Privacy Policy

xp768 ("we", "us", "our", "Platform") is committed to protecting the privacy and personal data of all individuals who access or use the xp768 website at https://xp768.cam ("Site") and the services offered through it ("Services"). This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure and protection of personal data.

This Policy applies to all users of the Site globally, including registered account holders, visitors who browse without registering, and individuals who communicate with us via support channels. It supplements and should be read in conjunction with our Terms & Conditions.

By accessing the Site, registering an account or otherwise engaging with our Services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein to the extent permitted by applicable law. If you do not agree with any aspect of this Policy, you should discontinue use of the Site immediately.

In this Policy, the following terms shall have the meanings set out below:

We collect Personal Data through various touchpoints across the xp768 platform. The categories of data we collect and the circumstances in which they arise are set out below.

3.1 Registration Data

When you create an Account, we collect your full legal name, date of birth, email address, telephone number, residential address, chosen username and encrypted password. This data is required to open and maintain your Account.

3.2 Identity Verification (KYC) Data

To satisfy our regulatory KYC and anti-money laundering ("AML") obligations, we collect copies of government-issued identification documents (such as a national identity card, passport, or driving licence), proof of residential address, and where applicable, source of funds documentation. KYC data is processed by both xp768 and our licensed third-party verification partners.

3.3 Financial Transaction Data

We record all deposit and withdrawal transactions, including amounts, timestamps, payment method identifiers and transaction reference numbers. Where payment is made via a payment provider — such as a digital wallet or bank transfer referencing familiar Pakistani options including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — we receive transaction confirmation data from the provider. We do not store full card numbers or banking credentials. These payment providers are referenced for context and do not endorse xp768.

3.4 Gaming Activity Data

We collect data on your gameplay sessions, including game titles accessed, bet amounts, outcomes, session duration and responsible gambling tool interactions. This data is used for account management, fraud detection and responsible gambling monitoring.

3.5 Technical and Device Data

We automatically collect IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, pages visited and session timestamps. This data is collected via server logs and cookies.

3.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content, timestamps and resolution notes. Communications in English and Urdu may be retained.

xp768 processes Personal Data on one or more of the following legal bases, as applicable to the specific processing activity and the laws of our licensing jurisdiction:

xp768 processes your Personal Data for the following purposes, each tied to a legal basis described in Section 4:

• Account creation and management: registering your account, authenticating logins, managing account settings and preferences.
• Transaction processing: facilitating deposits, withdrawals and refunds via available payment channels.
• Identity verification: conducting KYC checks to confirm identity, age eligibility (18+) and residential address.
• Fraud prevention and AML compliance: monitoring transaction patterns, identifying suspicious activity and reporting to regulatory bodies as required.
• Responsible gambling: monitoring gameplay indicators, applying requested limits, investigating potential problem gambling behaviour and administering self-exclusion.
• Customer support: responding to enquiries, resolving disputes and maintaining support records.
• Platform improvement: analysing usage patterns to improve navigation, game categorisation, mobile performance and content relevance.
• Marketing communications: where you have opted in, sending promotional emails and in-platform notifications about offers, bonuses and new features. You may withdraw consent at any time.
• Legal compliance: retaining records as required by applicable gaming, financial and privacy law.

xp768 does not sell, rent or trade your Personal Data to third parties for their own commercial purposes. We share Personal Data only in the circumstances described below:

6.1 Service Providers and Data Processors

We engage licensed third-party service providers to perform functions on our behalf, including identity verification providers, payment processing gateways, game platform operators, cloud hosting infrastructure providers, email delivery services and fraud detection platforms. Each such provider is bound by a written data processing agreement and may only use your data for the specific purpose for which they are engaged.

6.2 Regulatory and Law Enforcement Disclosure

We may disclose Personal Data to our licensing authority, financial intelligence units, law enforcement agencies or courts of competent jurisdiction where we are required to do so by law, court order or regulatory obligation. Such disclosures are made only to the extent strictly required and with appropriate confidentiality protections where legally permissible.

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of xp768's assets, your Personal Data may be transferred to the acquiring entity, subject to the same or equivalent data protection obligations as described in this Policy. You will be notified of any such transfer where required by applicable law.

xp768 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Site. The categories of cookies we use are as follows:

You may manage cookie preferences through your browser settings. Disabling optional cookies will not prevent you from using core platform features, though some personalisation functions may be limited.

xp768 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations.

• Account and KYC data: retained for a minimum of five (5) years from account closure, in accordance with AML regulatory requirements and gaming licence conditions.
• Transaction records: retained for a minimum of five (5) years from the date of each transaction.
• Support communications: retained for three (3) years from the date of the communication or the closure of the related dispute, whichever is later.
• Marketing consent data: retained until consent is withdrawn, plus one (1) year to maintain a record of the withdrawal.
• Analytics and session logs: typically retained in aggregated or anonymised form for up to twenty-four (24) months.

Upon expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

xp768 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers;
• Encryption at rest for sensitive data categories including KYC documents and financial records;
• Role-based access controls ensuring Personal Data is accessible only to authorised personnel with a defined need-to-know;
• Multi-factor authentication for internal system access;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Audit logging of access to Personal Data records;
• Staff training on data protection responsibilities and secure data handling practices.

As an international online gaming platform, xp768 may transfer Personal Data to service providers, KYC processors and infrastructure providers located in countries outside of Pakistan or the licensing jurisdiction. Such transfers occur when necessary to deliver our Services and are conducted under appropriate safeguards, which may include:

• Standard contractual clauses approved by a recognised data protection authority;
• Binding corporate rules, where the recipient is a member of the same corporate group;
• Transfers to countries recognised as providing an adequate level of data protection by a relevant authority.

xp768 does not represent that international data transfers involving Pakistan are subject to Pakistani regulatory oversight. Users in Pakistan acknowledge that their data may be processed in jurisdictions with different data protection standards to those applicable in Pakistan.

Depending on the applicable law in your jurisdiction and the laws of our licensing territory, you may hold one or more of the following rights in relation to the Personal Data we hold about you. To exercise any right, contact us at [email protected] with a clear description of your request and your registered account details.

xp768 will respond to rights requests within thirty (30) days of receipt of a valid, verified request. Requests that are manifestly unfounded, excessive or repetitive may be declined or subject to a reasonable fee in accordance with applicable law.

xp768 is strictly an adults-only platform. The Site and all associated Services are intended solely for individuals who are at least 18 years of age, or the higher minimum age required by the applicable jurisdiction or licensing territory.

We do not knowingly collect Personal Data from individuals under the applicable minimum age. If we discover that a minor has provided Personal Data to us, we will delete that data from our records immediately, suspend the associated Account and notify the relevant licensing authority where required.

If you believe a minor has registered an Account or submitted Personal Data to xp768, please contact us immediately at [email protected]. Being of legal age does not, of itself, make participation in online gambling lawful in all jurisdictions, including Pakistan.

xp768 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the Services we offer. Material changes will be communicated to registered users via email to the address on file and/or via a prominent notice on the Site, no fewer than seven (7) calendar days before the amended Policy takes effect, unless a shorter period is required by law.

The "Last Updated" date displayed at the top of this document indicates when the most recent revision was made. We recommend reviewing this page periodically. Your continued use of the Site following the effective date of any revised Policy constitutes your acceptance of those changes.

If you have any questions, concerns or requests relating to this Privacy Policy or the way in which xp768 handles your Personal Data, please contact us through the following channels. We do not accept legal notices or formal complaints via live chat — please use email for formal communications.