At xc999 we take the privacy of every Pakistani player seriously. This Privacy Policy explains precisely what personal data we collect, how we use it, who we share it with, and what rights you have over your own information.
Six principles that define how xc999 handles your personal data. These cards summarise key commitments — the full policy details follow below.
xc999 collects only the personal data genuinely necessary to operate your account, process transactions in PKR, and meet our legal obligations. We do not collect data for its own sake.
All data transmitted between your device and xc999 is protected by industry-standard SSL/TLS encryption. Passwords are stored using one-way hashing — xc999 staff cannot read your password.
xc999 does not sell, rent, or trade your personal data to third-party marketers. Your information stays within the xc999 ecosystem and is shared with service providers only on a need-to-know basis.
You have the right to access, correct, or request deletion of your personal data at any time. Submit a written request to our support team and we will respond within the timeframe set out in this policy.
xc999 uses cookies to keep your session active, remember your preferences, and analyse platform performance. You can manage non-essential cookies through your browser settings at any time.
xc999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Data is securely deleted or anonymised when retention periods expire.
This Privacy Policy applies to all personal data collected by xc999 through the xc999.onl website, mobile platform, and any associated services. By registering an account or continuing to use the xc999 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.
xc999 ("we", "us", "our") operates the online casino and sports betting platform accessible at xc999.onl. This Privacy Policy describes how xc999 collects, processes, stores, and protects the personal data of registered players and website visitors, with particular regard to users based in Pakistan.
This policy is written in plain, accessible English because we believe our players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan deserve to understand exactly how their information is handled — without having to wade through impenetrable legal jargon.
This Privacy Policy should be read in conjunction with the xc999 Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and xc999.
Data Controller: xc999 is the data controller responsible for the personal data collected through this platform. For all data-related enquiries, please contact us at [email protected].
xc999 collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the platform, and — in limited circumstances — from third-party verification services. The categories of data we collect are as follows:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, photograph | Provided by you during registration or KYC |
| Contact Data | Mobile number, email address, city of residence | Provided by you during registration |
| Financial Data | JazzCash / EasyPaisa account reference, HBL / UBL / Meezan Bank account details, PKR transaction history | Provided by you and payment processors |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Collected automatically |
| Usage Data | Pages visited, games played, bets placed, session duration | Collected automatically |
| Communications Data | Live chat transcripts, support email content | Generated during your interactions with support |
xc999 does not collect or process sensitive special-category data such as racial or ethnic origin, religious beliefs, health data, or political opinions.
xc999 uses your personal data for the following specific purposes:
xc999 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.
xc999 processes your personal data on the following legal bases:
Withdrawing Consent: To withdraw consent for marketing communications, use the unsubscribe link in any promotional email or contact our support team. Withdrawing marketing consent does not affect your ability to use the xc999 platform.
xc999 does not sell your personal data. We share personal data with third parties only in the following circumstances and only to the extent necessary:
All third-party service providers engaged by xc999 are contractually required to process your data only for the specified purpose, to maintain appropriate security standards, and to refrain from using your data for any independent purpose.
xc999 operates infrastructure across multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, xc999 ensures that adequate safeguards are in place to protect your data, including:
By using the xc999 platform, you acknowledge that your personal data may be transferred internationally as described above.
xc999 uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device by your browser when you visit a website. xc999 uses the following categories of cookies:
You can manage or disable non-essential cookies through your browser settings. Please note that disabling analytics or functional cookies may affect your experience on the xc999 platform.
xc999 does not use third-party advertising or behavioural tracking cookies. We do not participate in cross-site advertising networks or retargeting programmes.
xc999 retains your personal data for as long as is necessary for the purpose for which it was collected, and for as long as required to meet our legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML and KYC regulatory requirements |
| Financial Transaction Data | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay & Betting Records | 5 years from session date | Dispute resolution and audit requirements |
| Support Communications | 3 years from last interaction | Quality assurance and dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis |
| Technical & Log Data | 90 days | Security monitoring and fraud detection |
Following the expiry of the applicable retention period, xc999 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you.
As a data subject, you have the following rights in relation to the personal data xc999 holds about you. To exercise any of these rights, please contact us at [email protected]. xc999 will respond within 30 days of receiving a valid request.
Request a copy of all personal data xc999 holds about you and information about how it is processed.
Request correction of any inaccurate or incomplete personal data held by xc999.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding legal obligations.
Request that xc999 restricts processing of your data while a dispute or correction request is being resolved.
Request your personal data in a structured, machine-readable format for transfer to another service provider.
Object to processing of your data based on legitimate interests, including profiling for responsible gaming purposes.
Please note that certain rights may be limited where xc999 is required by law to retain or process your data — for example, for AML compliance or to resolve an active dispute. xc999 will explain any such limitation clearly when responding to your request.
The xc999 platform is strictly intended for adults aged 21 and above. xc999 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the xc999 registration process, and accounts found to belong to persons under 21 will be immediately suspended.
If you are a parent or guardian and believe that a minor has registered an xc999 account or provided personal data to xc999 without your knowledge or consent, please contact us immediately at [email protected]. xc999 will take prompt action to investigate, delete any data collected from the minor, and close the relevant account.
21+ Commitment: xc999 employs technical age-gate measures and document-based KYC verification to enforce the 21+ age restriction. This is a non-negotiable requirement and is monitored on an ongoing basis across all xc999 accounts.
xc999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Despite these measures, no internet transmission or electronic storage system is 100% secure. xc999 cannot guarantee the absolute security of your data. In the event of a data breach that poses a significant risk to your rights and freedoms, xc999 will notify affected players and relevant authorities in accordance with applicable legal requirements.
The xc999 platform may contain references or links to third-party content, such as game provider information pages or payment method guides. This Privacy Policy applies exclusively to the xc999 platform. xc999 has no control over, and accepts no responsibility for, the privacy practices of any third-party website or service that may be referenced.
We encourage you to review the privacy policies of any third-party services you interact with independently of the xc999 platform.
xc999 reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — meaning they significantly affect the way your personal data is processed or your rights as a data subject — xc999 will notify you via email to your registered address or via a prominent notice on the platform at least seven (7) days before the change takes effect.
Minor amendments, such as typographical corrections or clarifications that do not alter the substance of the policy, may be made without prior notice. The effective date shown at the top of this page will be updated to reflect any change.
Your continued use of the xc999 platform following any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the changes, you must stop using the platform and request account closure prior to the effective date.
We recommend bookmarking this page and checking it periodically. The current version of the Privacy Policy is always available at xc999.onl/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way xc999 processes your personal data, please contact us through the following channels:
When submitting a data rights request, please include your registered email address or mobile number and a clear description of your request so that we can identify your account and respond efficiently. xc999 will acknowledge your request within 48 hours and provide a substantive response within 30 days.
Reminder: This Privacy Policy was last updated in January 2026 (Version 2.4). xc999 recommends reviewing this policy whenever you receive a notification of an update. Your continued use of the platform constitutes acceptance of the current policy.
At xc999 we believe you should always know how your data is being used. If you have questions about your privacy, our support team is available 24/7 to help.
21+ only. Please gamble responsibly. xc999 supports safe and responsible play for all Pakistani players.