x000 Privacy Policy — How We Protect Your Data in Pakistan

1About This Privacy Policy

This Privacy Policy applies to all users of the x000 platform, accessible at x000.ws. It covers every product and service that x000 offers — the sportsbook (including cricket, football, and all other sports), live casino, Aviator, Roulette, the VIP Club, and all account management features.

When we say "personal data" or "personal information," we mean any information that can identify you as an individual — either directly (like your name or CNIC number) or indirectly (like your device ID combined with your location). When you register on x000, deposit funds, place a bet, or simply browse the platform, you share some form of personal data with us. This policy explains exactly what happens to it.

x000 is the data controller for personal information processed through x000.ws. If you have any questions about this policy or want to exercise any of your rights, contact us at support@x000.ws.

2What Data We Collect

x000 collects personal data in the following categories. We only collect what is genuinely necessary for the purpose stated.

2.1 Registration Data

When you create an x000 account, we collect: full name, date of birth, email address, Pakistani mobile number, and chosen username. This is the minimum required to create and operate your account securely.

2.2 Identity Verification (KYC) Data

To comply with our fraud prevention and responsible gaming obligations, x000 may ask you to provide a copy of your CNIC (Computerised National Identity Card), proof of address, or a selfie for liveness verification. This data is collected only when verification is required and is handled with the highest level of security.

2.3 Financial Data

x000 records deposit and withdrawal transactions, the payment methods used (Easypaisa, JazzCash, NayaPay, SadaPay, bank account details for IBFT, or masked card numbers for Visa/Mastercard), and transaction amounts in PKR. Full payment credentials — such as your Easypaisa PIN or full card number — are never stored by x000. Payment processing is handled by regulated third-party providers.

2.4 Betting & Gaming Activity

x000 records all betting and gaming activity associated with your account: sports bets placed, casino games played, stake amounts, odds accepted, win/loss outcomes, bonus usage, and cash-out activity. This data is essential for account management, dispute resolution, and responsible gaming monitoring.

2.5 Technical & Device Data

When you access x000, we automatically collect technical information including: IP address, device type (phone model, operating system), browser type, session timestamps, pages visited, and referring URLs. This data helps us detect fraud, maintain platform security, and improve the user experience.

2.6 Communications Data

If you contact x000 support — via email or live chat — we retain records of those communications. This allows us to provide consistent support and resolve disputes effectively.

3Why We Collect Your Data

x000 processes personal data for specific, legitimate purposes only. Here is a breakdown of what each type of data is used for:

• Account operation: To create, manage, and secure your x000 account, process your bets, and handle your deposits and withdrawals in PKR.
• Identity verification: To confirm you are who you say you are, that you are 18 or over, and that your payment method belongs to you — all required to prevent fraud and underage gambling.
• Fraud and security: To detect unusual account activity, identify potentially fraudulent transactions, and protect x000 and its players from abuse.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling, to enforce deposit and loss limits you set, and to support self-exclusion where requested.
• Customer support: To respond to your queries, resolve disputes, and provide accurate and relevant assistance.
• Platform improvement: To analyse aggregated usage patterns (never individual behaviour for marketing profiling) and improve x000's features, performance, and user experience.
• Legal compliance: To meet obligations under applicable law, including anti-money-laundering (AML) requirements and data retention regulations.
• Marketing communications: To send you relevant promotions, bonus offers, and x000 updates — but only if you have opted in to receive them, and only via your registered email or mobile.

x000 does not use your personal data for automated decision-making that produces significant legal effects — for example, we do not automatically approve or deny accounts based purely on algorithmic scoring without any human review.

4Legal Basis for Processing

x000 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our contract with you — operating your account, processing bets, handling payments. Without this data, x000 simply cannot provide the service.
• Legal obligation: Processing required to comply with applicable laws — including KYC, AML, and data retention requirements.
• Legitimate interest: Processing for fraud prevention, platform security, and general business improvement, where these interests do not override your privacy rights.
• Consent: For marketing communications and non-essential cookies — where we rely on your explicit opt-in. You can withdraw consent at any time.

5Who We Share Your Data With

x000 does not sell your personal data to any third party. We share data only in the following limited circumstances, and only to the extent necessary:

5.1 Payment Processors

To process your deposits and withdrawals, x000 works with regulated payment service providers that handle Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card transactions. These providers receive only the data necessary to process your specific transaction and are contractually bound to protect your information.

5.2 Identity Verification Providers

When KYC verification is required, x000 may use a trusted third-party identity verification service to confirm CNIC authenticity or perform liveness checks. These providers process your identity documents under strict data protection agreements and do not retain them beyond the verification process.

5.3 Fraud Prevention & Security

x000 may share limited technical data (such as IP addresses or device fingerprints) with fraud detection partners to identify and prevent suspicious activity. No personal betting history or financial data is shared for this purpose.

5.4 Legal & Regulatory Authorities

x000 may be required to disclose personal data to law enforcement, regulatory bodies, or other government authorities if required by applicable law or in response to a valid legal order. x000 will only provide the minimum data required and will notify affected players where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of x000's business, personal data held by x000 may be transferred to the acquiring entity. Affected players would be notified in advance and given the opportunity to request deletion of their data before the transfer is completed.

6Payments & Financial Data

Given that x000 handles real-money transactions in PKR using popular Pakistani payment methods, financial data security deserves special attention.

When you deposit via Easypaisa or JazzCash, x000 receives confirmation of the transaction amount and your registered mobile number — it does not receive or store your wallet PIN or any authentication credentials. When you deposit via bank IBFT, x000 receives your account number and transaction reference — sufficient to credit your x000 wallet but not enough to initiate any outbound transaction from your bank account. Card payments (Visa/Mastercard) are processed through PCI-DSS compliant payment gateways — x000 stores only a masked version of your card number (e.g., ending in 4242) and the card type, never the full card number, CVV, or expiry.

All financial data on x000 is encrypted at rest and in transit. Transaction records are retained for the period required by applicable financial regulations and then securely deleted.

7Cookies & Tracking Technologies

x000 uses cookies and similar tracking technologies to operate the platform correctly, maintain your session, and understand how the platform is used. Here is a breakdown of the types of cookies used:

x000 does not use third-party advertising cookies or sell data to ad networks. Analytics data is aggregated and anonymised before being used for any platform analysis. You can manage your cookie preferences at any time via the cookie settings available on the platform.

8Data Storage & Retention

x000 retains personal data for as long as is necessary for the purpose it was collected, subject to any legal minimum retention periods. Here are the general retention timelines x000 follows:

• Account and registration data: Retained for the duration of your active account plus 5 years after account closure, to meet legal and regulatory requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC / identity documents: Retained for the duration of your active account plus 5 years after closure, or longer if required by a legal obligation or ongoing investigation.
• Betting and gaming history: Retained for the duration of your active account plus 3 years after closure.
• Support communications: Retained for 3 years from the date of the last communication in a thread.
• Technical / session data: Retained for up to 12 months, then aggregated and anonymised.

When personal data is no longer required and no legal obligation to retain it exists, x000 securely deletes or anonymises it so that it can no longer be linked to you as an individual.

x000's servers and primary data storage are located in secure, access-controlled data centres. Data may be processed in jurisdictions outside Pakistan where x000's service providers are located, but only under contractual protections that ensure a level of data protection equivalent to that which x000 applies itself.

9Security Measures

x000 takes data security seriously and has implemented the following technical and organisational measures to protect your personal information:

• 256-bit SSL/TLS encryption on all data transmitted between your device and x000 servers
• Encryption at rest for sensitive stored data including KYC documents and financial records
• Access controls — only x000 personnel with a genuine business need can access personal data, and all access is logged and audited
• Two-factor authentication options available for player accounts to prevent unauthorised login
• Automated fraud detection monitoring for unusual login patterns, device changes, and suspicious transaction activity
• Regular security reviews and penetration testing of the x000 platform infrastructure
• Incident response procedures — in the event of a data breach, x000 will notify affected players as quickly as practicable and take immediate steps to contain and remedy the breach

No internet-based platform can guarantee absolute security, and x000 makes no such claim. However, the measures above represent a genuine and ongoing commitment to protecting your data to the highest practical standard.

10Your Privacy Rights

As an x000 player, you have the following rights regarding your personal data. You can exercise any of these rights by emailing support@x000.ws. x000 will respond to rights requests within 30 days.

To exercise any of these rights, send an email to support@x000.ws with the subject line "Privacy Rights Request" and describe what you're asking for. x000 may need to verify your identity before processing the request to ensure we're not disclosing data to the wrong person.

If you believe x000 has not handled your personal data properly, you have the right to raise a complaint. Please contact x000 first and we will do our best to resolve the issue directly. If you are not satisfied with our response, you may escalate to the relevant data protection authority.

11Children's Privacy

x000 is strictly an adults-only platform. No person under the age of 18 is permitted to register an account or use any x000 service. x000 does not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has registered on x000, please contact us immediately at support@x000.ws and we will close the account and delete all associated data promptly.

x000 takes age verification seriously and may request CNIC or other age-confirming documentation at any stage. Accounts where the holder is found to be under 18 will be permanently closed and any balance forfeited.

12Responsible Gaming & Your Data

x000 uses betting and gaming activity data specifically to support responsible gaming — and this is one of the most important uses of your data from our perspective. By analysing patterns in your activity, x000's responsible gaming systems can:

• Alert you when you are approaching a limit you have set yourself
• Identify potential signs of problem gambling behaviour and, where appropriate, proactively offer support
• Enforce self-exclusion or cooling-off periods across all products on x000
• Maintain a record of exclusion periods so that they can be upheld even if you request early reinstatement

This use of your data is in your genuine interest. x000 is committed to responsible gaming not as a legal formality but as a real operational priority. Data used for responsible gaming purposes is handled with the same security standards as all other personal data, and is never used for commercial profiling or advertising purposes.

For more information about the responsible gaming tools available on x000, please visit the Responsible Gaming page.

13Changes to This Privacy Policy

x000 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make changes, we will update the "last updated" date at the top of this page.

For material changes — those that significantly affect how we collect or use your personal data — x000 will send a notification to your registered email address and display a prominent notice on the platform. Your continued use of x000 after the effective date of any updated policy constitutes acceptance of the changes.

If you disagree with changes to this policy, you are entitled to close your account and request deletion of your data. Contact support@x000.ws to initiate this process.

14Contact x000 & Data Requests

For all privacy-related queries, data rights requests, or concerns about how x000 handles your personal information, please use the following contact details:

• Email: support@x000.ws — use subject line "Privacy Rights Request" for data requests
• Live Chat: Available 24/7 on the x000 platform — for general privacy questions

x000's support team is available around the clock, including Pakistani public holidays. We aim to respond to all privacy queries within 5 business days and to formal data rights requests within 30 days. If a request is complex or involves a large volume of data, we may extend this period by up to an additional 30 days, and we will notify you if this is the case.

For responsible gaming support and self-exclusion requests, which are handled separately from general privacy queries, please visit the Responsible Gaming page directly — these requests are processed immediately once submitted through the correct channel.