XP768 Privacy Policy – How We Handle Your Personal Data

1. Introduction

This Privacy Policy describes how xp768 ("we", "us", "our") collects, uses, stores and protects personal information about you ("the player", "you", "your") when you access and use the xp768 platform at xp768.onl.

We take data privacy seriously. When you register an account, deposit PKR, play games, or contact our support team, you share personal information with us. This policy is our commitment to being transparent about exactly what we do with that information and why.

By registering on xp768, using any part of the platform, or continuing to hold an active account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, you should not register or continue using xp768.

2. Personal Data We Collect

xp768 collects the following categories of personal data in connection with your account and use of the platform:

2.1 Registration and Account Data

• Full legal name as it appears on your CNIC or other identity document
• Date of birth (for age verification — 18+ requirement)
• Mobile phone number
• Email address
• Residential address in Pakistan
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copy of CNIC (Computerised National Identity Card) or other accepted government-issued ID
• Proof of address documentation where requested
• Source of funds documentation for large transactions

2.3 Financial and Transaction Data

• JazzCash, Easypaisa, Raast account identifiers used for deposits and withdrawals
• Bank account details where bank transfer is used
• Deposit and withdrawal transaction history in PKR
• Bonus credits, cashback amounts and VIP tier point balances

2.4 Gaming Activity Data

• Bets placed, games played, wager amounts and outcomes across all xp768 sections
• Sports betting selections (Cricket, PSL, T20, Football, Esports)
• Session duration and game history
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

2.5 Technical and Device Data

• IP address and general geographic location
• Device type, operating system and browser type
• Pages visited, navigation patterns and session timestamps
• Cookie identifiers and preference settings

3. How We Collect Your Data

xp768 collects personal data through the following means:

• Directly from you — when you register, complete KYC, deposit or withdraw PKR, contact support, or update account settings.
• Automatically — when you use the platform, our systems automatically log device data, IP addresses, page views and gaming activity.
• From payment processors — JazzCash, Easypaisa, Raast and banking partners may share transaction confirmation data with us to verify payment status.
• From identity verification services — where we use third-party KYC services to verify identity documents, those services may share verification outcomes with us.
• Through cookies and tracking technologies — as described in Section 7 of this policy.

4. How We Use Your Personal Data

xp768 uses your personal data for the following specific purposes:

xp768 does not use automated decision-making processes that produce legal or similarly significant effects without human review. Fraud detection algorithms may flag accounts for review, but final account action decisions involve human assessment.

5. Who We Share Your Data With

xp768 does not sell your personal data. We share your data only in the following limited circumstances:

5.1 Payment Processing Partners

When you deposit or withdraw PKR, we share the necessary transaction data with JazzCash, Easypaisa, Raast and banking partners to process the payment. These partners process data only for payment purposes and under their own data protection obligations.

5.2 Identity Verification Services

To complete KYC verification, we may share identity document images and personal details with third-party verification service providers. These providers process your data on our behalf and are contractually bound to keep it secure and use it only for verification purposes.

5.3 Technology and Infrastructure Providers

xp768 uses technology service providers for hosting, platform operation, customer support tools and analytics. These providers may process limited personal data as part of their service delivery but are not permitted to use that data for their own purposes.

5.4 Legal and Regulatory Disclosure

We may be required to disclose personal data to legal authorities, law enforcement, or regulatory bodies where we have a good-faith belief that disclosure is required by applicable law, or where disclosure is necessary to protect the rights, property or safety of xp768, its players, or third parties.

6. PKR Payments and KYC Data

Because xp768 handles real-money transactions in PKR, we have specific obligations around financial data. Payment data — including your JazzCash number, Easypaisa account, Raast ID or bank account details — is treated with the highest level of confidentiality. This data is:

• Used only for processing your deposits and withdrawals
• Never shared with third parties beyond the relevant payment processor
• Stored in encrypted form
• Retained for the period required by financial record-keeping obligations, typically seven years

KYC identity documents — including CNIC copies — are retained for the duration of your active account and for the legally required period following account closure. They are accessed only by authorised xp768 compliance staff for verification and audit purposes.

xp768 does not store complete payment card numbers. Where card payment options are available, card data is tokenised and processed entirely by the payment provider — xp768 sees only a masked reference number and transaction status.

7. Cookies and Tracking Technologies

xp768 uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the platform. Here is a breakdown of the cookies we use:

7.1 Essential Cookies

These are required for the platform to function. They keep you logged in, maintain your session state, and remember your language and currency preferences. You cannot opt out of essential cookies while using xp768, as they are necessary to deliver the service.

7.2 Performance and Analytics Cookies

These cookies help us understand how players use xp768 — which game sections are most visited, where players encounter issues, and how the platform performs across different devices. This data is aggregated and does not identify individual players. We use this information to improve the xp768 experience.

7.3 Preference Cookies

These cookies remember your settings and preferences on xp768 — such as game categories you've recently visited, display preferences, and notification settings — so you don't need to reconfigure them each time you log in.

7.4 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent xp768 from functioning correctly and you may not be able to log in or complete transactions. Changes to cookie settings in your browser apply globally to all websites, not just xp768.

8. How Long We Keep Your Data

xp768 retains personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. The general retention principles we follow are:

• Active accounts: All account data is retained for the duration of your active account relationship with xp768.
• Closed accounts: Following account closure, account records including transaction history and identity documents are retained for a minimum of five to seven years to comply with financial record-keeping obligations.
• KYC documents: Identity verification documents are retained for the period required by applicable anti-money laundering and financial compliance requirements.
• Support communications: Records of support interactions are retained for up to three years for quality assurance and dispute resolution purposes.
• Marketing consent records: Records of your marketing communication preferences are retained for as long as relevant, including records of withdrawal of consent.

When data is no longer required, xp768 deletes or permanently anonymises it in a secure manner.

9. Data Security

xp768 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Our security measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest in our databases
• Access controls restricting personal data access to authorised personnel only, on a need-to-know basis
• Regular security assessments of our platform and infrastructure
• Staff training on data protection and privacy obligations
• Monitoring and logging systems to detect unauthorised access attempts

Despite these measures, no online platform can guarantee absolute security. You are also responsible for keeping your own xp768 login credentials confidential. If you believe your account has been accessed without your permission, contact xp768 support immediately through live chat in your account dashboard.

10. Your Data Rights

As a player registered on xp768, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat in your account dashboard or by email at [email protected].

We will respond to data rights requests within 30 days. Where a request is complex or there are multiple requests, we may extend this period by up to 60 additional days with notification to you. Identity verification is required before processing any data access or deletion request.

11. Children and Minors

xp768 is strictly an adults-only platform. We do not knowingly collect, store or process personal data from anyone under the age of 18. All registration processes include age declaration requirements, and KYC verification is used to confirm age where required.

If xp768 becomes aware or has reason to believe that personal data has been collected from a person under 18 years of age, we will: immediately suspend the account, delete the personal data as promptly as possible, and return any real-money balance to the payment method used for deposit where return is feasible.

If you are a parent or guardian and believe your child under 18 has registered an account on xp768, please contact our support team immediately via live chat or at [email protected] so we can investigate and take appropriate action promptly.

12. Third-Party Links and Services

The xp768 platform may reference or link to third-party services — such as game providers, payment processors, or information resources. Once you leave the xp768 platform and access a third-party service, this Privacy Policy no longer applies. Third-party services have their own privacy policies which govern their data practices.

xp768 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policy of any third-party service you access in connection with your use of xp768.

Game content provided through the xp768 platform may be delivered by third-party game engine providers. These providers may receive limited technical data (such as session tokens and game results) necessary to deliver the game. They do not receive your personal identity or financial data.

13. Changes to This Privacy Policy

xp768 may update this Privacy Policy from time to time as our services evolve, as new legal obligations arise, or as we improve our data protection practices. The effective date at the top of this page will be updated to reflect any changes.

For material changes — those that significantly affect how we use your data or your rights — we will notify registered players via the email address associated with their account before the changes take effect. For minor updates, we will update the policy and display the new effective date.

Continued use of xp768 following notification of a policy change constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you should stop using xp768 and request account closure.

We recommend reviewing this Privacy Policy periodically so you are always aware of the current version. Archived versions of previous policies are available on request from our support team.

14. Contact Us About Privacy

If you have questions, concerns, or requests related to this Privacy Policy or how xp768 handles your personal data, you can reach us through the following channels:

• Live Chat Support: Available 24/7 inside your xp768 account dashboard after login. This is the fastest way to raise a privacy query or submit a data rights request.
• Email: [email protected] — use subject line "Privacy Request" or "Data Rights Request" to ensure your message is directed to the relevant team member.
• VIP Account Manager: Gold tier and above members can raise privacy matters directly through their personal account manager for dedicated handling.

We aim to acknowledge all privacy-related communications within two business days and to resolve data rights requests within 30 days. For complex requests involving deletion of large data sets or involving multiple data processing activities, we will communicate a revised timeline to you.

This Privacy Policy was last reviewed and updated in June 2026. It supersedes all previous versions of the xp768 Privacy Policy and is effective immediately for all current account holders.