This Privacy Policy explains how xp999 collects, uses, stores, shares, and protects the personal data of all registered users and visitors to the xp999 platform. We are committed to handling your personal information with transparency, integrity, and in full compliance with applicable data protection principles. Please read this policy carefully before registering your xp999 account.
A plain-language summary of our core privacy commitments before you proceed to the full policy text below.
All personal data collected by xp999 — including KYC documents, PKR transaction records, and account information — is stored on encrypted servers with strict access controls. Your data is never stored on unprotected or shared infrastructure.
xp999 does not sell, rent, or trade your personal data to third-party marketing organisations under any circumstances. Data shared with third parties is limited strictly to service providers necessary for platform operation and regulatory compliance.
xp999 recognises your right to access, correct, and in appropriate circumstances request deletion of the personal data held about you. Data subject requests are handled within a reasonable timeframe in accordance with applicable data protection principles.
xp999 uses cookies and similar tracking technologies solely to maintain session security, improve platform functionality, and analyse aggregate usage patterns. We do not use cookies for cross-site advertising tracking or unauthorised profiling.
Data relating to responsible gaming tool usage — including deposit limits, self-exclusion elections, and cooling-off periods — is treated with the highest level of confidentiality within xp999 and is never used for marketing or promotional targeting purposes.
As a licensed operator, xp999 may be legally required to share certain user data with regulatory authorities, licensing bodies, or law enforcement agencies. Such disclosures are made only when legally mandated and in accordance with applicable data protection principles.
This Privacy Policy ("Policy") is issued by xp999 ("xp999", "We", "Us", "Our") and applies to all personal data collected, processed, stored, and used in connection with your access to and use of the xp999 online gaming platform, accessible at xp999.org, and all associated services, features, and communications offered by xp999.
xp999 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles and the requirements of xp999's international gaming licence. We collect only the data that is necessary for the purposes described in this Policy, and we do not use your data in ways that you would not reasonably expect given the nature of an online gaming and sports betting platform.
By registering an account on xp999, depositing funds, placing wagers, or otherwise using the xp999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside xp999's Terms & Conditions and Responsible Gaming Policy, which together govern your use of the xp999 platform.
For the purposes of this Privacy Policy, xp999 acts as the data controller in respect of all personal data collected from users of the xp999 platform. As data controller, xp999 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is conducted lawfully, fairly, and transparently.
xp999 operates under international gaming licensing standards and is subject to the data protection and KYC/AML obligations imposed by its applicable licensing authority. These obligations form part of the legal basis upon which xp999 processes certain categories of your personal data, particularly identity verification and transaction monitoring data.
All data controller responsibilities under this Policy are exercised by xp999's designated data protection function. Any queries, requests, or complaints relating to xp999's handling of your personal data should be directed to [email protected].
xp999 collects personal data from you in the following circumstances: during account registration, during KYC verification, during financial transactions, during your use of xp999 platform features, and through automated technical data collection during your browsing sessions on xp999.org.
The categories of personal data xp999 may collect about you are summarised in the table below:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | Registration & KYC verification |
| Contact Data | Pakistani mobile number, email address, city of residence | Registration & account updates |
| Financial Data | JazzCash/EasyPaisa account reference, deposit/withdrawal amounts in PKR, transaction history | Deposits, withdrawals, bonus claims |
| KYC Documents | Scanned CNIC, proof of address, selfie verification image | Identity verification process |
| Gaming Activity Data | Bet history, game session records, win/loss data, bonus usage | During platform use |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Automated — all site visits |
| Responsible Gaming Data | Deposit limits set, self-exclusion elections, cooling-off periods | When tools are activated |
| Communications Data | Support ticket content, live chat transcripts, email correspondence | Customer support interactions |
xp999 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data, except where such data is incidentally disclosed in responsible gaming communications or support interactions. Any such incidental disclosure is treated with heightened confidentiality.
xp999 uses the personal data it collects for the following purposes:
xp999 processes your personal data on the following legal bases, depending on the specific processing activity:
xp999 does not sell, rent, lease, or trade your personal data to any third party for their independent marketing or commercial purposes. Data sharing by xp999 is limited to the following categories of recipients, each of whom receives only the minimum data necessary for their specific function:
All third-party service providers engaged by xp999 are required to process personal data in accordance with xp999's instructions and applicable data protection requirements, and are prohibited from using xp999 user data for their own independent purposes.
xp999 uses cookies and similar tracking technologies on the xp999.org website and platform for the following purposes:
xp999 does not use third-party advertising cookies, cross-site tracking pixels, or any tracking technology designed to profile individual users across other websites for advertising purposes.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the xp999 platform, including your ability to maintain a logged-in session. Disabling functional or analytics cookies will not affect your ability to access and use xp999 core services.
xp999 retains personal data only for as long as is necessary for the purposes described in this Policy, subject to the following retention principles:
Upon expiry of applicable retention periods, xp999 securely deletes or anonymises personal data in a manner consistent with good data destruction practices. Anonymised data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.
xp999 implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction:
In the event of a data security incident that is likely to result in a risk to your rights and freedoms, xp999 will notify affected users and relevant regulatory authorities in accordance with its incident response procedures and applicable notification obligations.
Subject to applicable data protection law and xp999's legal obligations, you have the following rights in relation to the personal data xp999 holds about you:
You may request a copy of the personal data xp999 holds about you, together with information about how it is used and with whom it is shared.
You may request correction of inaccurate or incomplete personal data that xp999 holds about you, subject to verification of the correction.
You may request deletion of your personal data where xp999 no longer has a legal basis for retaining it, subject to overriding legal obligations such as KYC record-keeping requirements.
You may request restriction of xp999's processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
You may object to xp999's processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
To exercise any of the above rights, please contact xp999 at [email protected] with the subject line "Data Rights Request" and a clear description of your request. xp999 will acknowledge your request promptly and respond within a reasonable timeframe. Identity verification may be required before processing data subject requests to ensure that data is not disclosed to unauthorised persons.
xp999 does not knowingly collect personal data from persons under the age of 21. All xp999 accounts are subject to mandatory age verification through KYC documentation. If xp999 discovers or reasonably suspects that a registered account belongs to a person under 21 years of age, that account will be immediately suspended, subjected to full KYC review, and permanently closed if the age ineligibility is confirmed. Any real-money PKR balance will be returned to the verified deposit source.
If you are a parent or guardian and believe that a person under your care has accessed or registered on xp999 without authorisation, please contact xp999 immediately at [email protected] so that appropriate action can be taken promptly.
xp999 actively supports responsible gaming initiatives and encourages parents and guardians to use internet filtering and parental control tools to prevent underage access to online gaming platforms, including xp999.
As an internationally licensed online gaming platform serving Pakistani users, xp999 may transfer your personal data to data processors located outside of Pakistan, including in the jurisdiction where xp999 holds its gaming licence and in the countries where third-party game software providers and payment processing infrastructure are based.
Where such international data transfers occur, xp999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. This may include data processing agreements with applicable standard contractual clauses, adequacy determinations, or other recognised transfer mechanisms.
xp999 does not transfer your personal data to jurisdictions that do not provide adequate data protection safeguards without implementing appropriate supplementary protective measures.
The xp999 platform may contain references to or integrations with third-party services including game software providers, payment processors, and live casino studio operators. xp999 is not responsible for the privacy practices of these third-party services, and their handling of any personal data submitted directly to them is governed by their own privacy policies.
xp999 does not endorse the data practices of any third-party service provider and recommends that users review the privacy policies of all third-party services with which they interact independently of the xp999 platform.
xp999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable data protection law, xp999's data processing practices, new platform features, or changes in xp999's licensing and regulatory obligations.
Material changes to this Privacy Policy will be communicated to registered xp999 users via notification to their registered Pakistani mobile number or email address, and by posting a prominent update notice on this page. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.
Continued use of the xp999 platform following notification of a material Policy amendment constitutes your acceptance of the revised Privacy Policy. If you disagree with any amendment, please cease using xp999 and contact [email protected] to close your account before the amendment's effective date.
The current version of this Privacy Policy is always available at xp999.org/privacy-policy. xp999 encourages all users to review this page periodically to remain informed of how their personal data is being handled.
For all privacy-related queries, data subject requests, concerns about xp999's handling of your personal data, or to report a suspected data security incident, please contact xp999 using the following details:
Platform: xp999
Website: xp999.org
Privacy & Data Queries: [email protected]
Subject Line for Data Requests: "Data Rights Request" or "Privacy Query"
Support Hours: 24 hours a day, 7 days a week
Response Time: xp999 aims to acknowledge all privacy queries within 24 hours and provide a substantive response within a reasonable timeframe depending on the nature and complexity of the request.
Pakistan's most trusted online gaming platform — cricket betting, live casino, 500+ slots, and bingo in PKR. Login securely and play responsibly today.
Login to xp999 Read Terms & Conditions