x999 Privacy Policy —
How We Handle Your Data

For the purposes of this Privacy Policy, the data controller responsible for your personal information is the operator of the x999 platform, accessible at x999.pro. x999 is the entity that determines the purposes and means by which your personal data is processed in connection with your use of the x999 online casino, sportsbook, and related services.

x999 operates under applicable international gaming regulations and is subject to the data protection and anti-money laundering requirements of its licensing jurisdiction, in addition to best-practice data governance standards applicable to online gaming operators serving international markets including Pakistani players.

x999 collects the following categories of personal data from registered players and platform users:

2.1 Identity Data

• Full legal name
• Date of birth (required to verify 21+ age eligibility)
• Nationality and country of residence
• Government-issued identification document details where KYC verification is required
• Photographic identification copies where submitted for verification purposes

2.2 Contact Data

• Pakistani mobile number (used as primary login credential and OTP channel)
• Email address (where provided)

2.3 Financial Data

• JazzCash or EasyPaisa account numbers associated with deposits and withdrawals
• Bank account details for HBL, UBL, or Meezan Bank transfers where applicable
• USDT TRC20 wallet addresses used for cryptocurrency transactions
• Transaction history including deposit amounts, withdrawal requests, and processing dates
• Note: x999 does not store full card numbers. Visa and Mastercard transactions are processed by certified PCI-DSS compliant third-party payment processors.

2.4 Gaming & Activity Data

• Bet history, game session logs, and results across all x999 products
• Bonus usage records and wagering progress data
• Account login and logout timestamps
• Customer support interaction records

2.5 Technical Data

• IP address and approximate geolocation data at time of login
• Device type, operating system, and browser information
• Session duration and navigation patterns on the x999 Platform
• Cookie and session token identifiers (see Section 10)

x999 collects personal data through the following channels and methods:

• Direct Registration: Information you provide when creating your x999 account, including your mobile number, name, and date of birth.
• KYC Verification Submissions: Identity documents and photographs you submit when requested by x999 for verification purposes.
• Payment Transactions: Financial details captured automatically or provided by you when depositing or withdrawing via JazzCash, EasyPaisa, bank transfer, crypto wallet, or card.
• Platform Interaction: Gaming and activity data generated automatically as you use the x999 platform — every bet placed, game launched, and session initiated creates data records.
• Technical Systems: Server logs, session tokens, cookies, and similar technologies automatically collect technical data when your browser or device connects to the x999 platform.
• Support Interactions: Information you provide when contacting x999's Live Chat support team, including the content of your queries and any supporting information you share.

x999 processes your personal data for the following defined purposes:

• Account Management: Creating, maintaining, and managing your x999 player account, including login authentication and session management.
• Age and Identity Verification: Confirming that you meet the mandatory 21+ age requirement and verifying your identity in compliance with anti-money laundering regulations and x999's Know Your Customer obligations.
• Payment Processing: Executing deposits from and withdrawals to your nominated Pakistani payment methods — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT TRC20, SadaPay, Visa, and Mastercard.
• Service Delivery: Providing access to all x999 gaming products including cricket betting, live dealer casino, slots, and other Services, and recording gaming activity as required.
• Bonus Administration: Tracking bonus eligibility, wagering progress, and managing promotional offers in your x999 account.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and other security threats to the x999 platform and player funds.
• Regulatory Compliance: Fulfilling x999's legal and regulatory obligations including transaction record keeping, AML reporting requirements, and responding to lawful authority requests.
• Customer Support: Investigating and responding to enquiries, complaints, and disputes submitted by players through x999's Live Chat and email channels.
• Platform Improvement: Analysing aggregated, anonymised usage patterns to improve game performance, user experience, and the overall quality of x999's platform and services.
• Responsible Gaming: Monitoring player activity patterns in accordance with x999's responsible gaming obligations, including flagging accounts that may exhibit signs of problem gambling behaviour for proactive outreach.

x999 processes your personal data on the following legal bases under applicable data protection law:

• Contractual Necessity: Processing necessary for the performance of x999's contract with you (the Terms and Conditions you accept at registration), including account creation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with x999's legal and regulatory obligations, including KYC verification, AML record-keeping, and regulatory reporting.
• Legitimate Interests: Processing necessary for x999's legitimate business interests, including fraud detection, security monitoring, and platform analytics, where such interests are not overridden by your rights and interests.
• Consent: Where x999 processes data on the basis of your consent (for example, in connection with optional marketing communications), you retain the right to withdraw that consent at any time.

x999 may share your personal data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Visa/MC processing networks, and USDT blockchain processors — solely for executing your financial transactions.
• Game Content Providers: Certified game studios such as Pragmatic Play, NetEnt, Microgaming, and Play'n GO may receive the minimum account data necessary to deliver and display their games within the x999 platform. These providers are contractually bound to confidentiality and data protection obligations.
• Identity Verification Services: Third-party KYC verification providers used by x999 to verify player identity and age in accordance with regulatory requirements.
• Fraud Prevention and Security Services: Specialist third-party providers engaged by x999 for anti-fraud analysis, bot detection, and security monitoring.
• Regulatory and Law Enforcement Authorities: Where x999 is legally required or compelled by competent authority to disclose personal data, it will do so to the minimum extent required by the applicable legal obligation, and will seek to notify the affected player where legally permitted to do so.
• Professional Advisors: Legal, accounting, and compliance advisors engaged by x999, who are subject to professional confidentiality obligations.

x999 operates as an international online gaming platform. Your personal data may be processed by x999's systems and certain third-party service providers in jurisdictions outside Pakistan, including within x999's operating licensing jurisdiction and in the countries where game servers and payment infrastructure are hosted.

Where personal data is transferred internationally, x999 ensures that appropriate safeguards are in place to protect your data to a standard consistent with applicable data protection law. Such safeguards include contractual obligations on recipient parties and selection of partners operating in jurisdictions with adequate data protection frameworks.

By registering an x999 account and accepting these terms, you acknowledge and consent to the international transfer of your personal data as described in this section, subject at all times to the protections described in this Privacy Policy.

x999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The following general retention principles apply:

• Active Account Data: Personal and financial data associated with an active x999 account is retained for the duration of the account's existence plus a minimum period thereafter as required by applicable regulations.
• Transaction and Gaming Records: Financial transaction records and gaming activity logs are retained for a minimum of five (5) years from the date of the relevant transaction or activity, in compliance with anti-money laundering record-keeping requirements.
• KYC Documentation: Identity verification documents are retained for the duration of the account relationship and for a minimum period following account closure as required by the licensing authority's KYC record-keeping rules.
• Customer Support Records: Records of support interactions are retained for a minimum of two (2) years to enable dispute resolution and quality assurance review.
• Technical and Log Data: Server logs and technical data are retained for a shorter period, typically up to 90 days, unless required for longer retention for security investigation purposes.

Upon expiry of the applicable retention period, x999 will securely delete or anonymise your personal data in accordance with industry best practices.

Subject to applicable data protection law and x999's regulatory obligations, you hold the following rights in respect of your personal data held by x999:

x999 uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. The following types of cookies are used:

• Strictly Necessary Cookies: Session cookies required to maintain your x999 login state, security tokens, and core platform functionality. These cannot be disabled as the platform cannot function without them.
• Performance Cookies: Anonymised analytics cookies that help x999 understand how players navigate the platform, which games are most popular, and where technical performance issues may occur. This data is aggregated and does not identify individual players.
• Functional Cookies: Cookies that remember your preferences — such as language settings and display preferences — to personalise your x999 experience between sessions.
• Security Cookies: Cookies used by x999's fraud and security systems to identify suspicious login patterns and protect player accounts from unauthorised access.

x999 does not use third-party advertising cookies or tracking pixels. Your x999 browsing behaviour is not shared with advertising networks.

You may manage cookie settings through your browser's settings panel. Note that disabling certain categories of cookies may impair the functionality of the x999 platform, including the ability to maintain your logged-in session.

x999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 Encryption in Transit: All data transmitted between your device and the x999 platform is encrypted using Transport Layer Security 1.3 — the current gold standard for connection security.
• AES-256 Encryption at Rest: All personal data stored in x999's systems is encrypted at rest using AES-256 encryption, rendering it unreadable without the appropriate decryption keys.
• Two-Factor Authentication: x999 supports and actively encourages OTP-based two-factor authentication for all player accounts, adding a critical second layer of protection against unauthorised login even if credentials are compromised.
• Access Controls: Strict role-based access controls ensure that x999 personnel can only access player data that is directly relevant to their authorised job functions.
• Intrusion Detection: x999's security systems continuously monitor for unusual access patterns, suspicious login attempts, and potential intrusion activity, with automated alerts and responses.
• Regular Security Audits: x999 conducts periodic security reviews and penetration testing to identify and remediate vulnerabilities before they can be exploited.

If x999 discovers or has reason to believe that personal data has been collected from an individual under the age of 21, it will take immediate steps to verify the situation and, if confirmed, will:

• Permanently close the relevant x999 account without notice.
• Forfeit all balances, including real money and bonus funds, associated with the account.
• Securely delete the personal data of the underage individual from x999's active systems, subject to any mandatory retention obligations under applicable regulations.
• Take such further action as may be required by applicable law or licensing authority requirements.

x999 encourages parents and guardians to supervise their children's internet access and to install appropriate parental control software on devices that children may access. If you believe a minor has registered on the x999 platform, please contact support immediately.

The x999 platform may contain references to or integrations with third-party services including payment providers (JazzCash, EasyPaisa, bank transfer systems) and game content providers. When you interact with these third-party services, your data may be processed by those parties in accordance with their own privacy policies.

x999 is not responsible for the privacy practices or content of third-party services accessible through or integrated within the x999 platform. x999 selects payment and content partners who meet appropriate data protection standards and requires contractual data protection commitments from all service providers, but cannot be held liable for independent decisions made by those third parties regarding data beyond x999's direct control.

Players are encouraged to review the privacy policies of payment providers they use alongside x999 — particularly for JazzCash and EasyPaisa, which are operated independently by their respective parent companies.

x999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, x999's data processing practices, or platform features. The "Effective Date" displayed at the top of this page indicates when the current version entered into force.

Where material changes are made to this Privacy Policy, x999 will notify registered players via the mobile number or email address linked to their account, or by displaying a prominent notice on the x999 platform. Continued use of the x999 platform following notification of a Privacy Policy update constitutes acceptance of the revised policy.

Players are encouraged to review this Privacy Policy periodically to remain informed about how x999 manages their personal data. Previous versions of this Privacy Policy may be made available upon request by contacting x999 support.

For all queries, requests, or complaints relating to this Privacy Policy or x999's data processing practices, please contact x999's support team through the following channels:

• Live Chat: Available 24/7 directly within the x999 platform — the fastest route for urgent data protection concerns.
• Email: [email protected] — for formal written data rights requests and complaints.

x999 is committed to responding to all privacy-related enquiries within 48 hours and to providing a substantive response to data rights requests within 30 days of receipt.

If you are not satisfied with x999's response to a privacy complaint, you retain the right to escalate your complaint to the appropriate data protection supervisory authority or dispute resolution body applicable under x999's operating licence and your jurisdiction.