xk999 Privacy Policy

1 Introduction

1.1 This Privacy Policy ("Policy") is issued by xk999 ("xk999", "we", "us", "our") and applies to all personal data collected from individuals ("Players", "you", "your") who access or use the xk999 online gaming platform at xk999.biz, including all associated web pages, features, and services.

1.2 xk999 operates under an international gaming license and is committed to handling all personal data in a responsible, transparent, and lawful manner. This Policy is designed to inform you clearly and honestly about our data practices so you can make informed decisions about your use of the Platform.

1.3 By registering an account with xk999, depositing funds, placing bets, or otherwise using the Platform in any capacity, you acknowledge that you have read this Policy and consent to the collection, use, and processing of your personal data as described herein.

1.4 This Policy should be read together with the xk999 Terms & Conditions, which govern the broader relationship between xk999 and its Players. In the event of any conflict between this Policy and the Terms & Conditions on data-related matters, this Policy shall take precedence.

2 Personal Data We Collect

2.1 xk999 collects only the personal data that is necessary for the purposes set out in this Policy. The categories of personal data we collect include the following:

2.2 xk999 does not intentionally collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, or health information, except where health-related information is voluntarily shared in the context of a responsible gaming self-exclusion or problem gambling support request.

3 How We Collect Your Data

3.1 xk999 collects personal data through the following channels and methods:

• Direct Registration: Information you provide when creating your xk999 account, including name, mobile number, date of birth, and login credentials.
• KYC Verification: Documents you upload to fulfil our identity verification requirements, including CNIC scans and selfie photographs.
• Financial Transactions: Data generated when you make deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT.
• Platform Usage: Data automatically collected through your use of xk999, including session data, bet placement, game interactions, and navigation patterns.
• Cookies and Similar Technologies: Technical data collected via cookies, local storage, and similar tracking technologies as described in Section 7 of this Policy.
• Support Interactions: Information you share when contacting xk999 customer support via live chat or email.
• Third-Party Verification Services: In some cases, xk999 may receive identity or fraud-check data from authorised third-party KYC and AML compliance providers.

3.2 xk999 does not collect personal data from social media platforms or public data sources without your knowledge and consent.

4 How We Use Your Personal Data

4.1 xk999 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and manage your xk999 player account, including processing logins, account updates, and password resets.
• Service Delivery: To provide access to cricket betting, casino games, slot games, lottery, and other xk999 gaming services.
• Payment Processing: To process deposits and withdrawals securely through your chosen payment method (JazzCash, EasyPaisa, bank transfer, or USDT).
• KYC and Compliance: To verify your identity, age (21+ requirement), and source of funds as required under our international gaming license obligations and anti-money laundering (AML) regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, and other security threats to the xk999 Platform.
• Responsible Gaming: To monitor gambling behaviour patterns and, where appropriate, proactively reach out to players showing signs of problem gambling, and to administer self-exclusion and cooling-off requests.
• Customer Support: To respond to your queries, complaints, and dispute resolution requests efficiently and fairly.
• Platform Improvement: To analyse usage patterns and optimise the xk999 Platform's performance, design, and feature set — particularly for Pakistani mobile users.
• Marketing Communications: To send you promotional offers, bonus notifications, and gaming updates, subject to your communication preferences and applicable opt-out rights.
• Legal Obligations: To comply with applicable laws, regulations, court orders, and lawful requests from regulatory or law enforcement authorities.

4.2 xk999 will not use your personal data for any purpose that is incompatible with the purposes described in this Policy without first obtaining your explicit consent.

5 Legal Basis for Processing

5.1 xk999 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to fulfil the contract between xk999 and you as a registered Player — including account creation, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with xk999's obligations under its international gaming license, including KYC verification, AML compliance, and data retention requirements mandated by applicable regulations.
• Legitimate Interests: Processing necessary for xk999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, particularly in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Third Parties

6.1 xk999 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. Personal data is shared only in the following controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners receive only the transaction data necessary to process your deposits and withdrawals.
• KYC and AML Providers: Authorised identity verification and anti-money laundering compliance service providers who assist xk999 in meeting its regulatory obligations under its international gaming license.
• Game Technology Providers: Licensed game developers and platform providers (including providers of cricket betting, live casino, slot, and lottery products) who receive aggregated or pseudonymised data necessary to deliver game services.
• Fraud Detection Services: Specialist fraud prevention and cybersecurity providers who help xk999 detect and prevent fraudulent account activity, bonus abuse, and unauthorised access.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or lawful request from a regulatory or law enforcement authority, xk999 may disclose personal data as legally obligated.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of xk999's business operations, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 All third parties with whom xk999 shares personal data are contractually required to process that data solely for the purposes specified by xk999, to maintain appropriate technical and organisational security measures, and to not further disclose the data without xk999's prior written authorisation.

7 Cookies & Tracking Technologies

7.1 xk999 uses cookies, local storage, and similar tracking technologies to operate the Platform effectively, enhance your experience, and collect analytics data that helps us improve our services for Pakistani mobile users.

7.2 The types of cookies used by xk999 include:

• Essential Cookies: Strictly necessary for the Platform to function. These enable session management, login authentication, and security features. They cannot be disabled without impacting Platform functionality.
• Performance Cookies: Collect anonymised information about how players interact with the xk999 Platform, including pages visited and features used. This data helps xk999 identify and resolve performance issues.
• Functionality Cookies: Remember your preferences, such as language settings, game display options, and notification preferences, to personalise your xk999 experience.
• Analytics Cookies: Used by xk999 to understand aggregate user behaviour patterns and improve the Platform's design and content strategy.

7.3 Managing Cookies. You may control and manage cookies through your browser settings. Please note that disabling essential cookies will impair your ability to use core xk999 Platform features, including account login and transaction processing. Your browser's help documentation provides guidance on cookie management for your specific browser and device.

7.4 xk999 does not use third-party advertising cookies or cross-site tracking technologies for the purposes of serving targeted advertisements on external websites.

8 Data Security

8.1 xk999 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and xk999 servers;
• Encrypted storage of sensitive personal data, including CNIC information and financial data, using industry-standard encryption at rest;
• Role-based access controls that limit employee access to personal data strictly to those who require it for their specific job functions;
• Multi-factor authentication for xk999 administrative systems and privileged access accounts;
• Regular security audits, penetration testing, and vulnerability assessments of the xk999 Platform;
• Automated fraud detection and anomaly detection systems monitoring account activity in real time;
• Formal incident response procedures for identifying, containing, and reporting data security incidents.

8.2 Player Responsibilities. While xk999 takes every reasonable precaution to secure the Platform, the security of your account is also dependent on your own behaviour. You are responsible for maintaining the confidentiality of your xk999 login credentials and for ensuring that your device and internet connection are adequately secured. Do not share your password with anyone, including xk999 staff — xk999 representatives will never ask for your password.

9 Data Retention

9.1 xk999 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law or our international gaming license obligations. The general retention periods applied by xk999 are as follows:

• Active Account Data: Retained for the duration of your active xk999 player account relationship.
• Transaction and Bet Records: Retained for a minimum of 5 years from the date of each transaction, as required under AML and gaming license regulatory obligations.
• KYC Documentation: Retained for a minimum of 5 years from the date of account closure, or longer where required by applicable regulatory authority.
• Support and Communications Data: Retained for up to 3 years from the date of the relevant communication.
• Technical and Usage Data: Retained in aggregated or anonymised form for analytical purposes; individual-level data deleted within 24 months.
• Marketing Preferences: Retained until you withdraw consent or update your preferences, plus an additional 12-month period for suppression list purposes.

9.2 Upon expiry of the applicable retention period, xk999 will securely delete or anonymise your personal data in a manner that renders it irrecoverable and non-attributable to you as an individual.

9.3 Where data is retained solely to satisfy a legal or regulatory retention obligation, xk999 will restrict access to that data to the minimum number of staff required for compliance purposes.

10 Your Privacy Rights

10.1 As an xk999 player, you have the following rights in relation to your personal data, which xk999 is committed to honouring promptly and without unnecessary obstruction:

• Right of Access: You may request a copy of the personal data xk999 holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data held by xk999 is inaccurate or incomplete, you have the right to request its correction. Basic account data (such as contact details) can be updated directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data, subject to xk999's legal obligations to retain certain records under its gaming license regulatory requirements and AML legislation.
• Right to Restrict Processing: In certain circumstances, you may request that xk999 restrict the processing of your personal data while a dispute or investigation is ongoing.
• Right to Data Portability: Where data is processed on the basis of your consent or contractual necessity, you may request that xk999 provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to xk999's processing of your personal data for direct marketing purposes at any time, and to object to processing based on legitimate interests where you believe your fundamental rights and freedoms override those interests.
• Right to Withdraw Consent: Where xk999 processes your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

10.2 How to Exercise Your Rights. To exercise any of the rights listed above, please contact the xk999 Data team by emailing [email protected] with the subject line "Privacy Rights Request — [Your Full Name]". xk999 will respond to all valid requests within 30 days. In cases of complexity or high volume of requests, this period may be extended by a further 30 days, of which you will be notified.

10.3 Identity Verification. For the security of all Players, xk999 may require you to verify your identity before processing a privacy rights request. This is to ensure that personal data is not disclosed to, or deleted at the request of, an unauthorised individual.

11 Children's Privacy & Age Restriction

11.1 The xk999 Platform is strictly intended for use by individuals aged 21 years and above. xk999 does not knowingly collect personal data from individuals under the age of 21.

11.2 xk999 employs age verification as part of its KYC process to prevent underage individuals from registering accounts or accessing real-money gaming services. Any account found to belong to an individual under the age of 21 will be immediately suspended and the relevant personal data will be securely deleted.

11.3 If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to xk999 or created an account without your knowledge, please contact us immediately at [email protected]. xk999 will promptly investigate and take appropriate action, including deletion of the relevant data.

11.4 xk999 strongly encourages parents and guardians to utilise available parental control software to prevent minors from accessing online gaming platforms.

12 Marketing Communications

12.1 xk999 may use your contact details to send you promotional offers, bonus notifications, game updates, and other marketing communications relating to xk999 services. You may receive such communications via SMS, email, or in-account notifications.

12.2 Opt-Out Rights. You have the absolute right to opt out of receiving marketing communications from xk999 at any time. You may exercise this right by:

• Updating your communication preferences directly within your xk999 account settings;
• Clicking the unsubscribe link included in any xk999 marketing email;
• Contacting xk999 customer support via live chat or email and requesting removal from marketing lists.

12.3 Opting out of marketing communications will not affect your ability to use your xk999 account or receive essential transactional communications, such as deposit confirmations, withdrawal notifications, and account security alerts. These operational communications are not subject to opt-out as they are necessary for the management of your account.

12.4 xk999 does not share your contact details with third parties for the purposes of those third parties marketing their own products or services to you.

13 Third-Party Links & External Content

13.1 The xk999 Platform may from time to time contain references to or integrations with third-party service providers, such as payment processors or game technology providers. These third parties operate under their own privacy policies, which are independent of and separate from this xk999 Privacy Policy.

13.2 xk999 is not responsible for the privacy practices of any third-party services accessed in connection with your use of the Platform. xk999 encourages Players to review the privacy policies of any third-party services they interact with, particularly in relation to payment processing.

13.3 xk999 selects third-party service providers with due care and requires them to maintain appropriate data protection standards. However, xk999 cannot guarantee the security practices of third-party platforms and systems that are outside of xk999's direct operational control.

14 Changes to This Privacy Policy

14.1 xk999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or xk999 operational developments. The "Last Updated" date at the top of this Policy will be revised to reflect any changes.

14.2 Where changes to this Policy are material — meaning they significantly affect how xk999 processes your personal data or reduce your privacy rights — xk999 will notify you in advance via:

• A prominent notice displayed on the xk999 Platform;
• A notification sent to your registered email address or mobile number; or
• An in-account notification upon your next login.

14.3 Your continued use of the xk999 Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you should cease using the Platform and may request voluntary account closure in accordance with Section 13.2 of the xk999 Terms & Conditions.

14.4 xk999 recommends that Players review this Privacy Policy periodically to remain informed of how their personal data is being handled. The most current version of this Policy is always available at xk999.biz/privacy-policy.

15 Contact & Data Enquiries

15.1 If you have any questions, concerns, or complaints relating to this Privacy Policy or xk999's data practices, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly through the xk999 Platform — the fastest channel for account-related privacy queries.
• Email: [email protected] — please use the subject line "Privacy Enquiry — [Your Full Name]" for data-related requests. Responses within 24 business hours.

15.2 For formal privacy rights requests (access, erasure, rectification, portability), please include the following in your email: your full name as registered with xk999, your registered mobile number or email address, a clear description of the request you are making, and a copy of a valid identity document for verification purposes.

15.3 xk999 is committed to resolving all privacy-related queries and complaints fairly, promptly, and in full compliance with applicable data protection principles. Where a Player is not satisfied with xk999's response to a privacy complaint, they may escalate the matter to the relevant regulatory authority under xk999's international gaming license framework.