xk999 Privacy Policy

1. Data Controller

xk999 ("xk999", "We", "Us", "Our") is the data controller responsible for the personal information collected through the xk999 platform accessible at xk999.asia and all associated subdomains and mobile interfaces. By registering an account or using any xk999 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy applies to all users of the xk999 platform, including registered players, visitors who browse xk999.asia without registering, and any individual who communicates with xk999 through the support channels. If you have questions or concerns about how xk999 handles your personal data, contact our data team at [email protected].

2. Personal Data We Collect

xk999 collects personal data through several channels — directly from you during registration and account use, automatically through platform interaction, and from third parties involved in payment processing and identity verification. The categories of data collected include:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification documents (CNIC, passport) collected during the account registration or Know Your Customer (KYC) verification process.
• Contact Data: Pakistani mobile number, email address (where provided), and correspondence address. Your registered mobile number is your primary account identifier at xk999 and is used for account recovery and OTP verification.
• Financial Data: Payment method details (JazzCash account number, Easypaisa wallet number, bank account details for HBL, UBL, Meezan Bank, or Bank Alfalah transfers), transaction records, deposit and withdrawal history, and wallet balances. xk999 does not store full card numbers for Visa/Mastercard transactions — these are handled directly by the card payment processor.
• Gaming Activity Data: Bet history, game session logs, sport and market selections, bonus utilisation, responsible gaming limit settings, and self-exclusion records.
• Technical Data: IP address, device type and operating system, browser type, referral source, session timestamps, and geolocation data (country/city level) derived from your IP address at the time of login.
• Communications Data: Records of all communications between you and xk999 support, including live chat transcripts, email correspondence, and support ticket content.

3. How xk999 Uses Your Personal Data

xk999 processes personal data only for lawful purposes. The primary purposes for which your data is processed are:

• Account Administration: Creating and maintaining your xk999 account, verifying your identity and age (minimum 18 years), and managing account settings and security.
• Payment Processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, USDT TRC20, and card payment processors. Financial data is shared with these payment partners only to the extent necessary to complete the transaction.
• Fraud Prevention and AML Compliance: Monitoring account activity to detect and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct. xk999 may share data with fraud prevention services where required.
• Platform Operation and Improvement: Analysing player behaviour and technical performance data to improve the xk999 platform, identify and resolve technical issues, and develop new features relevant to Pakistani players.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out of marketing communications. You may unsubscribe from xk999 marketing messages at any time through your account notification settings.
• Responsible Gaming: Using gaming activity and session data to identify indicators of problem gambling and, where appropriate, applying responsible gaming interventions in accordance with xk999 policy.
• Legal and Regulatory Obligations: Retaining records as required by applicable law, including anti-money laundering regulations, and responding to lawful requests from regulatory authorities.

4. Sharing Your Personal Data

xk999 does not sell, rent, or trade personal data to third parties for their independent marketing purposes. Your data is shared only in the following limited circumstances:

• Payment Service Providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and card processing partners receive only the minimum data required to execute your requested transaction.
• Game and Software Providers: Game studios (such as Evolution, PG Soft, and Pragmatic Play) may receive a pseudonymous player identifier and session data necessary to deliver gameplay. They do not receive your identity or financial details.
• Identity Verification Partners: Where KYC document verification is required, your identity documents may be submitted to a third-party verification service operating under strict data processing agreements with xk999.
• Fraud Prevention Services: Where account activity triggers fraud screening, relevant transactional and technical data may be shared with fraud detection partners to assess risk.
• Legal Authorities: xk999 will disclose personal data to law enforcement, regulatory bodies, or other governmental authorities where required by applicable law or a valid legal process, without prior notice to you where legally prohibited from providing such notice.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of xk999's business operations, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection standards.

All third parties with whom xk999 shares data are required to handle your personal information securely and in accordance with applicable data protection standards. xk999 does not authorise third parties to use your data for any purpose beyond the specific service they provide to xk999.

5. Cookies and Tracking Technologies

xk999 uses cookies and similar tracking technologies on the xk999 platform to ensure correct functionality, personalise your experience, and analyse aggregate usage patterns. The categories of cookies used are:

• Essential Cookies: Required for the xk999 platform to function correctly. These include session cookies that maintain your logged-in state, security tokens, and load balancing identifiers. These cannot be disabled without breaking core platform functions.
• Functional Cookies: Store your preferences such as language settings, game lobby view preferences, and notification settings between sessions.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players navigate the xk999 platform. This data is used solely to improve platform performance and user experience. xk999 does not use analytics data to build individual player profiles for external advertising purposes.

You may manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the xk999 platform. Disabling functional and analytics cookies will not prevent access to core platform features.

6. Data Retention

xk999 retains personal data for the period necessary to fulfil the purposes for which it was collected, or as required by applicable law. Standard retention periods applied by xk999 are:

• Active Account Data: Retained for the duration of your active xk999 account relationship plus a minimum of 5 (five) years following account closure, in accordance with standard financial record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction to satisfy anti-money laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for 3 years from the date of the communication unless a longer period is required due to an ongoing dispute or regulatory matter.
• Self-Exclusion Records: Retained for the full duration of the self-exclusion period plus 2 years following its expiry to prevent circumvention of the exclusion.

Upon expiry of the applicable retention period, xk999 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

7. Data Security

xk999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the xk999 platform.
• Encrypted storage of passwords and sensitive account credentials. xk999 employees cannot view your password in plain text.
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Regular security assessments and vulnerability testing of the xk999 platform infrastructure.
• Two-factor authentication available to all registered players as an additional account security layer.

Despite these measures, no online platform can guarantee absolute security against all possible threats. You play a role in protecting your own data by maintaining a strong, unique password for your xk999 account, not sharing your login credentials, and notifying xk999 support immediately at [email protected] if you suspect any unauthorised access to your account.

8. Your Data Rights

As a registered xk999 player, you have the following rights with respect to your personal data held by xk999:

• Right of Access: You may request a copy of the personal data xk999 holds about you. xk999 will respond to verified access requests within 30 days.
• Right of Rectification: If any personal data held by xk999 is inaccurate or incomplete, you have the right to request correction. You may update many account details directly through your xk999 account settings panel.
• Right of Erasure: You may request deletion of your personal data where xk999 has no lawful basis for continued processing. Note that erasure requests cannot be honoured where retention is required by law (e.g., AML record-keeping obligations) or where a balance remains in your account.
• Right to Restrict Processing: You may request that xk999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of data held or object to processing based on legitimate interests.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though xk999 may continue processing where it can demonstrate compelling legitimate grounds.
• Right to Data Portability: Where technically feasible, you may request your personal data in a structured, machine-readable format for transfer to another controller.

To exercise any of the above rights, contact xk999 at [email protected]. xk999 may require identity verification before processing certain requests to protect against unauthorised data access.

9. Minors and Child Data Protection

The xk999 platform is strictly intended for adults aged 18 (eighteen) and over. xk999 does not knowingly collect, store, or process personal data belonging to individuals under the age of 18. If xk999 determines — through age verification, KYC review, or any other means — that an account has been registered by or on behalf of a minor, the account will be immediately closed and all associated data will be deleted in accordance with applicable data protection standards.

Parents and guardians who believe a minor has registered an xk999 account using false information are encouraged to contact xk999 support immediately at [email protected] so that the matter can be investigated and resolved without delay.

10. Changes to This Privacy Policy

xk999 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform features. Material changes will be communicated to registered players via in-account notification or prominent notice on the xk999 platform prior to the effective date of the change.

Your continued use of the xk999 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. The effective date at the top of this page indicates when the current version came into force. If you do not agree with any revised Privacy Policy, you must cease using the xk999 platform and may request account closure through xk999 support.