XP 786 Privacy Policy — How We Handle Your Data in Pakistan

This Privacy Policy applies to xp 786 (operating at xp786.online) and describes how we handle the personal information of players and visitors in Pakistan. When we say "xp 786", "we" or "our" in this document, we mean the operator of xp786.online. When we say "you", we mean any person who registers an account, makes a deposit, places a bet or simply browses the platform.

By using xp 786 — whether registering an account, depositing PKR via Easypaisa or JazzCash, placing a cricket bet, or accessing any other feature — you confirm that you have read and understood this Privacy Policy and accept our data practices as described here. This policy is incorporated into the xp 786 Terms and Conditions by reference.

XP 786 collects personal information in two ways: information you provide to us directly, and information generated automatically when you use the platform.

Information You Provide Directly

• Registration data: Full name, Pakistani mobile number, date of birth, email address (if provided) and CNIC number collected during account creation or KYC verification.
• Payment information: Mobile wallet identifiers (Easypaisa / JazzCash account numbers), bank account details (for IBFT), NayaPay / SadaPay account references and card details (partially masked — we store only the last four digits of any card number). Full card numbers are processed by our PCI-DSS compliant payment processor and are never stored on xp 786 servers.
• Identity documents: Copies of your Pakistani CNIC, passport or driving licence provided during identity verification.
• Communications: Content of messages sent to xp 786 support via chat, email or any other channel.
• Responsible gaming preferences: Deposit limits, session time settings and self-exclusion requests.

Information Generated Automatically

• Device and technical data: IP address, device type, operating system version, browser type and version, screen resolution and unique device identifiers.
• Usage data: Pages visited, games played, bet history, session duration, click patterns and feature interactions.
• Transaction data: Full records of all deposits, withdrawals, bets placed and outcomes — amounts in PKR, timestamps and payment method used.
• Location data: General location inferred from IP address (city-level only — we do not access GPS or precise device location).
• Cookies and similar technologies: Session identifiers, preference cookies and analytics data as described in Section 7.

Every category of data collected by xp 786 has a specific, defined purpose. We do not collect data without a reason and we do not use data for purposes beyond those listed here without notifying you first.

XP 786 does not use automated decision-making that produces legal or similarly significant effects on you without human review. Where automated systems flag your account for review (such as fraud detection), a human member of the xp 786 team reviews the case before any action is taken.

XP 786 processes your personal data under the following legal bases depending on the purpose:

• Contract performance: Processing required to operate your account, accept deposits in PKR, process withdrawals and settle bets. Without this processing, the service cannot function.
• Legal obligation: KYC identity verification, anti-money laundering checks, age verification and regulatory reporting are required by applicable laws and cannot be opted out of.
• Legitimate interests: Fraud detection, platform security, technical improvement and anonymised analytics serve the genuine interests of xp 786 and all players in keeping the platform safe and functional.
• Consent: Marketing emails and promotional SMS are sent only with your explicit opt-in consent. You may withdraw consent at any time from your account settings.

XP 786 does not sell, rent or trade your personal information. We share data only in the following limited circumstances, and only the minimum data required for each purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the payment-specific data required to process your PKR transactions. These providers operate under strict data processing agreements and Pakistan's financial regulations.
• Identity verification providers: Third-party KYC services that assist with verifying Pakistani CNIC and passport documents. These providers process identity documents solely for the purpose of verification and are contractually prohibited from any other use.
• Technical infrastructure providers: Cloud hosting and content delivery services that store platform data. All such providers are bound by data processing agreements requiring equivalent security standards to those we apply ourselves.
• Responsible gaming partners: Anonymised, aggregated data may be shared with responsible gaming research organisations. No individual player is identifiable in any data shared for this purpose.
• Legal and regulatory authorities: Where xp 786 is required by Pakistani law or a valid legal order to disclose information — including anti-money laundering obligations — we will comply. Where legally permitted, we will notify you of such a disclosure.

Every deposit and withdrawal on xp 786 is processed in Pakistani Rupees (PKR). Because we handle real money transactions, we are required to maintain records of financial activity and to verify the identity of our players — this is a standard financial compliance requirement, not unique to xp 786.

KYC (Know Your Customer) verification involves collecting a copy of your Pakistani CNIC, passport or driving licence. This data is:

• Stored in an encrypted format on secured servers.
• Accessed only by the xp 786 compliance team and, where necessary, our authorised KYC verification partner.
• Retained for the minimum period required by applicable Pakistani financial regulations (typically five years from the date your account is closed).
• Never used for any purpose other than identity verification and legal compliance.

Payment method details — your Easypaisa or JazzCash account number, bank account or card details — are stored in partial or tokenised form only. Full card numbers are never stored on xp 786 systems. All payment processing is handled through PCI-DSS compliant infrastructure.

XP 786 uses cookies and similar tracking technologies to operate the platform correctly and to understand how it is being used. Here is what each category of cookie does:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your security settings and process your bets. You cannot opt out of essential cookies without ceasing to use the platform.
• Functional cookies: These remember your preferences — such as your preferred game lobby or display settings — so you don't have to reset them every session. They do not track you across other websites.
• Analytics cookies: These help us understand which features are being used, where players encounter difficulty and how the platform performs technically. Analytics data is aggregated and does not identify individual players. We use privacy-compliant, self-hosted analytics where possible.
• Security cookies: Used by our fraud detection systems to identify unusual patterns of access that may indicate account compromise or fraudulent activity.

XP 786 does not use third-party advertising cookies or cross-site tracking cookies. We do not participate in any advertising networks that track your behaviour across the internet.

XP 786 retains personal data only for as long as it is necessary for the purpose for which it was collected, subject to any legal minimum retention periods that apply to financial service providers operating in Pakistan.

When data reaches the end of its retention period and no legal obligation requires its continued storage, xp 786 securely deletes or irreversibly anonymises it. Deletion requests from players are actioned within 30 days, subject to any data that must be retained under the financial retention periods above.

XP 786 applies multiple layers of technical and organisational security to protect your personal data. Key measures include:

• 256-bit SSL/TLS encryption on every connection between your device and xp 786 servers. Look for the padlock in your browser's address bar.
• Encryption at rest for all databases containing personal or financial data, using AES-256 encryption.
• Access controls limiting which xp 786 team members can access personal data, based on the minimum access necessary to perform their role.
• Two-factor authentication available for all player accounts and required internally for any staff accessing production systems.
• Regular security audits conducted by independent third parties to identify and remediate vulnerabilities.
• Intrusion detection systems monitoring for unusual access patterns in real time.
• PCI-DSS compliant payment processing infrastructure for all card transactions.

In the unlikely event of a data breach affecting your personal information, xp 786 will notify affected players promptly and take all necessary steps to contain the breach and prevent recurrence.

As an xp 786 player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@xp786.online. We will respond within 30 days — usually much sooner.

XP 786 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age is verified during the registration process and xp 786 reserves the right to request documentary proof of age at any time.

If we discover or are notified that an account belongs to a person under 18, that account will be closed immediately, all funds returned to the depositing payment method, and all associated personal data deleted as promptly as legal obligations allow.

If you are a parent or guardian and believe your child may have created an account on xp 786 without your knowledge, please contact us immediately at support@xp786.online. We will investigate and take appropriate action within 24 hours of receiving your report.

XP 786 will update this Privacy Policy from time to time as our practices evolve or as legal requirements change. The date at the top of this page always reflects the most recent version. We distinguish between material and non-material changes:

• Non-material changes (formatting corrections, clarifications with no change in substance) are made without specific notification beyond the updated date on this page.
• Material changes (changes to what data we collect, who we share it with, or how long we keep it) are communicated directly to all registered players via email or an on-screen notification at next login, giving you a reasonable opportunity to review the changes before they take effect.

Continuing to use xp 786 after being notified of a material policy change constitutes your acceptance of the updated Privacy Policy. If you do not agree with any change, you may request account closure at any time.

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by xp 786, please contact our privacy team:

• Email: support@xp786.online — use the subject line "Privacy Policy Query" for fastest routing
• Live Chat: Available 24 hours a day for registered players via the platform
• VIP Players: Contact your named account manager directly (Gold tier and above) for privacy matters related to your account

XP 786 aims to resolve all privacy queries and requests within 14 days, and complex requests (such as full data access requests) within 30 days. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the appropriate data protection authority applicable in your jurisdiction.