xp768 Privacy Policy
— How We Handle Your Data

xp768 ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of every individual who uses the xp768 online gaming and sports betting platform. This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of personal information associated with xp768 accounts and platform interactions.

The xp768 platform serves players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Peshawar, Rawalpindi, Multan, and beyond — through xp768.org and associated services. We operate under an international gaming licence that imposes specific data protection and player privacy obligations, which this policy reflects and satisfies.

Privacy is not a formality at xp768. The platform processes personal data for genuine operational reasons — account management, identity verification, payment processing, fraud prevention, and regulatory compliance. We do not collect data speculatively or beyond what is actually required to operate the xp768 service effectively and securely for Pakistani players.

2.1 For the purposes of this Privacy Policy, xp768 is the data controller in respect of personal data collected directly from Users of the xp768 platform. "Data controller" means the entity that determines the purposes and means by which personal data is processed.

2.2 Correspondence regarding data protection matters, including requests to exercise your privacy rights as described in Section 10, should be directed to: [email protected]

2.3 xp768 engages third-party data processors — including payment providers, identity verification services, and analytics platforms — who process data on xp768's behalf under contractual data processing agreements. These processors are not permitted to use your data for their own purposes beyond the specific services they provide to xp768. The identities of key data processors are described in Section 6.

xp768 collects the following categories of personal data from registered Users and platform visitors:

xp768 uses personal data collected from Users for the following purposes:

• 4.1Account Management: To create, maintain, and manage your xp768 account, including processing your login, maintaining your PKR wallet balance, and managing your account settings and preferences.
• 4.2Identity Verification (KYC): To verify your identity before processing your first withdrawal, as required under xp768's international gaming licence and anti-money laundering obligations. CNIC data submitted for KYC is used solely for this purpose.
• 4.3Payment Processing: To facilitate deposits via JazzCash, EasyPaisa, bank transfer, and other supported methods, and to process withdrawal requests to your registered payment accounts. Your financial data is shared with payment processors solely to execute these transactions.
• 4.4Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the xp768 Terms & Conditions. Technical and gameplay data are analysed for anomalous patterns as part of this effort.
• 4.5Regulatory Compliance: To fulfil xp768's obligations under its international gaming licence, including player verification, responsible gaming monitoring, anti-money laundering record-keeping, and responding to lawful requests from regulatory or law enforcement authorities.
• 4.6Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide ongoing account assistance through xp768's Urdu and English support channels.
• 4.7Responsible Gaming: To monitor gaming activity for indicators of potential gambling harm, to enforce self-exclusion requests and deposit limits, and to provide responsible gaming interventions where xp768 identifies a player who may be at risk.
• 4.8Platform Improvement: To analyse aggregated, anonymised platform usage data to improve the xp768 user experience, optimise game loading performance, and identify technical issues — particularly as they affect Pakistani users on mobile networks in cities including Karachi, Lahore, and Faisalabad.
• 4.9Marketing & Promotions: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. See Section 13 for full details of your marketing preferences and how to opt out.

xp768 processes your personal data under the following legal bases, in accordance with applicable international data protection standards:

• 5.1Contractual Necessity: Processing required to perform the contract between xp768 and you as a registered User — including account management, payment processing, and delivery of gaming services. Without this processing, xp768 cannot operate your account.
• 5.2Legal Obligation: Processing required to comply with xp768's obligations under its gaming licence — including KYC identity verification, anti-money laundering record retention, age verification, and responding to lawful regulatory or law enforcement requests.
• 5.3Legitimate Interests: Processing carried out for xp768's legitimate business interests where these are not overridden by your privacy rights — including fraud detection, platform security, technical analytics for service improvement, and responsible gaming monitoring.
• 5.4Consent: Processing based on your explicit, freely given consent — specifically for marketing communications including promotional SMS, email newsletters, and bonus notifications. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

xp768 may share your personal data with the following categories of third parties, solely for the purposes stated:

• 6.1Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, USDT TRC20 processors, and Cash OTC agents — for the purpose of processing your deposit and withdrawal transactions. Only the data strictly required to execute the transaction is shared.
• 6.2Identity Verification Providers: Third-party KYC and CNIC verification services used to validate your identity documentation before your first withdrawal is processed. These providers are bound by confidentiality obligations and may not use your identity data for any other purpose.
• 6.3Game Software Providers: Certified slot and live casino game providers whose titles are hosted within the xp768 platform. These providers may receive session-level game data (bet amounts, game outcomes) necessary to operate their certified RNG and dealing systems. They do not receive your name, CNIC, or contact details.
• 6.4Regulatory and Law Enforcement Authorities: xp768 will disclose personal data to applicable regulatory bodies or law enforcement authorities where required to do so by law, court order, or under xp768's international gaming licence obligations — including in connection with money laundering investigations or fraud inquiries.
• 6.5Fraud Prevention Services: Specialist fraud detection and prevention partners who assist xp768 in identifying suspicious account activity, multi-accounting, and financial crime indicators. Data shared is limited to the minimum necessary for fraud screening purposes.
• 6.6Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of xp768's assets, personal data held by xp768 may be transferred to the acquiring entity, subject to that entity assuming the data protection obligations described in this Privacy Policy.

7.1 xp768 uses cookies and similar tracking technologies on the xp768.org platform to enable core platform functionality, maintain your login session, remember account preferences, and collect anonymised analytics data to improve platform performance.

7.2 The following categories of cookies are used on xp768:

• EssentialSession management cookies required for the platform to function — including login session tokens, wallet session identifiers, and CSRF protection tokens. These cannot be disabled without preventing access to the xp768 platform.
• FunctionalCookies that remember your account preferences — including preferred language, display settings, and last-used payment method. These improve your experience but are not essential to platform operation.
• AnalyticsAggregated, anonymised data about how pages on xp768 are used — including page load times, navigation paths, and technical error rates. This data is used internally by xp768 to identify and resolve performance issues. No personally identifiable information is contained in analytics data.

7.3 You may configure your browser to reject or delete cookies from xp768.org. Note that disabling essential cookies will prevent you from maintaining an authenticated session on the platform. Analytics and functional cookies can be disabled without affecting core platform access.

8.1 xp768 employs a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 8.1.1256-bit SSL/TLS encryption for all data transmitted between User devices and xp768 servers. Every xp768 page — including the login page, wallet, and game interfaces — is served exclusively over HTTPS.
• 8.1.2Salted cryptographic hashing of all account passwords. xp768 staff do not have access to your password in any readable form — not even xp768 support agents, which is why we will never ask you for your password.
• 8.1.3Two-factor authentication (2FA) available to all Users for additional login security. xp768 strongly recommends enabling 2FA, particularly for accounts with significant PKR wallet balances or frequent withdrawal activity.
• 8.1.4Automatic session expiry for inactive xp768 sessions after 24 hours, reducing exposure in the event that a User's device is accessed by a third party without authorisation.
• 8.1.5Login geography monitoring to detect and flag access attempts from unusual locations, with automatic OTP verification triggered for unrecognised devices.
• 8.1.6Segregated database architecture ensuring that Player financial data is stored separately from operational systems, with access restricted to authorised personnel on a strict need-to-know basis.

9.1 xp768 retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law and regulatory obligations under xp768's international gaming licence.

9.2 The following indicative retention periods apply to different categories of data held by xp768:

• ActiveAccount and Identity Data is retained for the duration of your active xp768 account relationship and for a period of at least five (5) years following account closure, as required by xp768's anti-money laundering and KYC record-keeping obligations under its gaming licence.
• FinancialTransaction and Payment Records are retained for a minimum of seven (7) years following the date of each transaction, in accordance with standard financial record-keeping requirements applicable to licensed gaming operators.
• GamingBet and Game Session Logs are retained for a minimum of five (5) years. These records form the evidentiary basis for dispute resolution and regulatory audit.
• TechnicalTechnical and Session Log Data (IP addresses, login timestamps, device data) is retained for 12 months from the date of collection for security monitoring purposes, after which it is deleted or fully anonymised.
• SupportCustomer Support Communication Records are retained for three (3) years from the date of the most recent communication in a support thread, to allow resolution of any delayed disputes or follow-up regulatory inquiries.

9.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any identifiable individual.

As a User of xp768, you hold the following rights in respect of your personal data. All rights requests should be submitted to [email protected]. xp768 will respond within 30 days of receiving a valid rights request.

11.1 xp768 is an age-restricted platform. Registration is strictly limited to individuals aged 21 and above. xp768 actively screens for indicators of underage registration and will suspend any account suspected of belonging to an underage User pending age verification via CNIC.

11.2 Where xp768 discovers that personal data has been inadvertently collected from an individual who is under 21 years of age, xp768 will immediately delete the relevant data and close the associated account. Any deposits made by an underage User will be returned without winnings, in accordance with xp768's Terms & Conditions and responsible gaming obligations.

11.3 If you are a parent or guardian who believes that a minor in your care has registered an account on xp768, please contact xp768 support immediately at [email protected]. xp768 will investigate and act promptly to close the account and return any deposited funds.

12.1 xp768 operates under an international gaming licence and uses technology infrastructure and service providers that may be located in countries outside Pakistan. As a result, your personal data may be transferred to and stored in countries other than Pakistan, including the jurisdiction in which xp768 holds its gaming licence and jurisdictions where third-party data processors operate.

12.2 Where personal data is transferred internationally, xp768 ensures that appropriate safeguards are in place to protect your data to the same standard applied within Pakistan — including contractual data processing agreements that impose obligations on data processors equivalent to those described in this Privacy Policy.

12.3 By registering an xp768 account and accepting these terms, you acknowledge and consent to the transfer of your personal data internationally as described in this section, where such transfers are necessary for the provision of xp768 services.

13.1 xp768 may send you promotional and informational communications — including bonus offers, PSL betting promotions, new game announcements, and platform updates — via SMS to your registered Pakistani mobile number and/or via platform notification, where you have provided explicit consent during registration or by subsequently updating your communication preferences in your account settings.

13.2 Your consent to receive marketing communications is entirely voluntary. Declining marketing consent at registration does not affect your ability to use any xp768 service or your eligibility for any bonus that is not explicitly conditioned on communication consent.

13.3 You may withdraw your consent to receive marketing communications at any time by: (a) updating your communication preferences in Account Settings; or (b) contacting xp768 support at [email protected] with a request to opt out of marketing communications. Opt-out requests will be processed within two business days and will take immediate effect for future communications.

13.4 Please note that even if you opt out of marketing communications, xp768 will continue to send you essential service communications — including transaction confirmations, security alerts, OTP verification codes, support responses, and regulatory or policy change notifications. These communications are not marketing and cannot be unsubscribed from while your account remains active.

13.5 xp768 does not share your contact details (mobile number or email) with any third party for their own direct marketing purposes.

14.1 xp768 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or the services we offer. The current version of the Privacy Policy is always available at xp768.org/privacy-policy, with the effective date displayed at the top of this document.

14.2 Where changes to this Privacy Policy are material — particularly where they affect how your data is used, who it is shared with, or your privacy rights — xp768 will provide at least 7 days' prior notice via on-platform notification or SMS to your registered mobile number.

14.3 Your continued use of the xp768 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised practices described therein. If you do not accept any changes, you should close your xp768 account before the effective date of the changes.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by xp768, please contact us through the following channels:

• Email[email protected] — The primary contact for all data protection queries, rights requests, and privacy complaints. xp768 aims to respond to all data-related enquiries within 5 business days and to formal rights requests within 30 days.
• Live ChatAvailable within the xp768 platform after login. Urdu and English supported. Live chat is appropriate for general privacy queries and account-level preferences. For formal rights requests (access, erasure, portability), please use email to create a documented record.
• Postalxp768 registered postal address is available upon request by email to [email protected]. Required for formal regulatory submissions or legal correspondence relating to data protection matters.