Privacy Policy —
xb786 Player Data Protection Statement

xb786 is committed to protecting the privacy and personal data of all Players who use our platform. This Policy explains how xb786 collects, uses, processes, stores, and in certain circumstances discloses the personal data of its registered users and visitors to xb786.app.

This Policy applies to all processing activities conducted by xb786 in connection with the operation of the xb786 online casino and sports betting platform, including but not limited to: account registration and management; identity verification (KYC); deposit and withdrawal processing; gameplay and betting activity; customer support interactions; promotional campaigns; and platform analytics. It applies regardless of whether you are accessing xb786 from a mobile device in Karachi, a desktop in Lahore, or any other location.

This Policy does not apply to third-party websites or services that may be referenced in xb786 communications. xb786 is not responsible for the privacy practices of any third-party services.

For the purposes of applicable data protection law, xb786 acts as the data controller in respect of personal data collected from Players through the xb786 platform. As the data controller, xb786 is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully and in accordance with this Policy.

xb786 operates under an international gaming licence with regulatory oversight. The data controller's registered contact for privacy-related matters is reachable via [email protected], marked for the attention of the Data Protection Officer.

xb786 collects the following categories of personal data from Players, either directly from you or through automated means during platform use:

xb786 does not collect or process special category data (such as biometric data, health data, or racial/ethnic origin data) except where this is incidental to submitted identity documentation and strictly limited to what is required for KYC compliance.

xb786 collects personal data through the following methods:

• Direct Submission: Data you provide directly when registering an xb786 account, completing KYC verification, making deposits or withdrawal requests, contacting our customer support team, or participating in promotions.
• Automated Collection: Data collected automatically when you access and use the xb786 platform, including technical and usage data gathered through cookies, web beacons, log files, and similar tracking technologies as described in Section 8.
• Third-Party Sources: Identity and address verification data obtained from authorised third-party KYC verification service providers as part of our regulatory compliance obligations. Payment verification data from payment processors including JazzCash, EasyPaisa, HBL, UBL, SadaPay, and Meezan Bank during transaction processing.
• Fraud Prevention Sources: Data obtained from third-party fraud detection and AML screening services used to verify that transactions and account activity comply with our anti-money laundering obligations.

xb786 processes personal data only where a lawful basis exists for doing so. The primary legal bases applicable to xb786's data processing activities are:

• Contractual Necessity: Processing required to perform the contract between xb786 and the Player — specifically, to provide the online casino and sports betting services, manage your account, process deposits and withdrawals, and deliver customer support.
• Legal Obligation: Processing required to comply with xb786's obligations under its international gaming licence, including KYC identity verification, AML transaction monitoring, age verification, and self-exclusion management.
• Legitimate Interests: Processing carried out for xb786's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics, provided that such interests are not overridden by your fundamental privacy rights.
• Consent: Processing for which xb786 relies on your freely given, specific, and informed consent — primarily in relation to direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

xb786 uses the personal data collected from Players for the following purposes, each of which is carried out on a lawful basis as identified in Section 5:

• Account Management: Creating, verifying, maintaining, and administering your xb786 account, including processing login authentication, managing your PKR balance, and maintaining your account settings and preferences.
• Identity Verification (KYC): Verifying your identity, age (21+ requirement), and address in fulfilment of our international gaming licence obligations prior to enabling withdrawals or at any point where regulatory requirements demand verification.
• Payment Processing: Processing deposits and withdrawal transactions through your chosen payment methods (JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and cryptocurrency options), including transaction reconciliation and dispute resolution.
• Regulatory Compliance: Meeting our ongoing obligations under our gaming licence including AML transaction monitoring, responsible gaming tool management, self-exclusion enforcement, and producing reports required by our licensing authority.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multiple account violations, bonus abuse, money laundering, and other prohibited conduct as defined in the xb786 Terms and Conditions.
• Customer Support: Providing live chat, email, and account-related assistance, investigating and resolving complaints, and maintaining support interaction records for quality assurance purposes.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators, enforcing deposit limits and self-exclusion settings, and where appropriate proactively reaching out to Players displaying concerning activity patterns.
• Platform Improvement: Analysing aggregated and anonymised platform usage data to improve game selection, payment processes, interface design, and overall platform performance for Pakistani players.
• Marketing Communications: Where you have opted in, sending personalised promotional offers, bonus notifications, and platform updates via SMS, email, or in-platform notification.

7.1 General Principle. xb786 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared with third parties only to the extent strictly necessary for the purposes described in this Policy and only under appropriate contractual data protection obligations.

7.2 Categories of Third-Party Recipients. xb786 may share your personal data with the following categories of third parties:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, Meezan Bank, and cryptocurrency network providers — solely for the purpose of processing deposit and withdrawal transactions.
• KYC and AML Service Providers: Authorised third-party identity verification and AML screening providers used to fulfil regulatory compliance obligations.
• Gaming Software Providers: Licensed game developers and live casino studio operators (including but not limited to Pragmatic Play and Evolution Gaming) who require minimal technical data to deliver games within the xb786 platform.
• Fraud Prevention Services: Third-party services providing IP reputation analysis, device fingerprinting, and transaction risk scoring used to protect the platform from fraud.
• Regulatory Authorities: Our gaming licensing authority and, where legally mandated, law enforcement agencies or other regulatory bodies. xb786 will disclose personal data to authorities only in response to lawful requests and only to the extent required.
• Platform Infrastructure Providers: Cloud hosting, content delivery, and IT infrastructure providers who process data on xb786's behalf under strict data processing agreements.

xb786 uses cookies and similar tracking technologies on the xb786.app platform to enable essential platform functionality, improve performance, and — where consent is given — deliver personalised content and analyse platform usage.

8.1 Essential Cookies. These cookies are strictly necessary for the xb786 platform to function. They maintain your login session, remember your account preferences, and ensure platform security. Essential cookies cannot be disabled without impairing core platform functionality.

8.2 Functional Cookies. These cookies remember your settings and preferences (such as your preferred game categories and responsible gaming tool configurations) to provide a more personalised experience across sessions.

8.3 Analytics Cookies. xb786 uses privacy-respecting analytics tools to understand how Players interact with the platform in aggregate. This data is anonymised and used solely to improve platform design and performance. No individual Player is identified through analytics data.

8.4 Cookie Management. You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to log in to your xb786 account and use core platform features.

xb786 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law and our gaming licence obligations. The following retention principles apply:

• Active Accounts: Personal data associated with active xb786 accounts is retained for the duration of the account's active status and for a minimum of five (5) years following account closure, in fulfilment of AML regulatory retention requirements.
• KYC Documentation: Identity documents submitted for KYC verification are retained for a minimum of five (5) years after the closure of the associated account or the last transaction, whichever is later, as required by our gaming licence.
• Transaction Records: Financial transaction data (deposits, withdrawals, bet settlements) is retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
• Support Communications: Customer support interactions are retained for three (3) years to facilitate the investigation of historical complaints and quality assurance reviews.
• Marketing Data: Marketing preference and consent records are retained for the duration of the account and for twelve (12) months after account closure or consent withdrawal.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with xb786's data deletion procedures.

xb786 implements a comprehensive set of technical and organisational security measures to protect Player personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between Player devices and xb786 servers.
• Cryptographic one-way hashing for stored passwords — no readable passwords are ever stored.
• Access controls restricting access to personal data to authorised xb786 staff on a strict need-to-know basis, with role-based permissions and audit logging.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Intrusion detection and prevention systems monitoring for unauthorised access attempts.
• Two-factor authentication available for all Player accounts and mandatory for all xb786 administrative system access.
• Physical security controls at xb786's data processing facilities, including access restrictions and environmental monitoring.

As an internationally licensed online gaming platform, xb786 operates across multiple jurisdictions. Your personal data may be transferred to, stored in, and processed in countries outside Pakistan, including the country in which our gaming licence is held and the locations of our third-party service providers.

Where personal data is transferred internationally, xb786 ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Policy. These safeguards may include contractual data transfer agreements, standard contractual clauses, or transfers to countries with recognised adequate data protection frameworks.

By registering an xb786 account and using the platform, you consent to the transfer of your personal data as described in this section, subject always to the protections described throughout this Policy.

As an xb786 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection Officer at [email protected] or via live chat. xb786 will respond to all valid data subject requests within 30 calendar days:

The xb786 platform is strictly for individuals aged 21 years and above. xb786 does not knowingly collect or process personal data from any individual under the age of 21. Age is verified through our KYC identity verification process, which requires submission of a valid CNIC confirming the account holder's date of birth.

If xb786 becomes aware that personal data of a person under 21 years of age has been collected in error, that account will be immediately suspended, the personal data will be deleted from our systems as soon as legally permissible, and any transactions associated with the account will be reviewed and reversed where appropriate.

If you believe that a minor has registered an xb786 account, please contact us immediately at [email protected] so that we may take appropriate action without delay.

14.1 Opt-In Marketing. xb786 sends promotional communications (including bonus offers, new game announcements, PSL betting promotions, and platform updates) only to Players who have explicitly opted in to receive such communications at the time of registration or subsequently through their account settings. xb786 does not conduct unsolicited bulk marketing to individuals who have not opted in.

14.2 Communication Channels. Where opted in, xb786 may contact you via SMS to your registered Pakistani mobile number, via email to your registered address, and via in-platform push notifications. You may specify your preferred channels within your xb786 account settings.

14.3 Withdrawal of Consent. You may withdraw your marketing consent and unsubscribe from all promotional communications at any time by: (a) adjusting your preferences in the xb786 account settings panel; (b) clicking the unsubscribe link in any marketing email; or (c) contacting our support team via live chat or email. Withdrawal of marketing consent does not affect transactional communications which xb786 is required to send in connection with your account.

xb786 reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, gaming licence requirements, business operations, or data processing practices. Where amendments are material — meaning they significantly affect your rights or how your data is used — xb786 will provide at least 14 calendar days' advance notice to registered account holders via email or in-platform notification.

Non-material amendments (such as clarifications, corrections of typographical errors, or updates to contact information) may be implemented without advance notice. The "Last Reviewed" date at the top of this Policy will be updated upon each revision. We encourage you to review this Policy periodically to remain informed of how xb786 protects your personal data.

Your continued use of the xb786 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept an amendment, you must contact xb786 to close your account prior to the amendment's effective date.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by xb786, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 within the xb786 platform. Please specify that your query relates to a data protection or privacy matter. Average response time: under 2 minutes.
• Email: [email protected] — please mark your email "Data Protection Request" in the subject line. Formal data subject requests will receive a written response within 30 calendar days.

If you believe that xb786 has failed to handle your personal data in accordance with this Policy or applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority under our gaming licence jurisdiction. Details of the supervisory authority are available on request from our Data Protection Officer.