x000 Privacy Policy

1. Introduction

x000 ("we", "us", "x000", "the Platform") is committed to protecting the privacy and personal data of all individuals who use the x000 online casino and sports betting platform at x000.bet. This Privacy Policy ("Policy") describes how x000 collects, uses, stores, shares, and protects your personal data when you visit our website, register an account, make deposits, place bets, or interact with our customer support team.

This Policy applies to all players and visitors of x000.bet, regardless of the device or network from which they access the platform. It applies alongside x000's Terms and Conditions and any other supplementary policies published on the platform.

Privacy at x000 is not simply a regulatory checkbox. We genuinely believe that every Pakistani player who entrusts us with their personal information deserves transparency, security, and control. That commitment shapes every data practice described in this document.

If you have any questions about this Policy or about how x000 handles your personal data, please contact our support team through the details provided in Section 15 of this document.

2. Who We Are

x000 is an internationally licensed online casino and sports betting platform operating at x000.bet. x000 serves Pakistani players with a full range of gaming and wagering services, including cricket betting, PSL markets, live casino, slots, color prediction games, and high roller tables. All services are delivered entirely online.

For the purposes of this Privacy Policy, x000 is the data controller in respect of the personal data it collects from you as a player or visitor. This means x000 determines the purposes for which your data is processed and the means by which that processing is carried out.

3. Personal Data We Collect

x000 collects the following categories of personal data from players and visitors:

x000 collects only the personal data that is necessary for the specific purposes described in this Policy. We do not collect sensitive categories of data such as racial or ethnic origin, religious beliefs, or health data, unless this is strictly required for a specific regulatory purpose (such as processing a responsible gaming hardship request) and you have provided explicit consent.

4. How We Collect Your Data

x000 collects personal data through the following channels:

• Direct collection: Data you provide when completing the x000 registration form, submitting KYC documents, making a deposit or withdrawal, or contacting our support team via live chat or email.
• Automated collection: Technical data (IP address, device information, session data, and cookie data) is collected automatically by our web servers and analytics systems each time you visit x000.bet. This collection occurs whether or not you are a registered player.
• Payment processors: When you make a deposit via JazzCash, EasyPaisa, or a bank transfer, our payment processing partners share transaction confirmation data with x000 so that your deposit can be credited to your account. x000 does not directly handle the mobile wallet credentials you use to initiate the payment.
• KYC and identity verification providers: x000 may use third-party identity verification services to assist with document authentication as part of the KYC process. These providers share verification results (pass/fail) and flagged risk indicators with x000.
• Fraud detection systems: Our fraud prevention and responsible gaming systems may collect and analyse behavioural data — such as the speed and pattern of your betting activity — to detect unusual or potentially harmful activity.

5. How We Use Your Personal Data

x000 uses the personal data it collects for the following purposes:

• Account creation and management: To create, verify, and maintain your x000 player account, including processing login authentication and account security measures such as two-factor authentication (2FA).
• KYC and age verification: To verify your identity and confirm that you are at least 21 years of age before processing withdrawals, as required under our licensing obligations.
• Payment processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to process withdrawal requests back to your verified payment method.
• Service delivery: To provide you with access to x000 casino games, sports betting markets (including cricket and PSL betting), and all other platform features.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, collusion, and other prohibited conduct on the x000 platform.
• Responsible gaming: To monitor your gaming behaviour for signs of problem gambling, to apply responsible gaming limits and self-exclusion orders, and to fulfil our duty of care obligations under our licensing conditions.
• Customer support: To respond to your enquiries, complaints, and support requests via live chat and email, and to maintain records of our communications for quality and compliance purposes.
• Legal and regulatory compliance: To comply with our obligations under applicable anti-money-laundering (AML) regulations, our international gaming license conditions, and any lawful requests from regulatory or law enforcement authorities.
• Marketing communications: Where you have opted in, to send you promotional emails, bonus offers, and platform updates. You may withdraw your marketing consent at any time by clicking the unsubscribe link in any marketing email or by contacting support.
• Platform improvement: To analyse anonymised usage data in order to improve the performance, user experience, and content of the x000 platform.

x000 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

6. Legal Basis for Processing

x000 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and x000 — including account management, payment processing, and service delivery — is carried out on the legal basis of contractual necessity. Without this processing, x000 cannot provide its services to you.
• Legal obligation: Certain processing activities — including KYC identity verification, AML record-keeping, and responsible gaming monitoring — are required by x000's international gaming license and applicable regulations. This processing is carried out on the legal basis of compliance with a legal obligation.
• Legitimate interests: x000 processes technical and analytical data on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform. This includes fraud detection, platform security, and abuse prevention. x000 has assessed that these legitimate interests are not overridden by your privacy rights.
• Consent: Where x000 relies on consent as the legal basis for processing — specifically for sending marketing communications and for placing non-essential cookies on your device — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Third Parties

x000 does not sell your personal data to third parties. x000 may share your personal data with the following categories of third-party recipients, strictly for the purposes described in this Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT infrastructure providers receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• KYC and identity verification providers: Third-party document verification services may receive copies of your identity documents for the purposes of automated or manual verification. These providers are contractually bound to process your data only as directed by x000 and to maintain appropriate security standards.
• Fraud detection and risk management providers: x000 uses specialised third-party systems to detect fraud, money laundering, and responsible gaming risk. These systems may process your gaming behaviour data, IP address, and device fingerprint to generate risk scores. No unnecessary data is shared with these providers beyond what is required for risk assessment.
• Regulatory and law enforcement authorities: x000 is required by its gaming license to report certain types of suspicious activity to relevant regulatory and law enforcement authorities. Personal data shared in this context is disclosed only to the extent required by law and only in response to lawful requests.
• Technology and hosting providers: x000 uses reputable cloud infrastructure and software providers to host its platform. These providers act as data processors under contractual agreements that require them to maintain the security and confidentiality of your data.
• Customer support platforms: Our live chat and email support systems are operated using third-party customer communication software. Support interaction data is stored on these platforms subject to appropriate data processing agreements.

8. Data Retention

x000 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or our gaming license conditions.

The following general retention principles apply:

• Active account data: Personal data associated with your active x000 account is retained for the duration of your account's existence and for a period of at least five years after account closure, in order to comply with our AML record-keeping obligations.
• KYC documents: Identity documents submitted for KYC verification are retained for the period required by our gaming license — typically a minimum of five years from the date of submission or the date of account closure, whichever is later.
• Transaction records: All deposit and withdrawal records are retained for a minimum of five years from the transaction date to comply with financial record-keeping requirements.
• Responsible gaming records: Self-exclusion records and responsible gaming intervention logs are retained for a minimum of five years to support ongoing duty of care obligations.
• Support communications: Live chat transcripts and email correspondence are retained for a period of two years from the date of the interaction, unless the communication relates to a formal complaint or dispute, in which case it is retained for five years.
• Marketing consent records: Records of your marketing consent preferences are retained for as long as your account is active and for two years following account closure.

When personal data is no longer required for any of the purposes described above and no legal retention obligation applies, x000 will securely delete or anonymise that data in a manner that prevents reconstruction.

9. Cookies & Tracking Technologies

x000 uses cookies and similar tracking technologies on x000.bet to support the operation of the platform and to improve your experience. A cookie is a small text file placed on your device by our web server when you visit x000.bet.

x000 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the x000 platform to function. They maintain your login session, remember your language preferences, and enable core security features. These cookies cannot be disabled without breaking the functionality of the platform.
• Functional cookies: These cookies remember your choices and preferences — such as your preferred game lobby view or responsible gaming reminder settings — so that you do not need to reset them on every visit.
• Analytical cookies: x000 uses anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. This data is used in aggregate form only and does not identify individual players.
• Security cookies: These cookies support x000's fraud detection and bot prevention systems. They help us identify unusual login patterns, suspicious betting activity, and automated abuse of the platform.

You can control the placement of non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the x000 platform, including your ability to stay logged in during a session.

10. Data Security

x000 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data in transit between your device and x000's servers is encrypted using industry-standard 256-bit SSL/TLS technology. This applies to login credentials, payment data, KYC document uploads, and all other personal data transmitted through the platform.
• Encryption at rest: Sensitive personal data stored on x000's servers — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data within x000's internal systems is restricted on a strict need-to-know basis. Employees and service providers are granted access only to the data categories required for their specific role. All internal access is logged and audited.
• Two-factor authentication (2FA): x000 strongly recommends that all players enable 2FA on their accounts. 2FA adds a second layer of verification to your login process, significantly reducing the risk of unauthorised account access.
• Regular security audits: x000 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in our platform infrastructure.
• Incident response: x000 maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, x000 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

While x000 takes all commercially reasonable steps to protect your personal data, no online system can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials and for notifying x000 immediately if you suspect unauthorised access to your account.

11. Your Data Rights

As a data subject, you have the following rights in relation to the personal data held about you by x000. These rights may be subject to certain limitations where x000 has overriding legal obligations or legitimate interests that prevent full compliance:

• Right of access: You have the right to request a copy of the personal data that x000 holds about you. x000 will respond to verified access requests within 30 days.
• Right to rectification: If any personal data x000 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly from your x000 account dashboard.
• Right to erasure: In certain circumstances, you have the right to request that x000 delete your personal data. This right is subject to x000's legal obligations to retain certain data for compliance purposes — in particular, our AML and KYC record-keeping requirements may prevent full erasure for up to five years following account closure.
• Right to restrict processing: You have the right to request that x000 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to data portability: Where x000 processes your personal data on the basis of your consent or on the basis of contractual necessity, you have the right to receive a copy of that data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to x000's processing of your personal data where that processing is based on legitimate interests. x000 will comply with your objection unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where x000 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

12. Children's Privacy & Age Restriction

x000 is strictly an adults-only platform. Access to all x000 services is prohibited for any person under the age of 21 years. x000 does not knowingly collect personal data from individuals under the age of 21.

x000's registration process includes a mandatory age declaration, and all accounts are subject to KYC age verification prior to any withdrawal being processed. Where x000's systems identify that an account may have been registered by a person under the age of 21, the account will be immediately suspended and investigated. Any deposits made by an underage player will be returned to the originating payment method. Any winnings accumulated will be forfeited in full.

Parents and guardians who believe that a person under 21 in their care may have registered an account on x000 are encouraged to contact our support team immediately at [email protected]. x000 takes such reports extremely seriously and will act on them without delay.

x000 also strongly recommends that parents and guardians use parental control software to prevent underage individuals from accessing online gambling platforms.

13. Third-Party Links

The x000 platform may from time to time contain references to third-party content, services, or platforms. x000 does not control the privacy practices or data collection activities of any third-party websites or services, and this Privacy Policy does not apply to those external destinations.

x000 is not responsible for the privacy policies or content of any third-party sites. If you follow a link to an external site from x000.bet, we encourage you to read that site's privacy policy before submitting any personal information to it.

14. Changes to This Privacy Policy

x000 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made in response to updates in applicable law or regulation, changes to our gaming license conditions, new processing activities introduced as x000's services evolve, or improvements in data protection best practices.

When material changes are made to this Policy, x000 will notify registered players by email to their registered address and by displaying a prominent notice on the x000 platform. The updated Policy will be published on this page with a revised "Last Updated" date shown at the top of the document.

Your continued use of the x000 platform after the effective date of any change to this Policy constitutes your acceptance of the revised version. If you do not agree with a material change, you have the right to close your account and request the return of any unencumbered balance by contacting x000 support.

x000 recommends that you review this Privacy Policy periodically to stay informed of how we are protecting your personal data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to x000's handling of your personal data, please reach out to our support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly from your x000 account dashboard

When submitting a data rights request or a privacy complaint, please include your registered email address and a description of your request or concern so that our team can assist you as efficiently as possible. x000 will verify your identity before actioning any data rights request.

x000 aims to respond to all privacy-related enquiries within five business days. Formal data rights requests will be responded to within 30 calendar days of receipt.