x888 Privacy Policy

1. Introduction

x888 ("we", "us", "our", "x888") operates the online gaming platform accessible at https://x888.lat (the "Platform"). We take data privacy seriously and are committed to handling the personal information of our users — including registered Pakistani players across Lahore, Karachi, Islamabad, Rawalpindi, Faisalabad and elsewhere — with transparency, security and respect.

This Privacy Policy describes our practices regarding the collection, use, storage, sharing and protection of personal data in connection with the x888 Platform, including account registration, gaming activity, payment processing and customer support interactions. By registering an x888 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are published on the x888 Platform.

2. Data We Collect

x888 collects personal data in several ways, including directly from you during registration and account use, and automatically through your interaction with the Platform. The categories of personal data we collect include:

• Identity Data: Full legal name as it appears on your CNIC, date of birth, national identity number (CNIC) and any other documentation provided during KYC verification;
• Contact Data: Pakistani mobile number, email address and, where provided, correspondence address;
• Financial Data: Payment method details (JazzCash account number, Easypaisa account number, bank account details for HBL, UBL, Meezan Bank or Bank Alfalah), transaction amounts, deposit and withdrawal history in PKR;
• Account Data: Your x888 username, password (stored in encrypted form), account preferences, bonus and promotional history, responsible gaming limit settings, and self-exclusion status;
• Gaming Activity Data: Game sessions played, bets placed, wagers on cricket betting markets (including PSL and international fixtures), slot sessions, live casino hand history, and gaming outcomes;
• Technical Data: Device type, operating system, browser type, IP address, and mobile network information collected when you access the x888 Platform;
• Communications Data: Records of any correspondence with x888 customer support, including complaint submissions and their resolution.

x888 does not collect data from minors. The Platform is strictly 18+, and KYC procedures are in place to ensure this requirement is enforced.

3. How We Use Your Data

x888 uses the personal data we collect for the following specific purposes:

• Account Management: To register, verify, maintain and support your x888 account, including KYC identity and age verification required before real-money gaming and withdrawals;
• Service Delivery: To provide access to the x888 Platform's gaming products, betting markets, live casino tables, jackpots and promotions;
• Payment Processing: To process deposits and withdrawals in PKR via your registered payment methods (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) and to maintain accurate financial records;
• Regulatory Compliance: To comply with anti-money laundering (AML) requirements, age and identity verification obligations, and other applicable legal or regulatory requirements;
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling, to administer player-set deposit and loss limits, and to enforce self-exclusion periods activated from within your x888 account settings;
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, cheating, collusion, multi-accounting and other conduct prohibited under the x888 Terms & Conditions;
• Customer Support: To respond to your queries, complaints and requests submitted via the x888 support channel;
• Promotional Communications: Where you have provided consent, to send you information about x888 promotions, bonuses, and relevant gaming updates. You may withdraw this consent at any time through your x888 account settings or by contacting [email protected].

4. Legal Basis for Processing

x888 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to register and maintain your x888 account, deliver gaming services, and process payments is required to perform the contract between you and x888;
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations and age verification;
• Legitimate Interests: Processing carried out to detect and prevent fraud, ensure Platform security, and improve the x888 service, where these interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications is conducted only where you have given specific, informed consent. This consent can be withdrawn at any time.

5. Data Sharing

x888 does not sell your personal data to third parties. We share your data only in the following limited circumstances:

• Payment Processors: Financial data necessary to process deposits and withdrawals is shared with the relevant payment service providers (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) solely for transaction processing purposes;
• Identity Verification Partners: Identity and KYC documentation may be shared with third-party identity verification service providers engaged by x888 to fulfil age and identity verification requirements;
• Game Software Providers: Certain gaming activity data may be shared with x888's certified game software studios as technically required for game delivery, session management and dispute resolution;
• Legal & Regulatory Authorities: x888 will disclose personal data to competent legal authorities, regulators or law enforcement bodies where required by applicable law or where we are under a legal obligation to do so;
• Professional Advisers: In limited circumstances, data may be shared with legal, audit or compliance professionals engaged by x888 under appropriate confidentiality obligations.

All third parties with whom x888 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

6. Data Retention

x888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting obligations. Specifically:

• Account and identity data is retained for the lifetime of your active x888 account and for a period thereafter as required by applicable AML and regulatory obligations;
• Transaction and gaming activity records are retained for a minimum of five years following the relevant transaction or gaming session;
• Communications records (support tickets, complaint correspondence) are retained for three years from the date of closure;
• Where an x888 account is closed following a self-exclusion, data is retained in a form sufficient to prevent re-registration during any active exclusion period.

When data is no longer required for any of the above purposes, x888 takes reasonable steps to securely delete or anonymise it.

7. Cookies & Tracking Technologies

The x888 Platform uses cookies and similar tracking technologies to deliver and improve the gaming experience, maintain session security, and analyse Platform usage. The types of cookies used by x888 include:

• Essential Cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled without affecting Platform functionality;
• Performance Cookies: Used to understand how users navigate and interact with the x888 Platform, which pages are visited most frequently, and where errors occur — enabling x888 to improve performance and reliability;
• Preference Cookies: Store your Platform preferences, such as language settings and responsible gaming limit configurations, so that these are retained between sessions.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of your x888 account and gaming experience.

8. Data Security

x888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the x888 Platform;
• Encrypted storage of account passwords — x888 does not store passwords in plain text and cannot retrieve your password on your behalf;
• Access controls limiting internal access to personal data to authorised personnel with a legitimate operational need;
• Continuous monitoring systems for unusual account activity and unauthorised access attempts;
• Two-factor authentication ("2FA") available to all x888 account holders and strongly recommended to enhance login security.

Notwithstanding these measures, no data transmission over the internet or data storage system can be guaranteed to be completely secure. If you have reason to believe your x888 account has been compromised, contact x888 immediately at [email protected].

9. Your Rights

Subject to applicable law, you have the following rights in respect of the personal data x888 holds about you:

• Right of Access: You may request a copy of the personal data x888 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data — some corrections (e.g. name, CNIC number) may require documentary evidence;
• Right to Erasure: You may request deletion of your personal data, subject to x888's legal retention obligations (for example, AML record-keeping requirements may preclude full erasure);
• Right to Restriction: You may request that x888 restrict its processing of your data in certain circumstances;
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a written request to x888 at: [email protected]. x888 will acknowledge your request within 48 hours and respond within 30 days.

10. Children's Privacy

The x888 Platform is strictly intended for adults aged 18 and above. x888 does not knowingly collect personal data from individuals under the age of 18. Age verification is performed as part of the KYC process for all new x888 accounts. If x888 becomes aware that personal data has been collected from a minor, that account will be immediately suspended, all associated data will be deleted, and any deposits will be refunded via the original payment method.

If you believe a minor has registered an x888 account, please contact us immediately at [email protected] so that we can take appropriate action.

11. Changes to This Privacy Policy

x888 may update this Privacy Policy from time to time to reflect changes in legal requirements, our data practices, or the services available on the Platform. Where material changes are made, x888 will notify registered users via their registered email address or by posting a prominent notice on the x888 Platform prior to the changes taking effect.

The date at the top of this Privacy Policy indicates when it was last updated. Your continued use of the x888 Platform following notification of any material change constitutes your acknowledgement of the updated Policy.

12. Contact Us

For all privacy-related queries, data subject access requests, or concerns regarding x888's handling of your personal data, please contact the x888 data team in writing at:

Email: [email protected]

x888 will acknowledge receipt of your correspondence within 48 hours and aim to provide a substantive response within 30 days of receipt. For complex requests that require additional time, x888 will notify you of the expected resolution timeline.