xc444 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") is issued by xc444 ("xc444", "we", "us", "the Platform") and applies to all personal data collected, processed, stored, or transmitted in connection with the operation of the xc444 online gaming and sports betting platform accessible at https://xc444.bet, including all associated subdomains, mobile browser interfaces, and application programming interfaces.

xc444 serves Pakistani players across Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, Multan, Peshawar, and all cities and regions throughout Pakistan. This Policy is written in English and governs the processing of personal data belonging to all xc444 account holders, prospective registrants, and visitors to the xc444 platform, regardless of location.

xc444 acts as the data controller for all personal data processed under this Policy — meaning we determine the purposes and means of data processing. Where xc444 engages third-party service providers to process data on its behalf, those providers act as data processors under contractual obligations that require compliance with data protection standards consistent with this Policy.

This Policy should be read together with the xc444 Terms & Conditions, which are incorporated by reference and contain additional provisions relating to account security, prohibited conduct, and responsible gaming. By registering for an xc444 account or using the Platform, you confirm your acceptance of this Privacy Policy in its entirety.

xc444 collects the following categories of personal data in the course of providing its services to Pakistani players. We collect only the data that is necessary for the specific purposes described in Section 4 of this Policy.

2.1 Account Registration Data

When you create an xc444 account, we collect:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used for age verification — players must be 21 or older);
• Pakistani CNIC (Computerised National Identity Card) number or passport number;
• Residential address including city and province;
• Pakistani mobile telephone number;
• Email address;
• Username and encrypted password hash.

2.2 Identity Verification (KYC) Data

In fulfilment of our Know Your Customer obligations, we may additionally collect:

• Scanned or photographed copies of your CNIC, passport, or other government-issued identity documents;
• Proof of address documents such as utility bills or bank statements;
• Selfie or live facial verification images where required for enhanced identity confirmation;
• Source of funds documentation in cases where large transactions require enhanced due diligence.

2.3 Financial and Transaction Data

In connection with deposits and withdrawals we collect:

• JazzCash or EasyPaisa mobile wallet registration details;
• Bank account details (bank name, account title, account number) for HBL, UBL, or Meezan Bank transfers;
• Masked payment card details (card type, last four digits, expiry month/year) — full card numbers are never stored by xc444;
• Complete records of all deposit and withdrawal transactions including amounts in PKR, timestamps, reference numbers, and processing status.

2.4 Gaming Activity Data

• Complete betting history including all sports bets, casino game rounds, and gaming transactions;
• Game session durations, frequency of play, and wagering patterns;
• Bonus claims, wagering requirement progress, and promotional participation records.

2.5 Technical and Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system version, and browser type;
• Mobile network operator (e.g. Jazz, Ufone, Zong, Telenor);
• Session logs including login timestamps, pages visited, and features accessed;
• Cookie identifiers and similar tracking data as described in Section 10.

2.6 Communications Data

• Records of all communications between you and the xc444 customer support team via live chat and email;
• Support ticket content, complaint records, and resolution notes.

xc444 collects personal data through the following channels:

3.1 Direct Collection

The majority of your personal data is collected directly from you — when you complete the xc444 registration form, submit KYC documentation, make a deposit or withdrawal request, contact xc444 customer support, or update your account settings. This is the primary collection method and you are in full control of what you provide at each stage.

3.2 Automated Technical Collection

When you access and use the xc444 platform, certain technical data is collected automatically by our systems — including your IP address, device information, session activity, and cookie data. This automated collection is necessary for platform security, fraud detection, and performance optimisation. It occurs for all platform visitors, including non-registered users.

3.3 Third-Party Collection

In limited circumstances, xc444 may receive data from third parties, including:

• Identity verification service providers who confirm the authenticity of documents you submit for KYC;
• Payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank who provide transaction confirmation data;
• Fraud prevention and anti-money laundering screening services who flag high-risk patterns against industry watchlists.

All third-party data sources used by xc444 are operated by reputable service providers under contractual data sharing agreements that limit the scope and use of shared data to the specific purpose for which it is disclosed.

The table below sets out the primary purposes for which xc444 processes personal data and the data categories used for each purpose:

xc444 processes personal data only where a valid legal basis exists for that processing. The primary legal bases on which xc444 relies are as follows:

5.1 Contractual Necessity

The majority of xc444's data processing activities are necessary for the performance of the contract between xc444 and you as an account holder — specifically, the provision of online gaming and betting services under the xc444 Terms & Conditions. This includes account creation and management, payment processing, KYC verification, and the delivery of gaming services.

5.2 Legal Obligation

Certain data processing activities — particularly KYC identity verification, AML screening, and transaction record-keeping — are required by law under xc444's international gaming licence and applicable financial regulations. xc444 cannot waive these obligations and may be required to process and retain this data regardless of your individual preferences.

5.3 Legitimate Interests

xc444 processes certain technical and device data on the basis of its legitimate interest in maintaining platform security, detecting fraud, preventing money laundering, and protecting the integrity of gaming outcomes. This processing is proportionate to those legitimate interests and does not override your fundamental privacy rights.

5.4 Consent

Where xc444 wishes to send you promotional communications — including bonus offers, PSL season promotions, and new product announcements — we will do so only where you have provided explicit consent. Consent for marketing communications can be withdrawn at any time by contacting xc444 support or by updating your account preferences.

xc444 does not sell, rent, trade, or otherwise share your personal data with third parties for their own independent commercial or marketing purposes. Data sharing by xc444 is limited to the following specific circumstances:

6.1 Service Providers (Data Processors)

xc444 engages carefully selected third-party service providers who process personal data on xc444's behalf and under xc444's instruction. These include:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard — receive the minimum transaction and identity data necessary to process your deposits and withdrawals;
• Identity verification services: receive copies of identity documents for KYC verification purposes only;
• Fraud detection and AML screening services: receive transaction pattern data and identity data for risk assessment;
• Cloud infrastructure providers: host xc444 platform data under strict data security agreements;
• Customer support platform providers: process live chat and email communications on xc444's behalf.

All service providers are bound by data processing agreements that prohibit use of xc444 user data for any purpose other than the specific service being provided.

6.2 Regulatory and Legal Disclosure

xc444 may disclose personal data to regulatory authorities, law enforcement agencies, gaming licensing authorities, financial intelligence units, or courts of competent jurisdiction where xc444 is legally required or legally permitted to do so. Such disclosures may be made without notice to you where required by law or where notification would compromise an investigation.

6.3 Business Transfers

In the event that xc444 or a material part of its business is sold, merged, or transferred to another entity, personal data held by xc444 may be transferred as part of that transaction. xc444 will take reasonable steps to ensure that the receiving entity provides privacy protections consistent with this Policy, and will provide notice to affected account holders where practicable.

As an internationally operated gaming platform, xc444 may transfer personal data to, and process it in, countries other than Pakistan. This may occur where xc444's cloud infrastructure, identity verification providers, or gaming system vendors are located in jurisdictions outside Pakistan.

Where personal data is transferred internationally, xc444 takes the following steps to ensure adequate protection:

• Transfers are made only to service providers located in jurisdictions that maintain data protection standards assessed as adequate for the purpose of the transfer;
• Contractual data processing agreements binding the recipient to data protection obligations are in place for all international transfers;
• Technical security measures — including end-to-end encryption in transit — apply to all internationally transferred data;
• The scope of data transferred internationally is limited to the minimum necessary for the specific service being provided.

By using the xc444 platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data under the safeguards described above.

xc444 retains personal data for the periods necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply:

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised. Data that is anonymised — meaning it can no longer be associated with any identified or identifiable individual — may be retained indefinitely for aggregate analytics and platform improvement purposes.

xc444 implements a multi-layered security architecture designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

9.1 Technical Security Controls

• 256-bit SSL/TLS encryption on all data in transit between your device and xc444 servers;
• AES-256 encryption for sensitive data at rest in xc444 databases;
• Tokenisation of payment card data — full card numbers are never stored in xc444 systems;
• Multi-factor authentication available for all account holders and mandatory for xc444 staff accessing production systems;
• Intrusion detection systems and real-time security event monitoring;
• Regular penetration testing by independent security specialists;
• Strict access controls limiting data access to personnel with a documented operational need.

9.2 Organisational Security Controls

• All xc444 personnel with access to personal data receive data protection training;
• Data processing activities are documented in an internal data processing register;
• Third-party service providers undergo security assessment before engagement and are subject to ongoing monitoring;
• A data breach response procedure is in place — in the event of a data breach affecting your personal data, xc444 will notify affected individuals in accordance with applicable regulatory requirements.

xc444 uses cookies and similar client-side tracking technologies to enable core platform functionality, maintain session security, detect fraud, and generate aggregate performance analytics. The following cookie categories are used by xc444:

10.1 Strictly Necessary Cookies

These cookies are essential for the xc444 platform to function. They include session authentication cookies that keep you logged into your xc444 account, CSRF protection tokens that prevent cross-site request forgery attacks, and load balancer cookies that ensure consistent server routing. These cookies cannot be disabled without rendering the platform non-functional.

10.2 Functional Cookies

Functional cookies remember your platform preferences — including your preferred game lobby view, language settings, and responsible gaming reminder configurations. They improve your xc444 experience by eliminating the need to re-configure preferences on each session.

10.3 Analytics Cookies

xc444 uses first-party analytics cookies to collect aggregated, anonymised data about how the platform is used — including which sections are most visited, typical navigation paths, and common support enquiry types. This data is used to improve the xc444 platform for Pakistani players. Analytics cookies do not identify individual users.

10.4 Fraud Detection Cookies

xc444 employs device fingerprinting and fraud detection cookies that help identify patterns associated with fraudulent account creation, bonus abuse, and unauthorised account access. These are treated as strictly necessary cookies due to their role in platform security.

xc444 does not use third-party advertising cookies, behavioural tracking cookies, or cookies that share your activity data with advertising networks. You can manage cookie preferences through your browser settings; disabling non-essential cookies will not prevent access to the core xc444 gaming and betting features.

As an xc444 account holder and data subject, you hold the following rights with respect to your personal data. xc444 is committed to facilitating the exercise of these rights promptly and without undue obstacles.

• Right of Access: You may request a copy of all personal data xc444 holds about you, free of charge, within 30 days of your request. Requests can be submitted to support@xc444.bet with the subject line "Data Access Request".
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by xc444. Many basic account details — such as your email address and contact number — can be updated directly through your xc444 account settings. Corrections to identity data require contact with xc444 support.
• Right to Erasure: You may request deletion of your personal data where xc444 is no longer legally required to retain it. Note that regulatory and legal obligations (including AML and gaming licence requirements) may require xc444 to retain certain data categories for specified periods even after account closure.
• Right to Restrict Processing: You may request that xc444 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where the processing is based on your consent or a contract with you.
• Right to Object: You may object to data processing carried out on the basis of xc444's legitimate interests. You may withdraw consent for marketing communications at any time without affecting the lawfulness of processing prior to withdrawal.

All data rights requests should be submitted to support@xc444.bet. xc444 will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 30 days with notice to you.

xc444 strictly enforces a minimum age requirement of 21 years for all account holders. The xc444 platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory step in the xc444 registration process.

If xc444 becomes aware that personal data has been collected from an individual under the age of 21, xc444 will immediately suspend the relevant account, permanently delete all personal data associated with the underage registration, and ensure that no financial transactions associated with the underage account are processed or retained beyond the minimum period required for regulatory reporting purposes.

Parents and guardians who become aware that their child may have registered for an xc444 account should contact xc444 immediately at support@xc444.bet. xc444 will treat all such reports as urgent and respond within 24 hours.

xc444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. The "Effective Date" shown at the top of this Policy indicates when the current version came into force.

Where updates are material — meaning they substantially affect how we collect, use, or share your personal data — xc444 will provide at least seven (7) days' advance notice by displaying a prominent notice on the xc444 platform and, where practicable, by sending an email notification to your registered address. Minor clarifications and non-substantive updates may be implemented without prior notice.

The most current version of the xc444 Privacy Policy will always be available at https://xc444.bet/privacy-policy. Your continued use of the xc444 platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes. If you do not accept an update, you must cease using the platform and may request account closure in accordance with the xc444 Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xc444 processes your personal data, please contact the xc444 Data & Privacy team through the following channels:

• Email: support@xc444.bet — use subject line "Privacy Enquiry" for fastest routing to the relevant team. Response guaranteed within 4 hours.
• Live Chat: Available 24/7 directly through the xc444 platform. Live chat agents can handle general privacy questions and escalate data rights requests to the Privacy team.

For formal data subject rights requests — including requests for access, rectification, erasure, or portability — written communication via email is the required channel. Please include your full name, xc444 username, registered email address, and a clear description of the right you wish to exercise.

xc444 is committed to handling all privacy enquiries and data rights requests with transparency, professionalism, and in accordance with the standards expected of a responsible, internationally operated gaming platform. Pakistani players across Karachi, Lahore, Faisalabad, Islamabad, and the rest of the country can rely on xc444 to treat their personal data with the care and respect it deserves.