Privacy Policy

1. Introduction

xz999 is committed to handling personal data responsibly and transparently. This Policy sets out in clear, plain language exactly what personal information xz999 collects from players, why it is collected, how it is processed, and the controls available to you as a player based in Pakistan or elsewhere.

xz999 operates the online casino and sports betting platform accessible at xz999.ws, offering services including live baccarat, cricket betting, PSL wagering, premium slots, and the Caishen Fishing game. In order to provide these services safely and in compliance with our legal obligations, xz999 must collect and process certain categories of personal data about registered players.

By registering an account on xz999 or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood how your personal data is handled as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of xz999 and contact us to close your account and request deletion of your data where applicable.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal data of xz999 players is the operating entity behind the xz999 platform. All enquiries, data subject access requests, and privacy-related correspondence should be directed to:

Where xz999 engages third-party service providers who process personal data on xz999's behalf — such as payment processors or fraud-detection services — those parties act as data processors operating under binding data processing agreements with xz999. They are not permitted to use your data for their own independent purposes.

3. Data We Collect

3.1 Registration Data

When you create an xz999 account, we collect the information you provide during the registration process, including your full name, date of birth, residential address, email address, and chosen username. This information is required to create and administer your account and to verify that you meet the 21+ age requirement.

3.2 Identity Verification (KYC) Data

To comply with our KYC obligations and to verify your identity prior to processing withdrawals or where required by our risk management procedures, xz999 may collect copies of government-issued identity documents such as your CNIC (Computerised National Identity Card), passport, or driving licence. We may also collect proof of address documentation and evidence of payment method ownership.

3.3 Financial & Transaction Data

xz999 collects records of all deposits and withdrawals processed through your account, including transaction amounts, timestamps, and the payment method used. Supported payment methods include JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20. Full payment card numbers and bank account credentials are not stored by xz999 — these are handled directly by our payment processor partners under their own security standards.

3.4 Usage & Gameplay Data

We collect information about how you use the xz999 Platform, including the games you play, betting history, session duration, wagering amounts, and interactions with promotional features such as the xz999 Rewards programme. This data is used to personalise your experience, administer bonuses, and monitor for responsible gaming indicators.

3.5 Technical & Device Data

When you access xz999, our systems automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, and referring URL. This data is used for security purposes, fraud detection, platform optimisation, and to enforce geographic access policies.

3.6 Communications Data

If you contact xz999 customer support, participate in surveys, or correspond with us by email, we retain records of those communications. This includes the content of messages, timestamps, and any attachments provided. Communication records are used to resolve your enquiry and to improve our service quality.

4. How We Use Your Data

xz999 uses the personal data described in Section 3 for the following purposes:

• Account Administration: Creating, maintaining, and securing your xz999 account, including processing your xz999 login sessions and enforcing our one-account-per-player policy;
• Service Delivery: Enabling you to access and participate in all xz999 products, including live casino games, cricket and PSL betting, slot games, and Caishen Fishing;
• Payment Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, and other supported methods, and reconciling your account balance accurately;
• Identity Verification: Conducting KYC checks to confirm your identity, age (21+), and the legitimacy of your payment methods in accordance with our legal obligations;
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, collusion, money laundering, and other prohibited conduct;
• Responsible Gaming: Monitoring gameplay patterns for signs of problem gambling, administering self-exclusion and deposit limit requests, and enforcing cooling-off periods;
• Legal Compliance: Meeting our obligations under applicable gaming regulations and responding to lawful requests from regulatory and law enforcement authorities;
• Personalisation: Tailoring your xz999 experience, including the delivery of relevant promotions, bonus offers, and Rewards programme communications;
• Analytics & Improvement: Analysing aggregated usage data to understand how players use the Platform and to improve the quality, performance, and fairness of our services;
• Customer Support: Responding to your enquiries, resolving disputes, and improving our support processes based on interaction history.

5. Legal Basis for Processing

xz999 processes personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your account, deliver gaming services, and process your PKR transactions;
• Legal Obligation: Processing is necessary to comply with applicable laws, including KYC requirements, anti-money laundering regulations, and responses to lawful authority requests;
• Legitimate Interests: xz999 processes certain data where it has a legitimate interest in doing so — such as fraud detection, platform security, and service improvement — provided that our interests do not override your fundamental privacy rights;
• Consent: Where we rely on your consent — for example, to send you marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. xz999 uses cookies and similar tracking technologies to enable core Platform functionality, remember your preferences, and gather analytics data that helps us understand how players interact with the site.

6.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the xz999 Platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies used for fraud prevention. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your xz999 experience.
• Analytics Cookies: Collect anonymised information about how players use xz999 — which pages are visited most frequently, how long sessions last, and which game categories attract the most engagement. This data is aggregated and not linked to individual player identities.
• Marketing Cookies: Used only where you have given your consent to receive personalised promotional content. These cookies help xz999 present relevant bonus offers and Rewards programme information based on your usage patterns.

6.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the xz999 Platform, including your ability to maintain a logged-in session. Clearing browser cookies does not delete the personal data held in your xz999 account — account data must be managed through a direct request to our support team.

7. Third-Party Sharing

xz999 does not sell or rent your personal data. We may share your information with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 network service providers, to process your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and age-verification services that assist xz999 in confirming the identity of registered players and meeting our legal compliance obligations;
• Fraud Prevention & Security Services: Specialist providers that help xz999 detect and prevent fraudulent transactions, account takeover attempts, and money laundering activity;
• Technology & Infrastructure Partners: Cloud hosting, content delivery, and software providers who operate systems on xz999's behalf under binding data processing agreements;
• Regulatory & Law Enforcement Authorities: Where we are legally required to disclose information in response to a valid court order, regulatory demand, or law enforcement request;
• Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations, where disclosure is necessary to obtain professional advice.

8. International Data Transfers

Some of the third-party service providers used by xz999 may process your personal data outside Pakistan. Where such transfers occur, xz999 takes appropriate steps to ensure that your data receives an equivalent level of protection to that afforded within Pakistan, including by implementing contractual safeguards with receiving parties.

By using the xz999 Platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside of Pakistan where data protection laws may differ. xz999 will only carry out such transfers where they are necessary to provide the services you have requested and where appropriate protective measures are in place.

9. Data Retention

xz999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account's active status and for a period of five (5) years following account closure, in accordance with our legal and regulatory obligations;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable anti-money laundering regulations;
• Transaction Records: Retained for a minimum of five (5) years to satisfy financial record-keeping requirements;
• Gameplay Data: Retained for a period of three (3) years from the date of each gaming session, unless required to be kept longer for dispute resolution or regulatory purposes;
• Communications Records: Retained for two (2) years from the date of the last communication, or until the associated matter is fully resolved;
• Marketing Consent Records: Retained for as long as you remain an active subscriber plus two (2) years following any withdrawal of consent.

When data is no longer required, xz999 will securely delete or anonymise it in accordance with our data destruction procedures.

10. Your Rights

As a player whose personal data is processed by xz999, you hold the following rights. To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days of receiving a valid, verifiable request.

• Right of Access: You may request a copy of the personal data xz999 holds about you, along with information about how it is used;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your xz999 account;
• Right to Erasure: In certain circumstances, you may request that xz999 delete your personal data. This right is subject to limitations where retention is required by law or to establish, exercise, or defend legal claims;
• Right to Restriction of Processing: You may ask xz999 to restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved;
• Right to Object: You may object to processing of your personal data where xz999 relies on legitimate interests as its legal basis, unless xz999 can demonstrate compelling legitimate grounds that override your interests;
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that xz999 provide your personal data in a structured, commonly used, machine-readable format;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. Children & Minors

xz999 is strictly an adults-only platform. Our services are available only to individuals aged 21 years and above. xz999 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If xz999 discovers or is notified that an account has been registered by or on behalf of a person under 21, that account will be immediately suspended and all associated data will be reviewed. Any funds deposited by a minor will be handled in accordance with our Terms & Conditions, and the matter may be referred to relevant authorities.

If you believe that a minor has registered an xz999 account or that your child has accessed xz999, please contact us immediately at [email protected] so that we can take prompt action.

12. Security Measures

xz999 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and xz999 servers;
• Encrypted storage of sensitive account data, including KYC documentation and financial records;
• Multi-factor authentication options available for player accounts to prevent unauthorised xz999 login;
• Role-based access controls ensuring that only authorised xz999 personnel can access player data, and only to the extent required for their specific function;
• Regular security assessments and penetration testing of xz999 systems and infrastructure;
• Documented incident response procedures for data breaches, including player notification protocols.

While xz999 takes data security seriously and applies robust protections, no system connected to the internet is entirely immune from security risks. You play an important role in keeping your account secure by maintaining a strong, unique password and by notifying us immediately if you suspect your xz999 login credentials have been compromised.

13. Marketing Communications

With your consent, xz999 may send you promotional communications about bonuses, new games, the xz999 Rewards programme, cricket and PSL betting promotions, and other xz999 offers. These communications may be delivered by email or through in-platform notifications.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any xz999 marketing email;
• Updating your communication preferences within your xz999 account settings;
• Contacting xz999 support directly at [email protected] with a request to be removed from marketing lists.

Please note that even if you opt out of marketing communications, xz999 may still send you transactional and service-related communications — such as deposit confirmations, withdrawal updates, security alerts, and account notifications — as these are necessary to administer your account and are not marketing in nature.

14. Changes to This Policy

xz999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, xz999 will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically to stay informed about how xz999 protects your personal data. Your continued use of the xz999 Platform following notification of any changes constitutes your acceptance of the revised Policy.

Previous versions of this Policy are available upon request by contacting [email protected].

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to xz999's handling of your personal data, please contact us using the details below. All privacy enquiries are handled by our dedicated data privacy team and will be acknowledged within 48 hours.

For responsible gaming enquiries, including self-exclusion requests and deposit limit adjustments, please visit our dedicated Responsible Gaming page or contact support directly. All responsible gaming requests are processed with urgency and treated with full confidentiality.