olx23 Privacy Policy

01Who We Are

olx23 is an online casino and sports betting platform operating at olx23.biz, providing gaming, wagering, and entertainment services primarily to users in Pakistan and other permitted jurisdictions. References to "olx23", "we", "us", or "our" throughout this Privacy Policy refer to the operator of the olx23 platform.

olx23 acts as the data controller in respect of the personal data it collects directly from players through the platform. Where olx23 engages third-party processors to carry out specific processing activities on its behalf, those parties act as data processors under contractual obligations consistent with this policy.

For all data-related enquiries, including requests to exercise your rights under this policy, you may contact the olx23 data team at [email protected], marking your message clearly as a data privacy request.

02Data We Collect

olx23 collects personal data across several categories, depending on how you interact with the platform. The categories and specific data points collected are described below.

Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile number
• Residential address (city, province — e.g. Karachi, Lahore, Islamabad, Faisalabad)
• Username and encrypted password

KYC Verification Data

• Copy of government-issued photo ID (CNIC, passport, or driver's licence)
• Proof of address document
• Proof of payment method ownership
• Facial biometric data where required by enhanced KYC verification procedures

Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (JazzCash mobile number, EasyPaisa account reference, bank account number mask, USDT wallet address)
• Transaction history and account balance records

Gaming Activity Data

• Games played, bets placed, stakes, and outcomes
• Session start and end times
• Bonus usage history and wagering progress

Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session cookies and analytics identifiers
• Referral source and on-site navigation paths

Communications Data

• Live chat transcripts with olx23 support agents
• Email correspondence with the olx23 team
• Feedback and survey responses

03How We Use Your Data

olx23 uses the personal data it collects for the following purposes:

olx23 does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where this is strictly required for fraud detection or AML screening, in which case you have the right to request human review of the relevant decision.

04Legal Basis for Processing

olx23 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and olx23 — including account creation, deposits, withdrawals, and providing access to games.
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, and responsible gaming regulations.
• Legitimate interests: Processing carried out for the legitimate interests of olx23 or third parties — such as fraud prevention, platform security, and improving our services — where those interests are not overridden by your data protection rights.
• Consent: Where we have obtained your explicit consent for a specific processing activity, such as sending you marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05Sharing Your Data

olx23 does not sell your personal data to any third party. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• KYC and identity verification providers: To verify your identity and age in accordance with our legal obligations.
• Payment processors: Including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency network providers, solely to process your deposits and withdrawals.
• Fraud prevention and AML screening services: To detect and prevent fraudulent activity, money laundering, and other financial crimes.
• Platform technology providers: Including game content providers, hosting infrastructure operators, and platform analytics services, who process data under strict data processing agreements.
• Regulatory and law enforcement authorities: Where olx23 is required by law, court order, or regulatory direction to disclose personal data.

Where personal data is transferred to or processed by parties located outside your country of residence, olx23 will ensure that appropriate safeguards are in place — such as standard contractual clauses or equivalent transfer mechanisms — to protect your data during that transfer.

06Cookies & Tracking Technologies

olx23 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used on olx23 are as follows:

• Strictly necessary cookies: Essential for the platform to function. These cookies enable you to log in, navigate between pages, and maintain your session securely. They cannot be disabled without preventing core platform functionality.
• Performance and analytics cookies: Used to understand how players interact with the platform — including which pages are visited most frequently, where errors occur, and how navigation flows are used. This data is collected in aggregate and does not identify individual players.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming limits you have set on your account.
• Marketing and attribution cookies: Used to understand which marketing channels brought you to olx23, so we can measure the effectiveness of our campaigns. These cookies do not track your activity on third-party websites.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality of parts of the olx23 platform.

07Data Retention

olx23 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. The key retention periods applied by olx23 are:

• Account and transaction data: Retained for a minimum of five (5) years following account closure, in compliance with AML and financial record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable law.
• Communications data (live chat, email): Retained for up to three (3) years from the date of the communication, or until the resolution of any related dispute.
• Gaming activity and session data: Retained for a minimum of three (3) years to support responsible gaming monitoring obligations and dispute resolution.
• Marketing preferences and consent records: Retained until consent is withdrawn and for a further twelve (12) months to evidence the withdrawal.

On expiry of the applicable retention period, olx23 will securely delete or anonymise your personal data such that it can no longer be attributed to you.

08Your Data Rights

Subject to applicable law, you have the following rights in respect of the personal data olx23 holds about you. You may exercise any of these rights by contacting olx23 support via live chat or at [email protected]. olx23 will respond to all verified data rights requests within 30 days.

09Data Security

olx23 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.2 or higher encryption for all data in transit between your device and olx23 servers
• AES-256 encryption for sensitive data fields stored at rest
• One-way hashing with salting for all account passwords
• Payment card and mobile wallet tokenisation — olx23 never stores raw payment credentials
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• Regular third-party security audits and penetration testing of the olx23 platform
• Automated fraud detection and anomalous login monitoring systems
• Two-factor authentication available to all olx23 account holders

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, olx23 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach. olx23 will also notify the relevant regulatory authority where required by applicable law.

10Children & Minors

The olx23 platform is strictly intended for adults aged 21 years and above. olx23 does not knowingly collect or process personal data relating to persons under the age of 21. The 21+ age requirement is enforced at the point of registration through date-of-birth verification and is confirmed again at the point of KYC document review prior to the first withdrawal.

If olx23 becomes aware that personal data has been collected from or in relation to a person under the age of 21, the associated account will be closed immediately, all funds will be returned to source, and the relevant data will be securely deleted in accordance with our data retention procedures.

If you believe that a person under 21 has registered an account on olx23, please contact our support team immediately at [email protected] so that we can investigate and act promptly.

11Responsible Gaming & Data

olx23 uses gaming activity data, session duration data, deposit patterns, and behavioural signals to proactively monitor player welfare and identify signs of potentially harmful gambling behaviour. This processing is carried out on the basis of our legal and regulatory obligations as a licensed gaming operator.

Where our responsible gaming monitoring systems flag a concern — such as extended session durations, rapid increases in deposit frequency, or patterns consistent with problem gambling — our support team may use your contact data to reach out to you with information about available support tools. This outreach is carried out in good faith in the interest of player welfare and is not marketing.

Data associated with self-exclusion requests and responsible gaming limit settings is retained for the full duration of any self-exclusion period and for five years thereafter, to prevent inadvertent re-registration. For more information about the responsible gaming tools available on olx23, please visit our Responsible Gaming page.

12Amendments to This Policy

olx23 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made — meaning changes that substantively affect your rights or how your data is used — olx23 will notify you via a platform notification and, where feasible, by email to the address registered on your account, prior to the changes taking effect.

The "Effective Date" at the top of this page will be updated each time the policy is revised. We encourage you to review this policy periodically to stay informed about how olx23 protects your data. Your continued use of the platform following notification of any material change constitutes acceptance of the revised policy.

13Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the personal data olx23 holds about you, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly from the olx23 platform — the fastest way to reach us
• Email: [email protected] — mark your subject line as "Data Privacy Request" for priority handling
• Response time: olx23 aims to respond to all data privacy requests within 2 hours and will complete all requests within 30 days

If you are not satisfied with how olx23 has handled your personal data or responded to your data rights request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. olx23 will cooperate fully with any such regulatory enquiry.