At x000, protecting the personal data of our Pakistani players is not a compliance exercise — it is a genuine commitment embedded in the architecture of the platform. This Privacy Policy explains in plain, readable language exactly what personal information x000 collects, why we collect it, who we share it with, how long we retain it, and what rights you have over your own data.
Before you read the full legal text below, here is a plain-language summary of x000's six most important data protection commitments. These are not aspirations — they are operational standards applied to every account on the platform.
x000 applies data minimisation as a core principle. We collect only the personal information genuinely required to operate your account, process your payments, comply with licensing obligations, and deliver the services you have requested. We do not collect data for the sake of having it, and we do not sell your personal data to any third party — ever.
All personal data held by x000 is stored in encrypted form on secure servers. Account data, financial transaction records, and KYC documents are held in segregated storage environments with access controls that restrict access to authorised personnel only. x000 employs 256-bit SSL encryption on all data in transit between your device and our servers.
Pakistani players at x000 have clearly defined rights over their personal data — including the right to access, correct, restrict, and in certain circumstances request deletion of data held about them. These rights can be exercised by contacting x000's data protection team directly. We will respond to all data rights requests within 30 days of receipt.
x000 does not sell, rent, or trade personal data belonging to Pakistani players to any third party for commercial purposes. Data is shared with third parties only where required for service delivery (payment processors, KYC verification providers), regulatory compliance (anti-money-laundering reporting), or with your explicit consent for specific marketing purposes — all as detailed in Section 6 of this Policy.
x000 retains personal data for defined periods tied to the purpose for which it was collected — not indefinitely. Account data is retained for the duration of your active account relationship and for the legally required period following account closure. KYC documents are retained in accordance with anti-money-laundering regulatory requirements. Full retention schedules are set out in Section 9 of this Policy.
x000 only sends marketing communications to players who have actively opted in to receiving them. You can opt out of all marketing communications at any time — from within your account notification settings, by clicking the unsubscribe link in any marketing email, or by contacting customer support. Opting out of marketing does not affect your account status or access to the platform.
This Privacy Policy ("Policy") is published by x000 ("x000," "we," "us," "the Platform"), the operator of the online gaming and sports betting platform accessible at x000.bid. This Policy applies to all personal data collected, processed, stored, and transmitted by x000 in connection with the operation of the platform and the provision of gaming, sports betting, and related services to registered users ("Players," "you").
x000 acts as the data controller in respect of the personal data you provide during registration, KYC verification, deposit and withdrawal transactions, customer support interactions, and your general use of the platform. As data controller, x000 determines the purposes for which your personal data is processed and the means by which that processing occurs.
By registering an account at x000, or by continuing to use the platform following any update to this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the platform and contact support to close your account.
Plain English Summary: x000 is responsible for how your personal data is handled. This document explains everything clearly so you know exactly what happens to your information when you use the platform.
x000 collects the following categories of personal data from or about registered players and, in certain circumstances, prospective users who interact with the platform without completing registration:
| Data Category | Primary Purpose | Retention |
|---|---|---|
| Identity & Contact | Account registration, KYC verification, communications | Account life + 5 years post-closure |
| Financial & Transaction | Payment processing, AML compliance, dispute resolution | 7 years from transaction date |
| Gaming Activity | Service delivery, responsible gaming monitoring, dispute resolution | Account life + 5 years post-closure |
| Technical & Device | Security, fraud prevention, platform improvement | 12 months rolling |
| Communications | Support, dispute resolution, quality assurance | 3 years from interaction |
x000 collects personal data through the following mechanisms:
Data you actively provide to x000 during the account registration process, KYC verification submission, deposit and withdrawal requests, customer support interactions, survey participation, or any other direct communication with x000. This is the primary source of identity, contact, and financial data held by x000.
Technical and device data is collected automatically as a standard function of operating a digital platform. When you access x000.bid, our servers log your IP address, device type, and browser version. The platform uses session cookies and similar technologies to maintain your login state and improve platform performance, as described further in Section 7.
In limited circumstances, x000 may receive personal data about you from third-party sources, including: KYC verification service providers who cross-reference submitted documents against government databases; fraud prevention services that provide risk scores based on technical indicators; and payment processing partners who provide transaction confirmation data. Data received from third parties is handled in accordance with this Policy and is subject to the same security standards applied to directly collected data.
x000 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:
x000 does not process personal data solely on the basis of automated decision-making that has legal or significant effects on players, except where required by AML or fraud detection obligations. Where automated decisions are made in these contexts, players have the right to request human review.
x000 uses the personal data described in Section 2 for the following specific purposes:
x000 does not sell personal data. x000 shares personal data with third parties only in the following specific circumstances, and only to the extent necessary for each purpose:
x000 shares personal data with carefully selected third-party service providers who assist in delivering the x000 platform, including: payment processing partners (JazzCash, EasyPaisa, and banking partners); KYC verification service providers; fraud detection and prevention technology providers; cloud hosting and infrastructure providers; and customer support platform providers. All service providers are contractually obligated to process personal data only on x000's instructions and to maintain security standards consistent with this Policy.
x000 may disclose personal data to regulatory authorities, law enforcement agencies, gaming licence holders, or courts where required by applicable law or by x000's gaming licence obligations. This includes disclosures required under anti-money-laundering regulations, suspicious activity reporting obligations, and responses to lawful court orders or regulatory investigations.
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of x000's assets, personal data may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified of any such transfer and any material changes to data processing arrangements that result from it.
x000 may share personal data with third parties for purposes not described above where you have given your explicit prior consent to such sharing. You may withdraw such consent at any time by contacting x000's data protection team.
x000 uses cookies and similar tracking technologies on the x000.bid platform to deliver core platform functionality and to improve the player experience. This section explains the types of cookies x000 uses and your options for managing cookie preferences.
Essential cookies are strictly necessary for the operation of the x000 platform. They maintain your login session, remember your language preference, and enable core security features including CSRF protection. Essential cookies cannot be disabled without preventing access to the platform.
Functional cookies remember your platform preferences — such as your most recently played games, preferred deposit method, and table stake preferences — to personalise your x000 experience. These cookies do not track your activity outside of x000.bid.
x000 uses anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. Analytics data is processed in aggregated, anonymised form and does not identify individual players. You may opt out of analytics cookies via your browser settings without affecting platform access.
Cookie Management: You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing x000 but may affect certain personalisation features. Instructions for managing cookies in common browsers (Chrome, Firefox, Samsung Internet) are available from your browser's help documentation.
x000 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed, including:
Notwithstanding the above measures, no digital platform can guarantee absolute security. Players are advised to maintain strong, unique passwords for their x000 accounts and to enable two-factor authentication as an additional layer of protection.
x000 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal minimum retention requirements. The following retention periods apply:
Following the expiry of applicable retention periods, personal data is securely and permanently deleted or anonymised in a manner that prevents re-identification.
x000 operates under an international gaming licence and may process or store personal data on servers located outside Pakistan. Where personal data is transferred to jurisdictions outside Pakistan, x000 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections described in this Policy.
Safeguards used by x000 for international data transfers include: data processing agreements with receiving parties incorporating appropriate contractual protections; transfer only to jurisdictions that x000 has assessed as providing adequate data protection standards; and technical controls that limit the scope of data accessible by recipients to the minimum necessary for the applicable processing purpose.
Pakistani players may contact x000's data protection team to request further information about the specific safeguards applied to international transfers of their personal data.
Registered x000 players have the following rights in respect of their personal data. These rights may be exercised by contacting x000's data protection team as described in Section 16. x000 will respond to all rights requests within thirty (30) days of receipt, subject to identity verification requirements.
The x000 platform is strictly intended for persons aged 21 and above. x000 does not knowingly collect personal data from any individual under the age of 21. If x000 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.
If you are a parent or guardian and you believe that your child has registered an account at x000, please contact our support team immediately at the contact details provided in Section 16. x000 takes underage access extremely seriously and will respond to all such reports within 24 hours.
The x000 platform integrates with third-party service providers — including game software providers, payment processors, and live casino studio operators — whose data processing practices are governed by their own privacy policies. While x000 selects service providers with strong data protection standards and enters into appropriate data processing agreements with them, x000 is not responsible for the privacy practices of third-party providers beyond its contractual arrangements with them.
x000.bid does not contain links to external third-party websites. All platform content and services are delivered within the x000 ecosystem. If you are redirected to a third-party site — for example, your bank's online portal during a payment — the privacy practices of that site are governed by the third party's own privacy policy, not this x000 Privacy Policy.
x000 sends marketing communications — including promotional offers, bonus notifications, new game announcements, and seasonal promotions relating to events such as PSL — only to players who have actively opted in to receiving such communications during account registration or via the notification settings panel in their account.
Marketing communications are delivered via SMS to your registered Pakistani mobile number and/or email to your registered email address, according to your notification preferences. x000 does not use your personal data for targeted advertising on third-party platforms.
You may opt out of marketing communications at any time through any of the following methods: (a) clicking the unsubscribe link in any marketing email received from x000; (b) adjusting your notification preferences in your x000 account settings panel; or (c) contacting x000 customer support and requesting removal from all marketing lists. Opting out of marketing communications has no effect on your account status, platform access, or eligibility for bonuses you have already activated.
x000 reserves the right to amend this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or platform operations. The current version of this Policy, including the date of last update, is always accessible at x000.bid/privacy-policy.
Where amendments are material — meaning they significantly change how x000 processes your personal data or affect your privacy rights — x000 will notify registered players via their registered email address at least fourteen (14) days before the amended Policy takes effect. Continued use of the x000 platform following the effective date of an amended Policy constitutes your acceptance of the amended terms.
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights described in Section 11, or wish to make a complaint about x000's data processing practices, please contact x000 through the following channels:
x000 is committed to resolving all privacy concerns fairly and promptly. Where a complaint about data processing cannot be resolved to your satisfaction through direct contact with x000, you may refer the matter to the data protection supervisory authority applicable to x000's licensed jurisdiction.
This Privacy Policy was last updated in January 2026 and supersedes all previous versions. x000 is committed to clear, honest communication about how your personal data is used — and to maintaining your trust as a Pakistani player on the platform.
These are the specific rights you hold over your personal data at x000. All rights can be exercised by contacting x000 support — no legal representation required.
Request a complete copy of all personal data x000 holds about you, including how it is used and who it has been shared with. x000 responds to access requests within 30 days.
Request correction of any inaccurate personal data in your x000 account — name spelling, date of birth, mobile number, or any other personal data that does not accurately reflect your identity.
Request deletion of your personal data where no legal obligation requires retention. Regulatory retention periods (AML, gaming licence) may limit this right — x000 will explain any applicable restrictions.
Request that x000 pause processing of your personal data in specific circumstances — for example, while a rectification request is under review or while you challenge the legal basis for processing.
Receive a structured, machine-readable copy of personal data you have provided to x000 — useful if you want to transfer your data history to another service or review it independently.
Object to processing of your personal data based on legitimate interests — including direct marketing. x000 will cease processing unless compelling legitimate grounds that override your rights are demonstrated.
Age Restriction: x000 is strictly for players aged 21 and above. Your CNIC date of birth is verified during KYC. If you are experiencing gambling-related harm, please visit our Responsible Gaming page immediately for self-exclusion and support resources.
Pakistan's most complete online casino platform takes your data as seriously as your winnings. Cricket betting, slots, live tables, crash games — all in PKR, all secure, all for players 21 and above.
21+ only · Internationally Licensed · 256-bit SSL · All Transactions in PKR