xo3bet Privacy Policy

xo3bet (referred to in this Privacy Policy as "xo3bet", "we", "us", or "our") operates the online casino and sports betting platform available at xo3bet.app (the "Platform"). xo3bet serves as the data controller in respect of all personal data collected from users who access or register on the Platform.

We are committed to protecting the privacy and personal data of all our users, including our valued players from Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan. This Privacy Policy has been prepared in accordance with internationally recognised data protection principles and the obligations imposed by our gaming licence conditions.

If you have any questions about who controls your data or how to contact us regarding data protection matters, please refer to Section 13 of this Policy.

xo3bet collects personal data from you through several channels: information you provide directly during registration and account management, information generated automatically through your use of the Platform, and information obtained from trusted third-party sources for verification purposes.

The categories of personal data we collect include, but are not limited to, the following:

xo3bet processes your personal data only for the specific, legitimate purposes described in this Policy. We do not use your data for automated decision-making that produces significant legal effects without human oversight. The primary purposes for which we use your data are as follows:

• Account Registration & Management: To create and maintain your xo3bet account, verify your identity and age (21+ requirement), and provide you with access to the Platform's features and services.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, and supported Pakistani banks and payment services, and to maintain accurate financial records of all transactions on your account.
• KYC & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and gaming licence regulations, including identity verification and ongoing transaction monitoring.
• Responsible Gaming: To monitor gaming activity patterns and identify early indicators of problem gambling behaviour, enabling us to apply deposit limits, cooling-off periods, or self-exclusion measures where necessary for player welfare.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and other security threats to the Platform or to individual user accounts.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email, or any other supported support channel, and to maintain records of such communications.
• Marketing Communications: Where you have given explicit consent, to send you information about xo3bet promotions, bonuses, cricket betting offers, and new platform features. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated and anonymised usage data in order to improve the functionality, performance, and user experience of the xo3bet Platform.
• Legal Obligations: To comply with court orders, regulatory investigations, and other lawful demands from competent authorities.

xo3bet processes personal data only where a valid legal basis exists. Depending on the nature of the processing activity, we rely on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and xo3bet — including account creation, transaction processing, and service delivery. Without this processing, we cannot provide the Platform to you.
• Legal Obligation: Processing required for xo3bet to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, and gaming licence conditions.
• Legitimate Interests: Processing necessary for xo3bet's legitimate business interests, including fraud detection, platform security, and aggregated analytics — provided those interests do not override your fundamental privacy rights.
• Consent: Processing that relies on your freely given, specific, informed, and unambiguous consent — primarily for optional marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing already carried out.

xo3bet does not sell your personal data. We share your data only in the limited circumstances described below, and always under appropriate safeguards:

• Licensed Service Providers: We engage carefully vetted third-party vendors — including payment processors (such as JazzCash and EasyPaisa network operators), KYC verification providers, cloud hosting providers, customer support platform operators, and fraud detection services — who process data on our behalf under binding data processing agreements. These providers may only use your data for the specific purpose for which it was shared.
• Gaming Licence Authorities: Our gaming licence conditions require us to provide player data, transaction records, and activity reports to our licencing authority upon request. Such disclosures are governed by the licence's regulatory framework.
• Law Enforcement & Regulators: xo3bet will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so by a valid court order, subpoena, or equivalent legal instrument.
• Self-Exclusion Registers: Where required by responsible gaming obligations or at your request, xo3bet may share your self-exclusion status with interoperating gaming operators or national exclusion registries to give effect to your self-exclusion election.
• Business Transfers: In the event of a merger, acquisition, or sale of xo3bet's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

xo3bet uses cookies and similar tracking technologies (such as web beacons, local storage objects, and session tokens) to operate the Platform effectively and to understand how users interact with it. Below is a summary of the cookie categories we use:

You can manage your cookie preferences through the Cookie Settings panel accessible from the footer of the xo3bet Platform. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using core Platform features. Most mobile and desktop browsers also allow you to control cookie acceptance at the browser level.

xo3bet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your account relationship with xo3bet, plus an additional period post-closure as required by our gaming licence and AML obligations (typically five to seven years).
• KYC & Identity Documents: Retained for a minimum of five years following account closure, in compliance with AML regulatory requirements. CNIC images and verification documents are stored in encrypted, access-controlled storage.
• Financial Transaction Records: Retained for a minimum of five years following the date of the transaction for regulatory, tax, and audit purposes.
• Support Communications: Retained for three years following the resolution of the relevant query or complaint, unless the communication is relevant to ongoing legal proceedings.
• Marketing Consent Records: Retained for the duration of your consent, plus three years following withdrawal, to evidence compliance with consent obligations.
• Cookie & Session Logs: Technical session logs are retained for up to 90 days. Anonymised aggregated analytics data may be retained indefinitely.

xo3bet respects your rights in relation to your personal data. The following rights are available to you and can be exercised by contacting us at the details provided in Section 13:

xo3bet implements a comprehensive, multi-layered approach to information security to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• Transport Layer Security (TLS 1.2+): All data in transit between your device and xo3bet's servers is encrypted using current TLS standards. Our Platform enforces HTTPS across all pages and rejects insecure connections.
• AES-256 Encryption at Rest: Sensitive stored data — including KYC documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All xo3bet staff who handle personal data undergo privacy and security training and are bound by confidentiality obligations.
• Two-Factor Authentication: xo3bet supports and encourages two-factor authentication (2FA) on all user accounts to reduce the risk of unauthorised access.
• Penetration Testing: xo3bet's Platform undergoes scheduled and ad hoc penetration testing by independent security specialists. Identified vulnerabilities are remediated promptly according to a risk-prioritised patching schedule.
• Incident Response: xo3bet maintains a documented data breach incident response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within the timeframes required by applicable law.

While xo3bet takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely immune to risk. You also play an important role in account security by keeping your login credentials confidential and reporting any suspected unauthorised access to us immediately.

xo3bet operates a strict 21+ age policy with zero exceptions. The Platform is not intended for, directed at, or designed to attract persons under the age of 21. xo3bet does not knowingly collect or process personal data belonging to individuals under 21 years of age.

If you are a parent or guardian and believe that a person under 21 in your care has registered with xo3bet, please contact us immediately at support@xo3bet.app. We will investigate and take appropriate action promptly.

xo3bet also recommends that parents and guardians make use of available parental control software to restrict access to online gambling platforms on devices used by minors.

xo3bet's Platform is operated using cloud infrastructure and third-party service providers that may process data in jurisdictions outside Pakistan. When your personal data is transferred internationally, xo3bet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards employed for international transfers include:

• Binding contractual clauses in data processing agreements with all third-party vendors who may handle your data outside Pakistan, requiring them to apply data protection standards consistent with this Policy;
• Transfers only to jurisdictions or service providers that have demonstrated adequate data protection frameworks as assessed by our compliance team;
• Strict vendor due diligence processes before onboarding any new third-party processor that will handle Pakistani user data.

If you would like more information about the specific safeguards in place for any particular international transfer of your data, please contact us at the details provided in Section 13.

xo3bet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. All changes will be published on this page with an updated effective date shown at the top of the Policy.

For material changes — those that meaningfully affect your privacy rights or alter the purposes for which we process your data — xo3bet will provide at least 14 days' advance notice by email to your registered xo3bet account address before the change takes effect.

We encourage you to review this Privacy Policy periodically to stay informed about how xo3bet is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xo3bet handles your personal data, please contact our data protection team using the details below:

We take all privacy complaints seriously. If you submit a complaint to us, we will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days. Where a complaint is particularly complex, we will keep you informed of progress and provide a final response within 60 days.

If you are not satisfied with xo3bet's response to your complaint, or if you believe that xo3bet is processing your personal data in a manner that is inconsistent with applicable data protection law, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.

xo3bet is committed to working cooperatively with regulators and to resolving all legitimate privacy concerns in good faith and in a timely manner. We view privacy compliance not as a box-ticking exercise but as a genuine obligation to the players who trust us with their data.