xc999 Privacy Policy

1. Introduction

xc999 ("xc999," "we," "us," "our") is committed to protecting the privacy and personal data of all players and visitors who use the xc999 platform. This Privacy Policy ("Policy") describes in detail what personal data xc999 collects, why it is collected, how it is used, with whom it is shared, how long it is retained, and what rights you have with respect to your personal data.

This Policy applies to all services operated by xc999, including the xc999 website, the online casino lobby, the sports betting platform, the live dealer product, promotional activities, and all customer support channels. It applies to all players accessing xc999 from Pakistan, including those in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and elsewhere in the country.

By registering an xc999 account, making a deposit, placing a bet, or continuing to use xc999 after this Policy has been made available to you, you signify your informed consent to the data practices described herein. If you do not agree with this Policy, you must discontinue use of xc999 and may request deletion of your account and associated personal data.

2. Data Controller

For the purposes of applicable data protection legislation, xc999 is the data controller in respect of personal data collected and processed in connection with your use of the xc999 platform. Questions, requests, or complaints relating to data protection should be addressed to the xc999 Data Protection team at [email protected] with the subject line "Data Protection Enquiry."

3. Personal Data We Collect

3.1 Registration and Identity Data

When you create an xc999 account, we collect:

• Full legal name as it appears on your Pakistani CNIC or passport;
• Date of birth;
• Pakistani CNIC number or passport number (where provided for KYC verification);
• Residential address;
• Email address;
• Pakistani mobile number (in 03xx format).

3.2 Financial and Transactional Data

For the purpose of processing PKR deposits and withdrawals, xc999 collects:

• JazzCash or Easypaisa account numbers linked to your xc999 account;
• Bank account details for HBL, UBL, Meezan Bank, or Bank Alfalah transfer transactions;
• IBAN or account number for bank transfer withdrawals;
• Transaction reference numbers and timestamps;
• Deposit and withdrawal amounts in PKR;
• Cryptocurrency wallet addresses where USDT TRC20 is used.

3.3 Gameplay and Activity Data

xc999 logs your gameplay activity, including games played, bet amounts, win/loss history, session duration, bonus usage, and responsible gaming tool activations. This data is used to operate your account, calculate bonus eligibility, and fulfil our responsible gaming obligations.

3.4 Technical and Device Data

We automatically collect certain technical data when you access xc999, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and xc999 page visit logs.

3.5 Communications Data

We retain records of communications between you and xc999 support, including live chat transcripts, emails, and complaint records.

4. How We Collect Personal Data

xc999 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a promotion;
• Automatically — through cookies, server logs, and analytics tools when you navigate the xc999 platform;
• From third parties — including identity verification providers, payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah), fraud prevention services, and game providers in connection with your activity on xc999.

5. Purposes and Legal Basis for Processing

xc999 processes your personal data for the following purposes:

• Contract performance: To create and manage your xc999 account, process PKR deposits and withdrawals, settle bets, and provide customer support;
• Legal obligations: To conduct KYC identity verification, comply with anti-money laundering requirements, and respond to lawful requests from regulatory or law enforcement authorities;
• Legitimate interests: To detect and prevent fraud, protect the integrity of xc999 games and betting markets, improve our platform through analytics, and manage our business relationships with game providers and payment processors;
• Consent: To send you marketing communications about xc999 promotions, new games, and special offers — only where you have given explicit opt-in consent. You may withdraw this consent at any time by contacting support or updating your account communication preferences.

6. PKR Banking and Payment Data

xc999 takes a heightened approach to the security of payment-related personal data given the financial sensitivity involved. Payment data processed through JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah is transmitted exclusively over encrypted connections. xc999 does not store full bank account numbers or card numbers on its own servers; where payment data must be retained for transaction record purposes, it is stored in tokenised or truncated form.

xc999 shares only the minimum necessary payment data with payment processors to complete a transaction. We do not share your full financial account details with game providers or any other third party not involved in payment processing.

In the event that a transaction dispute arises involving a Pakistani bank or mobile wallet, xc999 may be required to share transaction records with the relevant financial institution in order to resolve the dispute. Such disclosures are made on a minimum-necessary basis and only to parties with a legitimate need to receive the information.

7. Data Sharing and Disclosure

xc999 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard, and USDT wallet services — to facilitate PKR deposits and withdrawals;
• Identity verification providers: Third-party KYC and document verification services used to fulfil our age and identity verification obligations;
• Game providers: xc999 game studios (Evolution Gaming, Pragmatic Play, PG Soft, and others) receive a pseudonymous player identifier and bet history data sufficient to operate the game. They do not receive your full name, CNIC, or payment account details;
• Fraud and risk management services: Third-party services engaged to detect and prevent fraud, money laundering, and problem gambling;
• Legal and regulatory authorities: Where xc999 is required by applicable law, regulation, court order, or lawful authority to disclose personal data.

Any third party with whom xc999 shares personal data is contractually required to process that data only for the specified purpose and to maintain appropriate security standards.

8. International Data Transfers

xc999 operates internationally, and some of the third parties with whom we share data — including game providers and fraud prevention services — may process data in jurisdictions outside Pakistan. Where data is transferred internationally, xc999 takes steps to ensure that such transfers are subject to appropriate safeguards, including contractual data protection clauses, to ensure that your data receives a standard of protection equivalent to that applied in jurisdictions with comprehensive data protection frameworks.

9. Data Retention

xc999 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. In general:

• Account data and KYC records are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering retention requirements;
• Transaction records are retained for a minimum of five (5) years following the date of the transaction;
• Support and communication records are retained for three (3) years;
• Gameplay logs are retained for a period consistent with applicable regulatory requirements.

Following expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

10. Cookies and Tracking Technologies

xc999 uses the following categories of cookies and similar tracking technologies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your xc999 account. They cannot be disabled without preventing core platform functionality;
• Analytics cookies: Used to understand how players navigate xc999 — which pages are visited, how long sessions last, and where players encounter difficulties. This data is aggregated and anonymised;
• Preference cookies: Remember your language, display, and notification preferences so you do not need to reset them on each visit;
• Marketing cookies: Only placed where you have opted in to receiving marketing communications from xc999. These track whether you have engaged with a promotion or advertisement.

You can manage, restrict, or delete cookies through your browser settings at any time. Disabling analytics and preference cookies will not prevent you from using xc999, but may affect your experience.

11. Children's Privacy

xc999 services are strictly for individuals aged 18 years and older. xc999 does not knowingly collect, process, or retain personal data from persons under the age of 18. If xc999 becomes aware that personal data has been collected from a person under 18, all such data will be immediately deleted and the associated account will be permanently closed. If you believe a minor has registered an account on xc999, please contact us immediately at [email protected].

12. Your Data Protection Rights

As an xc999 account holder, you have the following rights with respect to your personal data:

• Right of access: Request a copy of the personal data xc999 holds about you;
• Right of rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations (e.g., AML record-keeping requirements);
• Right to restriction: Request that xc999 restrict the processing of your personal data in certain circumstances;
• Right to object: Object to processing of your personal data where xc999 relies on legitimate interests as the legal basis;
• Right to data portability: Request receipt of your personal data in a structured, machine-readable format;
• Right to withdraw consent: Withdraw any consent you have previously given to xc999 for processing of your personal data, including marketing communications, at any time.

To exercise any of these rights, contact the xc999 Data Protection team at [email protected]. We will respond to all verified data subject requests within thirty (30) days. Complex requests may require additional time; we will notify you if this is the case.

13. Security Measures

xc999 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and xc999 servers;
• Encrypted storage of sensitive fields including KYC document data and payment references;
• Role-based access controls ensuring staff access personal data only to the extent required by their specific function;
• Regular penetration testing and security audits conducted by independent third parties;
• Two-factor authentication available for all xc999 player accounts and enforced for xc999 administrative accounts.

No transmission of data over the internet can be guaranteed to be completely secure. While xc999 takes all reasonable precautions, you acknowledge that you transmit data to xc999 at your own risk. If you suspect your xc999 account has been compromised, contact support immediately and change your password.

14. Third-Party Links

The xc999 platform may contain links to third-party websites, including game provider portals, payment processor support pages, or responsible gaming resources. xc999 is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any third-party site you visit.

15. Changes to This Privacy Policy

xc999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Material changes will be communicated to registered players via email or a notice on the xc999 platform no less than seven (7) days before the changes take effect. The "Last updated" date at the top of this Policy will be revised accordingly.

Your continued use of xc999 following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

16. Contact Us

For all privacy-related enquiries, data subject requests, or concerns about how xc999 handles your personal data, please contact the xc999 Data Protection team: