xlxx3 Privacy Policy — How We Handle Your Personal Information

1. About This Privacy Policy

xlxx3 takes the privacy of its users seriously. We know that when you register on xlxx3, share your CNIC information for verification, add your Easypaisa or JazzCash number for deposits, or simply browse the platform, you are trusting us with personal information that matters. This Privacy Policy is our commitment to being transparent about what we do with that information.

This policy is written in plain English so that every Pakistani user who reads it can understand what xlxx3 does and does not do with their data. There is no legal jargon designed to obscure anything — what you read here reflects what we actually do. If something is unclear, contact the xlxx3 support team and we will explain it to you directly.

This Privacy Policy should be read alongside the xlxx3 Terms and Conditions and the Responsible Gaming Policy, which together govern your full relationship with xlxx3.

2. Data We Collect

xlxx3 collects personal data in the following categories. We collect only what is necessary for the specific purpose described.

3. How We Collect Your Data

xlxx3 collects data through three main channels:

Direct Collection

You provide data directly to xlxx3 when you register an account, fill in your profile, complete KYC verification, make a deposit, place a bet, contact support or respond to a survey. This is the primary source of personal data on xlxx3 and covers most of the identity and contact information we hold.

Automated Collection

When you use the xlxx3 platform, our systems automatically log certain technical data including your IP address, the device and browser you are using, session duration, pages visited, features accessed and any errors you encounter. This data is collected using standard server logs and first-party analytics — not third-party tracking services.

Payment Partner Data

When you process a deposit or withdrawal through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or Visa/Mastercard, the relevant payment provider confirms the transaction status to xlxx3. xlxx3 receives transaction reference numbers and confirmation statuses — not your full payment account credentials, which remain with the payment provider at all times.

4. How We Use Your Data

xlxx3 uses the data we collect for the following specific purposes. We do not use your data for purposes beyond this list without seeking your separate consent:

• Account management: Creating and maintaining your xlxx3 account, verifying your login, keeping your profile up to date and managing your PKR balance and transaction history.
• Payment processing: Executing your PKR deposit and withdrawal requests through your chosen payment method — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or Visa/Mastercard.
• Identity verification (KYC): Verifying your age and identity before processing your first withdrawal, as required to protect the integrity of your account and comply with applicable obligations.
• Service communications: Sending you transaction confirmations, bet settlement notifications, withdrawal confirmations, security alerts and important account updates via SMS or email.
• Customer support: Handling your queries, resolving disputes about bet settlements, addressing deposit or withdrawal issues and responding to complaints.
• Security and fraud prevention: Monitoring account activity for signs of fraud, identity theft, account takeover, money laundering or violations of the xlxx3 Terms and Conditions.
• Platform improvement: Analysing aggregate usage data to identify technical issues, improve the platform interface, optimise betting markets and enhance the overall xlxx3 user experience.
• Responsible gaming: Monitoring account patterns to identify potential problem gambling behaviour and, where applicable, flagging accounts for voluntary or regulatory intervention.
• Promotional communications: Sending you information about xlxx3 bonuses, promotions and offers — only where you have consented to receive marketing communications. You can opt out at any time.

5. Legal Basis for Processing

xlxx3 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to provide the xlxx3 service under the Terms and Conditions you agreed to at registration — including account management, payment processing and bet settlement.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements — including identity verification, age checking, anti-money laundering obligations and financial record keeping.
• Legitimate interests: Processing conducted for xlxx3's legitimate business interests where those interests do not override your privacy rights — including fraud prevention, security monitoring and platform analytics.
• Consent: Processing conducted on the basis of your explicit consent — including sending promotional communications and, where applicable, using optional cookies. You may withdraw consent at any time by contacting the xlxx3 support team.

6. Data Sharing and Third Parties

xlxx3 shares your personal data with third parties only where it is strictly necessary to deliver the xlxx3 service or to comply with applicable legal obligations. We do not sell, rent, trade or disclose your personal data to any third party for commercial, marketing or advertising purposes. Full stop.

Payment Processors

When you make a deposit or withdrawal on xlxx3, your payment details are passed to the relevant payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, bank networks for IBFT, or the Visa/Mastercard acquiring bank. These processors receive only the data necessary to execute the transaction and are bound by their own privacy policies and applicable financial data regulations.

KYC and Identity Verification Providers

To verify your identity and age as required, xlxx3 may share your identity documents (CNIC scan, selfie, proof of address) with a certified third-party KYC verification provider. These providers are contractually bound to process your documents only for the purpose of verification and to delete the documents after the verification process is complete.

Game Studio Providers

When you play live casino or card games on xlxx3, your session data (account ID, stake amounts, game results) is shared with the relevant game studio — such as Evolution Gaming, Pragmatic Play or Ezugi — to the extent necessary for the game to function and for fair play monitoring. These studios do not receive your identity documents, CNIC information or payment details.

Legal and Regulatory Disclosure

xlxx3 may disclose personal data where required by a valid legal order, court process, law enforcement request or regulatory authority directive. xlxx3 will always seek to limit such disclosures to the minimum data required by the legal process.

7. Cookies and Tracking Technologies

xlxx3 uses a limited set of cookies to operate the platform correctly. We do not use third-party advertising cookies, social media tracking cookies or cross-site behavioural tracking technologies.

Cookies xlxx3 Uses

• Session cookies: Strictly necessary cookies that keep you logged in during your xlxx3 session. These are deleted when you close your browser. Without these, the platform cannot function.
• Security cookies: Used to detect and prevent fraudulent login attempts, CSRF attacks and session hijacking. These are strictly necessary for platform security.
• Preference cookies: Store non-sensitive user preferences such as your chosen language setting or display options. You can disable these without affecting core platform functionality.
• Analytics cookies: First-party analytics cookies that help xlxx3 understand how users navigate the platform in aggregate — which pages are most visited, where users encounter errors and which features are used most. These do not identify you individually and are not shared with external analytics providers.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in and using the xlxx3 platform.

8. Data Security

xlxx3 applies a layered approach to data security to protect your personal information from unauthorised access, disclosure, alteration and loss. The security measures we apply include:

• Encryption in transit: All data between your device and xlxx3 is encrypted using TLS 1.2 or higher (256-bit SSL), the same standard used by banks and regulated financial institutions.
• Encryption at rest: Sensitive stored data including identity documents, payment references and account credentials is encrypted in the xlxx3 database.
• Password security: User passwords are never stored in plain text. xlxx3 stores a salted cryptographic hash of every password using a modern hashing algorithm.
• Two-factor authentication (2FA): Optional 2FA is available on all xlxx3 accounts and is strongly recommended. When enabled, logging in requires your password plus a one-time code sent to your registered phone number.
• Access controls: Internal xlxx3 staff access to user data is restricted on a need-to-know basis. Access logs are maintained and reviewed regularly. No staff member has access to user passwords or full payment account credentials.
• Fraud monitoring: xlxx3 runs automated security monitoring on all accounts to detect unusual login patterns, suspicious transaction activity and potential account takeover attempts. Alerts are reviewed by the security team in real time.

Despite these measures, no online platform can guarantee absolute security. If you believe your xlxx3 account has been compromised, contact the support team immediately via live chat to lock your account while the issue is investigated.

9. Data Retention

xlxx3 retains your personal data for as long as it is necessary for the purpose it was collected. The specific retention periods we apply are:

• Account data (active accounts): Retained for the lifetime of your account and for a period of five years after account closure, to support dispute resolution and regulatory compliance.
• Transaction records (deposits, withdrawals, bets): Retained for seven years from the date of each transaction in accordance with financial record-keeping requirements.
• KYC documentation: Retained for five years after account closure or as otherwise required by applicable law.
• Support communications: Retained for three years from the date of each interaction to support quality assurance and future dispute resolution.
• Security logs: Retained for 12 months on a rolling basis for fraud investigation and security monitoring purposes.
• Analytical and usage data: Aggregated and anonymised after 12 months; individual usage data is not retained beyond this period.

When your data is no longer required under the applicable retention period, xlxx3 will securely delete or anonymise it. If you request account deletion before the end of the applicable retention period, xlxx3 will close your account and anonymise your data to the extent possible while retaining financial and KYC records for the legally required period.

10. Your Privacy Rights

As an xlxx3 user, you have the following rights in relation to your personal data. All of these rights can be exercised by contacting the xlxx3 support team via live chat or email at support@xlxx3.net. We will respond to all rights requests within 30 days.

11. Children's Privacy

xlxx3 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the xlxx3 registration and KYC process. If xlxx3 discovers that an account holder is under 18, that account will be immediately suspended, all pending bets voided and all deposited funds returned to the payment method used for deposit where technically possible.

If you are a parent or guardian and believe that a minor has registered on xlxx3 using your or another adult's credentials, please contact the xlxx3 support team immediately at support@xlxx3.net. We will investigate and take appropriate action without delay.

12. Changes to This Privacy Policy

xlxx3 may update this Privacy Policy from time to time to reflect changes in our data practices, the xlxx3 service, applicable law or feedback from users. When we make material changes — changes that meaningfully affect how we collect or use your personal data — we will:

• Send a notification to the email address registered to your xlxx3 account describing the changes in plain language.
• Publish the updated Privacy Policy on this page with a revised effective date at the top of the document.
• Where required by applicable law, seek fresh consent for new or changed processing activities before they commence.

We encourage you to review this Privacy Policy periodically to stay informed about how xlxx3 handles your data. If you continue to use xlxx3 after an updated policy has been published, you are considered to have accepted the revised terms. If you disagree with any change to this Privacy Policy, you should stop using xlxx3 and contact the support team to request account closure.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your privacy rights, have a concern about how xlxx3 handles your data, or want to report a suspected privacy or data security issue, please contact the xlxx3 team through the following channels:

• Live Chat: Available 24/7 on xlxx3.net — the fastest channel for privacy queries and rights requests.
• Email: support@xlxx3.net — include "Privacy" in the subject line for faster routing.

For rights requests, please provide your registered phone number or username, a clear description of the right you wish to exercise, and any relevant context. xlxx3 will respond within 30 days and may ask for verification of your identity before processing the request to ensure your data is protected from third-party requests.