Privacy Policy – xp786 Online Betting Platform Pakistan

1. Who We Are

This Privacy Policy describes how xp786 ("xp786", "we", "our" or "us"), operating the online betting and casino platform at xp786.ws, collects, uses, stores and protects the personal data of members and visitors located in Pakistan and other eligible jurisdictions. xp786 is the data controller in respect of all personal data processed in connection with your use of the platform.

This policy applies to all xp786 products and services — including sports betting, PSL betting, live casino, online slots, esports betting and any promotional activity — accessed via desktop browser, mobile browser or any other digital channel through which xp786 is available.

If you have any questions about this policy or how xp786 handles your data, contact us at support@xp786.ws before registering. Our support team is available 24/7 via live chat as well.

2. Personal Data We Collect

xp786 collects the following categories of personal data from members and, in some cases, from visitors who have not yet registered:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, CNIC number, CNIC photograph	Registration & KYC verification
Contact Data	Email address, Pakistani mobile number, city/province	Registration
Financial Data	Easypaisa/JazzCash wallet number, bank account details (IBFT), card last four digits	Deposit / withdrawal requests
Transaction Data	Deposit amounts, withdrawal amounts, bonus claims, bet history	Ongoing use of xp786
Technical Data	IP address, device type, browser version, operating system, session timestamps	Each platform visit
Usage Data	Pages visited on xp786, games played, time on site, click paths	Each platform visit
Communications Data	Live chat transcripts, support email correspondence	When you contact xp786 support
Responsible Gaming Data	Deposit limits set, self-exclusion requests, cooling-off periods	When you use responsible gaming tools

xp786 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions or biometric data beyond what is contained within the CNIC document provided for identity verification.

3. How We Collect Your Data

3.1 Directly From You

The majority of personal data xp786 holds is provided by you directly — when you register an account, complete KYC verification, make a deposit, request a withdrawal, claim a promotion or contact the support team. You choose what you share with xp786 and are responsible for keeping it accurate and up to date.

3.2 Automatically During Platform Use

When you visit xp786.ws, our servers automatically log technical data including your IP address, the type of device and browser you are using, and time-stamped records of pages accessed. This data is collected passively and does not require any action on your part. It is used primarily for security monitoring, platform stability and fraud prevention purposes at xp786.

3.3 From Payment Processors

When you deposit or withdraw funds via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or a Visa/Mastercard payment, xp786 receives confirmation of the transaction from the relevant payment processor. This includes the sender/recipient name, wallet number or masked card details and transaction amount. xp786 does not have access to your full card number or mobile banking PIN at any point.

3.4 From Cookies and Similar Technologies

xp786 uses cookies and similar tracking technologies as described in Section 7 of this policy. Some data collected via cookies is classified as personal data and is handled in accordance with this policy.

4. Why xp786 Uses Your Personal Data

xp786 uses the personal data it collects for the following purposes:

Account creation and management: To register your xp786 account, verify your identity and maintain your account profile
Payment processing: To process PKR deposits and withdrawals via your chosen Pakistani payment method and to maintain accurate transaction records
KYC and fraud prevention: To verify that you are who you say you are, that you meet the minimum age requirement of 18, and to detect and prevent fraudulent activity, money laundering and bonus abuse
Providing betting and casino services: To operate the sports betting, PSL, esports, live casino and slot game features of xp786
Customer support: To respond to your queries, resolve disputes and maintain records of support interactions
Responsible gaming: To implement and maintain any deposit limits, cooling-off periods or self-exclusion measures you have requested on xp786
Platform security and integrity: To monitor for suspicious activity, protect against cyberattacks and ensure the stability of the xp786 platform
Legal compliance: To comply with applicable anti-money laundering (AML) obligations, age verification requirements and any other legal or regulatory requirement that applies to xp786
Marketing communications (where you have consented): To send you promotional offers, new product announcements and tournament details relevant to xp786 — only where you have opted in
Platform improvement: To analyse usage patterns at an aggregate level and improve the features and performance of xp786

5. Legal Basis for Processing

xp786 processes your personal data on the following legal bases:

Contract performance: Processing necessary to provide the xp786 service you have registered for, including operating your account and processing your bets and payments
Legal obligation: Processing required to comply with applicable anti-money laundering, age verification, record-keeping and other regulatory requirements
Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring and aggregate analytics — where these interests are not overridden by your data protection rights
Consent: Processing for marketing communications, which requires your explicit opt-in. You may withdraw this consent at any time via your xp786 account settings or by contacting support

6. Sharing Your Personal Data

xp786 does not sell your personal data. We share personal data only with the limited categories of third parties described below, and only to the extent necessary for the stated purpose:

6.1 Payment Processors

To process your deposits and withdrawals, xp786 must share relevant transaction data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your IBFT bank, or your card-issuing bank. The payment processor's own privacy policy governs how they handle your data on their side of the transaction.

6.2 Identity Verification Partners

xp786 may use a third-party identity verification service to assist with KYC checks, particularly CNIC verification. These partners are bound by strict contractual data protection obligations and may only use your data for the specific verification purpose.

6.3 Casino Game Providers

Slot and live casino game providers — including Pragmatic Play, NetEnt, Play'n GO and others listed on xp786 — may receive anonymised or pseudonymised session data (such as a player ID, stake amounts and game outcomes) for the purpose of operating and auditing the game. These providers are not given access to your identity or payment data.

6.4 Legal and Regulatory Authorities

xp786 will disclose personal data to competent authorities, courts or regulatory bodies where required to do so by law, court order or regulatory direction, or where xp786 has a good-faith belief that disclosure is necessary to protect the rights, property or safety of xp786, its members or others.

6.5 Business Transfers

In the event of a merger, acquisition or sale of all or substantially all of xp786's assets, member personal data may be transferred to the successor entity. You will be notified of any such transfer and given the opportunity to close your account if you do not wish your data to be transferred.

Beyond the categories listed above, xp786 does not share your personal data with any other third party. We do not share data with advertisers, data brokers or social media platforms for marketing or profiling purposes.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit xp786.ws. They allow the platform to remember your preferences, maintain your login session and collect usage analytics. xp786 uses first-party cookies only — we do not embed third-party advertising trackers or social media pixels on the platform.

7.2 Types of Cookies Used by xp786

Essential cookies: Required for the platform to function — including session management, login persistence and CSRF protection. These cannot be disabled without breaking core xp786 functionality.
Analytics cookies: Used to understand how members use xp786 at an aggregate level — which pages are most visited, how long sessions last, which games are most popular. This data is anonymised and used solely to improve the platform.
Preference cookies: Store your display preferences such as language, timezone and notification settings within xp786.

7.3 Managing Cookies

You can manage cookie preferences via your browser settings. Blocking essential cookies will prevent xp786 from functioning correctly. Blocking analytics cookies will not affect your ability to use the platform but will mean xp786 cannot use your session data to improve the product experience. Most modern browsers — including Chrome, Firefox, Safari and Edge — have accessible cookie management options in their settings menu.

8. Data Security

xp786 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL)
Member passwords are stored using one-way hashing — xp786 staff cannot read your password
Two-factor authentication (2FA) is available and recommended for all xp786 accounts
CNIC documents and KYC files are stored in an encrypted, access-controlled document system with strict internal access logging
Payment details are never stored in full — only the last four digits of a card and the wallet number associated with a mobile payment method are retained
Internal access to member data is restricted to xp786 staff on a need-to-know basis, with access logs maintained and audited regularly
The xp786 platform is subject to periodic independent security audits

Despite these measures, no internet-based service can guarantee absolute security. If you become aware of any suspicious activity on your xp786 account, contact support immediately via live chat.

9. Data Retention

xp786 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following general retention periods apply:

Active account data: Retained for the duration of your xp786 membership plus the regulatory minimum retention period thereafter (typically five years for financial records)
KYC and identity documents: Retained for five years from the date of account closure, in compliance with applicable anti-money laundering regulations
Transaction records: Retained for seven years from the transaction date
Support communications: Retained for three years from the date of the interaction
Marketing consent records: Retained until you withdraw consent, plus two years thereafter as evidence of the consent
Technical/log data: Retained for 90 days for security monitoring purposes, then deleted

Following a confirmed account closure request, xp786 will delete or anonymise personal data that is not subject to a mandatory retention obligation within 90 days. Anonymised, aggregate data (for example, overall betting volume statistics) may be retained indefinitely as it cannot be linked to any individual.

10. Your Data Rights

As an xp786 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact support@xp786.ws or use the live chat. xp786 will respond within 30 days.

Right of Access

You have the right to request a copy of all personal data xp786 holds about you. This is commonly called a Subject Access Request. xp786 will provide a structured summary of your data within 30 days at no charge. If the request is complex or multiple, xp786 may extend the response period by a further 60 days with prior notice.

Right of Rectification

If any personal data held by xp786 is inaccurate or incomplete, you have the right to have it corrected. For most account details, you can update this yourself via xp786 account settings. For identity data such as your CNIC details, contact support and provide documentation to support the correction.

Right of Erasure

You may request that xp786 delete your personal data. This right applies where the data is no longer necessary, where you withdraw consent (for data processed on consent), or where xp786 has no legitimate interest that overrides the request. Note that xp786 is legally required to retain certain categories of data (particularly financial and KYC records) for defined periods regardless of erasure requests.

Right to Data Portability

Where xp786 processes your data on the basis of contract or consent, you have the right to receive a copy of that data in a structured, commonly used machine-readable format (such as CSV or JSON). Contact support to request a data export from your xp786 account.

Right to Object

You have the right to object to xp786 processing your personal data where that processing is based on legitimate interests. You may also object at any time to your data being used for direct marketing purposes — at which point xp786 will immediately cease marketing communications to you.

11. Marketing Communications

xp786 sends promotional emails, SMS messages and in-platform notifications to members who have opted in to marketing communications. These messages may include details of new promotions, bonus offers, tournament announcements, new game launches and other xp786 platform news.

Marketing communications from xp786 are always opt-in — you will only receive them if you have explicitly consented, either during registration or via your account settings at any subsequent point. You may withdraw your consent and unsubscribe from all marketing communications at any time by:

Updating your communication preferences in your xp786 account settings
Clicking the unsubscribe link at the bottom of any xp786 marketing email
Contacting xp786 support via live chat or email and requesting removal from marketing lists

Withdrawal of marketing consent does not affect your ability to use xp786 or to receive transactional communications such as deposit confirmations, withdrawal notifications and support responses, which are necessary for the operation of your account.

12. Responsible Gaming Data

Personal data related to your responsible gaming preferences on xp786 — including deposit limits, session time limits, cooling-off periods and self-exclusion requests — is treated with a higher level of protection than general account data. This data is:

Stored in a restricted-access system within xp786 with stricter access controls than general member data
Not used for any marketing or profiling purpose
Not deleted at the request of the member during any active self-exclusion or cooling-off period — the protection measures remain in force for their full duration regardless of subsequent requests to remove them
Retained for a minimum of five years after an account closure to enable regulatory compliance and to support the member if they contact xp786 in the future about their gambling history

If you have set responsible gaming limits on your xp786 account and wish to discuss them, please contact the support team via live chat or visit the Responsible Gaming page for full details.

13. Children and Minors

The xp786 platform is strictly for adults aged 18 and over. xp786 does not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the xp786 registration and KYC process, and accounts where we have any reason to suspect the holder is under 18 are suspended immediately pending verification. If you believe a minor has registered on xp786, please contact support immediately so the account can be investigated and closed without delay. Any personal data collected from a minor in error will be deleted as soon as the situation comes to xp786's attention.

14. Changes to This Privacy Policy

xp786 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or the structure of the platform. When we make material changes to this policy, we will notify registered members via email and/or an in-platform notification at least 14 days before the changes take effect. The updated policy will always be available at xp786.ws/privacy-policy with the date of the most recent revision displayed at the top.

Your continued use of xp786 after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change, you should close your xp786 account before the changes come into effect.

15. Contact xp786 About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or the way xp786 handles your personal data, please contact us through any of the following channels:

Live Chat: Available 24/7 within your xp786 account dashboard — the fastest way to reach us
Email: support@xp786.ws — we aim to respond within 2 business hours

When contacting xp786 about a data request, please include your registered email address and, if relevant, specify which right you wish to exercise (access, rectification, erasure, etc.) so our team can route your request correctly and respond efficiently.

xp786 treats all privacy-related requests with urgency. Subject Access Requests and deletion requests are escalated to our data team and will receive a substantive response within 30 days from the date of receipt.