Summary: x000 collects personal data that is necessary to operate your account, process PKR transactions via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, meet our licensing obligations, and keep the platform safe. We do not sell your data. You have clear rights over your information. This policy tells you everything.
1 Introduction
This Privacy
Policy ("Policy") is issued by x000 ("x000", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User") who access or use the x000 online casino and sports betting platform available at x000.bio.
x000 is an internationally licensed gaming operator committed to protecting the privacy and personal data of every registered player. This Policy explains what personal data we collect, the purposes for which we use it, with whom we share it, how long we retain it, and what rights you have in relation to it.
By registering an account on x000, making a deposit, or otherwise using the x000 platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside x000's Terms & Conditions and Responsible Gaming Policy, both of which are available on this site.
x000 acts as the data controller in respect of the personal data it collects directly from players through the x000.bio platform. Where x000 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations that meet the standards required under applicable data protection law.
2 Data We Collect
x000 collects the following categories of personal data from players. We collect only what is necessary for the purposes described in this Policy.
| Category |
Examples |
Purpose |
| Identity Data |
Full name, date of birth, CNIC number, nationality |
Account registration, age verification (21+), KYC compliance |
| Contact Data |
Email address, mobile number, residential address |
Account communications, support, regulatory notices |
| Financial Data |
JazzCash / EasyPaisa account details, HBL / UBL / Meezan Bank account references, deposit and withdrawal history (PKR) |
Payment processing, fraud prevention, AML compliance |
| Gaming Activity Data |
Game history, bet amounts, win/loss records, session durations, wagering patterns |
Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data |
IP address, device type, browser type, operating system, session timestamps |
Security, fraud detection, platform optimisation |
| Communications Data |
Live chat transcripts, support email content, feedback submissions |
Customer support, quality assurance, dispute resolution |
| Preference Data |
Language settings, notification preferences, responsible gaming tool selections |
Personalisation, platform experience improvement |
3 How We Collect Your Data
x000 collects personal data through the following channels:
Direct Collection
- When you complete the x000 account registration form.
- When you submit identity or address documents as part of the KYC verification process.
- When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank.
- When you contact x000 support via live chat or email.
- When you set responsible gaming limits or preferences on your account.
- When you respond to surveys, promotions, or other communications from x000.
Automated Collection
- Through cookies and similar tracking technologies when you browse the x000 platform. See Section 8 for full details.
- Through our platform's server logs, which automatically record IP addresses, device identifiers, browser types, and session activity whenever you access x000.bio.
- Through our fraud detection and security monitoring systems, which analyse patterns of platform activity in real time.
Third-Party Sources
- From identity verification providers engaged to assist with KYC checks and CNIC validation for Pakistani players.
- From payment processors when processing PKR deposits and withdrawals.
- From fraud prevention and anti-money laundering database providers as required by our licensing obligations.
4 How We Use Your Data
x000 uses the personal data it collects for the following purposes:
- Account Management: To create, verify, maintain, and close your x000 player account, and to enforce the one-account-per-player policy.
- Age & Identity Verification: To verify that you meet the 21+ age requirement and to confirm your identity as required by our licensing obligations.
- Payment Processing: To process PKR deposits and withdrawals via your chosen payment method and to maintain accurate financial records.
- Platform Operation: To deliver the games, betting markets, and services that make up the x000 platform, including live casino, cricket betting, slots, esports, and fishing games.
- Responsible Gaming: To monitor your gaming activity for signs of problem gambling and to apply and enforce the responsible gaming tools you have selected, including deposit limits, loss limits, and self-exclusion.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and unauthorised account access.
- Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML), know your customer (KYC), and gaming licensing regulations.
- Customer Support: To respond to your enquiries, resolve disputes, and manage complaints efficiently.
- Communications: To send you account-related notices, transaction confirmations, security alerts, and — where you have consented — promotional offers and bonus notifications.
- Platform Improvement: To analyse aggregated, anonymised usage data to improve the x000 platform experience for all players.
⚠️ x000 does not use your personal data for automated decision-making that produces significant legal effects, except where required for fraud prevention or regulatory compliance. In such cases, you may request human review of any automated decision that affects your account.
5 Legal Basis for Processing
x000 processes personal data only where a valid legal basis exists. The following legal bases apply to x000's data processing activities:
- Contract Performance: Processing your personal data is necessary to perform the contract between you and x000 — i.e., to operate your account, process transactions, and deliver the gaming services you have registered to use.
- Legal Obligation: x000 is required by its gaming licence, AML regulations, and financial compliance obligations to collect, verify, and retain certain personal data, including identity documents and transaction records.
- Legitimate Interests: x000 processes certain data — such as technical usage data and fraud signals — on the basis of its legitimate interest in maintaining a secure, fair, and commercially viable platform, provided that such processing does not override your fundamental privacy rights.
- Consent: Where x000 relies on your consent to process personal data — for example, for sending promotional communications or placing non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.
6 Sharing Your Data
x000 does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and their respective technology partners, receive the financial data necessary to process your PKR deposits and withdrawals.
- KYC & Identity Verification Providers: Specialist third-party providers engaged to verify your CNIC, age, and address as part of the x000 KYC process. These providers are contractually prohibited from using your data for any purpose other than verification.
- Fraud Prevention & AML Providers: Providers of fraud detection, risk scoring, and anti-money laundering screening services that help x000 maintain platform integrity and meet its regulatory obligations.
- Game Content Providers: Third-party game developers whose products are integrated into the x000 platform may receive limited technical and session data necessary to deliver gameplay. These providers do not receive your financial or identity data.
- Regulatory & Licensing Authorities: x000's licensing authority and relevant law enforcement agencies may receive personal data where required by law, court order, or regulatory mandate.
- IT & Infrastructure Providers: Cloud hosting, database, and cybersecurity providers that process data on x000's behalf under strict data processing agreements.
All third-party data processors engaged by x000 are bound by contractual data processing agreements that require them to process personal data only on x000's documented instructions, to maintain appropriate security standards, and to assist x000 in meeting its data protection obligations.
7 Payment Data & PKR Transactions
x000 accepts deposits and processes withdrawals exclusively in Pakistani Rupees (PKR) through the following approved payment channels: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. The following specific rules apply to the handling of payment data on the x000 platform:
- x000 does not store full payment account credentials (such as complete JazzCash wallet numbers or full bank account numbers) on its own servers beyond what is strictly required to process a specific transaction.
- Payment data is transmitted exclusively over encrypted channels. x000 does not process payment data over unencrypted connections.
- x000 retains records of PKR transaction amounts, dates, and payment method references for a minimum of five years as required by applicable AML and financial record-keeping regulations.
- x000 uses your payment data to verify that deposits and withdrawals are conducted via payment methods registered in your own name, as required by our anti-money laundering compliance programme.
- x000 does not share payment data with any third party except the relevant payment processor, our AML compliance providers, and regulatory authorities as required by law.
8 Cookies & Tracking Technologies
x000 uses cookies and similar tracking technologies on the x000.bio platform. Cookies are small text files stored on your device that help us deliver a functional, secure, and personalised experience. The following categories of cookies are used by x000:
Essential Cookies
These cookies are strictly necessary for the x000 platform to function. They enable core features such as maintaining your login session, remembering your language preference, and keeping your account secure. Essential cookies cannot be disabled without breaking core platform functionality.
Analytics Cookies
x000 uses analytics cookies to understand how players interact with the platform — for example, which game categories are most popular among players in Karachi, Lahore, and Islamabad, and where players encounter difficulties. This data is processed in aggregated, anonymised form and is used solely to improve the x000 platform experience.
Security Cookies
x000 uses security cookies to support fraud detection and prevention systems. These cookies help us identify unusual patterns of access — for example, a login attempt from an unfamiliar device or location — that may indicate unauthorised account access.
You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the x000 platform, but may affect certain personalisation features.
9 Data Retention
x000 retains personal data for as long as is necessary to fulfil the purposes described in this Policy or to comply with applicable legal and regulatory obligations. The following general retention periods apply:
- Active Account Data: Retained for the full duration that your x000 account remains open and active.
- Transaction & Financial Records: Retained for a minimum of five years following the date of each transaction, as required by AML regulations.
- KYC & Identity Documents: Retained for a minimum of five years following the closure of your account, as required by applicable licensing and financial compliance obligations.
- Customer Support Communications: Retained for three years following resolution of the relevant support interaction, or longer if the interaction relates to an unresolved dispute or regulatory matter.
- Technical & Log Data: Retained for up to 12 months, after which it is anonymised or deleted unless required for an active investigation or legal proceeding.
- Marketing Consent Records: Retained for the period during which your consent remains active, plus an additional record-keeping period of two years following withdrawal of consent.
When personal data is no longer required and no legal basis for continued retention exists, x000 securely deletes or anonymises the data in accordance with our internal data disposal procedures.
10 Data Security
x000 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and x000's servers.
- Encryption of sensitive data fields at rest within x000's databases.
- Role-based access controls ensuring that x000 staff can only access the personal data necessary for their specific job function.
- Regular third-party security audits and penetration testing of the x000 platform infrastructure.
- Automated intrusion detection and real-time security monitoring systems.
- Secure, encrypted backups of all player data stored in geographically separated facilities.
⚠️ While x000 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password for your x000 account and never share your login credentials with anyone.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, x000 will notify you and the relevant regulatory authority in accordance with applicable data breach notification requirements.
11 Your Privacy Rights
As a registered x000 player, you hold a number of rights in relation to your personal data. x000 is committed to facilitating the exercise of these rights promptly and without undue bureaucracy. Your rights are set out below:
You have the right to request a copy of the personal data that x000 holds about you. x000 will provide this information within 30 days of receiving a valid request. Requests can be submitted via the live chat function in your x000 account dashboard or by emailing
[email protected] with the subject line "Data Access Request".
If any personal data that x000 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many account details directly from your x000 account dashboard. For corrections that require document verification — such as updating your name following a legal name change — please contact x000 support.
You may request that x000 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent and no other legal basis applies, or where you object to processing and x000 has no overriding legitimate interest. Please note that x000 is required by law to retain certain data — particularly KYC records and financial transaction data — for defined minimum periods, which means erasure requests may not always be fulfilled in full.
In certain circumstances — for example, while x000 investigates a rectification request you have made — you have the right to ask x000 to restrict the processing of your personal data. Where processing is restricted, x000 will continue to store the data but will not use it for any purpose other than storage until the restriction is lifted.
Where x000 processes your personal data on the basis of your consent or for the performance of a contract, and that processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to x000's processing of your personal data where that processing is based on x000's legitimate interests. x000 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims. You have an absolute right to object to the use of your personal data for direct marketing purposes at any time.
To exercise any of the above rights, please contact x000 support via live chat in your account dashboard or by emailing [email protected]. x000 will respond to all valid privacy rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case x000 will notify you of the extension and the reason for it.
12 Children & Minors
The x000 platform is strictly prohibited for individuals under the age of 21. x000 does not knowingly collect personal data from any individual under the age of 21. If x000 discovers or is notified that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be flagged for review, and the account will be closed in accordance with x000's underage player procedures.
If you are a parent or guardian and believe that a minor has registered an account on x000 using falsified information, please contact x000 support immediately via live chat or by emailing [email protected]. x000 will investigate and take all appropriate action promptly.
⚠️ x000 enforces a strict 21+ age requirement. Age verification is conducted during the KYC process and x000 reserves the right to request proof-of-age documentation at any point during the account lifecycle.
13 International Data Transfers
As an internationally licensed gaming operator, x000 may transfer personal data to third-party service providers located in jurisdictions outside of Pakistan. Where such transfers occur, x000 ensures that appropriate safeguards are in place to protect your personal data, including:
- Contractual data transfer agreements with recipient organisations that impose data protection obligations equivalent to those required under applicable law.
- Transfers only to jurisdictions that have been assessed as providing an adequate level of data protection, or where specific supplementary safeguards have been implemented.
- Regular reviews of international data transfer arrangements to ensure continued adequacy of the protections in place.
x000 will not transfer your personal data to any international recipient that has not agreed to process it in accordance with the standards described in this Privacy Policy.
14 Updates to This Policy
x000 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our licensing obligations, the services we offer, or our data processing practices. When material changes are made to this Policy, x000 will notify registered players by email and/or by displaying a prominent notice on the x000 platform prior to the changes taking effect.
The "Last Updated" date at the top of this Policy reflects when the most recent version came into effect. We recommend reviewing this Policy periodically to stay informed about how x000 protects your personal data. Your continued use of the x000 platform following notification of an updated Privacy Policy constitutes your acknowledgement of the changes.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or x000's handling of your personal data, please contact our support team through the following channels:
- Live Chat: Available 24/7 directly from your x000 account dashboard — the quickest way to reach us for privacy-related queries.
- Support Email: [email protected] — use the subject line "Privacy Query" or "Data Request" to ensure your message is directed to the appropriate team. Please allow up to 48 hours for a response to non-urgent enquiries.
When submitting a privacy-related request, please include your registered x000 username and a clear description of your query or request. This helps x000 locate your account and respond accurately and efficiently.
x000 is committed to resolving all privacy-related queries and requests fairly and promptly. If you are not satisfied with x000's response to a privacy concern, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.