At xz999, the privacy and security of our players' personal data is a core operational commitment — not a compliance afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold over your own information as a Pakistani player on our platform.
Six core commitments xz999 makes to every Pakistani player regarding their personal data.
All personal data stored by xz999 — including your CNIC details, mobile number, and payment account references — is encrypted using AES-256 standard encryption at rest. Data in transit between your device and xz999 servers is protected by TLS 1.3 protocol at all times.
xz999 does not sell, rent, or trade your personal data to any third-party organisation for commercial marketing purposes. Your data is used exclusively to operate your xz999 account, comply with licensing obligations, and improve platform services — nothing else.
Registered xz999 players have the right to access their stored personal data, request corrections to inaccurate records, and in applicable circumstances, request deletion of their data. All data rights requests are handled within 30 days via the xz999 support team.
xz999 operates under an international gaming license that imposes binding data protection obligations. Our privacy practices are not voluntary — they are a condition of our operating license and are subject to external regulatory review as part of our ongoing compliance program.
xz999 retains personal data only for as long as it is necessary for the stated purposes or as required by applicable regulatory obligations. Account data is retained for a minimum of five years post-closure to satisfy anti-money laundering record-keeping requirements under our gaming license.
In the event of a data security incident that affects your personal data, xz999 will notify affected account holders without undue delay and in accordance with the breach notification obligations under our international gaming license. You will be informed of what data was affected and what steps xz999 has taken in response.
This Privacy Policy ("Policy") describes the data protection practices of xz999 ("xz999", "we", "us", "our") in relation to personal data collected from registered users ("Players", "you", "your") and visitors to the xz999 Platform accessible at xz999.biz.
This Policy applies to all personal data collected through the xz999 Platform, including data collected during account registration, KYC verification, deposits and withdrawals, gameplay, customer support interactions, and promotional participation. It applies regardless of the device or browser used to access xz999.biz.
This Policy should be read alongside the xz999 Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions regarding data matters, this Policy shall prevail.
Note for Pakistani Players: xz999 is committed to handling your personal data with the highest standards of care. The data practices described in this Policy apply equally and in full to all players accessing xz999 from Pakistan, regardless of city or province of residence.
For the purposes of this Privacy Policy, xz999 acts as the data controller in respect of all personal data collected through the Platform. As the data controller, xz999 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable data protection obligations under its international gaming license.
All data rights requests, privacy enquiries, and complaints relating to xz999's data practices should be directed to the xz999 Data Privacy Team via the contact details set out in Section 16 of this Policy.
xz999 collects personal data in the following categories. The specific data items collected depend on the nature of your interaction with the Platform:
| Data Category | Specific Data Items | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | KYC verification |
| Contact Data | Pakistani mobile number, residential address | Registration & KYC |
| Financial Data | JazzCash / EasyPaisa account references, bank account details (HBL, UBL, Meezan), transaction history in PKR | Deposits & withdrawals |
| Gaming Data | Bet history, game session logs, wagering amounts, win/loss records, bonus usage | During gameplay |
| Technical Data | IP address, device type, operating system, browser type, session duration, pages visited | Platform access |
| Communications Data | Live chat transcripts, support emails, SMS correspondence records | Support interactions |
| KYC Documents | Scanned CNIC images, proof-of-address documents, payment method verification documents | KYC verification |
xz999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is present on standard CNIC documents submitted for age and identity verification.
xz999 collects personal data through the following methods:
Data you provide directly when you register an xz999 account, complete KYC verification, make a deposit or withdrawal, participate in a promotion, contact customer support via live chat or email, or respond to any survey or feedback request from xz999.
Technical data collected automatically when you access the xz999 Platform, including IP address, device identifiers, browser configuration, page visit logs, and session timestamps. This data is collected via server logs and, where applicable, cookies and similar tracking technologies (see Section 8).
In limited circumstances, xz999 may receive data about you from third-party sources, including:
xz999 processes your personal data on the following legal bases, depending on the specific processing activity:
xz999 uses the personal data it collects for the following purposes:
To create and maintain your xz999 account, authenticate your identity at login, process deposits and withdrawals in PKR via JazzCash, EasyPaisa, and Pakistani bank transfers, credit bonuses and promotional offers, and provide access to all gaming categories on the Platform.
To verify that you are at least 21 years of age and that your identity information is accurate, as required under xz999's international gaming license. This is a mandatory processing activity — xz999 cannot release withdrawals from accounts that have not completed KYC verification.
To detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the xz999 Terms & Conditions. Security monitoring of sessions and transactions is an ongoing automated process on the Platform.
To monitor player behaviour for indicators of problem gambling, administer responsible gaming tools (deposit limits, cooling-off periods, self-exclusion), and comply with the responsible gaming obligations imposed by xz999's international gaming license.
To respond to enquiries submitted via live chat or email, resolve account and transaction disputes, and maintain records of support interactions for quality assurance and dispute resolution purposes.
To analyse aggregate and anonymised player behaviour data for the purposes of improving Platform design, game selection, payment method performance, and overall player experience. Individual player profiles are not used for this purpose without anonymisation.
Where you have opted in to receive promotional communications from xz999, to send you information about bonuses, promotions, new games, and PSL-related betting offers via SMS to your registered mobile number. You may opt out of marketing communications at any time by contacting xz999 support.
xz999 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
No Commercial Data Sales: xz999 has never sold, and will never sell, personal data belonging to Pakistani players (or any players) to data brokers, advertisers, or any other commercial third party. This is an absolute policy commitment, not a conditional one.
Cookies are small text files placed on your device by a website to store information about your session and preferences. xz999 uses cookies and similar technologies (including session tokens and local storage) to operate the Platform effectively.
You may configure your browser to refuse all or certain types of cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your xz999 account and using core Platform features. Browser cookie settings vary by browser — refer to your browser's help documentation for specific instructions.
xz999 implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:
Despite these measures, no digital platform can guarantee absolute security. xz999 strongly recommends that players use a strong, unique password for their xz999 account and do not share account credentials with any other person.
xz999 retains personal data for the following periods, after which data is securely deleted or anonymised:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML regulatory requirement under gaming license |
| KYC Documents | Duration of account + 5 years post-closure | AML regulatory requirement under gaming license |
| Financial Transaction Records | Duration of account + 5 years post-closure | AML and financial record-keeping obligations |
| Gaming History | Duration of account + 2 years post-closure | Dispute resolution and responsible gaming monitoring |
| Support Communications | 3 years from date of last interaction | Quality assurance and dispute records |
| Technical / Log Data | 13 months from collection | Security monitoring and fraud analysis |
| Marketing Consent Records | Until consent withdrawn + 1 year | Proof of consent for regulatory purposes |
Where data is retained beyond the account closure date for regulatory reasons, it is isolated from active operational systems and accessible only to the xz999 compliance team for the specific purposes of regulatory reporting and legal obligations.
As a registered xz999 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the xz999 Data Privacy Team using the details in Section 16. xz999 will respond to all data rights requests within 30 calendar days.
How to Submit a Data Rights Request: Contact the xz999 Data Privacy Team via live chat (available 24/7) or by email at [email protected] with the subject line "Data Rights Request". Please include your registered mobile number so we can verify your identity before processing the request. xz999 will not charge a fee for data rights requests unless they are manifestly unfounded or excessive.
The xz999 Platform is strictly intended for adults aged 21 years and above. xz999 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the xz999 KYC process and is applied to every account before any withdrawal is permitted.
If xz999 becomes aware that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, no withdrawals will be processed, and the data will be deleted or isolated pending investigation in accordance with our underage access protocol. Any net deposits may be subject to return to the original deposit source pending regulatory guidance.
If you are a parent or guardian and believe that a person under 21 in your household has registered an xz999 account, please contact our support team immediately via live chat or at [email protected].
xz999 operates under an international gaming license and its infrastructure involves data processing in jurisdictions outside Pakistan. Where personal data is transferred internationally, xz999 ensures that appropriate safeguards are in place to protect that data, including:
By registering an xz999 account and accepting this Privacy Policy, you consent to the international transfer of your personal data under the safeguards described above.
The xz999 Platform may contain references to third-party game providers whose software operates within the xz999 environment. These providers operate their own data practices in relation to the technical data required to deliver their games. xz999 is not responsible for the privacy practices of third-party game providers — players should review the privacy documentation of any third-party provider whose games they choose to access.
The xz999 Platform does not contain links to external third-party websites. Any domain other than xz999.biz is not under xz999's control and xz999 accepts no responsibility for the data practices of external sites.
xz999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory obligations, or the services we provide. The "Last Updated" date at the top of this Policy will be revised whenever a new version is published.
Where amendments are material — meaning they significantly affect how your personal data is collected, used, or shared — xz999 will notify registered players via the Platform or by SMS to the registered mobile number prior to the changes taking effect. Continued use of the xz999 Platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms.
We recommend reviewing this Policy periodically. The version number displayed in the updated-bar above identifies the current version in force.
For all privacy-related enquiries, data rights requests, or complaints regarding xz999's data practices, please contact the xz999 Data Privacy Team through the following channels:
If you are not satisfied with xz999's response to a privacy complaint, you may escalate the matter to the relevant regulatory authority under our international gaming license. Details of the applicable supervisory authority are available from xz999 upon written request.
xz999 support operates with Pakistan Standard Time coverage priority, meaning players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan can expect prompt responses during evening and weekend hours — the times when most privacy enquiries tend to be submitted.
Play with confidence knowing your personal and financial data is protected by 256-bit encryption, never sold, and handled in full compliance with our international gaming license obligations.
Log In to xz999 Learn About Us