x888 Privacy Policy – How We Handle Your Personal Data

This Privacy Policy explains how x888 — operating the online gaming platform at x888-jit.com — collects, uses, stores, protects and shares the personal data of its users ("you," "your," "Player"). It applies to every interaction you have with x888: when you browse the website, register an account, make a deposit, place a bet, contact support or exercise any right over your data.

x888 takes its data protection responsibilities seriously. We understand that players in Pakistan need to feel confident that the information they share with us is handled responsibly, stored securely and used only for purposes they would reasonably expect. This policy is written to make that as clear as possible — without unnecessary legal language that obscures rather than informs.

By registering and using an x888 account, you confirm that you have read and understood this Privacy Policy and that you agree to the processing of your personal data as described here. If you are not comfortable with any part of this policy, please contact us before registering — our support team can answer any questions you have.

This policy must be read alongside the x888 Terms and Conditions and Responsible Gaming Policy. Where those documents are relevant to how your data is processed, this policy cross-references them. The x888-jit.com website and all associated apps and services are subject to this policy in full.

x888 collects the following categories of personal data. We only request information that is necessary for the stated purpose — we don't ask for data we don't need.

x888 does not collect sensitive personal data — such as medical information, ethnicity, religious beliefs or political opinions — unless a player voluntarily shares such information in a support interaction. Even then, that information is used only to handle the specific interaction and is not added to the player's general profile.

x888 collects your personal data through the following means:

• Direct submission: When you fill in the registration form, complete KYC verification, submit a deposit or withdrawal request, or contact support, you provide data directly to x888.
• Automated collection: As you use the x888 platform, our systems automatically log technical and usage data — including your IP address, the device and browser you're using, which pages you visit and how long you spend on each. This happens on every visit, whether or not you're logged in.
• Cookies and similar technologies: x888 uses cookies to maintain your session, remember your preferences, prevent fraud and understand how the platform is used. The full cookies section (Section 9) explains this in detail.
• Payment processors: When you deposit or withdraw, x888 receives confirmation data from your payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or Visa/Mastercard). x888 receives what's needed to process and record the transaction — not your full payment credentials.
• Identity verification services: During KYC checks, x888 may use third-party verification services to confirm the authenticity of identity documents. These services return a verification result to x888 — they do not retain your documents on x888's behalf.
• Fraud detection systems: Automated systems monitor platform activity for unusual patterns. The data these systems process is the same account, technical and usage data already described above — there is no separate covert data collection.

x888 uses the personal data it collects for the following specific purposes. We process data only where we have a clear and legitimate reason to do so.

• Account creation and management: To register you as a player, maintain your account, process logins and manage your account settings.
• Identity and age verification (KYC): To confirm that you are who you say you are, that you are over 18 years of age and that you are not subject to any regulatory restriction that would prevent you from using x888.
• Processing transactions: To receive your deposits, process your withdrawals and maintain an accurate record of your financial activity with x888 in PKR.
• Delivering and improving the platform: To provide the games, betting markets and other services you use, and to improve them based on how players actually engage with the platform.
• Customer support: To respond to your queries, investigate complaints and resolve disputes. Support interactions are logged so we can follow up effectively if a matter requires multiple contacts.
• Fraud prevention and security: To detect and prevent unauthorised access, bonus abuse, money laundering, underage gambling and other harmful or prohibited activities. This includes automated monitoring and, where relevant, manual review.
• Responsible gaming: To identify players who may be showing signs of problem gambling and to implement any self-exclusion or limit settings the player has applied to their account.
• Legal and regulatory compliance: To comply with applicable anti-money-laundering (AML) regulations, data retention requirements and any other legal obligations to which x888 is subject.
• Marketing communications: To send you promotional emails and messages about x888 offers, new games and relevant updates — but only if you have opted in to receive marketing from us. You can opt out at any time.

x888 processes your personal data under the following legal bases, depending on the type of data and the purpose of processing:

• Contract performance: Processing your identity, contact, financial and account data is necessary to perform the contract between you and x888 — i.e., to provide the gaming services you've registered for.
• Legal obligation: Identity verification, AML screening, transaction records and certain data retention requirements are legally mandated. x888 processes this data because it is required to by law — not as a matter of choice.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring and internal analytics are carried out on the basis of x888's legitimate interest in operating a safe, compliant and efficient platform. These activities benefit players as well as the business.
• Consent: Marketing communications are only sent to players who have affirmatively opted in. You can withdraw consent for marketing at any time by unsubscribing from the relevant communication channel or by contacting support.

x888 does not sell your personal data. We share it only with third parties who need it to help us deliver our services, or where we are legally required to do so. All third-party data processors who handle your data on x888's behalf are contractually bound to process it only for the purposes x888 specifies and to maintain appropriate security standards.

The following categories of third party may receive your data:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank networks and card processors receive the data needed to process your deposits and withdrawals. They do not receive your full gaming activity.
• Identity verification providers: Third-party KYC services receive identity document data to perform verification. They process this data under strict contractual data protection terms.
• Game software providers: When you play a slot, live casino game or any other third-party game at x888, technical session data (including your stake amounts and game outcomes) is processed by the game provider's systems to generate results. Providers use this data in aggregate for quality assurance and RTP verification — they do not receive your name or contact details.
• Fraud and AML screening services: x888 uses specialist services to screen transactions and account activity for fraud indicators and AML red flags. These services process data under legal data sharing agreements.
• Regulatory and law enforcement authorities: x888 will disclose personal data to regulators, financial intelligence units or law enforcement agencies where legally required or where x888 has a reasonable belief that disclosure is necessary to prevent crime.
• Customer support platforms: x888 uses a third-party live chat and ticketing platform to manage customer communications. Support interactions are processed through that platform under a data processing agreement.

x888 does not share your personal data with any party for their own marketing or commercial purposes.

x888 retains your personal data for only as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of 5 years from the date of account closure. This period is set by anti-money-laundering regulatory requirements and cannot be shortened on request.
• KYC documents: Retained for a minimum of 5 years from the date of verification. Original documents may be securely deleted earlier if a verified digital record meets the applicable retention requirements.
• Responsible gaming records: Retained for a minimum of 5 years to allow x888 to honour self-exclusion arrangements and to protect players who have requested restrictions.
• Support communications: Retained for 2 years from the date of the interaction unless the communication is linked to an unresolved dispute, in which case it is retained until the dispute is fully closed.
• Technical and usage logs: Retained for up to 12 months for fraud detection and platform improvement purposes, then anonymised or deleted.
• Marketing preferences: Retained until you opt out or your account is closed, whichever comes first.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked back to you as an individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

x888 takes data security seriously and applies a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction.

Technical measures in place at x888 include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and x888 servers. Your connection to x888-jit.com is always encrypted in transit.
• Encryption at rest for databases containing personal and financial data.
• Firewall protection, intrusion detection systems and regular vulnerability assessments of the x888 infrastructure.
• Multi-factor authentication (MFA) for internal staff access to systems containing player data.
• Strict access controls — staff access to personal data is granted on a need-to-know basis only, and all access is logged and audited.

Organisational measures include regular staff training on data protection, a documented incident response procedure and contractual data protection obligations for all third parties who process data on x888's behalf.

While x888 takes all reasonable precautions, no internet-based system is completely immune to risk. You also have a responsibility to keep your login credentials secure and to contact x888 immediately if you suspect unauthorised access to your account.

x888 uses cookies and similar technologies to make the platform work properly, to remember your preferences and to understand how players use the site so we can improve it. Cookies are small text files stored on your device by your browser when you visit x888.

The types of cookies x888 uses are:

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your session after login, remember your language preference and enable core security features. You cannot opt out of these cookies while using x888.
• Functional Cookies: These remember your preferences — such as your preferred payment method or table game settings — so you don't have to reset them every time you visit. You can disable these in your browser settings, but some features may not work as expected.
• Analytics Cookies: These help x888 understand how players navigate the platform — which pages are most visited, where players encounter friction and how the platform performs across different devices and connections. This data is processed in aggregate and is not used to identify individual players.
• Fraud Prevention Cookies: These track signals that help x888's systems identify suspicious activity, such as a single device being used across multiple accounts. These cookies are necessary for the security of the platform and the protection of all players.

x888 does not use third-party advertising cookies. We do not allow advertisers to place tracking cookies on x888 pages.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your x888 account.

As a player whose personal data is processed by x888, you have the following rights. These can be exercised by contacting x888 support at any time. We aim to respond to all data rights requests within 30 days.

x888 does not knowingly collect any personal data from individuals under the age of 18. Our platform is exclusively for adults. The registration process includes an age declaration, and x888 conducts age verification checks on accounts as part of the KYC process.

If x888 discovers that it has inadvertently collected personal data from an individual under 18 — for example through a false declaration during registration — the account will be immediately closed, all data will be deleted as quickly as legally permissible and any deposits made will be returned to the original payment source.

If you believe that a person under 18 has registered an x888 account using your or another adult's information, please contact us immediately at support@x888-jit.com. We take underage gambling extremely seriously and will act swiftly on any report of this kind.

x888 reviews this Privacy Policy on a regular basis and may update it to reflect changes in the way we operate, the services we offer, the technologies we use or to comply with regulatory updates.

When x888 makes a material change to this policy — one that affects how your personal data is collected, used or shared in a meaningful way — we will notify registered players by email to their registered address at least 7 days before the change takes effect. The "Last updated" date at the top of this page reflects the date of the most recent revision.

Minor changes — such as clarifications, corrections to errors or updates that don't alter the substance of your rights — may be made without advance notice. We recommend checking this page periodically so you're always aware of the current policy.

Continued use of x888 following any update to this policy constitutes acceptance of the revised terms. If you disagree with any update, please contact us before the effective date to discuss your options, which may include account closure and return of your balance.

If you have any questions, concerns or requests about this Privacy Policy or about how x888 handles your personal data, please reach out to us directly. We are committed to resolving privacy concerns promptly and transparently.

How to contact x888 about privacy:

• Email: support@x888-jit.com — use the subject line "Privacy Query" for fastest routing to the right team.
• Live Chat: Available 24/7 on x888-jit.com. Our support team can handle most privacy questions in real time and escalate to the data protection team where needed.
• Formal data rights requests: Please use the email channel with subject line "Data Rights Request" and include your registered username and a clear description of your request.

x888 acknowledges all privacy enquiries within 72 hours and provides a substantive response within 30 calendar days for formal data rights requests. For general privacy questions, we aim to respond within 2 business days.

If you feel that x888 has not handled your personal data appropriately and you are not satisfied with our response to your complaint, you have the right to raise the matter with the relevant data protection authority in your jurisdiction.