x789 Casino – Privacy Policy

Data Controller

x789 ("x789", "we", "us", "our") operates the online casino and sports betting platform accessible at x789.app and any associated subdomains (collectively, "the Platform"). For the purposes of this Privacy Policy, x789 acts as the data controller in respect of all personal data collected from users ("you", "your", "the User") of the Platform.

This Privacy Policy applies to all personal data collected through the Platform, including data provided during registration, identity verification, deposits, gameplay, withdrawals, and any communications with x789 support. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

Data We Collect

x789 collects personal data in the following categories:

x789 does not collect special category data (such as health data, religious beliefs, or political opinions) except where voluntary disclosure occurs in the context of a responsible gaming request, in which case such data is processed solely to provide the requested support service.

How We Use Your Data

x789 uses collected personal data for the following purposes:

• Account Administration – to create, verify, maintain, and close your x789 account;
• Identity Verification (KYC) – to confirm your identity and age in compliance with anti-fraud and AML obligations;
• Payment Processing – to process deposits and withdrawals via your linked payment methods;
• Platform Delivery – to operate, maintain, and improve the Platform, including delivering games, betting markets, and personalised features;
• Responsible Gaming – to monitor account activity for signs of problem gambling and to administer deposit limits, session limits, cooling-off periods, and self-exclusion requests;
• Fraud Prevention & Security – to detect and prevent unauthorised account access, duplicate accounts, money laundering, and other fraudulent or abusive behaviour;
• Legal Compliance – to meet applicable legal and regulatory obligations, including data retention requirements;
• Customer Support – to respond to queries, complaints, and account issues;
• Communications – to send you transactional notifications, security alerts, and – where you have opted in – promotional messages about x789 offers.

Legal Basis for Processing

x789 processes your personal data on the following legal bases:

• Contractual Necessity – processing required to register your account, verify your identity, and provide the services you have requested;
• Legal Obligation – processing required to comply with AML, KYC, and other applicable legal and regulatory requirements;
• Legitimate Interests – processing for fraud prevention, platform security, and internal analytics, where those interests are not overridden by your data protection rights;
• Consent – processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time by contacting x789 support or using the unsubscribe option in any marketing email.

Data Sharing

x789 does not sell, rent, or trade your personal data to third parties. x789 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors – JazzCash, Easypaisa, and connected banking partners, to facilitate deposits and withdrawals;
• KYC Verification Providers – third-party identity verification services used to validate CNIC documents and conduct AML screening;
• Game Providers – licensed game studios whose titles are featured in the x789 lobby, to the extent necessary to deliver gameplay;
• Technology Infrastructure Providers – hosting, cloud storage, and cybersecurity providers who support platform operations under contractual data protection obligations;
• Law Enforcement & Regulatory Authorities – where x789 is legally required or compelled to disclose data by a court order, regulatory authority, or applicable law.

All third-party service providers engaged by x789 are bound by contractual data processing agreements that require them to handle your data only for the specified purpose and in accordance with applicable data protection standards.

Data Retention

x789 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal or regulatory obligations. As a general guide:

• Account data and KYC records are retained for a minimum of five years following account closure, in compliance with standard AML retention requirements;
• Transaction records are retained for a minimum of five years for financial audit purposes;
• Support communications are retained for three years unless required longer for ongoing dispute resolution;
• Technical logs (IP addresses, session data) are retained for up to twelve months and then anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Security Measures

x789 implements a layered security framework to protect your personal data, including:

• SSL/TLS encryption for all data transmitted between your device and x789 servers;
• Encryption at rest for sensitive data including KYC documents and financial records;
• Role-based access controls limiting data access to authorised personnel with a demonstrated need;
• Regular security audits and vulnerability assessments of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to production systems.

While x789 takes all reasonable precautions, no internet transmission or electronic storage method is completely secure. x789 cannot guarantee absolute security and encourages Users to maintain strong, unique x789 login credentials and to report any suspected unauthorised account access immediately.

Cookies & Tracking Technologies

x789 uses cookies and similar technologies (including local storage and session tokens) on the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies – required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Performance Cookies – used to collect anonymised analytics data on how Users interact with the Platform, to help x789 improve performance and usability.
• Functional Cookies – used to remember your preferences, such as language settings and responsible gaming limit configurations.

x789 does not use advertising cookies, retargeting cookies, or third-party social media tracking pixels. You may configure your browser to refuse cookies; however, disabling strictly necessary cookies will impair Platform functionality, including your ability to log in to your x789 account.

Your Data Rights

Subject to applicable law and x789's legal retention obligations, you have the right to:

• Access – request a copy of the personal data x789 holds about you;
• Rectification – request correction of inaccurate or incomplete personal data;
• Erasure – request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies;
• Restriction – request that x789 restrict the processing of your personal data in certain circumstances;
• Objection – object to processing based on legitimate interests;
• Portability – receive your personal data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact x789 support using the email address listed on the Platform (displayed as plain text in the footer below). x789 will respond to verified requests within a reasonable timeframe and will not charge a fee for routine requests.

Minors

x789 is strictly for adults aged 18 and above. x789 does not knowingly collect personal data from individuals under the age of 18. If x789 determines that a registered account belongs to a person under 18, the account will be immediately closed, any balance will be forfeited, and all associated personal data will be deleted except where retention is required by law. If you believe a minor has provided personal data to x789, please notify support immediately.

International Data Transfers

x789 operates globally distributed infrastructure. Personal data collected from Pakistani players may be processed on servers located outside Pakistan. Where such transfers occur, x789 ensures that appropriate safeguards are in place – including standard contractual clauses or equivalent data transfer mechanisms – to provide a level of protection broadly comparable to the standards applied within Pakistan. By using the Platform, you consent to this transfer on the basis that x789 applies the protections described in this Policy regardless of where data is processed.

Changes to This Privacy Policy

x789 reserves the right to update this Privacy Policy at any time. Where material changes are made, registered Users will be notified via email or an in-platform notification. The revised Policy will take effect from the date specified in the notification. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Contact & Data Queries

For any questions, requests, or complaints relating to this Privacy Policy or x789's handling of your personal data, please contact the x789 support team. Contact details are available as plain text in the footer of every page on x789.app. x789 will acknowledge data-related requests promptly and aim to resolve them within a reasonable timeframe.