Data Protection & Privacy

xx888 Privacy Policy – How We Protect Your Data

Your privacy is a core part of how xx888 operates. This Privacy Policy explains exactly what personal data we collect from Pakistan players, how we use it, who we share it with and how you can exercise your data rights at any time.

Last Updated: June 2026
Pakistan Players
Data Encrypted
No Data Sales

Summary: xx888 collects personal data only to operate your account, process PKR transactions and improve your gaming experience. We do not sell your personal information to any third party. This policy applies to all Pakistan players using the xx888 website and mobile app. Please read it fully before registering.

1Introduction

xx888 ("we", "us", "the Platform") is committed to handling the personal information of all players, including those in Pakistan, with care, transparency and respect. This Privacy Policy describes our practices regarding the collection, use, storage and disclosure of personal data when you use xx888 — whether through the website at xx888.ml or through the xx888 mobile app.

This policy is designed to give you a clear picture of what happens with your data from the moment you register an account through to the point you make a withdrawal in PKR and beyond. We believe you have every right to understand exactly what information we hold about you and why.

By creating an account or otherwise using the xx888 Platform, you acknowledge that you have read this Privacy Policy and that you understand and accept its terms. This Privacy Policy should be read alongside the xx888 Terms and Conditions, which govern the overall use of the Platform.

2Personal Data We Collect

We collect different types of personal data depending on how you interact with xx888. The main categories are:

Data Category Examples When Collected
Identity Data Full name, date of birth, CNIC number Registration & verification
Contact Data Email address, mobile number Registration
Financial Data JazzCash / Easypaisa / Raast / bank account details, PKR transaction history Deposits & withdrawals
Technical Data IP address, device type, browser, operating system Each Platform visit
Usage Data Games played, bets placed, session duration, pages visited Active sessions
Communications Data Support chat logs, email correspondence When you contact support
Verification Documents CNIC copy, proof of address, payment method screenshots KYC verification

We do not collect sensitive personal data such as biometric information, health records, political opinions or religious beliefs. We only ever collect what is genuinely necessary to operate your account and comply with our internal verification standards.

When you use the xx888 mobile app (available via the Download page), the app may additionally request access to your device's camera (for document uploads during verification) and storage (for saving downloaded content). These permissions are requested at the time they are needed and can be managed through your device settings at any time.

3How We Use Your Personal Data

xx888 uses your personal data for specific, legitimate purposes only. Below is a breakdown of what we use your information for:

  • Account creation and management: Your name, email and mobile number are used to create and maintain your xx888 account and to identify you when you log in.
  • Identity verification (KYC): CNIC details and verification documents are used to confirm your identity before processing your first PKR withdrawal. This is a standard one-time process designed to protect your account and prevent fraud.
  • Processing PKR transactions: Financial data including your JazzCash account, Easypaisa wallet, Raast ID or bank details is used solely to process your deposits and withdrawals in Pakistani Rupees. We do not store full payment credentials beyond what is required for the transaction.
  • Customer support: Communications data is used to handle your support queries, investigate complaints and maintain records of interactions for quality and dispute resolution purposes.
  • Platform security and fraud prevention: Technical and usage data is analysed to detect unusual account activity, prevent duplicate registrations and identify potential fraudulent behaviour before it causes harm.
  • Responsible gaming: Usage data helps us monitor gaming patterns and flag accounts that may benefit from responsible gaming tools such as deposit limits or self-exclusion.
  • Platform improvement: Aggregated, anonymised usage data is used to understand how players navigate xx888, which games are most popular (Slots, Live Casino, Fish Games, Cricket Betting) and where the experience can be improved.
  • Marketing communications: With your consent, your contact details may be used to send you information about promotions, bonuses, Cricket and PSL betting offers and other updates. See Section 10 for full details and opt-out options.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you as an individual player, beyond standard fraud detection systems that flag activity for human review.

4Legal Basis for Processing

Every use of your personal data by xx888 is supported by one of the following legal bases:

  • Contract performance: Processing necessary to provide you with the xx888 gaming and betting service you signed up for — including running your account, processing deposits and paying out PKR withdrawals.
  • Legitimate interests: Processing necessary for fraud prevention, Platform security, responsible gaming monitoring and internal analytics — where these interests do not override your privacy rights.
  • Legal obligation: Processing required to comply with identity verification requirements and other applicable legal obligations.
  • Consent: Processing for direct marketing communications, where you have specifically opted in. Consent can be withdrawn at any time via your account settings or by contacting support.

Note: Withdrawing consent for marketing communications does not affect the lawfulness of any processing that took place before withdrawal, and it does not affect the processing of your data for other purposes such as account management or transaction processing.

5Data Sharing and Third Parties

xx888 does not sell, rent or trade your personal data to any third party. We share your data only in the specific circumstances below and only to the minimum extent required:

  • Payment processors: To process PKR deposits and withdrawals, relevant financial details are shared with payment service providers including JazzCash, Easypaisa, Raast and partner banking institutions. These providers are contractually obligated to handle your data securely and use it only for payment processing.
  • Identity verification services: During KYC, your identity documents may be processed through a third-party verification service to confirm authenticity. This service is not permitted to retain or use your documents for any other purpose.
  • Game content providers: Game software providers whose Slots, Live Casino and Fish Games titles are hosted on xx888 may receive technical identifiers (such as a session token or anonymised player ID) necessary to run the game session. They do not receive your name, contact details or full financial information.
  • Technical infrastructure providers: Cloud hosting, content delivery and platform maintenance partners may process technical data as part of operating the xx888 infrastructure. These are data processing agreements with strict confidentiality obligations.
  • Legal and regulatory disclosures: Where required by law, court order or lawful authority, xx888 may be obligated to disclose certain player information. We will always aim to notify the affected player where legally permitted to do so.

All third-party data processors engaged by xx888 are required to implement appropriate technical and organisational security measures and are only permitted to process your data in accordance with xx888's documented instructions.

6Cookies and Tracking Technologies

xx888 uses cookies and similar tracking technologies on the website and mobile Platform. Cookies are small data files stored on your device that help us recognise you, remember your preferences and understand how you use the Platform.

The types of cookies we use include:

  • Essential cookies: Required for the Platform to function correctly — these include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
  • Performance cookies: Collect anonymised data about how players use the Platform, such as which pages are visited most often and how long sessions last. This data is used only to improve the Platform experience.
  • Functional cookies: Remember your preferences such as language settings, preferred game categories and responsible gaming limit configurations across sessions.
  • Analytics cookies: Used to understand aggregate traffic patterns and player behaviour on the Platform. Analytics data is processed in anonymised or pseudonymised form.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using xx888, but some features may be less personalised. The xx888 mobile app uses equivalent local storage mechanisms rather than browser cookies; these can be managed through your device's app settings.

7Data Retention

xx888 retains your personal data for as long as is necessary for the purposes described in this policy. General retention periods are as follows:

  • Active account data: Retained for the full duration your account is open and active on the Platform.
  • Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction to meet financial record-keeping requirements.
  • Identity verification documents: Retained for a minimum of five years following the closure of your account.
  • Support communications: Retained for two years from the date of the last interaction, unless the communication relates to an open or escalated complaint.
  • Technical and usage data: Retained in aggregated or anonymised form for up to two years for analytics purposes. Raw technical logs are deleted within 90 days unless retained as part of an active security investigation.

When personal data is no longer required, it is deleted or anonymised in a manner that prevents re-identification. Players who request account closure should be aware that transaction and verification records are retained for the minimum period stated above even after account closure, in line with standard record-keeping practices.

8Data Security

Protecting your personal data is taken seriously at xx888. We implement a combination of technical and organisational security measures to guard against unauthorised access, loss, alteration or disclosure of your information:

  • All data transmission between your device and the xx888 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols.
  • Account passwords are stored using one-way hashing — xx888 support staff cannot view or retrieve your password. If you forget your password, a reset process is used rather than any recovery of the original password.
  • Access to player data within xx888's internal systems is restricted to staff who require it to perform their specific role. Access rights are reviewed regularly.
  • Financial data related to PKR transactions is processed through PCI-compliant payment infrastructure. xx888 does not store full payment card or mobile wallet credentials on its own servers.
  • Regular internal security reviews are conducted to identify and address potential vulnerabilities in the Platform's data handling systems.

Your responsibility: You also play a role in keeping your account secure. Use a strong, unique password for your xx888 account. Do not share your login credentials with anyone. If you believe your account has been accessed without your authorisation, contact xx888 support immediately and change your password.

No system is completely immune to security risks. In the event of a data breach that is likely to affect your rights or interests as a player, xx888 will notify affected players as promptly as possible via their registered email address.

9Your Data Rights

As an xx888 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact xx888 support through your account or via the email address in Section 13.

Right of Access

You can request a copy of all personal data xx888 holds about you. We will provide this within a reasonable timeframe after verifying your identity.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. Some corrections may require re-verification.

Right to Erasure

You may request deletion of your personal data in certain circumstances. Note that data subject to mandatory retention periods (such as transaction records) cannot be deleted early.

Right to Restrict Processing

You can ask us to pause processing of your data in certain situations — for example, while you contest the accuracy of data we hold, or while a complaint is under review.

Right to Data Portability

Where we process your data on the basis of consent or contract, you may request your data in a structured, machine-readable format for transfer to another service.

Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Objections to marketing take effect immediately upon request.

10Marketing Communications

xx888 may send you promotional communications about bonuses, new game releases, Cricket and PSL betting offers, seasonal promotions and other Platform news. We will only send you marketing communications if you have opted in during registration or have subsequently opted in through your account settings.

Marketing communications from xx888 may be sent via:

  • Email to your registered address
  • SMS to your registered mobile number (where you have opted in for SMS marketing)
  • Push notifications through the xx888 mobile app (where you have enabled notifications)

You can opt out of marketing communications at any time by:

  • Using the unsubscribe link in any marketing email from xx888
  • Updating your communication preferences in your account settings
  • Contacting xx888 support and requesting removal from marketing lists
  • Disabling push notifications through your device's notification settings

Opting out of marketing will not affect your ability to use the Platform or receive transactional communications such as deposit confirmations, withdrawal notifications or account security alerts. These operational communications will continue regardless of your marketing preferences.

xx888 does not share your contact details with third-party marketers. All promotional communications you receive are sent directly by xx888 or by a data processor acting on xx888's behalf under a formal data processing agreement.

11Minors and Age Verification

The xx888 Platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the account registration and KYC process, and xx888 will request documentary proof of age where there is any doubt about a player's age.

If xx888 becomes aware that personal data has been collected from a player who is under 18, that account will be immediately closed, all data associated with that account will be deleted as quickly as our record-keeping obligations allow, and any deposited funds will be returned to the payment source where technically possible.

If you are a parent or guardian and believe that your child has created an account on xx888, please contact support immediately. We will investigate and take appropriate action as a priority.

We also strongly recommend that adults with accounts on xx888 take steps to prevent minors in their household from accessing the Platform. This includes using strong passwords, enabling device-level parental controls and keeping your login details private. For more guidance on managing your account usage, visit the Responsible Gaming page.

12Changes to This Privacy Policy

xx888 reserves the right to update this Privacy Policy at any time. When changes are made, the revised policy will be published on this page with an updated effective date shown at the top. For material changes — meaning changes that significantly affect how your personal data is used — we will notify active players via their registered email address ahead of the changes taking effect.

Your continued use of the xx888 Platform after a Privacy Policy update has been communicated constitutes your acknowledgment of the revised policy. If you disagree with any changes to the policy, you should stop using the Platform and contact support to request account closure. Your personal data will continue to be processed in accordance with the version of the policy that was in effect at the time of collection until any applicable retention period expires.

We recommend bookmarking this page and reviewing the Privacy Policy periodically, particularly if you are making significant use of the Platform for Cricket betting, Slots, Live Casino or other regular gaming activity.

13Contact and Data Enquiries

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how xx888 has handled your personal information, please get in touch. Our support team is available 24/7 through the in-platform support channel accessible after logging in to your account.

You can also contact us by email at: [email protected]

When contacting us about a data rights request, please include your registered email address and a brief description of your request. We will acknowledge your request promptly and aim to respond fully within a reasonable timeframe. We may need to verify your identity before processing certain requests, particularly access or deletion requests, to ensure we are disclosing or removing the correct data.

For responsible gaming queries, self-exclusion requests or concerns about your gaming habits, please visit the Responsible Gaming page directly.

How xx888 Keeps Your Data Safe

Six core practices that protect Pakistan players' personal information on the xx888 Platform

End-to-End Encryption

Every connection between your device and xx888 is protected by TLS encryption. Whether you are depositing PKR via JazzCash, placing a Cricket bet or checking your Slots history, your data travels securely. Passwords are stored as one-way hashes — not even the support team can see your password.

One-Time KYC Verification

Identity verification at xx888 is a single, one-time process. Once your CNIC has been verified, you do not need to repeat it for future withdrawals. Your verification documents are stored with access restrictions and are used solely for confirming your identity — never shared with marketers or unrelated third parties.

No Data Sales — Ever

xx888 does not sell, rent or broker your personal data to advertising networks, data aggregators or any third-party marketers. Your information stays within the xx888 ecosystem and is shared only with operational partners such as payment processors and identity verification services, under strict contractual controls.

Secure PKR Payment Handling

Financial data for JazzCash, Easypaisa, Raast and bank transfers is processed through PCI-compliant infrastructure. xx888 does not store your full payment credentials on its own servers. Transaction records are retained for standard financial record-keeping periods and are not accessible to general support staff.

You Control Your Marketing

Marketing communications from xx888 — whether about PSL betting promotions, new Slots or Live Casino offers — are only sent with your opt-in consent. You can withdraw consent at any time from your account settings or via the unsubscribe link in any email. Opting out does not affect your account or transactional messages.

Full Data Rights for Players

Pakistan players at xx888 can access, correct, restrict, export or request deletion of their personal data at any time by contacting support. Requests are handled promptly with identity verification to protect your account. Your right to control your own data is a core part of how xx888 treats its players.

Privacy Policy – Common Questions

Quick answers to what Pakistan players most often ask about data privacy at xx888

No. xx888 does not sell, rent or share your personal data with third-party advertisers, data brokers or marketing networks. Your data is shared only with service providers who are directly involved in operating the Platform — such as payment processors like JazzCash and Easypaisa, identity verification services and hosting infrastructure partners. All of these third parties are bound by strict data processing agreements that limit how they can use your information.

CNIC verification is a one-time process required before your first PKR withdrawal. It confirms that you are who you say you are and ensures that your withdrawal is paid to the correct person. This protects both you and the Platform against fraud and unauthorised withdrawals. Once verified, you do not need to resubmit your CNIC unless your account details change significantly. Your documents are stored securely and accessed only by authorised staff during the verification review process.

You can submit a data access request by contacting xx888 support through the in-platform support channel after logging in, or by emailing [email protected]. Include your registered email address and a brief description of what data you would like to access. We will verify your identity before processing the request and aim to provide your data in a clear format within a reasonable timeframe. There is no fee for a standard data access request.

Yes, you can request account closure and deletion of your personal data at any time by contacting xx888 support. However, please be aware that certain data — particularly transaction records and identity verification documents — must be retained for a minimum period of five years from the date of the last transaction or account closure. This is a standard financial record-keeping requirement and applies even after your account has been closed. Data that is not subject to retention requirements will be deleted promptly upon your request.

You can opt out of marketing emails at any time by clicking the unsubscribe link at the bottom of any promotional email from xx888, or by updating your communication preferences in your account settings. You can also contact support directly to be removed from all marketing lists. Opting out only stops promotional communications — you will still receive important transactional messages such as deposit confirmations, withdrawal updates and account security notifications.

xx888 does not store your full JazzCash or Easypaisa credentials on its own servers. When you make a PKR deposit or request a withdrawal, your payment details are handled through PCI-compliant payment infrastructure. xx888 retains transaction reference information necessary for your account history and withdrawal processing, but this does not constitute storage of your full mobile wallet account credentials. Payment data shared with processors is used solely for completing your transaction.

Ready to Join xx888?

Create your free account today and start playing Slots, Live Casino, Fish Games or bet on Cricket and PSL — all in PKR via JazzCash, Easypaisa or Raast. Your data is protected under this Privacy Policy from day one.

JazzCash Easypaisa Raast Bank Transfer

18+ only. Play responsibly. PKR transactions.