This Privacy Policy explains how xc999 collects, processes, stores, and protects the personal data of players registered on the xc999 platform. xc999 is committed to handling your personal information with transparency and care, in accordance with international data protection standards. Please read this document in full before registering an account.
These six principles define the xc999 approach to data protection. Full legal detail is in the policy sections below.
All personal data stored on xc999 servers is protected with AES-256 encryption. Passwords are stored using one-way cryptographic hashing and are never visible to xc999 staff. Transmission between your device and xc999 uses TLS 1.2 or higher at all times.
xc999 only collects personal data that is directly necessary for operating your account, processing payments, completing KYC verification, and delivering the services you use. We do not collect data speculatively or beyond what is required for legitimate operational purposes.
xc999 does not sell, rent, or commercially trade your personal data to any third party for marketing purposes. Data shared with third parties — such as payment processors or game providers — is limited to what those parties strictly need to deliver their services to you through the xc999 platform.
You have the right to access, correct, or request deletion of your personal data held by xc999, subject to legal retention obligations. Requests can be submitted via the xc999 support live chat. xc999 will acknowledge and process data requests within 30 days of receipt.
xc999 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable anti-money laundering, KYC, and gaming regulatory obligations. Transaction records are retained for a minimum of five years in compliance with international standards.
In the unlikely event of a data security incident affecting xc999 player data, xc999 will notify affected players via their registered email address as promptly as is practically possible. xc999 maintains an internal breach response plan aligned with international notification standards.
As a registered xc999 player, you hold specific data rights in relation to the personal information xc999 holds about you. These rights are exercisable by contacting xc999 support via live chat or by emailing [email protected]. xc999 will respond to all data rights requests within 30 calendar days.
In certain circumstances — such as where data retention is required for AML compliance or ongoing KYC verification — xc999 may not be able to fully honor deletion requests. Where this applies, xc999 will explain the reason in writing.
You may request a copy of the personal data xc999 holds about you, including your account registration details, KYC documents submitted, transaction history, and any communications records associated with your account.
If any personal data held by xc999 is inaccurate or incomplete, you may request that it be corrected. Updates to account details such as mobile number, email address, or residential address can be submitted through the xc999 account dashboard or via live chat support.
You may request deletion of your personal data. This right applies where data is no longer necessary for the purpose it was collected, or where you withdraw consent. Regulatory retention obligations may limit full erasure in some cases.
You may request that xc999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified, or where you have objected to processing and that objection is being assessed.
Where personal data was provided by you directly and processed on the basis of consent or contract, you may request that xc999 provide that data in a structured, machine-readable format for transfer to another service provider.
xc999 ("we", "us", "our") is the operator of the online casino and sports betting platform accessible at xc999.one. In the course of providing our services to registered players ("you", "your") in Pakistan and other permitted jurisdictions, xc999 necessarily collects and processes personal data as described in this Privacy Policy.
xc999 is committed to handling personal data lawfully, fairly, and transparently. This document sets out what data we collect, why we collect it, how long we keep it, who we may share it with, and what rights you hold with respect to your data. If you have questions about any aspect of this Privacy Policy, please contact the xc999 Data Protection contact at [email protected] or via the live chat support channel available daily from 9:00 AM to 2:00 AM PST.
This Privacy Policy should be read alongside the xc999 Terms & Conditions, which govern the broader contractual relationship between you and xc999.
xc999 collects personal data through several channels: directly from you during registration and account use, automatically through your use of the platform, and from third-party payment processors and KYC verification services. The categories of personal data collected include the following:
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity | Name, CNIC, date of birth | Registration & KYC form |
| Contact | Mobile number, email, city | Registration form |
| Financial | PKR transactions, JazzCash ID, bank details | Payment processor records |
| Gaming | Bets, game sessions, bonus usage | Platform activity logs |
| Technical | IP address, device type, session data | Automatic — cookies & server logs |
| Communications | Live chat transcripts, email records | Support interactions |
xc999 processes personal data only for specific, legitimate purposes. The primary purposes for which your data is used are set out below:
xc999 processes personal data on one or more of the following legal bases, depending on the specific purpose of processing:
xc999 does not sell personal data to third parties. Personal data is shared with third parties only where necessary and only for the specific purposes described below:
The xc999 platform uses cookies and similar tracking technologies to maintain session state, improve platform performance, and support security and fraud prevention functions. The categories of cookies used include:
You may manage non-essential cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing the xc999 platform in its full functionality.
xc999 retains personal data for the period necessary to fulfill the purpose for which it was collected, subject to the following minimum retention periods required by applicable obligations:
| Data Type | Minimum Retention Period | Basis |
|---|---|---|
| KYC identity documents | 5 years post account closure | AML regulatory obligation |
| Transaction records (PKR deposits/withdrawals) | 5 years from transaction date | Financial records obligation |
| Game session and betting history | 3 years post account closure | Dispute resolution & regulatory |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming compliance |
| Support communications | 2 years from last interaction | Legitimate interest — dispute records |
| Marketing consent records | Until consent withdrawn + 1 year | Consent management |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to you as an individual.
xc999 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Security measures in place include:
The xc999 platform is strictly intended for adults aged 21 years and above. xc999 does not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the mandatory KYC process for all registered accounts.
If xc999 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21 — whether through misrepresentation at registration or any other means — that account will be immediately suspended. All data associated with that account will be reviewed and, where there is no legal obligation to retain it, will be securely deleted. Any deposits made by or winnings attributed to an underage player will be handled in accordance with the xc999 Terms & Conditions.
Parents or guardians who have reason to believe that a minor has registered an account on the xc999 platform should contact xc999 support immediately via live chat or at [email protected].
Subject to applicable law and any overriding legal obligations, you hold the following rights in respect of your personal data held by xc999:
To exercise any of these rights, contact xc999 via live chat (9:00 AM to 2:00 AM PST daily) or by email at [email protected]. xc999 will respond within 30 calendar days. Where a request is denied, xc999 will provide written reasons.
Where you have provided consent at registration or subsequently, xc999 may send you promotional communications including bonus offers, PSL and cricket betting promotions, new game announcements, and platform updates via SMS, email, or in-platform notifications.
You may withdraw consent for marketing communications at any time by:
Withdrawing consent for marketing communications does not affect your receipt of transactional service communications such as deposit confirmations, withdrawal notifications, KYC updates, and security alerts — these are sent on the basis of contract performance and cannot be disabled while your account is active.
xc999 operates on international cloud infrastructure which may involve the storage and processing of personal data outside Pakistan. Where personal data is transferred to systems located in other jurisdictions, xc999 ensures that appropriate safeguards are in place — including contractual data protection obligations with receiving processors — to maintain a level of data protection equivalent to that described in this Privacy Policy.
All third-party processors who handle xc999 player data — including payment processors, KYC verification providers, and IT infrastructure providers — are subject to contractual data processing agreements that prohibit unauthorized use of personal data and require the maintenance of appropriate technical security measures.
xc999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform functionality. Material changes will be communicated to registered players via email or in-platform notification with reasonable advance notice before the changes take effect.
The effective date displayed at the top of this document reflects the date of the most recent revision. Continued use of the xc999 platform following notification of a policy update constitutes acceptance of the revised Privacy Policy. If you do not accept the updated terms, you should discontinue use of the platform and may close your account in accordance with the xc999 Terms & Conditions.
For questions, concerns, or requests relating to this Privacy Policy or the personal data xc999 holds about you, please contact xc999 through the following channels:
xc999 aims to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case xc999 will inform you of the expected timeline.
Your personal data and PKR funds are protected by xc999's security infrastructure. Log in and start enjoying PSL cricket betting, live casino, and over 1,200 slot games. Must be 21+ to access.