x888 Privacy Policy — How We Protect Your Data

1. Who We Are

1.1  x888 is an online gambling and sports betting platform operating at x888.lol under an internationally recognised gaming licence. The Company serves registered players in Pakistan, offering cricket betting, live casino games, and a slot library of 800+ titles accessible via local payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

1.2  For the purposes of this Privacy Policy, x888 acts as the data controller in respect of personal data provided by players through the registration process, continued use of the Platform, and interactions with customer support.

1.3  All privacy-related enquiries, data access requests, and complaints may be directed to our support team at the contact details provided in Section 15 of this Policy.

2. Scope of This Policy

2.1  This Privacy Policy applies to all personal data collected by x888 through:

• The x888 website at x888.lol and all associated subdomains;
• The x888 account registration and login process;
• Deposits, withdrawals, and payment processing interactions;
• Customer support communications via live chat or email;
• Participation in promotions, bonuses, and loyalty programmes;
• Use of responsible gaming tools including self-exclusion and limit-setting.

2.2  This Policy does not apply to third-party websites or services that may be linked from the Platform. x888 is not responsible for the privacy practices of third-party operators.

3. Personal Data We Collect

3.1  x888 collects the following categories of personal data from players:

3.2  Voluntarily Provided Data: Some data — such as city of residence or preferred language — is provided voluntarily by players and enhances the personalisation of the x888 experience without being mandatory for account creation.

3.3  Automatically Collected Data: Technical and usage data is collected automatically when you access x888, in the ordinary course of standard web server logging and platform analytics operations.

4. How We Use Your Personal Data

4.1  x888 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, verifying, and securing your x888 account;
• Identity & Age Verification: Confirming that you are at least 21 years of age and the registered owner of the account and payment methods in use;
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and processing withdrawal requests to your registered payment method;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct on the Platform;
• Regulatory Compliance: Meeting our obligations under our gaming licence, applicable anti-money laundering (AML) regulations, and Know Your Customer (KYC) requirements;
• Responsible Gaming: Monitoring player activity to identify patterns that may indicate problem gambling and applying the responsible gaming tools selected by the player;
• Customer Support: Responding to queries, complaints, and requests submitted via live chat or email;
• Service Improvement: Analysing aggregated, anonymised usage data to improve the x888 Platform, game catalogue, and user experience;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Players may opt out at any time.

4.2  x888 will not use your personal data for any purpose materially different from those listed above without first obtaining your explicit consent, or where required by law.

5. Legal Basis for Processing

5.1  x888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between x888 and the player — principally account operation, payment processing, and gameplay;
• Legal Obligation: Processing required to comply with applicable law, our gaming licence conditions, AML regulations, and KYC requirements;
• Legitimate Interests: Processing conducted in x888's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service analytics — where such interests are not overridden by the player's rights;
• Consent: Processing conducted on the basis of your freely given, specific, and informed consent — principally optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Cookies & Tracking Technologies

6.1  x888 uses cookies and similar tracking technologies to enhance the player experience, maintain login sessions, and collect analytical data. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for the Platform to function correctly — session management, authentication, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences — language settings, game filters, last-played titles — to personalise your x888 experience.
• Analytics Cookies: Collect anonymised data on Platform usage — pages visited, session duration, feature engagement — to help x888 improve performance and content.
• Marketing Cookies: Used with your consent to deliver relevant promotional content based on your x888 activity. These are not used to track activity outside of x888.lol.

6.2  You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. Strictly Necessary Cookies cannot be disabled as they are required for core operations.

7. Data Sharing & Disclosure

7.1  x888 does not sell or rent personal data to third parties. Data is shared only in the following limited and controlled circumstances:

• Payment Processors: Financial data is shared with our payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard — to facilitate transactions. These processors are bound by their own data protection obligations.
• Identity Verification Providers: KYC and age verification service providers receive identity documents and data solely for the purpose of player verification.
• Regulatory & Licensing Authorities: x888 may be required to disclose player data to our gaming licensing authority, financial intelligence units, or law enforcement agencies in compliance with legal obligations.
• Fraud Prevention Services: Technical and identity data may be shared with fraud detection services to protect the Platform and its players from financial crime.
• Game Software Providers: Certain game studios that provide RNG-certified games on x888 receive anonymised session data necessary for game integrity auditing.

7.2  All third parties to whom x888 discloses personal data are required to process that data only for the specified purpose and in accordance with applicable data protection standards. x888 does not permit third-party use of player data for their own marketing purposes.

8. Data Retention

8.1  x888 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account Data: Retained for the duration of the active account relationship plus five (5) years following account closure, to meet licensing and AML audit requirements.
• Financial Transaction Data: Retained for seven (7) years from the date of the transaction, in compliance with financial record-keeping obligations applicable under our gaming licence.
• KYC Documents: Retained for five (5) years following account closure or the completion of the relevant KYC process, whichever is later.
• Support Communications: Retained for three (3) years from the date of the communication for dispute resolution and quality assurance purposes.
• Marketing Opt-In Data: Retained until the player opts out of marketing communications, at which point marketing preference data is updated and no further marketing is sent.

8.2  In certain cases, x888 may be legally required to retain data for longer periods — for example, where an account is under regulatory investigation or where a legal claim is pending. In such cases, data will be retained for the duration of the relevant proceedings.

9. Data Security

9.1  x888 implements a comprehensive suite of technical and organisational security measures to protect player data against unauthorised access, accidental loss, destruction, or disclosure:

• Transport Encryption: All data in transit between your device and x888 servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Storage Security: Player data is stored on access-controlled servers with role-based access restrictions limiting employee exposure to personal data on a need-to-know basis;
• Two-Factor Authentication: x888 offers SMS-based two-factor authentication for player accounts, adding an additional layer of login security;
• Regular Audits: x888 undergoes periodic security audits and penetration testing conducted by qualified third-party security professionals;
• Incident Response: x888 maintains an internal data breach response procedure. In the event of a breach likely to result in high risk to players, x888 will notify affected players without undue delay.

9.2  While x888 takes all reasonable precautions, no data transmission over the internet can be guaranteed to be entirely secure. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their x888 account.

10. Your Data Rights

10.1  As a player on x888, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data x888 holds about you at any time. x888 will respond within 30 days of receipt of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Many data fields can be updated directly through your x888 Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations — x888 is required to retain certain records under its gaming licence and applicable law and cannot delete them on request during the mandatory retention period.
• Right to Restriction: You may request that x888 restrict processing of your data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Object: You may object to processing of your data on the basis of legitimate interests, including profiling for marketing purposes. x888 will cease such processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

10.2  To exercise any of the above rights, contact x888 support using the details in Section 15. x888 may request proof of identity before acting on a data rights request to prevent unauthorised disclosure.

11. Children & Minors

11.1  x888 is strictly prohibited to persons under 21 years of age. The Platform does not knowingly collect personal data from individuals under 21. Age verification checks are conducted as part of the registration and KYC process.

11.2  If x888 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the Account will be closed. Any funds held in such an Account may be withheld pending investigation.

12. Responsible Gaming & Personal Data

12.1  x888 uses player data — including wagering history, session duration, deposit frequency, and loss patterns — to support responsible gaming obligations under our gaming licence. This data is used to:

• Identify players exhibiting patterns consistent with problem gambling;
• Enforce player-set deposit limits, loss limits, and session time restrictions;
• Process self-exclusion requests and maintain exclusion records for the duration of the exclusion period;
• Comply with mandatory responsible gaming reporting obligations to our licensing authority.

12.2  Responsible gaming data — including self-exclusion status and limit settings — is treated with the highest level of sensitivity. This data is not used for marketing purposes and is not shared with third parties except as required by our licensing authority.

12.3  Players seeking support with problem gambling are encouraged to visit our Responsible Gaming page, which provides access to self-assessment tools, self-exclusion facilities, and information about independent support organisations.

13. International Data Transfers

13.1  As an online platform operating under an international gaming licence, x888 may store and process player data on servers located outside Pakistan. Where data is transferred internationally, x888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

13.2  Such safeguards include — but are not limited to — contractual data processing agreements with service providers, technical security measures equivalent to those applied within x888's primary infrastructure, and compliance with the data protection requirements of our gaming licensing jurisdiction.

13.3  Players may contact x888 to obtain further information about the specific safeguards applied to international data transfers affecting their personal data.

14. Changes to This Privacy Policy

14.1  x888 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. The "Effective Date" at the top of this Policy indicates the date of the most recent revision.

14.2  Material changes to this Policy will be communicated to registered players via the Platform notification system or by SMS to the registered mobile number before the updated Policy takes effect, with a minimum of seven (7) days' notice except where immediate change is required by law.

14.3  Continued use of x888 after a revised Privacy Policy has taken effect constitutes acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using x888 and may request Account closure.

14.4  The current version of this Privacy Policy is always accessible at x888.lol/privacy-policy.

15. Contact & Data Rights Requests

15.1  For all privacy-related enquiries, data rights requests, complaints, or questions about this Privacy Policy, please contact x888 using the following details:

• Email: [email protected]
• Subject Line: "Privacy Request – [Your x888 Username]" for faster processing
• Response Time: Acknowledgement within 5 business days; full response within 30 days
• Live Chat: Available from any logged-in x888 Account for general privacy queries

15.2  x888 takes all privacy complaints seriously. If you believe your data rights have not been respected after contacting x888, you may escalate the matter to the relevant data protection supervisory authority in our licensing jurisdiction.