Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how OxGame ("OxGame", "we", "us" or "our") collects, processes, stores, discloses and protects personal data submitted by or generated through the use of the website at oxgame.cam ("the Platform"), including all associated services, features and games made available through it.

This Policy applies to all visitors, registered users and former users of the Platform, including players based in Pakistan and other jurisdictions. It should be read alongside our Terms & Conditions, which govern the contractual relationship between you and OxGame.

By accessing the Platform, creating an Account or continuing to use OxGame's services, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should immediately cease use of the Platform.

02 Definitions

The following terms carry the meanings set out below throughout this Policy:

Term	Definition
Personal Data	Any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial data and device identifiers.
Processing	Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
Data Controller	The entity that determines the purposes and means of processing Personal Data — in this case, OxGame.
Data Processor	A third party that processes Personal Data on behalf of OxGame, under OxGame's instruction and subject to contractual data-protection obligations.
KYC Data	Identity and address verification documents submitted by Users to satisfy Know Your Customer obligations prior to withdrawal processing.
Cookies	Small text files stored on a User's device by the Platform for session management, analytics, personalisation and security purposes.
Account	The personal registered account held by a User on the OxGame Platform.

03 Data Controller

OxGame acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, OxGame determines the purposes for which Personal Data is processed and the means by which such processing is carried out, in accordance with applicable data protection legislation.

OxGame's operational license jurisdiction governs the primary data protection framework applicable to this Platform. Users may contact OxGame regarding data-protection matters using the contact details set out in Section 16 of this Policy.

04 Data We Collect

OxGame collects only the Personal Data that is reasonably necessary for the purposes described in this Policy. The categories of data we collect are set out below.

4.1 Registration Data

When you create an Account, we collect: full legal name, date of birth, email address, username, password (stored in hashed form — never in plain text), telephone number and country of residence.

4.2 KYC & Verification Data

Prior to processing withdrawals, we collect KYC documentation including a government-issued photo identification document (such as a Pakistani CNIC or passport), proof of residential address (such as a recent utility bill or bank statement), and, where required by applicable AML obligations, documentation confirming the source of funds.

4.3 Financial Data

We collect transaction records including deposit amounts, withdrawal requests, payment method identifiers (tokenized, not raw card numbers), and bonus credit and debit history. Payment data is processed via third-party payment providers; OxGame does not store raw card or wallet credentials on its own servers.

For reference, familiar Pakistani payment references include Easypaisa, JazzCash, Raast (accessible via HBL, UBL, Meezan Bank, Bank Alfalah and others), bank transfer and cryptocurrency (BTC/USDT) where supported. These are referenced for contextual familiarity only — OxGame does not claim that any named provider endorses or supports online gambling transactions.

4.4 Technical & Device Data

We automatically collect technical data including: IP address, browser type and version, operating system, device type and identifiers, referring URL, pages visited, session duration, and click-path data within the Platform. This data is used for security monitoring, platform optimisation and fraud prevention.

4.5 Behavioural & Gaming Data

We collect records of your gaming and betting activity on the Platform, including wagers placed, games accessed, sports markets viewed, session timing, win and loss records, and responsible-gambling tool usage. This data is used for account management, responsible-gambling monitoring, fraud detection and regulatory compliance.

4.6 Communications Data

If you contact our support team via live chat, Help Center ticket or email, we retain records of those communications for the purposes of quality assurance, dispute resolution and regulatory compliance.

4.7 Data You Voluntarily Provide

Any additional information you provide voluntarily — for example, in survey responses or feedback submissions — will be processed solely for the stated purpose of that interaction and not retained beyond the period necessary for that purpose.

05 Legal Basis for Processing

OxGame processes Personal Data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

Legal Basis	Applicable Processing Activities
Contract Performance	Account registration, identity verification, payment processing, withdrawal handling, bonus administration and customer support interactions.
Legal Obligation	KYC/AML compliance, age verification, fraud investigation, reporting to regulatory authorities and document retention under applicable law.
Legitimate Interests	Security monitoring, fraud detection, responsible-gambling monitoring, platform analytics and business operations.
Consent	Non-essential cookies, optional marketing communications (where opted in), and any processing activity clearly identified as consent-based at the point of collection.

06 How We Use Your Data

OxGame uses collected Personal Data for the following purposes:

• Account Operation: Creating, maintaining and managing your registered Account, including authentication, password reset and session management.
• Service Delivery: Processing wagers, settling markets, crediting winnings, administering bonuses and delivering the full gaming and betting experience.
• Identity & Age Verification: Confirming that you meet the minimum age requirement and that your identity matches your registration data, as required by KYC and AML obligations.
• Payment Processing: Facilitating deposits and withdrawals via third-party payment providers and maintaining transaction records.
• Fraud & Security: Detecting and preventing fraudulent activity, unauthorised account access, money laundering, multi-accounting and other forms of abuse.
• Responsible Gambling Monitoring: Identifying patterns consistent with problem gambling behaviour and proactively applying responsible-gambling interventions in accordance with our Responsible Gambling policy.
• Customer Support: Responding to your enquiries, resolving disputes and improving support quality.
• Legal Compliance: Meeting obligations under applicable anti-money-laundering, data protection, gambling regulation and other legal frameworks.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience and content offerings.
• Direct Communications: Sending transactional messages (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about OxGame offers.

OxGame will not use your Personal Data for automated decision-making that produces significant legal effects on you, without providing you with an opportunity to request human review, except where strictly necessary for fraud prevention or legal obligation.

07 Data Sharing & Disclosure

OxGame does not sell your Personal Data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Payment Processors

We share financial and identity data with third-party payment service providers to facilitate deposits and withdrawals. These processors are contractually required to process your data securely and solely for payment-processing purposes.

7.2 Identity Verification Services

We share KYC documentation with specialist identity verification service providers who perform document authentication and fraud screening on our behalf, under strict data-processing agreements.

7.3 Game Technology Providers

Third-party game studios, live dealer providers and sports data suppliers may receive limited technical data (such as session tokens) necessary to deliver their content within the Platform. These providers are not authorised to use such data for their own marketing or other purposes.

7.4 Regulatory & Law Enforcement Authorities

OxGame may disclose Personal Data to relevant regulatory bodies, law enforcement agencies or courts of competent jurisdiction where required by law, by court order, or where necessary to protect the rights, safety and property of OxGame, its users or third parties.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring or sale of all or part of OxGame's business, Personal Data may be transferred to the acquiring entity, subject to equivalent data-protection safeguards. Users will be notified of any such transfer via a notice on the Platform.

08 International Data Transfers

Your Personal Data may be transferred to, stored and processed in countries outside your country of residence, including the jurisdiction in which OxGame's servers and operational infrastructure are located. Where such transfers occur, OxGame ensures that appropriate safeguards are in place, which may include:

• Standard Contractual Clauses approved by applicable data protection authorities;
• Transfers to countries recognised as providing an adequate level of data protection; or
• Other transfer mechanisms recognised as lawful under applicable data protection frameworks.

By using the Platform, you acknowledge that your Personal Data may be transferred internationally in accordance with this Policy. If you have concerns about specific transfer destinations, please contact us using the details in Section 16.

09 Data Retention

OxGame retains Personal Data for the period necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law. General retention principles are as follows:

Data Category	Typical Retention Period	Legal Basis for Retention
Account Registration Data	Duration of account + 5 years post-closure	Legal obligation (AML), contract
KYC Documentation	5 years from end of business relationship	Legal obligation (AML)
Transaction Records	5–7 years from transaction date	Legal obligation, legitimate interest
Gaming Activity Records	Duration of account + 5 years post-closure	Legal obligation, responsible gambling
Support Communications	3 years from last interaction	Legitimate interest (dispute resolution)
Analytics / Technical Data	Up to 26 months (anonymised thereafter)	Legitimate interest

Following the expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Where data must be retained for legal proceedings or regulatory investigation, it will be retained for the duration of those proceedings.

10 Cookies & Tracking Technologies

OxGame uses cookies and similar tracking technologies to operate and improve the Platform. Below is an overview of the categories of cookies we use:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without impairing core Platform functionality.

10.2 Performance & Analytics Cookies

These cookies collect anonymised or pseudonymised data about how Users interact with the Platform — which pages are visited, how long sessions last, and where errors occur. This data helps OxGame improve Platform performance and user experience. These cookies are set on the basis of our legitimate interest.

10.3 Functional Cookies

Functional cookies remember your preferences — such as language settings, display preferences and responsible-gambling tool configurations — to provide a more personalised experience across sessions.

10.4 Managing Cookies

You may configure or restrict cookie use through your browser settings. Please note that disabling non-essential cookies will not prevent access to core Platform features, but may affect certain personalisation functions. Detailed cookie management instructions are available in your browser's help documentation.

11 Your Rights as a Data Subject

Depending on your jurisdiction, you may hold some or all of the following rights in relation to your Personal Data held by OxGame. We will respond to verified rights requests within a reasonable timeframe, and in any event within 30 days unless the request is complex or numerous.

• Right of Access: You may request a copy of the Personal Data OxGame holds about you and information about how it is processed. Requests may be submitted via the Help Center or by contacting support.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. You can update basic account information directly through your Account settings. For KYC-related corrections, contact support.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to overriding legal retention obligations (e.g., AML requirements mandating retention for five years).
• Right to Restriction: You may request that OxGame restrict processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling. OxGame will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. Withdrawal can be exercised through Account settings (for marketing communications and non-essential cookies).

To exercise any of the above rights, please contact OxGame via the Live Chat or Help Center. We may need to verify your identity before processing your request. If you are dissatisfied with our response, you may lodge a complaint with the relevant supervisory authority in your jurisdiction.

12 Data Security

OxGame implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration or disclosure. These measures include, but are not limited to:

• TLS/SSL Encryption: All data transmitted between your browser and the Platform is protected by industry-standard HTTPS encryption. Verify the padlock icon in your browser address bar.
• Password Hashing: Account passwords are hashed using a strong one-way algorithm (bcrypt). OxGame never stores or transmits passwords in plain text.
• Payment Data Tokenisation: Payment method details are tokenised by third-party processors. OxGame does not store raw card numbers or wallet credentials on its infrastructure.
• Access Controls: Personal Data is accessible only to OxGame personnel with a legitimate operational need. Access is logged and audited.
• Security Monitoring: Continuous monitoring for intrusion attempts, anomalous access patterns and data breach indicators is conducted across OxGame's infrastructure.

Despite these measures, no internet transmission or electronic storage system is entirely secure. OxGame cannot guarantee absolute security of your data. If you become aware of any security vulnerability or suspect unauthorised access to your Account, please contact our support team immediately via live chat.

13 Minors

OxGame's Platform is strictly intended for adults aged 18 or older — or the higher minimum age required by the operator's license jurisdiction. OxGame does not knowingly collect Personal Data from individuals below the applicable minimum age.

Age verification is conducted as part of the KYC process. Where OxGame discovers or suspects that a registered User is below the minimum age, the Account will be suspended immediately, the matter will be investigated, and any balance will be handled in accordance with applicable regulatory requirements.

Parents and guardians are encouraged to install appropriate internet filtering and parental control software on devices accessible by minors to prevent underage access to gambling platforms. OxGame does not accept any responsibility for access by minors that arises from inadequate household device controls.

14 Specific Considerations for Pakistani Users

OxGame serves players from Pakistan, a market with specific legal and regulatory characteristics that users should be aware of in the context of data privacy:

14.1 Applicable Legal Framework

Pakistan's data protection landscape is evolving, with the Personal Data Protection Bill (PDPB) and related regulations in various stages of legislative development as of the effective date of this Policy. OxGame's primary data-protection obligations are governed by the law of its license jurisdiction. OxGame monitors developments in Pakistani data protection law and will update this Policy as required to reflect any new applicable obligations.

14.2 Payment Reference Data

When you use payment methods familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — your transaction data will be processed by the relevant third-party payment provider under their own privacy terms. OxGame retains tokenised transaction records only. Users should review the privacy policies of their chosen payment provider independently.

14.3 Cross-Border Transfers

Personal Data provided by Pakistani users will be transferred to and processed in OxGame's operational jurisdiction and potentially other countries where OxGame's service providers are located. These transfers are conducted with appropriate contractual safeguards as described in Section 8.

OxGame does not represent that these transfers comply with any specific Pakistani cross-border data transfer restriction that may apply. Pakistani users should assess their own legal position before registering.

15 Amendments to This Policy

OxGame may amend this Privacy Policy from time to time to reflect changes in our data-processing practices, legal requirements or business operations. Material changes — defined as changes that substantially affect your rights or how your data is processed — will be communicated to registered Users via email and/or a prominent notice on the Platform at least seven (7) days before the revised Policy becomes effective.

Non-material updates (such as clarifications, formatting changes or corrections to typographical errors) may be made without advance notice. The effective date at the top of this page will be updated to reflect any revision.

Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, please contact support to request Account closure in accordance with our Terms & Conditions.

The current version of this Policy is always accessible at oxgame.cam/privacy-policy. We encourage you to review this page periodically to remain informed of how OxGame handles your Personal Data.

16 Contact Us

If you have any questions, requests or concerns regarding this Privacy Policy, or if you wish to exercise any of your data-subject rights described in Section 11, please contact OxGame through the following channels:

Please include your registered email address and a clear description of your request when contacting us. We aim to acknowledge all privacy-related correspondence within two (2) business days and to provide a substantive response within thirty (30) calendar days.