Privacy Policy – How xx99 Protects Your Data

1. Introduction

This Privacy Policy explains how xx99 ("we", "us", "the platform") collects, uses, stores and protects the personal information of players who register and use the xx99 betting and gaming platform at xx99.plus, including the Android app and iOS app.

By creating an account on xx99 you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the Terms and Conditions, which form the wider agreement governing your use of the platform.

We may update this Privacy Policy from time to time. When we make changes, the revised version will be published here with an updated effective date. It is your responsibility to check back periodically. Continued use of the platform after an update means you accept the revised Policy.

2. What We Collect

We collect personal information when you register, use the platform, make transactions or contact our support team. The categories of data we collect are set out below.

We do not knowingly collect sensitive personal data such as health information, religious beliefs or political views. If you provide any such information voluntarily in communications with our support team, it is used solely to resolve your query and is not stored or processed further.

3. How We Use Your Data

The data we collect is used for the following purposes:

• Account management: Creating and maintaining your xx99 account, enabling login and protecting your account from unauthorised access.
• Transaction processing: Processing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and cards, and maintaining accurate financial records.
• Identity verification: Verifying your age (18+) and identity as part of our account security and fraud prevention processes.
• Platform personalisation: Tailoring content, bonuses and promotions — such as PSL seasonal offers or VIP rewards — based on your activity on the platform.
• Customer support: Responding to your queries, resolving disputes about bets or transactions and improving our support quality.
• Safety and fraud prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse and other activities that breach our Terms and Conditions.
• Platform improvement: Analysing usage patterns in aggregate to improve the betting, casino, fish games and bingo experience for all players.
• Marketing communications: Sending you promotional emails or push notifications about offers, bonuses and new features — only where you have not opted out.
• Legal compliance: Meeting obligations under applicable anti-money laundering requirements and responding to lawful requests from authorities.

We do not use your data for any purpose not described above without first notifying you and, where required, obtaining your consent.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: Processing needed to operate your account, handle your bets and process your PKR deposits and withdrawals under the Terms and Conditions you agreed to.
• Legitimate interests: Fraud detection, platform security, abuse prevention and aggregate analytics — where our interests do not override your privacy rights.
• Legal obligation: Complying with anti-money laundering requirements, which may require us to collect and retain identity and transaction records.
• Consent: Sending you marketing communications. You can withdraw consent at any time through your account notification settings or by contacting support.

5. Sharing Your Data

xx99 does not sell or rent your personal data to any third party. We share your data only in the following limited circumstances:

• Payment processors: When you make a deposit or withdrawal, necessary transaction data is shared with the relevant payment processor — JazzCash, Easypaisa, Raast or your bank. These processors handle your payment data under their own security standards and privacy policies.
• Game software providers: Certain casino, fish game and bingo providers receive session data necessary to deliver their games. No more data than is required for game delivery is shared.
• Identity verification services: When you are required to complete KYC verification, your identity documents may be processed by a third-party verification service acting on our behalf.
• Analytics providers: We use analytics tools to understand how players use the platform in aggregate. These tools receive technical and usage data in anonymised or pseudonymised form wherever possible.
• Legal authorities: We will disclose personal data to law enforcement, regulatory bodies or courts when we are legally required to do so or when disclosure is necessary to protect the safety of players or the integrity of the platform.

All third parties who process data on our behalf are required to handle your information securely and to use it only for the specific purpose for which it was shared. We do not allow third parties to use your data for their own unrelated marketing.

6. Payment Data

All PKR transactions on xx99 — including deposits via JazzCash, Easypaisa, Raast, bank transfer and cards — are processed through secure payment gateways. xx99 does not store full card numbers, CVV codes, mobile wallet PINs or net banking passwords on its own servers.

What xx99 does retain for your account includes:

• The type of payment method used (e.g. JazzCash, bank transfer)
• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in PKR
• The status of each transaction (completed, pending, reversed)

This transaction history is retained as part of your account record and may be used to resolve disputes, process withdrawal requests and comply with financial record-keeping obligations. You can view your full transaction history in the cashier section of your xx99 account at any time.

7. Cookies & Tracking Technologies

xx99 uses cookies and similar technologies on the website and in the app to provide core platform functionality, remember your preferences and analyse usage. The main categories of cookies we use are:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your account preferences and protect against cross-site request forgery. These cannot be disabled without breaking platform functionality.
• Analytics cookies: These help us understand how players navigate the platform — which pages are visited most, how long sessions last and where players encounter issues. Data from analytics cookies is processed in aggregate and does not identify you personally.
• Preference cookies: These remember settings you have chosen, such as your preferred language or notification settings, so you do not have to re-enter them on each visit.
• Marketing cookies: Where you have consented, these cookies help us deliver relevant promotional content and measure the effectiveness of our campaigns. You can opt out of marketing cookies through your browser settings or by contacting support.

Most browsers allow you to control or block cookies through their settings. Please note that blocking essential cookies may prevent certain platform features from working correctly. The xx99 app uses equivalent local storage mechanisms to deliver the same functionality.

8. Data Retention

We retain your personal data for as long as your xx99 account remains active and for a reasonable period thereafter to comply with legal obligations, resolve disputes and enforce our agreements. Specifically:

• Active accounts: All account and transaction data is retained for the duration of your active membership.
• Closed accounts: Following account closure, we retain identity and transaction records for a period necessary to meet anti-money laundering and financial record-keeping requirements. After this period, data is securely deleted or anonymised.
• Support communications: Live chat transcripts and email correspondence are retained for a reasonable period to support dispute resolution and service quality review.
• Marketing data: If you unsubscribe from marketing communications, we retain a record of your opt-out preference to ensure we do not contact you again.

When data is no longer required, it is securely deleted or anonymised so it can no longer be linked to you as an individual.

9. Your Rights Over Your Data

You have the following rights regarding the personal data xx99 holds about you:

• Right to access: You can request a copy of the personal data we hold about you at any time.
• Right to correction: If any of your data is inaccurate or incomplete, you can ask us to correct it. You can update many details directly in your account settings.
• Right to deletion: You can request that we delete your personal data. We will act on this request where we are not legally required to retain the data. Note that deletion of account data may result in account closure.
• Right to restrict processing: In certain circumstances you can ask us to pause the processing of your data while a query or complaint is being resolved.
• Right to object: You can object to processing based on our legitimate interests, including direct marketing. For marketing specifically, you can opt out at any time.
• Right to data portability: You can request a copy of the data you have provided to us in a commonly used, machine-readable format.

To exercise any of these rights, contact the xx99 support team via live chat — available 24/7 — or by emailing the address shown in the footer of this page. We aim to respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request.

10. Data Security

xx99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These include:

• TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest on our infrastructure
• Access controls ensuring only authorised staff can access player data, limited to what is necessary for their role
• Regular security reviews and testing of platform infrastructure
• Secure credential hashing — your password is never stored in plain text

While we take every reasonable precaution to protect your data, no system can guarantee absolute security. You also play an important role in keeping your account safe — use a strong, unique password for your xx99 account, do not share your login credentials and contact support immediately if you suspect any unauthorised activity.

11. Minors

xx99 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has registered an account on xx99, please contact our support team immediately so we can investigate and close the account.

Age verification is part of our standard KYC process. Where there is any doubt about a player's age, we will request proof of age before allowing continued access to the platform. Any data collected from a minor discovered during this process will be deleted promptly.

For more on how xx99 supports responsible gaming for adults, visit the Responsible Gaming page.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate, new features added to the platform or evolving best practices in data protection. When we make material changes, we will update the effective date shown at the top of this page.

In some cases — particularly where changes significantly affect how we use your data — we may also notify registered players by email or via an in-app notification. However, you should check this page periodically rather than relying solely on notifications. Your continued use of xx99 after any update to this Policy constitutes acceptance of the revised version.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights or wish to report a privacy concern, please get in touch with the xx99 support team:

• Live Chat: Available 24/7 directly within the xx99 platform or app — the fastest way to reach us.
• Email: [email protected] (displayed as plain text — please copy manually if needed)

We aim to acknowledge all privacy-related enquiries promptly and resolve them as quickly as possible. For data deletion or access requests, we will verify your identity before processing to ensure your data is not released to the wrong person.