some of our third-party service providers — including KYC verification partners, cloud hosting providers, and analytics platforms — may process personal data in countries outside Pakistan. Where personal data is transferred internationally, olx14 ensures that appropriate safeguards are in place, including:

• Transfers to countries that have been assessed as providing an adequate level of data protection by relevant international standards bodies;
• Use of standard contractual clauses or binding corporate rules approved under applicable data protection frameworks;
• Technical measures including end-to-end encryption for data in transit and AES-256 encryption for data at rest.

8 Data Retention Periods

olx14 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Player Account data (identity, contact, KYC documents): Retained for the lifetime of your Player Account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and gaming regulatory requirements;
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations;
• Gaming and betting history: Retained for three (3) years from account closure, or longer where an active dispute or regulatory investigation is ongoing;
• Support and communication records: Retained for two (2) years from the date of the last communication, or until the resolution of any formal complaint linked to that correspondence;
• Marketing preferences and consent records: Retained for the duration of your Player Account and for two (2) years following account closure to demonstrate consent compliance;
• Technical and analytics data: Retained in anonymised or aggregated form; raw session logs are deleted after thirteen (13) months.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you. olx14 conducts periodic data retention reviews to ensure personal data is not held beyond its lawful retention period.

9 Security Measures

olx14 takes the security of your personal data seriously and implements a layered set of technical and organisational controls to protect it against unauthorised access, accidental loss, alteration, or destruction:

• 256-bit SSL / TLS encryption on all data in transit between your device and olx14 servers;
• AES-256 encryption for all personal data and financial records stored on our servers;
• Multi-factor authentication (MFA) required for all internal administrative access to systems holding personal data;
• Role-based access controls ensuring that olx14 staff can only access personal data strictly necessary for their specific job function;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Real-time fraud and intrusion detection systems monitoring for anomalous access patterns;
• Secure data centre hosting in facilities with ISO 27001-certified physical and environmental security controls.

While olx14 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Player Account credentials. Please contact support immediately at [email protected] if you suspect any unauthorised access to your account.

10 Your Rights Over Your Personal Data

Depending on applicable data protection laws, you may hold some or all of the following rights in relation to the personal data olx14 holds about you. We are committed to honouring these rights and aim to respond to all valid requests within 30 days:

• Right of Access: You may request a copy of all personal data we hold about you, along with information on how it is being used (a "Subject Access Request");
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you. Account-level details such as name and contact information can also be updated directly through your Player Account settings;
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected. Please note this right is subject to overriding legal and regulatory retention obligations — for example, AML record-keeping requirements mean we cannot delete transaction data for at least five years;
• Right to Restriction of Processing: You may request that we restrict the processing of your data while a dispute about its accuracy or our right to use it is resolved;
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request a machine-readable copy of the personal data you have provided to us;
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease processing immediately;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact us in writing at [email protected] with the subject line "Data Rights Request" and include your full registered name, registered email address, and a clear description of the right you wish to exercise. We may request additional identification to verify your identity before processing your request.

11 Children's Privacy & Age Verification

Age verification is conducted as part of the mandatory KYC process described in our Terms & Conditions. All players are required to submit a valid Pakistani CNIC or passport confirming they are 21 years of age or older before any withdrawal can be processed. Where olx14 has reasonable grounds to suspect that a registered player is under 21, the account will be suspended pending full identity verification.

Parents and guardians who believe their minor child has registered an account on olx14 should contact us immediately at [email protected]. We treat all such reports with the highest urgency and will act swiftly to close the account and delete the data.

12 Marketing Communications

olx14 will only send you direct marketing communications — including promotional emails, SMS messages about bonuses, PSL cricket betting offers, free spins, and reload promotions — where you have given explicit consent to receive them at the time of registration or subsequently updated your preferences to opt in.

You may opt out of all marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email we send;
• Updating your notification preferences in the Marketing section of your Player Account settings;
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out."

Please note that opting out of marketing communications does not affect the delivery of transactional communications, which include deposit and withdrawal confirmations, KYC verification status updates, responsible gaming notifications, and security alerts. These messages are essential to the operation of your Player Account and will continue to be sent regardless of your marketing preferences.

olx14 does not share your contact details with any third party for the purpose of sending you marketing communications from that third party.

13 Changes to This Privacy Policy

olx14 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services available on the Platform. Where a change is material — meaning it substantively affects how your personal data is used or your rights as a data subject — we will notify you by email to your registered address at least 14 days before the change takes effect.

The "Last Updated" date at the top of this page reflects when the current version came into force. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of any updated version constitutes your acknowledgment of the revised policy. If you do not agree with any changes, please contact us to discuss your options, including account closure.

Previous versions of this Privacy Policy are available upon request by contacting [email protected] with the subject line "Previous Privacy Policy Version."

14 Complaints & Supervisory Authority

If you believe that olx14 has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, we encourage you to contact us in the first instance so that we can investigate and attempt to resolve your concern:

• Email: [email protected]
• Subject line: Privacy Complaint
• Response time: We will acknowledge your complaint within 48 hours and provide a final determination within 14 business days

If you remain dissatisfied following our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction in which the Company holds its gaming licence, or to seek judicial remedy through the courts of competent jurisdiction. Details of the applicable supervisory authority are available upon request.