Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by on5t ("we", "us", "our"), the operator of the website accessible at https://on5t.cam ("Platform"). This Policy sets out how on5t collects, uses, stores, discloses and otherwise processes personal data relating to individuals who access or use the Platform ("you", "User").

on5t is an English-language online gaming information and entertainment platform designed for users in Pakistan and other permitted markets. The Platform provides gaming guides, bonus explainers, sports betting information, responsible gambling resources and related content. on5t is not an operator; it does not accept deposits, hold player funds or conduct wagering directly.

By accessing or using the Platform, you acknowledge that you have read this Policy and understand how your personal data is processed. Where we rely on your consent as the legal basis for processing, your continued use of the Platform following notification of any material change to this Policy constitutes re-affirmation of that consent.

2 Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, device identifiers and IP address.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, restriction and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. on5t is the Data Controller for personal data collected through this Platform.
• "Data Processor" means an entity that processes personal data on behalf of the Data Controller, under instruction and pursuant to a data processing agreement.
• "Cookies" means small text files placed on your device by the Platform to store preferences, session data and analytics information.
• "Consent" means freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or other special categories as defined by applicable data protection law.

3 Data Controller

on5t, operating via https://on5t.cam, acts as the Data Controller in respect of personal data collected through the Platform. For all data protection enquiries, rights requests and complaints, please contact us using the details set out in Section 16 of this Policy.

Where on5t engages third-party service providers to process personal data on its behalf (for example, analytics providers or infrastructure hosting services), those providers act as Data Processors and are bound by contractual obligations to process data only in accordance with on5t's instructions and applicable data protection law.

4 Data We Collect

4.1 Data You Provide Directly

When you interact with the Platform — for example by submitting an enquiry, contacting support or completing any optional registration steps — we may collect the following categories of personal data:

• Name and contact information (email address);
• The content of messages or enquiries you submit to us;
• Any other information you voluntarily provide when communicating with the Platform.

4.2 Data Collected Automatically

When you visit the Platform, our servers and analytics tools automatically collect certain technical information, including:

• IP address and approximate geographic location (country/city level — for example, whether you are connecting from Karachi, Lahore, Islamabad or elsewhere in Pakistan);
• Browser type, version and operating system;
• Device type and screen resolution;
• Pages visited, time spent on pages, navigation paths and click behaviour;
• Referral source (how you arrived at the Platform);
• Session identifiers and cookie data.

4.3 Data We Do Not Collect

on5t does not collect the following categories of data through the Platform:

• Government-issued identity documents (CNIC, passport) — these are collected by individual operators, not by on5t;
• Payment card numbers, bank account details or mobile wallet credentials (e.g., Easypaisa or JazzCash account details);
• Sensitive personal data as defined in Section 2, unless specifically required and disclosed at the point of collection;
• Precise real-time geolocation data.

5 Purposes of Processing

on5t processes personal data for the following purposes:

6 Legal Basis for Processing

on5t processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Legitimate Interests: Processing that is necessary for the purposes of on5t's legitimate interests in operating the Platform, improving content quality and maintaining platform security, provided those interests are not overridden by your rights and interests.
• Consent: Where you have provided clear, informed consent for a specific processing activity — for example, acceptance of non-essential cookies. You may withdraw consent at any time by adjusting your browser cookie settings or contacting us directly.
• Legal Obligation: Processing that is required to comply with a legal obligation applicable to on5t, including cooperation with lawful regulatory or law enforcement requests.
• Contractual Necessity: Where processing is necessary to fulfil a contractual arrangement between you and on5t — for example, responding to a support enquiry that you have initiated.

7 Data Sharing & Disclosure

7.1 Third-Party Service Providers

on5t may share personal data with trusted third-party service providers who assist in operating the Platform. These providers act as Data Processors and may include:

• Web hosting and infrastructure providers;
• Analytics service providers (e.g., aggregated, anonymised traffic analytics);
• Email and communications delivery providers;
• Cybersecurity and DDoS mitigation services.

All such providers are engaged under contractual terms that require them to process personal data solely on on5t's instructions, maintain appropriate security measures and not use the data for their own independent purposes.

7.2 Legal and Regulatory Disclosure

on5t may disclose personal data where required to do so by applicable law, court order, regulatory authority or other legitimate legal process. We will, where legally permissible, notify affected users of such disclosure requests.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets involving on5t, personal data may be transferred as part of that transaction. Any successor entity will be required to honour the commitments in this Policy or notify users of any material changes before processing their data differently.

7.4 No Sale of Personal Data

on5t does not sell, rent, lease or otherwise transfer personal data to third parties for those parties' own independent commercial or marketing purposes.

8 International Data Transfers

The on5t Platform may utilise hosting infrastructure or service providers located outside Pakistan. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the jurisdiction governing this Policy, on5t will take appropriate safeguards — such as contractual protections with data recipients — to ensure that your personal data remains protected in accordance with this Policy.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan. If you have concerns about cross-border data transfers, please contact us using the details in Section 16.

9 Data Retention

on5t retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention principles apply:

• Support communications: Retained for up to 24 months from the date of the last interaction, unless a longer period is required for legal or compliance purposes.
• Analytics and log data: Typically retained in aggregated or anonymised form for up to 26 months, after which individual-level data is deleted or anonymised.
• Cookie and session data: Governed by individual cookie type — session cookies expire when you close your browser; persistent cookies are retained for the period specified in their settings.
• Legal compliance records: Retained for the period required by applicable law, which may exceed standard retention periods.

Upon expiry of the applicable retention period, personal data is securely deleted, destroyed or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the Platform to recognise your device on subsequent visits, remember your preferences and collect aggregated usage data. Similar technologies include web beacons, local storage objects and pixel tags.

10.2 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without affecting core functionality. No consent is required for their placement.
• Analytics Cookies: Used to collect aggregated information about how visitors interact with the Platform — pages viewed, time on site, navigation paths. This data helps us improve content and user experience. Placement requires your consent.
• Functional Cookies: Remember your preferences (such as language or regional content settings) to provide a more personalised experience. Placement requires your consent.

10.3 Managing Cookie Preferences

You can manage or disable cookies at any time through your browser settings. Most browsers allow you to refuse all or certain categories of cookies, delete existing cookies and receive notifications before new cookies are placed. Please note that disabling certain cookies may affect the functionality of the Platform. Refer to your browser's help documentation for instructions on managing cookie settings.

11 Data Security

on5t implements technical and organisational security measures proportionate to the risk posed by the processing activities described in this Policy. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the Platform;
• Access controls restricting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and vulnerability monitoring;
• Secure deletion procedures for data that has reached the end of its retention period.

While on5t takes data security seriously, no internet-based system can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, on5t will notify affected users without undue delay, in accordance with applicable law.

12 Your Data Rights

Subject to applicable data protection law, you hold the following rights in relation to your personal data processed by on5t. To exercise any of these rights, please contact us using the details in Section 16. We will respond within a reasonable timeframe and, in any event, within any period required by applicable law.

13 Minors

The on5t Platform is strictly intended for adults aged 18 or above, or the higher minimum age required by the applicable operator or jurisdiction. We do not knowingly collect personal data from persons under the age of 18. If you are a parent or guardian and believe that a minor has provided personal data to on5t without your consent, please contact us immediately using the details in Section 16 and we will take prompt steps to delete that information.

on5t supports the use of parental control software and other tools to restrict minor access to online gaming content. If you are accessing the Platform from a shared household, please ensure adequate safeguards are in place to prevent access by minors.

14 Third-Party Links & Services

The on5t Platform may contain references to, or contextual descriptions of, third-party operators, payment providers and other services. This Policy applies solely to the on5t Platform and does not extend to any third-party website, operator or service that you may access independently.

on5t is not responsible for the privacy practices, content or data handling of any third party. We encourage you to review the privacy policies of any third-party service before providing personal data to that service. References to payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on this Platform are for contextual purposes only and do not imply any affiliation, data sharing relationship or endorsement of gambling by those providers.

15 Changes to This Privacy Policy

on5t reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will provide reasonable advance notice by updating the "Last Reviewed" date at the top of this page. Where legally required, more prominent notification will be provided.

Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should discontinue use of the Platform and contact us to request deletion of your personal data where applicable.

We recommend that you review this Policy periodically. Previous versions are available on request.

16 Contact Us

For all data protection enquiries, rights requests, complaints or questions relating to this Privacy Policy, please contact the on5t data protection team using the following details. We aim to acknowledge all enquiries promptly and to respond substantively within a reasonable timeframe.