xk999 Privacy Policy

1. Introduction

xk999 ("xk999", "we", "us", "our") operates the online gaming platform at xk999.win and associated mobile-optimised pages (collectively, the "Platform"). In the course of providing gaming, sports betting, and payment services to Pakistani players, xk999 necessarily collects and processes certain personal data. This Privacy Policy describes what data we collect, how we use it, with whom we share it, how long we retain it, and what rights you hold over it.

This policy applies to all registered members and visitors of xk999, including players accessing the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and elsewhere in Pakistan. It applies to data collected through the Platform, through our customer support channels, and through any payment processing activities on xk999.

References to "personal data" in this policy mean any information that identifies or could identify you as an individual, whether directly (such as your name or mobile number) or indirectly (such as an account ID combined with device information).

2. Data We Collect

xk999 collects personal data in the following categories:

2.1 Registration Data. When you create an xk999 account, we collect your Pakistani mobile number, date of birth, chosen username, and password (stored in hashed form only). You may optionally provide a display name. This data is necessary to create and maintain your account on xk999.

2.2 Identity Verification Data. Where xk999 requests identity verification (for example before processing a significant withdrawal), we may collect copies of government-issued identification documents, proof of address, and selfie verification images. This data is collected solely for the purpose of verifying your identity and complying with anti-money-laundering obligations.

2.3 Financial Data. We collect details of your deposits and withdrawals, including the payment method used (Easypaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah), transaction reference numbers, PKR amounts, and timestamps. We do not store complete payment card numbers or full banking credentials on xk999 servers.

2.4 Gameplay Data. We record details of all gaming and betting activity on xk999, including bets placed, games played, outcomes, session times, and account balance movements. This data is necessary for the operation of the Platform, dispute resolution, and responsible gaming monitoring.

2.5 Communications Data. If you contact xk999 support via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and the support agent's responses.

2.6 Technical Data. xk999 automatically collects certain technical data when you access the Platform, including your IP address, device type and operating system, browser type and version, and general geographic location derived from IP address. This data is used for security, fraud prevention, and Platform optimisation purposes.

3. How We Use Your Data

xk999 uses collected personal data for the following purposes:

• Account operation: creating, maintaining, and managing your xk999 account, including processing logins and password resets via your Pakistani mobile number;
• Service delivery: enabling you to access betting markets, casino games, and all Platform features on xk999;
• Payment processing: facilitating PKR deposits and withdrawals via supported Pakistani payment methods;
• Identity verification: confirming player identity and age (18+) in compliance with our operating obligations;
• Responsible gaming: monitoring gameplay patterns to identify potential problem gambling behaviours and applying account restrictions where appropriate under xk999 responsible gaming policy;
• Fraud prevention and security: detecting, investigating, and preventing fraudulent transactions, account compromise, and abuse of the xk999 Platform;
• Legal compliance: meeting obligations under applicable anti-money-laundering, know-your-customer, and other regulatory requirements;
• Customer support: responding to queries, resolving disputes, and processing complaints;
• Platform improvement: analysing aggregated, anonymised usage data to improve xk999 features, performance, and user experience;
• Marketing communications: sending promotional communications about xk999 offers and features where you have not opted out of such communications.

4. Legal Basis for Processing

xk999 processes your personal data on the following legal bases:

• Contractual necessity: processing required to fulfil our obligations under the xk999 Terms and Conditions you accepted at registration, including providing gaming services and processing payments;
• Legitimate interests: processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming oversight, where these interests do not override your fundamental privacy rights;
• Legal obligation: processing required to comply with applicable laws, including identity verification and anti-money-laundering obligations;
• Consent: processing for marketing communications, which you may withdraw at any time by contacting xk999 support.

5. Data Sharing

5.1 No Sale of Data. xk999 does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. This is an unconditional commitment.

5.2 Service Providers. xk999 works with a limited number of trusted third-party service providers who assist in operating the Platform, including payment processors, game software providers, hosting and infrastructure providers, identity verification services, and customer support tools. These providers access personal data only to the extent necessary to perform their specific functions and are contractually bound to handle data in accordance with this Privacy Policy.

5.3 Legal Disclosures. xk999 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the security of the Platform, or protect the rights or safety of xk999 or third parties.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all assets of xk999, personal data held on the Platform may be transferred to the acquiring entity, subject to that entity assuming the obligations of this Privacy Policy.

6. Payment Data

xk999 processes PKR transactions via Easypaisa, JazzCash, HBL, UBL, Meezan Bank, and Bank Alfalah. Payment processing is handled in partnership with PCI-DSS compliant payment service providers. xk999 does not store full payment card numbers, complete IBAN details, or banking passwords on its own servers. Transaction reference numbers and PKR amounts are retained on xk999 systems for the purpose of transaction history, dispute resolution, and regulatory record-keeping. By depositing funds via any supported Pakistani payment method, you authorise xk999 and its payment partners to process the transaction in accordance with this Privacy Policy.

7. Cookies & Tracking Technologies

xk999 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: necessary for the Platform to function, including maintaining your xk999 login session and remembering your language and currency preferences;
• Analytics cookies: used to understand how players navigate and use the xk999 Platform in aggregate, enabling us to improve features and performance;
• Security cookies: used to detect fraudulent activity and protect xk999 accounts from unauthorised access.

You may configure your browser to refuse non-essential cookies. Note that disabling essential cookies will impair your ability to log in and use the xk999 Platform normally. xk999 does not use third-party advertising cookies or behavioural tracking cookies that profile you across other websites.

8. Data Retention

xk999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active account data is retained for the duration of your xk999 account registration and for a minimum of five years following account closure, as required by anti-money-laundering and record-keeping obligations;
• Transaction records are retained for a minimum of five years from the date of each transaction;
• Identity verification documents are retained for the period required by applicable law from the date of verification;
• Support communications are retained for a minimum of two years from the date of last interaction;
• Technical logs are retained for up to 12 months for security and fraud prevention purposes.

When personal data is no longer required for any legitimate purpose, xk999 will securely delete or anonymise it.

9. Data Security

xk999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include 256-bit SSL encryption for all data in transit, password hashing using current cryptographic standards, restricted internal access controls based on the principle of least privilege, regular security reviews, and segregation of player funds from operational accounts. While xk999 takes data security seriously and invests in appropriate protections, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their xk999 account and to log out of the Platform when using shared or public devices.

10. Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by xk999:

• Right of access: you may request confirmation of whether xk999 holds personal data about you and, if so, a copy of that data;
• Right to rectification: you may request correction of inaccurate personal data held by xk999;
• Right to erasure: you may request deletion of your personal data where xk999 no longer has a legal basis for retaining it; note that certain data must be retained for legal compliance purposes and cannot be deleted on request;
• Right to restriction: you may request that xk999 restrict its processing of your personal data in certain circumstances;
• Right to object: you may object to xk999 processing your personal data on the basis of legitimate interests, including processing for marketing communications;
• Right to withdraw consent: where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact xk999 support via live chat or email at [email protected]. xk999 will respond to data rights requests within 30 days of receipt. Requests may require identity verification before xk999 can action them.

11. Minors

xk999 services are strictly for persons aged 18 years and above. xk999 does not knowingly collect personal data from persons under 18. If we become aware that an account has been registered by or used by a minor, the account will be immediately suspended and all data associated with it will be subject to deletion in accordance with applicable legal requirements. If you believe a minor has accessed or registered on xk999, please notify us immediately via live chat or support email.

12. International Data Transfers

xk999 operates with infrastructure and service providers that may be located outside Pakistan. Where personal data is transferred internationally, xk999 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to this Privacy Policy. Where transfers occur to service providers in jurisdictions without an equivalent level of data protection, xk999 uses contractual protections to ensure the data remains protected.

13. Third-Party Game Providers

The xk999 casino and slots lobby is powered by third-party game software providers. These providers supply certified RNG game engines to xk999 and may receive session-level gameplay data (such as bet amounts and game results) for the purpose of delivering their games. They do not receive personally identifiable registration information except where necessary to verify a specific transaction or dispute. All game providers used by xk999 are contractually bound to handle data in a manner consistent with this Privacy Policy.

14. Updates to This Privacy Policy

xk999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Material changes will be communicated to registered players via the mobile number or email address associated with their xk999 account, or by prominent notice on the Platform, with a minimum of 7 days' notice before the revised policy takes effect. The "Last Updated" date at the top of this policy reflects the date of the most recent revision. Your continued use of xk999 following any update constitutes acceptance of the revised Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by xk999, please contact us through the following channels:

• Live Chat: Available 24/7 in English via the xk999 Platform – the fastest way to reach us for any account-related data query.
• Email: [email protected] (plain text – not a clickable link). xk999 aims to acknowledge all written data enquiries within 48 hours and resolve them within 30 days.