Last updated: June 2026
18+ Only
Summary: xc999 collects only the data necessary to operate your account, verify your identity, process payments, and improve our services. We do not sell your data. We use standard security measures to protect it. You have rights over your data — details are set out below. If you have any questions, contact our support team.
1. Who We Are
This Privacy Policy ("Policy") applies to the xc999 platform, website, and all related services (collectively, the "Service") operated by xc999 ("xc999", "we", "us", "our"). xc999 is an online casino and sports betting platform serving English-speaking players in Pakistan. This Policy describes how xc999 collects, uses, discloses, and safeguards your personal information when you access or use the Service.
By registering an account on xc999 or by continuing to use the Service, you acknowledge that you have read this Policy and consent to the data practices described herein. If you do not agree with this Policy, you should not use the xc999 Service.
2. Data We Collect
xc999 collects the following categories of personal data:
2.1 Identity & Contact Data
- Full legal name as it appears on your CNIC.
- Date of birth (used for age verification — you must be 18 or older).
- Pakistani mobile number and email address.
- Residential address (required for enhanced KYC verification).
- Copy of your Computerised National Identity Card (CNIC) and, where requested, supporting identity documents.
2.2 Financial Data
- Payment method details associated with your JazzCash, Easypaisa, bank account, or other payment instrument used for deposits and withdrawals.
- Transaction history — deposits, withdrawals, wagers placed, and winnings received on xc999.
- PKR balance and account statement.
2.3 Technical & Usage Data
- IP address and approximate geolocation derived from IP.
- Device type, operating system, browser type and version.
- Pages visited, features used, bet history, and session duration on xc999.
- Login timestamps and session activity logs.
2.4 Communications Data
- Content of messages sent to xc999 via live chat, email, or other support channels.
- Responses to surveys or feedback requests where you choose to participate.
3. How We Collect Your Data
xc999 collects personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion at xc999.
- Automatically — when you access or interact with the xc999 platform, technical data such as IP address, device identifiers, and usage logs are collected automatically via cookies and server-side logging.
- Third-party identity verification providers — where xc999 uses a third-party KYC or identity verification service to cross-check documents you have submitted. These providers operate under their own data protection obligations.
- Payment service providers — transaction confirmation data is received from JazzCash, Easypaisa, banks, and other payment processors when you initiate a deposit or withdrawal at xc999.
4. How We Use Your Data
xc999 processes your personal data for the following purposes:
- Account management — creating and maintaining your xc999 account, authenticating your identity on login, and communicating account-related information.
- KYC and age verification — confirming that you are 18 or older and that your identity is consistent with your account registration details.
- Payment processing — facilitating PKR deposits, withdrawals, and maintaining an accurate transaction history in your xc999 wallet.
- Fraud prevention and security — detecting and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct described in the xc999 Terms & Conditions.
- Service improvement — analysing usage patterns to improve platform performance, game selection, and user experience on xc999.
- Responsible gaming — monitoring account activity for indicators of problem gambling and applying or suggesting responsible gaming tools where appropriate.
- Legal compliance — retaining records as required by applicable laws and regulations, and responding to lawful requests from regulatory or law enforcement authorities.
- Customer support — responding to queries and resolving issues raised via xc999's live chat or email support channels.
- Marketing communications — with your consent, sending promotional emails or SMS messages about xc999 offers and new features. You may opt out at any time by contacting support.
5. Legal Basis for Processing
xc999 processes your personal data on one or more of the following legal bases:
- Contract performance — processing is necessary to provide the xc999 Service and fulfil obligations under the Terms & Conditions you have accepted.
- Legal obligation — processing is required to comply with applicable laws, including anti-money laundering obligations and identity verification requirements.
- Legitimate interests — processing is necessary for xc999's legitimate interest in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your data protection rights.
- Consent — for optional marketing communications, processing is based on your explicit opt-in consent, which may be withdrawn at any time.
6. Data Sharing & Disclosure
xc999 does not sell, rent, or trade your personal data to any third party. xc999 may share your data with the following categories of recipient only where strictly necessary:
- KYC and identity verification providers — to verify documents submitted during account registration or enhanced verification.
- Payment service providers — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and any other payment processor through which you make a deposit or withdrawal. These providers receive only the minimum data required to process the transaction.
- Game and technology providers — xc999 game software providers and infrastructure vendors may receive anonymised or pseudonymised technical data for performance purposes. They do not receive identifiable financial or identity data.
- Legal and regulatory authorities — xc999 will disclose personal data to law enforcement, regulatory bodies, or courts where required by a valid legal obligation or lawful order.
- Business successors — in the event of a merger, acquisition, or asset sale involving xc999, your data may be transferred to the successor entity, subject to equivalent privacy protections.
7. Cookies & Tracking Technologies
xc999 uses cookies and similar technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser. xc999 uses the following categories of cookies:
- Strictly necessary cookies — required for the platform to function, including session authentication and security. These cannot be disabled.
- Performance cookies — collect anonymised data about how players use xc999 to identify areas for improvement. No personally identifiable information is collected via these cookies.
- Functional cookies — remember your preferences such as language settings and display options.
You can control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the xc999 platform.
8. Data Retention
xc999 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law or legitimate business need. Specifically:
- Account and KYC records are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering requirements.
- Transaction records are retained for a minimum of five (5) years.
- Communications data (support tickets, chat transcripts) is retained for a minimum of two (2) years.
- Marketing consent records are retained for as long as you remain an active user or until you withdraw consent.
Upon expiry of the applicable retention period, xc999 will securely delete or anonymise your personal data.
9. Data Security
xc999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your device and xc999 servers.
- Encryption at rest for sensitive personal and financial data stored in xc999 databases.
- Access controls restricting personal data access to authorised xc999 staff with a legitimate need.
- Regular security assessments and penetration testing of the xc999 platform infrastructure.
Despite these measures, no internet transmission or storage system is 100% secure. In the unlikely event of a data breach affecting your rights, xc999 will notify affected users in a timely manner consistent with applicable legal obligations.
10. Your Data Rights
Subject to applicable law, you have the following rights in relation to your personal data held by xc999:
- Right of access — you may request a copy of the personal data xc999 holds about you.
- Right to rectification — you may request correction of inaccurate or incomplete data.
- Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
- Right to restrict processing — you may request that xc999 limit how it uses your data in certain circumstances.
- Right to withdraw consent — where processing is based on consent (e.g. marketing), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
- Right to object — you may object to processing based on legitimate interests where your individual circumstances warrant it.
To exercise any of these rights, contact xc999 support via 24/7 live chat or the support email address in the footer. xc999 will respond to valid requests within a reasonable timeframe. Identity verification may be required before processing a data rights request.
11. Children's Privacy
The xc999 Service is strictly for users aged 18 and above. xc999 does not knowingly collect or process personal data from individuals under the age of 18. If you believe a minor has accessed xc999 or provided personal information to us, please contact support immediately. Any account confirmed to belong to a minor will be closed and all associated data deleted in accordance with our data retention obligations.
12. Updates to This Policy
xc999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service features. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users via the platform or by email.
The most current version of this Policy is always available at xc999.club/privacy-policy. Continued use of the xc999 Service after publication of an updated Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, you should close your xc999 account and cease using the Service.
For any privacy-related questions or concerns, please contact xc999 support via 24/7 live chat or at the email address displayed in the footer of this website.