Privacy Policy — 000xxx Online Gaming Platform

This Privacy Policy explains how 000xxx ("we", "us", "the Platform") collects, uses, stores, and protects personal information about players who register and use our online gaming services at 000xxx. It also explains the choices you have about how your information is used and the rights you hold as a player.

000xxx is operated for players primarily based in Pakistan. Our platform offers sports betting, live casino games, Andar Bahar, Ludo Games, Fishing Games, and associated features. Throughout all of these services, handling your personal data responsibly is a core operational principle — not an afterthought.

By registering an account on 000xxx, you confirm that you have read and understood this Privacy Policy. If at any point you disagree with how we handle your data, you should contact our support team to discuss the options available to you, including account closure and data deletion.

The personal data 000xxx collects falls into four main categories. The table below shows what we collect, why, and the legal basis under which we process it:

000xxx does not collect sensitive data categories such as health information, religious beliefs, or political opinions. The only category that might be considered sensitive is biometric data — specifically the selfie required alongside your CNIC for identity verification. This is processed solely for identity verification purposes and deleted from active systems once verification is complete.

000xxx collects personal data through the following channels:

• Direct from you at registration: When you create your 000xxx account, you provide your name, mobile number, date of birth, and contact details. This is the primary source of your identity data.
• During KYC verification: You submit identity documents (CNIC, selfie, address proof) directly through the platform's verification interface. These are uploaded to our secure KYC processing system.
• Through your activity on the platform: As you use 000xxx — placing bets, playing casino games, making deposits and withdrawals — the platform records your transactional and usage data automatically as part of normal operations.
• Automatically from your device: When you access 000xxx, standard technical data is collected automatically — IP address, browser type, device model, and session information. This happens with any website you visit and is necessary for basic security and functionality.
• From payment providers: When you make a deposit via Easypaisa or JazzCash, these providers confirm transaction status to 000xxx. We receive only the confirmation data necessary to credit your account — not your full mobile wallet profile.
• From support interactions: If you contact 000xxx's support team via live chat, email, or WhatsApp, records of those communications are stored for service quality and dispute resolution purposes.

Every use of your personal data at 000xxx has a specific, documented purpose. Here are the main ways we use the data we collect:

Operating your account and delivering services: This is the core purpose — without your basic identity and contact data, we cannot run your account, process bets, or handle deposits and withdrawals. This processing is necessary to fulfil our contract with you as a player.

Identity verification and age confirmation: Pakistan's regulatory environment, and our own commitment to responsible gaming, requires us to verify that every player is who they claim to be and is genuinely 18 or older. Your CNIC and verification selfie are used exclusively for this purpose.

Anti-money laundering (AML) and fraud prevention: Financial platforms handling PKR deposits and withdrawals have legal obligations to monitor for suspicious activity. Your transaction history, device data, and IP information are analysed for patterns consistent with fraud or money laundering. This is a legal obligation, not a choice.

Customer support: When you contact 000xxx's support team, we use your account data to verify your identity and provide accurate help. Support interaction records are retained to maintain a coherent service history and resolve any future disputes.

Responsible gaming monitoring: 000xxx monitors player activity for signs of problem gambling behaviour — rapid or repeated large losses, attempts to circumvent self-exclusion, unusual session patterns. This monitoring exists to protect players and is conducted based on our legitimate interest in player welfare.

Platform improvement: Aggregated, anonymised usage data helps 000xxx understand how players use different sections of the platform — which games are played most, where players encounter friction, what features are most valued. This data never identifies individual players and is used purely to make 000xxx better.

Promotional communications (opt-in only): If you have opted into marketing communications, your contact details are used to send you updates about bonuses, tournaments, and new features on 000xxx. You can withdraw this consent at any time.

000xxx shares personal data with third parties only in specific, limited circumstances. The categories of third parties who may receive some of your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the minimum transactional data required to process your deposits and withdrawals. These are formal data processing relationships governed by their own privacy obligations.
• Game providers: Third-party game developers whose titles appear on 000xxx may receive a session token and your account identifier to initialise game sessions. They do not receive your name, CNIC, or contact details unless you are playing on a game that operates its own separate account system (in which case this is clearly disclosed before you play).
• KYC verification services: 000xxx uses accredited third-party KYC processors to verify identity documents. These processors handle your CNIC and verification selfie under strict data processing agreements and are not permitted to use this data for any purpose other than verification.
• Law enforcement and regulatory bodies: If 000xxx receives a valid legal request from a Pakistani authority — court order, NADRA inquiry, FIA investigation — we are obligated to comply. We cannot notify players when data has been disclosed in this way if the legal request prohibits notification.
• Business successors: In the event that 000xxx undergoes a merger, acquisition, or sale of assets, player data may be transferred to the successor entity. Players will be notified of any such change and given the opportunity to close their accounts if they do not consent.

000xxx takes data security seriously and maintains a layered security architecture to protect player information. The specific measures in place include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and 000xxx is encrypted in transit using the current industry standard TLS protocol. The padlock you see in your browser address bar confirms this is active.
• At-rest encryption: Personal data stored in 000xxx's databases is encrypted using AES-256, with encryption keys managed in a separate, access-controlled key management system.
• Access controls: Internal access to player data within 000xxx is restricted on a need-to-know basis. Customer support agents see only the account data necessary to assist with your query. Financial data is accessible only to the relevant compliance and payments teams.
• Two-factor authentication: 000xxx offers 2FA for player accounts and mandates it for all internal staff accounts that have access to player data.
• Regular security audits: 000xxx's infrastructure undergoes regular penetration testing and security reviews conducted by independent security specialists.
• Incident response: A documented incident response plan is maintained and tested. In the event of a confirmed data breach affecting player data, affected players will be notified within 72 hours.

No security system is completely impenetrable. While 000xxx takes every reasonable precaution, we cannot guarantee absolute security against all possible threats. Maintaining strong passwords on your own account and enabling 2FA remain important steps that players can take on their side.

000xxx does not hold your data indefinitely. The retention periods below reflect the balance between operational needs, legal obligations, and respecting your data rights:

• Active account data: Retained for the lifetime of your account and for up to 90 days following voluntary account closure, after which personal data is deleted from active systems.
• KYC documents: Retained for the duration of the account and for 5 years following account closure, as required by financial regulation anti-money laundering obligations.
• Transaction records: Deposit, withdrawal, and betting history is retained for 7 years following the transaction date, in line with financial record-keeping requirements applicable to payment platforms.
• Support communications: Chat transcripts, emails, and complaint records are retained for 3 years from the date of the last communication in a case, then deleted.
• Technical logs: Server logs, IP data, and device session records are retained for a maximum of 12 months, then purged on a rolling basis.
• Marketing consent records: Records of when you opted in and out of marketing are retained for the lifetime of your account plus 3 years, as evidence of your consent status.

000xxx uses cookies — small text files stored on your device — to make the platform function correctly, remember your preferences, and measure how the platform is used. Here is exactly what we use:

000xxx does not use third-party advertising cookies. You will not find Facebook Pixel, Google Ads cookies, or other ad-network trackers running on 000xxx. Analytics cookies are configured in anonymised mode — they measure aggregate behaviour, not individual players.

You can control cookie behaviour through your browser settings. Blocking essential cookies will prevent the platform from functioning correctly — you will not be able to stay logged in. Blocking analytics cookies has no effect on your ability to use 000xxx.

As a player on 000xxx, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@000xxx.bet with the subject line "Data Rights Request" — we will respond within 30 days.

000xxx is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step during KYC — any account that cannot verify an age of 18 or above is immediately closed.

If 000xxx discovers that a player account was created by a minor, the account will be closed immediately, all pending transactions reversed, and any data collected will be deleted as soon as legally permissible. Any winnings associated with an account held by a minor will be forfeited.

If you are a parent or guardian and believe your child has registered on 000xxx, please contact support@000xxx.bet immediately. We will act on any such report within 24 hours.

000xxx's primary infrastructure is designed to serve the Pakistani market. Some of the third-party technology providers we use — game development studios, analytics platforms, KYC verification services — may process data on servers located outside Pakistan.

Where such transfers occur, 000xxx takes steps to ensure that the recipient organisation provides an adequate level of data protection through contractual obligations equivalent to the protections described in this Privacy Policy. We do not transfer personal data to jurisdictions that do not provide equivalent protections without putting appropriate safeguards in place.

The primary categories of data potentially subject to international transfer are anonymised analytics data and game session tokens. No sensitive personal data — CNIC copies, financial data, or full identity profiles — leaves Pakistan's jurisdiction under normal operations.

000xxx may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable regulations, or to clarify existing practices. When we make material changes, we will notify registered players via email and with a prominent notice on the platform at your next login.

The "Last Updated" date at the top of this page always reflects when the most recent revision was made. Continued use of 000xxx following notification of a Privacy Policy update constitutes acceptance of the revised terms. If you disagree with changes to how your data is handled, you can exercise your right to erasure and close your account.

Minor corrections (grammar, formatting, broken links) may be made without notification, but will always be reflected in the Last Updated date.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how 000xxx is handling your personal information, please contact us: