Unexch Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to Unexch, the online sports betting exchange and casino platform accessible at unexch.net ("Unexch", "we", "us", "our"). Unexch is the data controller in respect of all personal information collected through the platform, its mobile pages and associated communications.

When we refer to "you" or "the player" in this policy, we mean any individual who visits the Unexch website, registers an account, places a bet, plays a casino game, or otherwise interacts with our platform in any capacity.

Our primary contact for all privacy matters is our support team, reachable at support@unexch.net. Data access requests, correction requests and deletion requests can all be submitted through this channel.

Unexch collects several categories of personal data depending on how you use the platform. The table below sets out what we collect and the context in which it is gathered:

We do not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is necessary for standard identity verification.

Unexch collects personal data through the following channels:

• Registration form: When you create your Unexch account, you directly provide your name, mobile number, date of birth and chosen password.
• KYC submission: When you submit identity documents for verification prior to your first withdrawal, we receive and process those documents directly from you.
• Deposit and withdrawal transactions: When you deposit using Easypaisa, JazzCash, NayaPay or bank transfer, we receive payment reference data necessary to process and verify your transaction.
• Platform usage: As you browse Unexch, place bets, play games and navigate the site, we collect technical and usage data automatically through standard server logs and analytics tools.
• Customer support interactions: When you contact our support team, the content of those interactions is logged and associated with your account.
• Cookies and similar technologies: When you visit unexch.net, cookies and tracking pixels may be set in your browser. Full details are in Section 7.

Unexch uses your personal data for specific, legitimate purposes. We do not use your data in ways you would not reasonably expect. Below are the reasons we process each category of data:

• To provide and manage your account: Identity, contact and account data is used to create and maintain your Unexch account, authenticate your logins and ensure your account belongs to the right person.
• To process deposits and withdrawals: Financial data is required to receive funds from your payment methods and return winnings to the correct wallet or bank account in PKR.
• To verify your identity (KYC): KYC documents are processed to confirm you are who you say you are, that you meet the minimum age requirement of 18, and that your payment methods belong to you. This protects both you and the platform.
• To detect and prevent fraud: Technical data, usage data and financial data are used by our fraud prevention systems to identify unusual activity that might indicate fraudulent behaviour, money laundering or account takeover attempts.
• To fulfil responsible gaming commitments: Usage and account data help us identify patterns that may indicate problem gambling, enabling us to offer appropriate tools and support where needed.
• To improve the platform: Anonymised and aggregated usage data helps us understand how players use Unexch — which features are working well, where there are problems and what improvements to prioritise.
• To respond to support queries: Contact and communications data is used to provide you with accurate, efficient customer support.
• To send relevant communications: With your consent, we may send you promotional offers, bonus notifications and platform updates by SMS or email. You can opt out at any time.

Each use of your personal data by Unexch rests on one of the following legal bases:

• Contract performance: Processing your registration details, deposits, withdrawals and bet history is necessary for Unexch to deliver the services you signed up for.
• Legal obligation: KYC verification and transaction records are processed to comply with applicable anti-money laundering and fraud prevention obligations.
• Legitimate interests: Technical and usage data is processed based on Unexch's legitimate interest in keeping the platform secure, preventing fraud and improving user experience — provided these interests are not overridden by your privacy rights.
• Consent: Marketing communications (SMS, email) are sent only where you have given clear, specific consent. You may withdraw consent at any time by contacting support@unexch.net or using the unsubscribe option in any communication.

Unexch does not sell your personal data. We do not share your data with third-party marketing companies. Data is shared only in the limited circumstances described below:

• Payment processors: When you deposit or withdraw, your transaction data is shared with the relevant payment service (Easypaisa, JazzCash, NayaPay, SadaPay, your bank) solely to process the transaction.
• KYC verification providers: Identity documents submitted for verification may be processed by a specialist third-party KYC service operating under strict data processing agreements with Unexch.
• Game software providers: When you play a casino game or slot, the game provider's system processes your bet and result. The data they receive is limited to what is necessary to run the game — they do not receive your full personal profile.
• Fraud prevention and security services: Aggregated technical data may be shared with security providers to identify and block fraudulent or abusive behaviour across the platform.
• Legal requirements: Unexch will disclose data to law enforcement or regulatory authorities if required to do so by a valid legal process, court order or applicable law. We will notify you of such disclosure where legally permitted to do so.

All third parties who handle Unexch player data are bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

Unexch uses cookies and similar technologies on its website. Cookies are small text files placed on your device when you visit a site. They help the site function correctly, remember your preferences and understand how visitors use the platform.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect the functionality of Unexch. We do not use third-party advertising cookies on our platform.

All personal data collected by Unexch is stored on secure servers with the following protections in place:

• TLS (Transport Layer Security) encryption on all data transmitted between your device and Unexch servers
• Encrypted storage of sensitive data fields including passwords (stored as irreversible hashes, never in plain text), CNIC numbers and financial data
• Access controls: only authorised Unexch personnel with a genuine operational need may access player personal data
• Regular security audits and vulnerability assessments of our infrastructure
• Two-factor authentication available to all players to add an extra layer of protection to their accounts

Unexch retains personal data only for as long as necessary for the purpose it was collected, or as required by applicable legal and regulatory obligations. The general retention periods are:

• Account data: Retained for the duration of your account and for 5 years after account closure to comply with anti-money laundering record-keeping requirements
• Financial transaction records: Retained for 7 years from the date of the transaction in line with standard financial record-keeping obligations
• KYC documents: Retained for the duration of your account plus 5 years after closure; original image files are deleted after verification is confirmed, with verification status and reference retained
• Support communications: Retained for 3 years from the date of the interaction
• Technical and usage data: Typically aggregated and anonymised after 13 months; raw server logs retained for up to 12 months
• Inactive accounts: If your account has had no activity for 24 months, we may archive your data. You will be notified before archiving takes place.

When personal data is no longer required, it is securely deleted or anonymised in a manner that makes re-identification impossible.

As a player on Unexch, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@unexch.net:

Right of Access: You can request a copy of all personal data Unexch holds about you. We will provide this within 30 days of a verified request.

Right to Correction: If any personal data we hold is inaccurate or outdated, you can request that we correct it. You can also update your contact details directly within your account settings.

Right to Erasure: You can request that we delete your personal data. Note that we may be required to retain certain data for legal or regulatory reasons even after a deletion request. We will explain what data is retained and why.

Right to Data Portability: You can request a structured, machine-readable copy of the personal data you have provided to Unexch for transfer to another service provider.

Unexch takes the handling of identity documents especially seriously. When you submit KYC documents — your CNIC, selfie, or payment method proof — the following safeguards apply:

• Documents are transmitted to our verification team over an encrypted connection. They are never sent via unencrypted email or messaging channels.
• Access to KYC documents is restricted to the smallest possible number of authorised staff members who require it for verification purposes.
• Original document images are deleted from our systems once verification is confirmed. We retain only a verification status flag and the data points extracted (name, date of birth, CNIC number) as required for ongoing account management and legal record-keeping.
• Where a third-party KYC provider is involved, they operate under a strict data processing agreement and are prohibited from using your documents for any purpose beyond Unexch's verification requirement.

If your KYC documents are rejected and you resubmit, the rejected documents are deleted immediately. Unexch does not retain multiple copies of your identity documents.

Unexch may send you promotional messages about bonuses, game releases, PSL betting markets and special offers. These communications are sent only to players who have opted in to receive them during registration or through their account settings.

We communicate via SMS to your registered Pakistani mobile number and via email where you have provided one. We do not use automated calling for marketing purposes.

You can opt out of marketing communications at any time by:

• Replying STOP to any promotional SMS from Unexch
• Clicking the unsubscribe link in any marketing email
• Updating your communication preferences in your account settings
• Emailing support@unexch.net with the subject "Unsubscribe"

Please note that opting out of marketing does not stop transactional messages such as deposit confirmations, withdrawal notifications, account security alerts and KYC status updates. These are essential communications related to the running of your account and cannot be disabled.

Unexch does not knowingly collect personal data from individuals under the age of 18. Our platform is strictly for adults. Age verification is part of the KYC process for all registered players.

If we discover that an account has been created by a person under 18, the account will be closed immediately, all data deleted and any deposits returned to the source payment method. If you believe a minor has created an account on Unexch using your payment method or personal details, please contact us immediately at support@unexch.net.

Unexch may update this Privacy Policy from time to time to reflect changes in how we handle data, changes in applicable law, or improvements to our platform. When we make material changes, we will notify registered players via their registered mobile number or in-platform notification at their next login.

The most current version of this policy is always available at unexch.net/privacy-policy. The "Last updated" date at the top of this page will reflect when the current version was published. If you disagree with any changes, you may request account closure. Continued use of Unexch after changes are published constitutes acceptance of the updated policy.

For any questions, concerns or requests related to your personal data and how Unexch handles it, please get in touch through the contact details below. We take all privacy queries seriously and aim to respond within 5 business days.

For additional information about Unexch's broader policies, please review our Terms and Conditions and our Responsible Gaming page.