Your privacy matters to xc999. This policy explains exactly what personal data we collect from Pakistani players, why we need it, how we use it, how long we keep it, and what rights you have over your own information. We've written this to be genuinely readable — not to bury important details in complex language.
Privacy at xc999 is not a checkbox exercise. When you sign up and play on xc999, you're trusting the platform with real personal information — your phone number, your payment details, your identity documents in some cases. That trust is something xc999 takes seriously, and this Privacy Policy exists to explain clearly and honestly what happens with that information.
This policy applies to all Pakistani players who use the xc999 platform, whether you access it through a browser on your phone, a desktop computer, or any future xc999 mobile application. It covers every piece of personal data that xc999 might collect from you — from the moment you first visit the site to the point where you close your account.
The short version: xc999 collects only the data it genuinely needs to run the platform and keep your account secure. It does not sell your personal data to advertisers or data brokers. It shares your data with third parties only where necessary for payment processing, identity verification, or legal compliance — and in each case, only the minimum data required for that specific purpose.
By creating an account on xc999, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described here. If you do not agree, please do not register or continue using the xc999 platform.
xc999 collects different categories of personal data depending on what you do on the platform. Here is a complete breakdown of the types of data that may be collected:
xc999 collects personal data through three main routes — all of which involve your active participation:
The majority of data xc999 holds about Pakistani players is provided directly by those players during registration, account updates, identity verification, or when contacting customer support. You control what you share, and providing accurate information is a condition of maintaining an xc999 account in good standing.
When you use the xc999 platform, certain technical data is collected automatically. This includes your IP address, device type, session duration, pages visited, and game activity. This data is collected through standard industry mechanisms including session cookies, server logs, and the xc999 platform's internal analytics system. This data is used to maintain platform performance, detect fraud, and improve the overall user experience for Pakistani players.
In limited circumstances, xc999 may receive information about you from authorised third parties — for example, payment processors confirming the status of a deposit transaction, or identity verification services confirming the validity of documents you have submitted. Data received from third parties is handled under the same strict standards as data collected directly from players.
xc999 does not purchase data lists or acquire personal data about individuals who have not directly interacted with the platform. All data held by xc999 relates to people who have actively registered or engaged with xc999 services.
xc999 has specific, legitimate reasons for every piece of data it collects. The table below outlines the primary purposes for processing Pakistani player data:
| Purpose | Data Used | Consent Required? |
|---|---|---|
| Account creation & management | Name, phone, DOB, email | Contractual necessity |
| Age verification (18+) | DOB, CNIC | Legal obligation |
| Processing deposits & withdrawals | Payment method details | Contractual necessity |
| Anti-fraud & security monitoring | IP, device, activity patterns | Legitimate interest |
| Customer support provision | Account data, chat history | Contractual necessity |
| Responsible gaming monitoring | Betting activity, deposit history | Legal & ethical obligation |
| Platform performance improvements | Technical, session data | Legitimate interest |
| Promotional communications | Phone, email (if opted in) | Consent (opt-in only) |
xc999 does not use your personal data for any purpose beyond what is described in this policy without first obtaining your explicit consent. If xc999 ever wants to use your data for a new purpose not covered here, you will be notified and given the choice to consent or decline before any such use takes place.
Payment data is among the most sensitive personal information that xc999 handles, and it is treated accordingly. When you deposit to or withdraw from your xc999 account using Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard, the following approach to your payment data applies:
xc999 will never ask you for your Easypaisa or JazzCash PIN, your bank login credentials, or your card CVV through live chat, email, or any other channel. If anyone claiming to be from xc999 requests these details, do not provide them — contact our support team immediately.
xc999 does not sell, rent, or trade Pakistani player personal data to any third party for marketing, advertising, or commercial purposes. Full stop. Data is shared outside of xc999 only in the following limited, controlled circumstances:
To process deposits and withdrawals in PKR, xc999 works with payment processors that handle transactions via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card networks. The minimum data necessary for the specific transaction is shared with these processors. All payment partners are bound by their own data protection obligations.
For Know Your Customer (KYC) verification — typically triggered for larger withdrawals or suspicious activity flags — xc999 may use a third-party identity verification provider to confirm the authenticity of documents submitted. Only the specific documents required for verification are shared with these services.
xc999 will disclose player data to law enforcement, financial intelligence units, or other regulatory bodies when required to do so by applicable law or court order. xc999 will only comply with lawfully issued requests and will share only the data specifically requested.
Some casino games on xc999 are provided by licensed third-party game studios. These providers receive anonymised session data (such as game outcomes and bet sizes) for game integrity and auditing purposes — personal identifying information such as your name, CNIC, or phone number is not passed to game content providers.
All third-party service providers that handle Pakistani player data on behalf of xc999 are required to maintain appropriate data security standards and are contractually prohibited from using that data for their own independent purposes.
xc999 implements multiple layers of security to protect Pakistani player data from unauthorised access, loss, or misuse. The key measures in place include:
No digital platform can guarantee absolute security against all possible threats — this is a reality of the internet, not specific to xc999. However, xc999 is committed to maintaining security standards that are appropriate for a financial services platform handling PKR transactions and Pakistani player identity data.
xc999 uses cookies and similar technologies to make the platform work properly and to understand how Pakistani players use it. Here is a breakdown of the types of cookies used and their purpose:
Most browsers allow you to control cookie settings at the browser level. Note that disabling essential cookies will prevent the xc999 platform from functioning correctly — you will not be able to log in or place bets without them. Disabling analytics or functional cookies will not prevent you from using xc999 but may result in a less personalised experience.
The cookie toggle indicators above are illustrative. To manage your actual cookie preferences on xc999, use the cookie settings option available in your browser, or contact support to discuss your preferences for communications-related cookies.
xc999 follows a retention policy based on the principle of keeping data only for as long as it is genuinely needed for the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations.
When personal data reaches the end of its required retention period, xc999 deletes or anonymises it in a secure manner. Anonymised data — from which no individual Pakistani player can be identified — may be retained indefinitely for aggregate statistical analysis.
As a Pakistani player on xc999, you have meaningful rights in relation to your personal data. These are not just theoretical — they are exercisable rights that xc999 will respond to in good faith when properly requested:
You can request a copy of the personal data xc999 holds about you at any time. Requests are fulfilled within a reasonable timeframe, typically within 30 days of receiving a verifiable request.
If any personal data xc999 holds about you is inaccurate or outdated, you have the right to request that it be corrected. For contact details (phone number, email), you can update these directly in your account settings. For identity data (name, DOB), contact support with relevant documentation.
In certain circumstances, you can request that xc999 delete your personal data. This right is subject to legal and regulatory retention requirements — transaction records, for example, cannot be deleted before the legally required retention period expires. xc999 will delete everything that can legally be deleted.
If you have opted in to receive promotional communications from xc999 and wish to stop receiving them, you can opt out at any time — either through the unsubscribe link in any communication or by contacting the support team directly. Opting out of marketing communications does not affect your account or your ability to claim bonuses you navigate to manually on the Promotions page.
If you believe xc999 has handled your personal data improperly, you have the right to raise a formal complaint. Contact the xc999 privacy team at support@xc999.click with "Privacy Complaint" in the subject line. All complaints will be investigated and responded to in writing.
xc999 does not knowingly collect or process personal data from individuals under the age of 18. The platform is strictly for adults only, and age verification is a mandatory step in the xc999 account registration and verification process.
If xc999 becomes aware that personal data has been collected from a person under 18 — through a false declaration of age during registration or any other means — that account will be immediately suspended, all data associated with it will be reviewed, and personal data that was collected unlawfully will be securely deleted. Any winnings or balances in such accounts will not be paid out.
If you are a parent or guardian and believe that a minor may have registered on xc999 using your details or a false identity, please contact support immediately at support@xc999.click so the account can be investigated and closed without delay.
xc999 supports the efforts of Pakistani parents and guardians to protect young people from accessing gambling platforms. Parental control software that restricts access to gambling websites is recommended for households where minors have access to connected devices.
xc999 may update this Privacy Policy from time to time — for example, in response to changes in the platform's data processing practices, changes in applicable laws, or feedback from Pakistani players. When material changes are made, registered players will be notified through the contact details on their account before the updated policy takes effect.
The "Last Updated" date at the top of this page always reflects when the most recent revision was made. xc999 recommends that players revisit this page periodically, particularly after receiving a notification of update.
For any privacy-related question, rights request, or complaint, contact the xc999 privacy team through the following channels:
xc999 aims to respond to all formally submitted privacy rights requests within 30 days of receipt of a verifiable request. Complex requests or those requiring legal review may take longer, and you will be informed of the expected timeline in those cases.
Six concrete things xc999 does to protect the privacy of every Pakistani player on the platform.
xc999 has never sold and will never sell Pakistani player personal data to advertisers, data brokers, or any third party for commercial gain. Your information exists in the xc999 ecosystem to make your account work — nothing more.
Every single page and transaction on the xc999 platform — from the login screen to the withdrawal confirmation — is protected by SSL/TLS encryption. Your data is never transmitted in plain text across the internet.
When a Pakistani xc999 player submits a data access, correction, or deletion request, it gets a real response — not an automated acknowledgement that goes nowhere. The xc999 privacy team reviews and acts on these requests within 30 days.
Full Visa/Mastercard numbers and CVVs are never stored on xc999 servers — card transactions go through a PCI-DSS compliant gateway. Easypaisa and JazzCash identifiers are stored only to facilitate your PKR withdrawals and verify payment ownership.
xc999 does not hold onto Pakistani player data indefinitely just because it can. When data reaches the end of its legally required or operationally necessary retention period, it is deleted or securely anonymised. No unnecessary data accumulation.
Privacy matters should be easy to raise — not complicated by a language barrier. The xc999 support team handles privacy queries in both Urdu and English, 24/7. If something in this policy isn't clear, ask in whatever language is comfortable for you.
A quick summary of what you can request from xc999 regarding your personal data, and how to do it.
| Your Right | What It Means | How to Exercise It |
|---|---|---|
| Access | Get a copy of your personal data | Email support@xc999.click |
| Correction | Fix inaccurate personal data | Account settings or live chat |
| Deletion | Request data erasure where lawful | Email or live chat request |
| Marketing Opt-Out | Stop promotional communications | Unsubscribe link or support |
| Complaint | Raise a formal privacy concern | Email: "Privacy Complaint" subject |