x9999 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by x9999 ("x9999", "we", "us", "our") and applies to all personal data collected in connection with your use of the x9999 website at x9999.app, its subdomains, and all associated services including the casino, sportsbook, and cashier (collectively, the "Platform").

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

x9999 takes the privacy of its players seriously. Whether you are a player depositing via JazzCash from Karachi, placing cricket bets from Lahore, or accessing live casino tables from Islamabad, your data is handled consistently under this Policy regardless of how you access the Platform.

2. Data We Collect

x9999 collects personal data in the following categories:

x9999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is necessary for identity verification.

3. How We Use Your Data

x9999 processes your personal data for the following purposes:

• Account Management: Creating and maintaining your x9999 account, verifying your identity, and providing access to Platform services;
• Payment Processing: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, bank transfer, and other supported payment methods; preventing payment fraud;
• Legal Compliance: Complying with anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any applicable regulatory reporting obligations;
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and administering self-exclusion requests;
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Platform Improvement: Analysing anonymised usage patterns to improve game performance, payment flows, and overall Platform usability;
• Security: Detecting and preventing fraud, cheating, account takeover, and other security threats;
• Marketing Communications: Sending you promotional offers and bonus notifications — subject to your marketing preferences, which you may update at any time from Account Settings.

4. Legal Basis for Processing

x9999 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the gaming and payment services you have contracted for when registering an account;
• Legal Obligation: Processing required to comply with AML, KYC, and other applicable legal and regulatory requirements;
• Legitimate Interests: Processing for fraud prevention, security, and Platform improvement where our legitimate interests are not overridden by your rights;
• Consent: Processing for optional marketing communications, where you have provided express consent. You may withdraw this consent at any time via Account Settings or by contacting support.

5. Payment Data & PKR Transactions

x9999 operates a PKR-native cashier serving Pakistani players. When you deposit or withdraw using JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, or other supported methods, your payment data is processed as follows:

• Payment instructions (wallet numbers, account identifiers) are transmitted directly to our PCI-DSS certified payment processor. x9999 does not store complete payment credentials on its own servers;
• Transaction records — including amount, method, timestamp, and reference number — are retained in your x9999 account history for account management, dispute resolution, and regulatory compliance purposes;
• For withdrawals, we verify that the destination account or mobile wallet is registered in the same name as your x9999 account to prevent financial crime. This may involve sharing limited identity data with the payment processor for verification;
• JazzCash and Easypaisa OTP-based transactions are processed via the respective mobile wallet provider's API. x9999 does not store OTP codes;
• USDT TRC20 and other cryptocurrency transactions are recorded on the relevant blockchain, which is a public ledger. x9999 records only the wallet address and transaction hash, not the private key.

6. Cookies & Tracking

x9999 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise you between sessions and improve your experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the Platform to function — session management, login state, security tokens. These cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings, preferred odds format, and last visited game category;
• Analytics Cookies: Collect anonymised data on how players navigate the Platform — page views, session duration, device type. Used to improve performance. No personally identifiable information is included;
• Marketing Cookies: Used to deliver relevant bonus and promotional content based on your activity. These are only set with your consent.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality, including the ability to log in or process payments.

7. Data Sharing & Third Parties

x9999 does not sell, rent, or share your personal data with third parties for their own marketing purposes. We share data only in the following limited circumstances:

• Payment Processors: JazzCash, Easypaisa, and other payment gateway partners receive the minimum data necessary to process your PKR transactions;
• Game Providers: Live casino and slot providers (Evolution Gaming, Pragmatic Play, PG Soft, etc.) receive a pseudonymous player identifier and session data to deliver games. They do not receive your full identity or payment data;
• KYC / Identity Verification: Third-party identity verification providers may process your identity documents during the KYC process. These providers are bound by confidentiality agreements and process data solely for verification purposes;
• Legal Authorities: x9999 will disclose personal data to law enforcement, regulatory authorities, or judicial bodies where required by law or where necessary to prevent fraud, money laundering, or other financial crime;
• Corporate Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8. Data Retention

x9999 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Active accounts: Data retained for the duration of the account relationship plus 5 years from account closure;
• Financial transaction records: Minimum 5 years from the date of transaction, in accordance with AML record-keeping requirements;
• KYC documents: Minimum 5 years from account closure or last transaction, whichever is later;
• Support communications: 2 years from the date of the interaction;
• Marketing consent records: Retained for the duration of the account plus 1 year to demonstrate compliance.

After the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an individual.

9. Data Security

x9999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encrypted storage for sensitive data at rest, including identity documents and financial records;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Two-factor authentication available to all players for account access;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures for data breaches, including notification to affected users where required by applicable law.

No method of data transmission over the internet is 100% secure. While x9999 employs industry-standard protections, we cannot guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable 2FA on their x9999 accounts.

10. Your Rights

Subject to applicable law, you have the following rights with respect to your personal data held by x9999:

• Right of Access: Request a copy of the personal data x9999 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected (subject to our legal retention obligations);
• Right to Restriction: Request that we restrict processing of your data in certain circumstances, for example whilst a correction request is being resolved;
• Right to Data Portability: Request a machine-readable export of data you have provided to x9999;
• Right to Object: Object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on consent (such as marketing communications), withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact x9999 support using the email address displayed in the footer. Requests will be processed within 30 days. We may need to verify your identity before acting on a request.

11. Children's Privacy

x9999 is strictly an 18+ platform. We do not knowingly collect personal data from persons under the age of 18. If we become aware that personal data has been collected from a person under 18, we will immediately close the relevant account and delete all associated data. If you believe a minor has registered on our Platform, please contact support immediately.

12. Changes to This Policy

x9999 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via the email address or mobile number on file at least 14 days before the change takes effect. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy.

13. Contact Us

For all privacy-related enquiries, data subject access requests, or complaints regarding x9999's data practices, please contact our support team. We will acknowledge your enquiry within 2 business days and aim to resolve it within 30 days. The x9999 support email is displayed in the footer of this page as plain text.