At xp999, your personal data is handled with the same care we apply to every aspect of our platform. This Privacy Policy sets out what information we collect, how we use it, who we share it with, and the rights you hold over your own data as an xp999 player.
Everything we do with your data at xp999 is guided by these six principles, which reflect our obligations under our international gaming licence and our commitment to every player in Pakistan.
We only collect the personal data that is strictly necessary to operate your xp999 account, process transactions in PKR, and comply with our licence obligations — nothing more.
All player data stored by xp999 is encrypted at rest and in transit using industry-standard TLS and AES-256 protocols. Access to your data is restricted to authorised xp999 personnel only.
Your data is used only for the purposes stated in this Privacy Policy. xp999 does not sell your personal data to advertisers or unrelated third parties under any circumstances.
xp999 takes reasonable steps to keep your personal data accurate and up to date. You can update your account details at any time through your xp999 account settings panel.
We do not retain your personal data for longer than necessary. Retention periods are determined by our licence obligations, legal requirements, and the active status of your xp999 account.
xp999 is committed to honouring your data rights — including access, correction, portability, and erasure — in a timely and transparent manner. Your rights are not a formality; they are enforceable.
This Privacy Policy ("Policy") describes how xp999 ("the Platform", "we", "us", "our"), an online casino and sports betting platform accessible at xp999.bet, collects, uses, stores, shares, and protects the personal data of its registered players and website visitors. xp999 is operated under an international gaming licence and processes personal data in accordance with its licence obligations and applicable data protection standards.
By registering an xp999 account, depositing funds, placing bets, or otherwise accessing any feature of the xp999 platform, you ("the Player", "you", "your") acknowledge that you have read this Policy in full and consent to the collection and use of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the xp999 platform.
This Policy is written in English and is addressed to players in Pakistan and other eligible territories where xp999 operates. It should be read together with the xp999 Terms & Conditions, Responsible Gaming Policy, and any promotion-specific terms published on the platform — all of which form part of the broader agreement between you and xp999.
xp999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. We will notify registered players of material changes via the platform or by email to your registered address. We encourage you to review this page periodically to stay informed.
xp999 collects personal data through multiple channels — directly from you during registration and account use, automatically through your interaction with the platform, and indirectly from third-party service providers such as payment processors and KYC verification agencies. The categories of data we collect are set out below.
When you create an xp999 account, we collect information including your full legal name, date of birth, residential address (including city and province within Pakistan, such as Karachi, Lahore, Islamabad, Faisalabad, or Peshawar), email address, and mobile number. This information is used to verify your identity, establish your account, and fulfil our Know Your Customer ("KYC") obligations under our gaming licence.
When you make deposits or withdraw funds from your xp999 account, we collect transaction-related data including payment method identifiers (e.g., JazzCash wallet IDs, EasyPaisa account references, HBL or UBL account details, SadaPay identifiers, or USDT TRC20 wallet addresses), transaction amounts in PKR, timestamps, and transaction reference numbers. We do not store full bank account credentials or card numbers on our servers.
xp999 records all gaming and betting activity conducted on your account, including bet placements, game sessions, wager amounts, game outcomes, and account balance movements. This data is used to operate the platform, resolve disputes, detect fraud, and fulfil responsible gaming obligations under our international gaming licence.
When you access xp999 via web browser or mobile device, we automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, referring URLs, pages visited on xp999.bet, session duration, and click-stream data. This data helps us maintain platform security, improve user experience, and detect suspicious access patterns.
When you contact xp999 customer support via live chat, email, or any other channel, we retain records of your communications, including the content of messages and the date and time of contact. This data is used for quality assurance, dispute resolution, and compliance documentation purposes.
xp999 may request additional identity verification documents — such as a copy of your CNIC (Computerised National Identity Card), passport, or recent utility bill — where required by our KYC or AML compliance procedures. Failure to provide requested documents may result in account restrictions or withdrawal holds.
| Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, DOB, CNIC, address | KYC, account verification |
| Financial Data | JazzCash ID, PKR transaction records | Deposits, withdrawals, AML |
| Gaming Activity | Bet history, game sessions, outcomes | Platform operation, dispute resolution |
| Technical Data | IP address, device type, browser | Security, fraud detection, analytics |
| Communications | Support chat logs, emails | Quality assurance, compliance |
| Cookie Data | Session tokens, preference cookies | Platform functionality, analytics |
xp999 uses the personal data it collects for specific, defined purposes directly connected to operating the platform and fulfilling our legal and licence obligations. We do not use your data for purposes beyond those described in this Policy without first obtaining your consent.
xp999 processes your personal data on the following legal bases, consistent with the data protection standards applicable under our international gaming licence:
Where xp999 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, please contact xp999 support or adjust your account notification preferences.
xp999 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
To process your deposits and withdrawals, xp999 shares relevant transaction data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, SadaPay, and cryptocurrency processing partners for USDT TRC20 transactions. These providers receive only the data necessary to complete your transaction and are bound by their own data protection obligations.
To fulfil our KYC obligations under our international gaming licence, xp999 may share your identity documents and personal details with accredited third-party identity verification agencies. These agencies process your data solely for the purpose of verifying your identity and confirming your eligibility to hold an xp999 account.
xp999 may disclose your personal data to regulatory authorities, law enforcement agencies, or other competent bodies where required by law, where ordered by a court of competent jurisdiction, or where disclosure is necessary to protect xp999's legal rights or to prevent or detect criminal activity, including money laundering.
xp999 uses third-party technology providers to support platform infrastructure, game delivery, analytics, and customer support systems. These providers act as data processors on behalf of xp999 and are contractually required to process your data only on xp999's instructions and to maintain appropriate security standards.
In the event of a merger, acquisition, restructuring, or sale of xp999's business or assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity.
All third parties with whom xp999 shares personal data are subject to appropriate data protection agreements. xp999 conducts due diligence on its data processors and requires them to implement security measures commensurate with the sensitivity of the data they handle.
xp999 uses cookies and similar tracking technologies on the xp999.bet website to support platform functionality, maintain session security, analyse usage patterns, and deliver relevant content to players. The types of cookies used by xp999 are described below.
These cookies are strictly necessary for the xp999 platform to function. They include session authentication cookies that keep you logged in to your xp999 account, security tokens that protect against cross-site request forgery, and cookies that store your language and currency (PKR) preferences. You cannot opt out of essential cookies while using xp999, as they are fundamental to platform operation.
xp999 uses analytics cookies to understand how players navigate the platform, which games and features are most popular, and where technical issues arise. This data is processed in aggregate and is not used to identify individual players. You may opt out of analytics cookies via the xp999 cookie preference centre.
These cookies remember your xp999 platform preferences, such as your preferred game lobby view, notification settings, and responsible gaming tool configurations. Disabling preference cookies will not prevent you from using xp999, but may affect your user experience.
You can manage your cookie preferences through the xp999 cookie preference centre, accessible from the footer of the xp999.bet website. You may also control cookies through your browser settings; however, blocking essential cookies will prevent you from logging in and using your xp999 account. Note that clearing cookies will log you out of your active xp999 session.
xp999 does not use third-party advertising or tracking pixels that share your data with external advertising networks. The cookies deployed on xp999.bet are limited to those necessary for platform operation, security, and internal analytics only.
xp999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and licence obligations, and to resolve any disputes or enforce our agreements. The retention periods applicable to the main categories of data xp999 holds are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Licence obligation, legal compliance |
| Financial Transaction Records | 7 years from transaction date | AML regulatory requirement |
| Gaming & Betting Activity | Duration of account + 3 years post-closure | Licence obligation, dispute resolution |
| KYC Verification Documents | Duration of account + 5 years post-closure | Licence obligation, AML compliance |
| Customer Support Communications | 3 years from date of contact | Dispute resolution, quality assurance |
| Analytics & Technical Logs | 12 months on a rolling basis | Legitimate interest (security, analytics) |
Upon expiry of the applicable retention period, xp999 will securely delete or anonymise your personal data. Anonymised data — which cannot be used to identify you — may be retained indefinitely for statistical and platform improvement purposes.
xp999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:
No internet-based platform can guarantee absolute security. While xp999 takes all reasonable and practicable steps to protect your data, you also play a role in keeping your account secure. Use a strong, unique password for your xp999 account, enable 2FA, and never share your login credentials with anyone.
As an xp999 player, you hold a number of rights in relation to the personal data we hold about you. xp999 is committed to facilitating the exercise of these rights in a transparent and timely manner. Your rights are described below.
You have the right to request a copy of the personal data xp999 holds about you, along with information about how it is used and with whom it is shared.
If you believe that personal data xp999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and licence retention obligations.
You have the right to request that xp999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
Where processing is based on your consent or contract performance, you may request that xp999 provide your personal data in a structured, machine-readable format for transfer to another service.
You have the right to object to processing based on xp999's legitimate interests, including profiling, where you believe your fundamental rights override those interests.
To exercise any of the above rights, please contact the xp999 data team via the support channel. xp999 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days with prior notification to you.
Certain rights are subject to limitations under our international gaming licence. For example, xp999 cannot erase transaction or KYC records that it is legally required to retain for AML compliance purposes, even if you request erasure. In such cases, xp999 will explain the limitation and the applicable retention period.
xp999 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth verification, and all new accounts are subject to age verification as part of our KYC procedures. Where we have reason to believe that a registered account belongs to a person under 21 years of age, we will immediately suspend the account, void any pending transactions, and securely delete the personal data associated with that account.
If you are a parent or guardian and believe that a minor in your care has registered an xp999 account or submitted personal data to the platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate remedial action without delay.
xp999 supports responsible gaming tools including age verification gates, deposit limits, and self-exclusion options. If you are concerned about underage access to gambling services, please visit our Responsible Gaming page for further information and resources.
The xp999 platform integrates with a number of third-party service providers to deliver its full range of features — including game content providers, payment gateways, identity verification services, and analytics tools. While xp999 takes care to select reputable providers and enter into appropriate data processing agreements, we are not responsible for the independent privacy practices of third-party services.
Links or references within the xp999.bet website to third-party services (such as payment processors) are provided for operational purposes only. xp999 does not endorse the privacy practices of any third-party provider and encourages players to review the privacy policies of any external services they use in connection with their xp999 account — particularly their chosen payment method providers such as JazzCash, EasyPaisa, or HBL.
xp999 will not share your personal data with any third-party service provider beyond what is strictly necessary for that provider to perform its contracted function. All third-party processors are bound by data processing agreements that prohibit them from using your data for their own independent purposes.
xp999 reserves the right to amend this Privacy Policy at any time. Changes may be made to reflect updates to our data practices, changes in applicable law or our gaming licence conditions, the introduction of new platform features, or other operational changes. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.
Where changes to this Policy are material — meaning they significantly affect the way we collect, use, or share your personal data — xp999 will provide notice to registered players via email to your registered address, via an in-platform notification, or via a prominent notice on the xp999.bet homepage. Your continued use of the xp999 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
If you do not agree to a material change in this Policy, you must discontinue use of the xp999 platform and may request account closure by contacting our support team. Account closure requests made on the basis of Policy changes will be processed in accordance with the xp999 Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data xp999 holds about you, please contact our support team. We are committed to resolving all data-related enquiries in a prompt and transparent manner.
You may reach the xp999 data team via the following contact method:
Email (plain text — not a link):
[email protected]
Please include "Privacy Request" in the subject line of your message, along with your registered xp999 username and a description of your request. We will acknowledge your message within 5 business days.
If you are not satisfied with xp999's handling of your data rights request or complaint, you may escalate your concern to the relevant regulatory authority under our gaming licence jurisdiction. Details of the applicable supervisory authority are available upon request from our support team.
xp999 takes all data protection complaints seriously. We aim to resolve complaints internally before escalation, and our support team will make every effort to address your concerns fairly and efficiently. Players in Pakistan may also seek guidance from consumer protection bodies where applicable under local law.
Play cricket betting, PSL markets, slots, and live dealer games — all in PKR with deposits via JazzCash, EasyPaisa, and more. Fully licensed. Certified fair. 21+ only.