xp768 Privacy Policy

xp768 ("we", "us", "our") operates the online casino and sports betting platform accessible at xp768.net, including all associated mobile-optimised pages and subdomains. xp768 is the data controller in respect of the personal information collected through the platform. This Privacy Policy applies to all users who access the xp768 platform, whether as registered account holders or anonymous visitors.

This policy should be read alongside the xp768 Terms & Conditions and the xp768 Responsible Gaming Policy. If you have questions about this policy or how xp768 handles your personal data, please contact us using the details in Section 14.

xp768 collects and processes the following categories of personal data:

• Identity data: full legal name, date of birth, gender, CNIC or passport number (for KYC verification), and profile photograph where submitted.
• Contact data: registered mobile number, email address, and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, or Faisalabad).
• Financial data: JazzCash or Easypaisa mobile wallet number, bank account information (HBL, UBL, Meezan Bank, Bank Alfalah) where used for deposits or withdrawals, transaction history, and balance information.
• Account data: username, password (stored in hashed form), account preferences, communication preferences, deposit and loss limits set by you, and responsible gaming settings.
• Usage data: game session logs, betting history, wagering activity, login and logout timestamps, pages visited, features used, and session duration.
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and approximate geographic location derived from IP.
• Communications data: records of correspondence with xp768 support, including live chat transcripts and submitted support requests.

xp768 collects personal data through the following means:

• Direct submission: when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automated technologies: cookies, web beacons, server logs, and analytics scripts that capture technical and usage data as you navigate the xp768 platform.
• Third parties: payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) may share transaction confirmation data with xp768 to verify deposits and process withdrawals. KYC verification providers may share identity verification outcomes. Fraud detection partners may share risk signals.

xp768 uses the personal data we collect for the following purposes:

• To create and manage your xp768 account, verify your identity, and process transactions in PKR.
• To provide the gaming and betting services you access, including live casino, cricket and sports betting, slots, jackpots, and promotional games.
• To process deposits and withdrawals through your nominated payment method and maintain an accurate transaction record.
• To comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations, including verifying your identity documents before processing withdrawals.
• To enforce the xp768 Terms & Conditions, including detecting and preventing fraud, collusion, underage access, duplicate accounts, and prohibited conduct.
• To administer promotional offers, bonuses, and loyalty programmes for which you are eligible.
• To provide customer support, respond to your queries, and investigate complaints.
• To send you service-related notifications including account activity alerts, deposit confirmations, and updates to our policies.
• To improve the platform through analysis of aggregated, anonymised usage data.
• To comply with applicable legal, regulatory, and audit obligations.

xp768 processes personal data on the following legal bases:

• Contractual necessity: processing required to fulfil our obligations under the player account agreement, including account management, game provision, and payment processing.
• Legal obligation: processing required to comply with KYC, AML, responsible gaming, and other regulatory requirements applicable to xp768's operations.
• Legitimate interests: processing necessary to prevent fraud and cheating, protect the security and integrity of the platform, and improve our services — where such interests are not overridden by your data protection rights.
• Consent: where you have provided explicit consent, for example to receive marketing communications about xp768 promotions. You may withdraw consent at any time from your account communication preferences.

xp768 does not sell your personal data to third-party advertisers or data brokers. We may share your data with the following categories of recipients, strictly as necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other approved payment partners, to process deposits and withdrawals.
• Identity verification providers: third-party KYC and AML screening services used to verify identity documents and screen against sanctions lists.
• Game software providers: licensed casino game and sports data providers who may receive pseudonymised session data to deliver game functionality and settle bets.
• Fraud detection services: partners that assess the risk profile of transactions and login events to protect xp768 and its players from fraudulent activity.
• Legal and regulatory authorities: where required by applicable law, court order, or regulatory directive, xp768 may disclose personal data to governmental or law enforcement bodies.
• Professional advisers: legal, financial, and audit advisers who are bound by confidentiality obligations.

Some of xp768's service providers and technology partners operate outside Pakistan. Where personal data is transferred to a jurisdiction that may not provide the same level of data protection as Pakistan, xp768 will take reasonable steps to ensure that appropriate safeguards are in place, such as contractual data protection clauses with the receiving party. By using the xp768 platform, you acknowledge and consent to the transfer of your personal data in accordance with this policy.

xp768 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In practice:

• Account registration and KYC data is retained for a minimum of five (5) years from account closure, in line with typical AML regulatory requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for up to three (3) years from the date of the interaction.
• Technical and usage data (server logs, session data) is generally retained for twelve (12) months and then deleted or anonymised.

When personal data is no longer required, xp768 will securely delete or anonymise it.

xp768 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies may be set when you visit xp768:

• Essential cookies: required for the platform to function, including session management and security tokens. These cannot be disabled without affecting core functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how players navigate and use the platform, helping xp768 identify and fix usability issues.
• Preference cookies: store your platform settings such as language preferences and last-visited sections to improve your return experience.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the xp768 platform.

Subject to applicable law, you have the following rights in relation to your personal data held by xp768:

• Right of access: you may request a copy of the personal data xp768 holds about you.
• Right to rectification: you may request that inaccurate or incomplete personal data be corrected. Many fields can be updated directly from your account settings.
• Right to erasure: you may request the deletion of your personal data where xp768 no longer has a lawful basis for processing it. This right is subject to legal retention obligations.
• Right to restrict processing: you may request that xp768 limit how it uses your data in certain circumstances.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact xp768 support via live chat or at [email protected]. xp768 will respond to verified requests within thirty (30) days.

The xp768 platform is strictly for persons aged 18 years of age or older. xp768 does not knowingly collect or process personal data from persons under the age of 18. If xp768 becomes aware that an account has been registered by or on behalf of an underage individual, the account will be immediately suspended, all associated data will be reviewed, and any winnings or bonus balances will be voided. If you believe that a minor has accessed the xp768 platform, please contact us immediately at [email protected].

xp768 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• HTTPS encryption on all pages and API endpoints.
• Hashed and salted password storage — xp768 support staff cannot read your password.
• Optional two-factor authentication (2FA) for account login.
• Automated anomaly detection on login events and financial transactions.
• Access controls limiting staff access to personal data on a need-to-know basis.
• Regular security reviews of platform infrastructure.

While xp768 takes these measures seriously, no system is entirely immune from security risks. You are responsible for keeping your own login credentials confidential and for logging out of your account on shared devices.

xp768 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, xp768 will notify registered players via the email address or mobile number associated with their account, and will update the "Last Updated" date at the top of this page. Your continued use of the xp768 platform after any such changes constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you should cease using the platform and close your account.

If you have any questions, concerns, or requests related to this Privacy Policy or xp768's data handling practices, please contact the xp768 data team via:

Email: [email protected]

English-speaking support is available 24 hours a day, seven days a week. xp768 will acknowledge privacy enquiries within 48 hours and aim to provide a substantive response within thirty (30) days.