This Privacy Policy explains how xp789 collects, uses, stores, shares, and protects the personal data of every Member who registers or interacts with the xp789 Platform. xp789 is committed to handling your data responsibly, transparently, and in compliance with the data protection obligations imposed by its international gaming licence. Please read this document carefully.
Six core privacy principles that govern how xp789 handles every piece of Member information
xp789 collects only the personal data necessary for account registration, KYC verification, payment processing, and regulatory compliance. We do not collect data that serves no legitimate purpose in delivering the xp789 service to verified 21+ members.
All data transmitted between your device and xp789 is protected by 256-bit SSL/TLS encryption. Member account data at rest is stored in access-controlled, encrypted databases subject to strict internal security protocols and periodic third-party audits.
xp789 does not sell, rent, or trade your personal data to third-party marketers. Your information — including your CNIC details, mobile number, transaction history, and betting activity — is never monetised through external data brokers or advertising networks.
This Privacy Policy discloses every category of data xp789 collects, every purpose for which it is processed, and every category of third party with whom it may be shared. xp789 does not engage in undisclosed data processing activities.
Verified xp789 Members have the right to access, correct, and — in applicable circumstances — request deletion of their personal data. Data subject requests can be submitted via live chat or the xp789 support email and will be handled within applicable regulatory timeframes.
xp789 retains Member personal data only for as long as required to fulfil the purposes set out in this Policy or to comply with legal and regulatory obligations — including the data retention requirements imposed by xp789's international gaming licence.
Your Privacy Matters: xp789 takes its data protection obligations seriously. This Privacy Policy is written in plain, accessible English so that every Member — whether based in Karachi, Lahore, Islamabad, Faisalabad, or elsewhere — can understand exactly how their personal data is handled. If you have any questions not answered here, contact xp789 support via live chat at any time.
In this Privacy Policy, the following terms carry the meanings set out below:
xp789 is the Data Controller in respect of all Personal Data collected and processed through the xp789 Platform. As Data Controller, xp789 determines the purposes and means of processing Member Personal Data and is responsible for ensuring that such processing complies with applicable data protection law and with the data protection obligations imposed by xp789's international gaming licence.
If you wish to exercise any of the data subject rights described in Section 11 of this Policy, or if you have any question or concern regarding the processing of your Personal Data by xp789, you may contact xp789's data protection point of contact via live chat at xp789.app or by email at the xp789 support address. xp789 will respond to data-related enquiries within the timeframes prescribed by the applicable regulatory framework.
xp789 collects the following categories of Personal Data about Members and Platform visitors:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC / passport number, gender | Registration & KYC |
| Contact Data | Pakistani mobile number, email address, residential address | Registration & KYC |
| Financial Data | JazzCash / EasyPaisa account reference, HBL / UBL / Meezan Bank details, deposit and withdrawal history in PKR | Payment processing |
| Betting & Gaming Data | Bet history, game session records, virtual sports activity, casino game logs | Platform use |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Automatic collection |
| Usage Data | Pages visited, features used, referral source, click patterns | Automatic collection |
| Communications Data | Live chat transcripts, support email records, SMS OTP logs | Customer support interactions |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, cooling-off records | Responsible gaming tool use |
xp789 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health records, or biometric data, other than where such data appears incidentally in identity documents submitted for KYC purposes. Where such data is collected incidentally, it is not used for any purpose beyond identity verification and is subject to enhanced security controls.
xp789 collects Personal Data through the following channels:
xp789 processes Member Personal Data for the following purposes, each supported by a lawful basis:
Marketing Opt-Out: If you no longer wish to receive promotional communications from xp789 — including bonus offers, platform updates, and PSL-related betting promotions — you may withdraw your consent at any time by contacting xp789 support via live chat. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
The xp789 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by the Platform when you visit. xp789 uses the following categories of cookies:
Most web browsers allow you to control cookies through browser settings. Disabling cookies other than strictly necessary ones may affect your experience on the xp789 Platform but will not prevent you from accessing core features. xp789 does not use third-party advertising or behavioural profiling cookies.
xp789 does not sell or rent Member Personal Data. xp789 may share Personal Data with the following categories of third parties, strictly as necessary for the purposes described in Section 5:
All third parties with whom xp789 shares Personal Data are required by contract to process that data only for the purposes authorised by xp789 and to implement appropriate technical and organisational security measures. xp789 remains responsible for ensuring that third-party processors handle Member data in accordance with this Privacy Policy.
xp789 operates under an international gaming licence, and some of the third-party service providers engaged by xp789 — including technology platform providers and KYC verification services — are located outside Pakistan. Where Personal Data is transferred to a recipient in a country that does not provide an equivalent level of data protection, xp789 implements appropriate safeguards to ensure that the transfer is lawful and that your data remains protected, including through the use of contractual data protection clauses with the receiving entity.
xp789 does not transfer Member financial data — including JazzCash, EasyPaisa, or bank account reference details — to any entity outside the scope of payment processing necessary to complete the relevant transaction. All PKR transaction processing is conducted through Pakistani-regulated payment channels where technically possible.
xp789 retains Member Personal Data for the following periods, measured from the date of account closure or the last relevant transaction, whichever is later:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with xp789's internal data disposal procedures. Anonymised data that can no longer identify any individual may be retained indefinitely for statistical and platform improvement purposes.
xp789 implements a range of technical and organisational security measures designed to protect Member Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:
Where a personal data breach occurs that is likely to result in a risk to Member rights and freedoms, xp789 will notify the relevant regulatory authority within the timeframe required by applicable law and will notify affected Members without undue delay where the breach is likely to result in a high risk to their personal interests.
Your Role in Security: The security of your xp789 account also depends on the strength of your password and your own security practices. xp789 strongly recommends enabling 2FA, using a unique password for your xp789 account, and never sharing your login credentials with any third party. xp789 will never ask for your full password or OTP via any communication channel.
Subject to the conditions and limitations imposed by applicable data protection law and xp789's regulatory obligations, verified xp789 Members have the following rights in respect of their Personal Data:
To exercise any of the above rights, contact xp789 support via live chat at xp789.app. xp789 will acknowledge your request within 72 hours and respond substantively within thirty (30) days, extendable by a further sixty (60) days for complex requests. xp789 will not charge a fee for data subject requests unless they are manifestly unfounded or excessive.
The xp789 Platform is strictly intended for adults aged 21 years and above. xp789 does not knowingly collect Personal Data from individuals under the age of 21. Registration on the xp789 Platform requires confirmation of age during the registration process, and all accounts are subject to KYC age verification before withdrawals are processed.
If xp789 becomes aware that Personal Data has been collected from an individual under the age of 21 without verifiable parental consent, xp789 will take immediate steps to delete that data and close the associated account. If you believe that a minor may have registered on the xp789 Platform, please notify xp789 support immediately via live chat.
xp789 supports parental control tools and filtering software that can be used to restrict access to gambling platforms. For further information on preventing underage access to gambling, please see xp789's Responsible Gaming page.
The xp789 Platform may contain references to or links from third-party services, including affiliate partners, payment method providers, and game suppliers. This Privacy Policy applies only to data collected and processed by xp789. xp789 has no control over the privacy practices of third-party websites or services and accepts no responsibility for their data handling. Members who access third-party platforms from xp789 should review the applicable privacy policies of those platforms independently.
xp789 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or Platform features. Where changes are material — meaning they meaningfully affect how xp789 processes Member Personal Data or alter Member rights — xp789 will notify registered Members via the contact details on record at least fourteen (14) days before the amended Policy takes effect.
The most current version of this Privacy Policy will always be accessible at xp789.app/privacy-policy. The version in effect at the time any data processing takes place shall govern that processing. Continued use of the xp789 Platform following notification of an amendment constitutes acceptance of the revised Privacy Policy.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about how xp789 handles your Personal Data, please contact xp789 in the first instance via:
xp789 is committed to resolving privacy-related concerns promptly and transparently. If you are not satisfied with xp789's response to a privacy complaint, you have the right to refer the matter to the data protection supervisory authority under the jurisdiction of xp789's international gaming licence, or to seek other remedies available under applicable law.
xp789's internal complaints procedure for privacy matters follows the same process as the general complaints procedure set out in the xp789 Terms & Conditions. All privacy complaints are logged, tracked, and subject to a formal resolution timeline.
All verified 21+ xp789 Members hold the following data rights — contact support to exercise them
Request a full copy of the Personal Data xp789 holds about your account and how it is being used.
Ask xp789 to fix any inaccurate or incomplete information on your account record.
In certain circumstances, ask for your Personal Data to be deleted — subject to legal retention requirements.
Ask xp789 to pause certain processing activities while a dispute or accuracy concern is being resolved.
Receive a copy of your data in a structured, machine-readable format where processing is based on consent or contract.
Opt out of marketing communications or other consent-based processing at any time without penalty.
xp789 is built on transparency — in its odds, in its bonus terms, and in how it handles Member data. If you are a verified 21+ player across Karachi, Lahore, Islamabad, Faisalabad, or anywhere in Pakistan, your xp789 account is protected by 256-bit SSL encryption, rigorous KYC processes, and a Privacy Policy that gives you real, exercisable rights over your data.