xp786 Privacy Policy

1. Who We Are and Scope of This Policy

xp786 is an online casino and sports betting platform operating at xp786.asia and serving English-speaking Pakistani users. xp786 acts as the data controller in respect of personal data collected from users of the Platform. This Policy applies to all personal data collected through the xp786 website, account registration process, deposit and withdrawal transactions, customer support interactions, and any other means by which you provide data to xp786.

This Policy does not apply to third-party websites or services that may be referenced on the Platform. xp786 is not responsible for the privacy practices of third parties, including payment service providers, game software providers, or any other external service with which you may interact independently.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register a xp786 account or use Platform services, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality.
• Contact Data: Email address, postal address, city (e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad), province, Pakistan.
• Verification Data: CNIC number, passport number, copies of identity documents submitted for KYC purposes.
• Financial Data: Payment account details (JazzCash mobile number, Easypaisa mobile number, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah, or USDT wallet address). xp786 does not store full payment card numbers.
• Account Data: Username, password (stored in hashed form only), account preferences, responsible gaming limit settings.
• Communication Data: Records of communications with xp786 support, including live chat transcripts and email correspondence.

2.2 Data Collected Automatically

When you access xp786.asia, certain technical data is collected automatically by our systems:

• IP address and approximate geolocation (country/city level).
• Browser type, version, and operating system.
• Device type and screen resolution.
• Session data: pages visited, time on page, navigation paths, game sessions initiated.
• Referring URL (the page from which you arrived at xp786.asia).
• Cookie identifiers and session tokens — see Section 7 for full cookie details.

3. How We Use Your Personal Data

xp786 uses the personal data collected for the following purposes:

xp786 does not use personal data for behavioural advertising targeting or for sale to data brokers. Promotional communications from xp786 are sent only to opted-in Players and relate exclusively to xp786 platform offers.

4. Legal Basis for Processing

xp786 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the account registration agreement, process transactions, and deliver Platform services.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering (AML) obligations, KYC requirements, and responsible gaming regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and internal analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data with Third Parties

xp786 does not sell or rent personal data to third parties. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT processing services receive the minimum data required to process your transactions. These providers operate under their own privacy policies and are not agents of xp786.
• KYC verification providers: Identity document verification may be processed by a third-party KYC platform. Documents are shared solely for the purpose of verifying your identity and are not retained by the provider beyond the verification process.
• Game content providers: Technical session data (including game outcomes and wager amounts) is shared with licensed game providers to settle game results. No additional personal data is transferred beyond what is technically necessary.
• Legal and regulatory authorities: xp786 may disclose personal data to law enforcement, regulatory authorities, or courts where required by applicable law, valid legal process, or to protect the safety and rights of xp786, its users, or the public.
• Business successors: In the event of a merger, acquisition, or sale of the Platform's assets, personal data held by xp786 may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party recipients of xp786 user data are required to process such data only for the specified purpose and to maintain appropriate security standards.

6. Data Retention

xp786 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Active account data: Retained for the duration of your account's active status on xp786.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following account closure or last transaction, in accordance with AML compliance obligations.
• Support communications: Retained for three (3) years following the closure of the relevant support case.
• Self-exclusion records: Retained for the duration of the self-exclusion period and for a minimum of five (5) years thereafter to prevent re-registration during an active exclusion.
• Technical/session data: Retained in anonymised aggregate form for analytics purposes. Identifiable session data is deleted within 90 days of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with data destruction standards.

7. Cookies and Tracking Technologies

xp786.asia uses cookies — small text files stored on your device — and similar tracking technologies for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, maintaining your login state, and security tokens. These cannot be disabled without preventing Platform use.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limit configurations.
• Analytics cookies: Collect anonymised data about how users navigate xp786.asia to help us improve the Platform. No personally identifiable information is included in analytics data sent to analytics systems.

xp786 does not use third-party advertising cookies or cross-site tracking pixels. You can manage cookie settings in your browser settings. Disabling strictly necessary cookies may prevent you from logging in to your xp786 account.

8. Data Security

xp786 implements technical and organisational security measures appropriate to the risk of the data processing activities carried out. These measures include:

• 256-bit TLS/SSL encryption on all data in transit between users and xp786 servers.
• Encrypted storage of sensitive data including passwords (stored as salted hashes only — the original password is never stored) and KYC documents.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Regular security audits and vulnerability assessments of the xp786 platform infrastructure.
• Two-factor authentication (2FA) available to all registered xp786 account holders.

Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a data breach affecting your personal data, xp786 will notify affected users in accordance with applicable notification obligations.

9. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by xp786:

• Right of access: You may request a copy of the personal data xp786 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Minor account details can be updated directly via account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to retention obligations described in Section 6.
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances, such as while a dispute about accuracy is resolved.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to xp786 for transfer to another service, where technically feasible.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact xp786 support at [email protected] with your request and sufficient information to verify your identity. xp786 will respond to verified requests within thirty (30) calendar days. Complex requests may require up to ninety (90) days with notification of the extended timeline.

10. Minors and Age Restriction

xp786 is strictly an adult platform. No person under the age of 18 years may register an account or use any service on xp786.asia. xp786 does not knowingly collect personal data from persons under 18. If we become aware that personal data has been collected from a minor, the relevant account will be closed immediately and all associated data deleted or returned to the legal guardian as appropriate.

If you believe a minor has registered an account on xp786, please notify us immediately at [email protected]. Parents and guardians are encouraged to use parental control software and to monitor minors' internet access to prevent access to adult gambling platforms including xp786.

11. Changes to This Privacy Policy

xp786 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or platform operations. Material changes will be communicated to registered users via the email address on file at least fourteen (14) days before the change takes effect, where practicable. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Continued use of xp786 following notification of a Policy update constitutes acceptance of the revised Policy.

12. Contact and Data Enquiries

For all data privacy enquiries, subject access requests, consent withdrawal requests, or data deletion requests relating to your xp786 account, please contact the xp786 data team via:

Email: [email protected]

xp786 support is available in English 24 hours a day, 7 days a week. Please include "Privacy Request" in the subject line of your email and provide your registered username or email address to facilitate identity verification.

For concerns related to responsible gaming and account self-exclusion, please also visit the Responsible Gaming page. For full platform rules including data-related account terms, refer to the Terms & Conditions.