x786x Privacy Policy

This Privacy Policy ("Policy") is published by x786x ("x786x", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at x786x.app. This Policy describes how x786x processes the personal data of visitors to x786x.app and registered players of the x786x platform ("you", "your", "the Player").

x786x is committed to protecting the privacy and security of all personal data entrusted to us. We process personal data in accordance with applicable data protection legislation and the requirements of the international gaming license framework under which x786x operates. This Policy should be read alongside the x786x Terms and Conditions, which govern the overall relationship between x786x and its registered players.

By accessing x786x.app or registering a player account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of x786x immediately.

x786x collects the following categories of personal data from players and visitors, depending on how you interact with the platform:

x786x collects personal data through the following means:

• Direct Collection: Data you provide when completing the x786x registration form, submitting KYC verification documents, initiating a deposit or withdrawal, contacting x786x customer support via live chat or email, or completing any responsible gaming self-assessment on the platform.
• Automated Technical Collection: When you visit x786x.app, our servers automatically record certain technical information including your IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, and session timestamps. This data is collected via server logs and session management technology.
• Cookies and Similar Technologies: x786x uses cookies, local storage, and similar tracking technologies to maintain your login session, remember platform preferences, analyse platform usage patterns, and support responsible gaming monitoring features. Full details are provided in Section 9 of this Policy.
• Third-Party Payment Providers: When you conduct a PKR transaction via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Raast, x786x receives a transaction confirmation record from the relevant payment provider, which includes your mobile wallet or bank reference and the transaction amount. x786x does not receive or store your full banking PIN or password.
• Identity Verification Services: x786x may use third-party identity verification providers to assist in validating CNIC documents submitted during KYC. These providers process identity data solely for verification purposes under strict confidentiality obligations.

x786x processes your personal data only for clearly defined and lawful purposes. The table below sets out the specific purposes for which each category of data is used:

• Account Management: To register and maintain your x786x player account, verify your identity, and enable x786x login access.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, and to maintain accurate financial records associated with your account.
• Regulatory Compliance: To meet x786x's obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and the conditions of x786x's international gaming license framework, including player age verification (21+).
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account compromise, money laundering, bonus abuse, and other prohibited conduct on the x786x platform.
• Platform Operation and Improvement: To deliver, maintain, and improve x786x's casino games, cricket betting markets, live dealer products, slot games, and arcade features. Technical data is used to diagnose platform issues, optimise performance, and improve the user experience for Pakistani players.
• Customer Support: To respond to player queries, resolve complaints, and maintain records of all x786x support interactions for quality and compliance purposes.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling behaviour, enforce player-requested deposit limits and self-exclusion periods, and fulfil x786x's responsible gaming obligations under its licensing framework.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw marketing consent at any time via your x786x account settings or by contacting support.

x786x processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between x786x and the player — including account registration, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable AML/CFT regulations, age verification mandates, and gaming license conditions is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of x786x's legitimate interests, where those interests are not overridden by the player's fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

x786x does not share personal data with third parties except in the following clearly defined circumstances:

• Payment Service Providers: x786x shares transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast solely to the extent necessary to process your deposit and withdrawal requests. These providers are bound by their own data protection obligations and are not permitted to use your data for any other purpose.
• Identity Verification Providers: x786x may share CNIC documents and associated identity data with certified third-party KYC/AML compliance providers for the purpose of player age and identity verification. These providers process data exclusively on x786x's behalf under strict confidentiality agreements.
• Game Software Providers: x786x's casino platform integrates games from licensed third-party software providers. Certain anonymised session and gameplay data may be processed by these providers for RNG certification and game performance monitoring. No personally identifiable financial or identity data is shared with game providers.
• Regulatory and Legal Authorities: x786x may be required to disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where compelled by applicable law, court order, or gaming license conditions. In such cases, x786x will disclose only the minimum data necessary to satisfy the legal obligation.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of x786x's business, player data may be transferred to the acquiring entity, subject to equivalent data protection standards being maintained. Players will be notified of any such transfer in advance.

All third parties with whom x786x shares personal data are required to process that data in accordance with applicable data protection standards and may not use it for any purpose beyond the specific function for which it was shared.

x786x retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: All personal data associated with an active x786x player account is retained for the duration of the account's active status.
• Closed Account Data: Following account closure, x786x retains identity, financial transaction, and gaming activity records for a minimum period of five (5) years in order to meet AML/CFT regulatory obligations and gaming license audit requirements.
• Customer Support Records: Live chat transcripts and email correspondence are retained for a minimum of two (2) years from the date of the interaction.
• Technical and Log Data: Server log and session data is retained for up to twelve (12) months, after which it is deleted or irreversibly anonymised.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for as long as they are relevant to demonstrating x786x's compliance with applicable rules.

x786x implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and x786x.app is encrypted using industry-standard 256-bit SSL/TLS protocols — the same encryption standard applied by Pakistan's leading commercial banks including HBL, UBL, and Meezan Bank.
• Encrypted Data Storage: Sensitive data fields — including CNIC numbers, payment account references, and account passwords — are stored in encrypted form in x786x's secure database infrastructure. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Access Controls: Access to player personal data within x786x is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement may access identifiable player data, and all such access is logged and audited.
• Two-Factor Authentication: x786x strongly recommends that all players enable two-factor authentication (2FA) on their x786x account to provide an additional layer of protection against unauthorised x786x login attempts.
• Penetration Testing and Security Audits: x786x conducts regular third-party security audits and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: x786x maintains a documented data breach response procedure. In the event of a security incident that poses a material risk to players, x786x will notify affected players and relevant authorities within the timeframe required by applicable regulations.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your x786x login credentials and for notifying x786x support immediately if you suspect any unauthorised access to your account.

x786x uses cookies and similar tracking technologies on x786x.app to ensure the platform functions correctly, to maintain your login session, to remember your preferences, and to analyse how players navigate and use the platform. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for x786x.app to function. They include session authentication tokens that maintain your x786x login state while you navigate the platform, security tokens that prevent cross-site request forgery, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: These cookies remember your platform preferences — such as your preferred language, display settings, and notification preferences — so that you do not need to reconfigure them on each visit.
• Analytical Cookies: x786x uses analytical cookies to understand how players interact with x786x.app — including which game categories are most popular, how long players spend on specific pages, and where navigation drop-offs occur. This data is used in aggregated, anonymised form to improve platform design and user experience. Analytical cookies are set only with your consent.
• Responsible Gaming Monitoring Cookies: x786x uses session-based tracking to monitor gaming duration and activity patterns for the purpose of delivering responsible gaming alerts, reality checks, and session limit notifications. This is a core player protection feature and is not used for commercial profiling.

You may manage your cookie preferences through the cookie consent banner displayed on your first visit to x786x.app, or through the cookie settings panel accessible in your x786x account. Most web browsers also provide controls to manage or block cookies. Please note that disabling strictly necessary cookies will prevent you from accessing x786x services.

Subject to applicable data protection law and the conditions of x786x's gaming license obligations, you have the following rights in respect of your personal data held by x786x. To exercise any of these rights, please contact x786x support as described in Section 14.

• Right of Access: You have the right to request a copy of all personal data that x786x holds about you, along with information about how that data is being used.
• Right to Rectification: You have the right to request that x786x corrects any inaccurate or incomplete personal data held about you without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to x786x's legal data retention obligations (see Section 7). Note that AML/KYC regulatory requirements may prevent immediate erasure of certain financial and identity records.
• Right to Restrict Processing: You have the right to request that x786x restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to x786x processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Marketing opt-outs take effect immediately upon request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

x786x will respond to all verifiable data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case x786x will notify you of the extension and the reasons for it within the initial thirty-day window.

x786x strictly prohibits access to its platform by persons under the age of twenty-one (21). x786x does not knowingly collect or process personal data from individuals under this age. CNIC-based age verification is conducted as part of the x786x registration process to enforce this restriction.

If x786x becomes aware that personal data has been collected from a person under the age of 21 — whether through fraudulent registration or any other means — x786x will immediately suspend the relevant account, delete all associated personal data, and reverse any transactions conducted through that account in accordance with applicable regulations.

If you are a parent or guardian and have reason to believe that a person under 21 has registered an x786x account using false identity information, please contact x786x support immediately via live chat or at the email address provided in Section 14.

x786x.app may contain links to third-party websites or resources for informational purposes. These third-party sites are not operated by x786x and are not subject to this Privacy Policy. x786x has no control over and accepts no responsibility for the content, privacy practices, or data handling of any third-party site. We strongly recommend that you review the privacy policy of any external site you visit via a link from x786x.app before providing any personal information to that site.

x786x reserves the right to update or amend this Privacy Policy at any time. When material changes are made, x786x will notify registered players via the email address associated with their x786x account and/or via a prominent notice displayed upon next x786x login. The updated Policy will be published at x786x.app/privacy-policy with a revised "Last Updated" date.

Your continued use of x786x following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you should discontinue use of x786x and may request account closure as described in the x786x Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to x786x's handling of your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on x786x.app. Average response time under 2 minutes. Support is available in both English and Urdu.
• Email: [email protected] — all privacy-related email enquiries receive a response within 24 hours on business days. Please include "Privacy Request" in the subject line for faster routing to our Data Protection team.

For formal data rights requests (access, erasure, rectification, portability), please include your full registered name, your registered mobile number or email, and a clear description of your request. x786x may require identity verification before processing data rights requests to ensure your data is not disclosed to an unauthorised person.