At xc888 we believe you have a right to know exactly what happens with your personal information when you use our platform. This Privacy Policy explains everything clearly – what data we collect, why we collect it, who can see it and what rights you have over it as a Pakistani user.
This Privacy Policy applies to xc888 ("we", "us", "our"), the online betting and gaming platform accessible at xc888.click. xc888 is the data controller responsible for the personal information of players who register and use our platform.
We provide sports betting (including cricket and esports markets), casino games (roulette, crash games and live dealer tables), a VIP loyalty programme and related services to players based in Pakistan. All transactions are conducted in Pakistani Rupees (PKR) via local payment methods.
By using xc888, you agree to the collection and use of your information as described in this Privacy Policy. If you disagree with any part of this policy, please do not use the platform. Questions about this policy can be sent to support@xc888.click at any time.
xc888 collects only the data it actually needs to run the platform and serve you properly. We do not sell it, we do not use it to show you unrelated ads, and we take security seriously. This policy explains all of that in detail.
xc888 collects personal data through several channels: directly from you when you register and use the platform, automatically through your device and browser, and from payment processors when you make deposits or withdrawals. Here is a breakdown of what is collected and when.
xc888 does not store full card numbers. Card payment processing is handled by certified third-party payment processors. We receive only transaction confirmation and masked card identifiers.
Every piece of data xc888 collects has a defined purpose. We do not collect data "just in case". The table below lists our main data uses and why each one is necessary for the platform to operate properly for Pakistani players.
| Purpose | Detail | Legal Basis |
|---|---|---|
| Account creation | Registering your xc888 account and verifying you are who you say you are | Contract |
| Age verification | Confirming you are 18 or over before allowing access to betting and gaming features | Legal obligation |
| Processing bets | Accepting, confirming, settling and paying out bets across sports and casino markets | Contract |
| Deposits & withdrawals | Processing PKR transactions via Easypaisa, JazzCash, bank transfer and cards | Contract |
| Fraud prevention | Monitoring for suspicious activity, multiple accounts, stolen payment methods and money laundering | Legal obligation / Legitimate interest |
| Responsible gaming | Monitoring betting patterns to identify potentially problematic behaviour and apply protective measures | Legal obligation |
| Customer support | Responding to queries, resolving disputes and maintaining support records | Contract / Legitimate interest |
| Platform improvement | Analysing how the platform is used to fix problems and improve features | Legitimate interest |
| Marketing communications | Sending you promotional offers, bonus notifications and platform updates you have opted into | Consent |
xc888 processes your personal data on one or more of the following legal bases depending on the activity:
xc888 does not sell your personal data to any third party. We do not share your data with advertisers. We share your information only where it is strictly necessary to deliver our services or comply with legal requirements. The categories of recipients are listed below.
To process PKR deposits and withdrawals, your payment details are shared with the relevant payment service providers (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card processors). These providers operate under their own privacy policies and are bound by contractual data processing agreements with xc888.
Where enhanced identity verification is required (e.g., for large withdrawals or where fraud is suspected), xc888 may use third-party identity verification services. These services receive only the minimum data necessary for the verification purpose.
xc888 uses third-party services for cloud infrastructure, live dealer game streaming, RNG certification and platform analytics. These partners process data on our behalf under strict contractual obligations and are not permitted to use xc888 player data for their own purposes.
xc888 will share data with law enforcement, regulatory bodies or other government authorities when required to do so by applicable law, court order or regulatory request. We will notify you of such disclosures where permitted to do so.
xc888 has never sold player data to a third party and will not do so in future. Your registration information, betting history and financial data stay within xc888 and the partners listed above who are necessary to operate the platform.
xc888 stores player data on secure cloud servers. All data is encrypted at rest using AES-256 encryption. Transmission of data between your device and the xc888 platform uses TLS (Transport Layer Security) encryption to prevent interception.
Access to xc888 player data is restricted to staff members who need it to perform their job functions. All staff with data access operate under confidentiality obligations. Access is logged and reviewed regularly. Privileged access (e.g., access to financial records) requires multi-factor authentication.
In the event of a data security breach that affects your personal information, xc888 will notify affected players by email within a reasonable timeframe, explain what data was involved and what steps we are taking to address the breach. We take security incidents seriously and have an incident response process in place.
A large share of account security depends on you. Use a strong, unique password for your xc888 account. Do not share your login details with anyone. If you think your account has been accessed without your permission, contact xc888 support immediately.
xc888 uses cookies and similar technologies to make the platform function correctly, remember your preferences and understand how people use the site so we can improve it. Below is a breakdown of the cookie types used on xc888 and what they do.
You can manage non-essential cookies through your browser settings. Disabling functional or analytics cookies will not prevent you from using xc888 but may affect your experience. Essential cookies cannot be disabled as they are required for basic platform operation.
As a player at xc888 you have rights over your personal data. These are not just paper commitments – you can exercise them by contacting support@xc888.click and xc888 will respond within a reasonable timeframe.
You can request a copy of all personal data xc888 holds about you, including your account details, betting history and communication records. We will provide this within 30 days of your request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. This is particularly relevant for name or address information registered at account creation.
You may request deletion of your personal data. Note that we are legally required to retain certain financial and betting records for a minimum period. These cannot be erased on request but all other data can be.
You can ask xc888 to stop using your data for certain purposes – for example, stopping the use of your data for platform improvement analytics – while keeping your account active.
You can request your personal data in a machine-readable format (CSV or JSON). This allows you to take your data elsewhere if you choose. Applies to data you provided directly to xc888.
Where we process your data based on your consent (primarily marketing communications), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, email support@xc888.click with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 days.
xc888 does not retain personal data indefinitely. Our retention periods are set based on the purpose for which the data was collected and any legal obligations that require us to keep records.
After the relevant retention period, data is securely deleted or anonymised so it can no longer be linked to any individual player.
xc888 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an age verification step and we may request documentary evidence (CNIC) to confirm age where any doubt exists.
If we discover that personal data has been collected from a person under 18, we will immediately close the relevant account, delete the data collected and, if applicable, return any real-money balance to the payment source from which it originated.
If you believe a minor has registered on xc888, please contact us immediately at support@xc888.click with as much information as you are able to provide.
xc888 may send you emails, SMS messages and in-platform notifications about promotions, new features, bonus offers and cricket or esports events that may be relevant to you. We only do this where you have given your consent during registration or subsequently opted in to marketing communications.
You can opt out of marketing communications at any time by:
Opting out of marketing will not affect transactional communications – you will still receive messages about your account status, deposit confirmations, withdrawal processing and important platform updates. These are not marketing and cannot be opted out of.
If you have activated self-exclusion on xc888, you will be immediately removed from all marketing lists. xc888 does not contact self-excluded players with promotional content. If you receive a marketing message after self-exclusion, contact support immediately.
xc888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements or platform features. When material changes are made, registered players will be notified by email at least 7 days before the changes take effect.
The updated policy will be published on this page with a revised "last updated" date at the top of the document. Where changes are minor or clarificatory rather than material, we may update the policy without individual notification, but the revised date will always reflect when the most recent change was made.
Your continued use of xc888 after the effective date of any policy update constitutes your acceptance of the revised Privacy Policy.
If you have any questions about this Privacy Policy, want to exercise your data rights or want to raise a complaint about how xc888 has handled your personal data, please contact us using the details below.
xc888 takes privacy complaints seriously. If you raise a concern with us and you are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority applicable in your jurisdiction.
Privacy policies are long by necessity but the key points are simple. Here is what this policy actually means for a Pakistani player on xc888.
Your Easypaisa number, JazzCash account or bank details are shared only with the payment processor handling your transaction. xc888 staff do not have access to your full payment credentials. We store only what is needed to process your deposits and withdrawals in PKR.
xc888 does not run third-party advertising on its platform and does not sell player data to advertisers or data brokers. Your betting history and personal details are not used to build advertising profiles. We have never done this and our policy prohibits it.
Send one email to support@xc888.click and you can request a full copy of everything xc888 holds about you. You can also ask for corrections or request deletion of data that is no longer needed for legal or operational reasons.
Data transmitted between your device and xc888 is encrypted with TLS. Data stored on our servers is encrypted at rest. Staff access to player data is role-restricted, logged and reviewed. We have an incident response plan for the unlikely event of a security breach.
Every marketing message from xc888 has an unsubscribe option. You can stop promotional emails, SMS offers and bonus notifications at any time through your account settings or by emailing us. Transactional messages (receipts, security alerts) will still be sent as these are part of service delivery.
Your data is not kept forever. Active account data is deleted six months after closure. Financial records are kept for five years as required by law, then deleted. We publish exactly how long each category of data is kept so there are no surprises.