x999 Casino is committed to protecting the privacy and personal data of every player who registers or interacts with our platform. This Privacy Policy explains in clear terms what personal data x999 collects, the legal basis on which it is collected, how it is used and stored, with whom it may be shared, and the rights available to you as a data subject. Please read this document carefully before registering an x999 account.
Six core principles that define how x999 handles your data. The complete legal text follows in the policy below — this is an overview only.
All data transmitted to and from x999 is protected by 256-bit SSL encryption — the same standard used by international banking institutions. Stored data is held in encrypted databases with strict access controls and multi-layered firewall protection. x999 conducts regular security audits to identify and remediate vulnerabilities.
x999 players have the right to access, correct, restrict processing of, and request deletion of their personal data at any time, subject to legal and regulatory retention obligations. Data Subject Requests (DSRs) are handled by x999's dedicated privacy team and responded to within 30 calendar days of receipt.
x999 does not sell, rent, or trade your personal data to third-party commercial entities for marketing purposes. Your data is used solely for the operation of the x999 platform, regulatory compliance obligations, fraud prevention, and the improvement of x999 services. This is a firm and unconditional commitment.
x999 processes personal data only where a lawful basis exists — your contractual relationship with x999, compliance with legal obligations (AML/KYC), legitimate interests in operating a secure and fair gaming platform, or your explicit consent where consent is the appropriate basis. Processing without a lawful basis does not occur.
x999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account and transaction data is retained for a minimum of five years post-account closure for regulatory compliance. Marketing data is held only for the duration of your active opt-in consent.
When your data is transferred to third-party processors or to service providers outside your home jurisdiction, x999 ensures appropriate safeguards are in place — including data processing agreements, standard contractual clauses, and adequacy decisions where applicable. All transfers are documented and auditable.
This Privacy Policy ("Policy") is issued by x999 Casino ("x999", "we", "us", "our") and describes how x999 collects, uses, stores, shares, and protects the personal data of individuals who visit x999.blog, register an x999 account, use any x999 gaming services, access the x999 sportsbook, or otherwise interact with the x999 platform in any capacity.
This Policy applies to all personal data processed by x999 in connection with its online gaming platform, including data collected from Pakistani players who access x999 via desktop browser, mobile browser, or any dedicated x999 application. It forms a part of x999's broader Terms and Conditions, which you can review at x999.blog/terms-conditions.
By registering an x999 account or using x999 services, you confirm that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use x999's services.
x999 takes its data protection obligations seriously. We are aligned with internationally recognised data protection principles, including those enshrined in the General Data Protection Regulation (GDPR), and apply equivalent or higher standards of protection to all personal data regardless of the jurisdiction of the data subject.
For the purposes of data protection law, the Data Controller responsible for your personal data is x999 Casino, the international gaming operator of x999.blog. x999 determines the purposes and means by which your personal data is processed in connection with the x999 platform.
x999's Data Protection contact for all privacy-related enquiries, Data Subject Requests, and complaints is reachable via:
x999 collects the following categories of personal data from its players and platform users:
This data is collected during the registration and KYC verification process and is required to establish and maintain your x999 account, verify your identity, and fulfil regulatory obligations.
Financial data is collected to process deposits and withdrawals, fulfil anti-money laundering obligations, and maintain auditable transaction records as required by x999's international gaming licence.
Gaming data is used to operate the platform, detect problem gambling indicators, personalise the x999 experience, fulfil regulatory reporting requirements, and investigate disputes.
Technical data is collected automatically during each x999 session for security monitoring, fraud detection, recognised device management, and platform performance optimisation.
Records of your communications with x999 support — including live chat transcripts, email correspondence, and any formal complaints — are retained for quality assurance, training, dispute resolution, and regulatory compliance purposes.
x999 collects personal data through the following means:
x999 processes your personal data under the following lawful bases:
x999 uses personal data collected from Pakistani players and all other users for the following purposes:
x999 does not sell, rent, or trade personal data to third-party commercial entities. Data is shared only with the following categories of recipients, strictly for the purposes described:
All third-party data processors engaged by x999 are bound by written Data Processing Agreements that require them to process personal data only for the specified purpose, apply appropriate security measures, and delete data upon contract termination. x999 remains the Data Controller and bears responsibility for how data is handled by its processors.
As an internationally licensed gaming operator, x999 may transfer personal data to recipients located outside Pakistan — including to countries within the European Economic Area, and to third countries where x999's technology service providers and game content partners are based.
When personal data is transferred internationally, x999 ensures that appropriate safeguards are in place, which may include:
x999 maintains a record of all international data transfers and the safeguards applied to each. You may request information about specific transfer mechanisms by contacting x999's data protection contact at [email protected].
x999 retains personal data in accordance with the following retention schedule:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | 5 years post-account closure minimum | Gaming licence regulatory obligation; AML law |
| Financial & Transaction Data | 7 years post-transaction | AML legislation; tax reporting obligations |
| Gaming & Betting History | 5 years post-account closure | Regulatory licence obligation; dispute resolution |
| KYC Documents (CNIC, selfie) | 5 years post-account closure | KYC/AML regulatory obligation |
| Support Communications | 3 years post-closure | Legitimate interest (dispute resolution) |
| Marketing Preferences & Opt-ins | Duration of active consent; deleted on withdrawal | Consent |
| Technical & Device Logs | 12 months rolling | Legitimate interest (security, fraud prevention) |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. x999 does not retain data beyond what is necessary for the purposes described in this Policy.
x999 uses the following categories of cookies and similar tracking technologies on its platform:
You can manage your cookie preferences at any time via the Cookie Preferences panel accessible from the footer of every x999 page. You may also manage cookies through your browser's privacy settings. Disabling non-essential cookies will not prevent you from using core x999 platform features but may affect the personalisation and performance of certain non-essential features.
As a data subject, you have the following rights in relation to your personal data held by x999. These rights may be exercised by contacting x999's data protection contact at [email protected] with the subject line "PRIVACY — DATA SUBJECT REQUEST":
| Right | Description | Response Time |
|---|---|---|
| Right of Access | Obtain a copy of all personal data x999 holds about you, the purposes of processing, and the categories of recipients with whom it is shared. | 30 calendar days |
| Right to Rectification | Request correction of inaccurate or incomplete personal data held in your x999 account. Corrections requiring identity document updates may require fresh KYC documentation. | 14 calendar days |
| Right to Erasure | Request deletion of your personal data where it is no longer necessary for the purpose collected, or where you withdraw consent. Note: regulatory retention obligations may prevent full immediate erasure. | 30 calendar days |
| Right to Restriction | Request that x999 suspends processing of your data in certain circumstances — for example, while a data accuracy dispute is being investigated. | 30 calendar days |
| Right to Portability | Request a machine-readable copy of personal data you have provided to x999 where processing is based on consent or contract, for transfer to another service provider. | 30 calendar days |
| Right to Object | Object to processing based on legitimate interests, including direct marketing communications. Objection to marketing will be honoured immediately and unconditionally. | Immediately (marketing) |
| Right to Withdraw Consent | Withdraw any consent you have previously given for consent-based processing, at any time, without affecting the lawfulness of processing that occurred before withdrawal. | Immediately |
x999 will verify your identity before processing any Data Subject Request to protect against unauthorised access to personal data. Requests are processed free of charge. For manifestly unfounded or excessive requests, x999 reserves the right to charge a reasonable fee or decline, with written explanation provided.
x999 does not knowingly collect personal data from individuals under the age of 21. x999's services are strictly restricted to adults who are 21 years of age or older. Comprehensive CNIC-based identity and age verification is applied to every account registration to enforce this requirement.
If x999 discovers that personal data has been collected from a person under 21, the following immediate actions will be taken without delay:
If you believe a minor has registered or accessed an x999 account, please contact [email protected] immediately. x999 will investigate and act without delay. This is treated as an urgent matter at all times.
x999 implements a comprehensive, multi-layered security programme to protect personal data against unauthorised access, disclosure, alteration, or destruction. Technical and organisational security measures include:
While x999 takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security against all threats. You also play a role in securing your data — by maintaining a strong password, enabling 2FA, and logging out of x999 on shared devices. In the event you suspect your account has been compromised, contact x999 support immediately.
The x999 platform may contain references or links to third-party content providers — such as game studios whose titles are available in the x999 game library — that have their own independent privacy policies. x999 does not control and is not responsible for the privacy practices or content of third-party services.
This Privacy Policy applies solely to data collected by x999 in connection with the operation of x999.blog and its associated services. x999 encourages you to review the privacy policies of any third-party services you may access through interactions with x999 platform content.
x999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform operations. All revisions will be published on this page with an updated effective date.
Where changes are material — meaning they significantly affect your rights or how we use your personal data — x999 will notify registered players via email or a prominent notice within the x999 platform dashboard, with a minimum of seven (7) days' advance notice before the updated Policy takes effect.
Your continued use of x999 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. The most current version of this Policy is always available at x999.blog/privacy-policy. If you do not accept a revised Policy, you must cease using x999 and may close your account in accordance with the Terms & Conditions.
This Privacy Policy was last updated on 1 January 2026 (Version 3.0) and supersedes all previous versions. By continuing to use x999 Casino after this date, you confirm acceptance of this Policy in full.
For any questions, concerns, or formal requests relating to this Privacy Policy or x999's data protection practices, please contact x999's data protection team through the following channels:
If you are not satisfied with x999's response to a privacy concern or Data Subject Request, you have the right to lodge a formal complaint with the data protection supervisory authority in x999's licensing jurisdiction, or with a supervisory authority in your country of residence where applicable law permits. x999 will always provide information on the appropriate supervisory authority upon request.
x999 strongly encourages players to contact us directly in the first instance — the vast majority of privacy concerns are resolved quickly and informally through our dedicated support team without the need for regulatory escalation.
Data Subject Requests submitted to [email protected] are acknowledged within 48 hours and resolved within 30 calendar days. For urgent matters — such as suspected unauthorised account access — please use the x999 live chat for immediate assistance at any hour.
x999 Casino combines world-class data protection with Pakistan's best online gaming experience. 256-bit encryption, no data sales, full player rights — plus live baccarat, PSL cricket betting, and instant JazzCash withdrawals. Must be 21 or older. Please gamble responsibly.