x99 Privacy Policy — Your Data, Explained Clearly

01 Who We Are

x99 is an online entertainment platform operating at x99.ng, offering Casino games, Slot Games, Bingo, VIP membership and related gaming services to players in Pakistan. References to "x99", "we", "us" or "our" throughout this Privacy Policy refer to the x99 platform and its operating entity.

This Privacy Policy governs the collection, use, storage and protection of personal data for all users who access x99 through any channel — including the website at x99.ng, the x99 Android app, or any other official x99 platform interface. It applies to all registered account holders and to any visitor who browses the platform without an account.

By registering an account on x99 or by continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood how your personal data is handled as described in this document. If you do not agree with this policy, please do not register an account or continue using x99.

02 What Data We Collect

x99 collects different categories of personal data depending on how you interact with the platform. The main categories are outlined below:

x99 does not collect sensitive personal data such as religious beliefs, political opinions or biometric data unless specifically required for identity verification purposes and only with your explicit consent in those cases.

03 How We Collect It

x99 collects your personal data through several channels:

• Direct input: Information you provide when completing the registration form, submitting a KYC verification request, contacting support, or updating your account profile.
• Automated collection: Technical data collected automatically when you access the x99 website or app — including your IP address, device identifiers, browser version and session activity. This collection happens as a standard part of how web platforms operate.
• Payment processors: When you deposit or withdraw PKR using JazzCash, Easypaisa, Raast, Bank Transfer or other supported methods, the payment provider shares transaction confirmation data with x99 for the purpose of crediting or debiting your account balance.
• Cookies and similar technologies: Cookies placed on your browser or device during your visit. See Section 7 for full details on how x99 uses cookies.
• Identity verification partners: Where x99 uses a third-party KYC service to verify your CNIC or other identity documents, that provider may return verification status and relevant data to x99 as part of the verification process.

x99 only collects data that is genuinely necessary for the purposes described in this policy. We do not collect data speculatively or beyond what is needed to operate your account, process your transactions and keep the platform secure.

04 Why We Use Your Data

x99 uses your personal data for the following purposes. Each purpose has a lawful basis that justifies the processing:

• Account management: To create and maintain your x99 account, authenticate your login, and provide access to the games and features available on the platform.
• Payment processing: To process your PKR deposits and withdrawal requests, verify payment method ownership, and maintain an accurate transaction history for your account.
• Identity verification: To confirm your age and identity in line with our Terms and Conditions — ensuring that the platform is only accessible to adults aged 18 and above.
• Fraud and security: To detect, investigate and prevent fraudulent activity, money laundering, duplicate accounts and any other conduct that poses a risk to the platform or other players.
• Customer support: To respond to your queries, resolve disputes, process complaints, and maintain a record of our communications with you.
• Platform improvement: To analyse aggregate usage patterns and player behaviour in order to improve game selection, platform performance and the overall x99 experience.
• Marketing communications: To send you bonus offers, VIP programme updates and promotional content — only where you have not opted out of receiving such communications.
• Responsible Gaming: To monitor account activity for patterns that may indicate problematic gambling behaviour and to apply account restrictions or self-exclusion measures where requested or where we have a duty of care to act.

05 Payment Data and PKR Transactions

All financial transactions on x99 are denominated in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, Bank Transfer, debit/credit cards or other supported mobile wallets, x99 receives transaction confirmation data from the relevant payment provider.

x99 does not store full card numbers or complete mobile wallet credentials on its own servers. Payment processing is handled directly by the relevant payment service provider using their own secure infrastructure. x99 receives and retains only the data required to reconcile your account balance — such as transaction reference numbers, amounts, timestamps and payment method type.

• Withdrawal requests can only be processed to a payment method registered in your own name. x99 may request additional verification before processing withdrawals above defined thresholds.
• Transaction records are retained for the period described in Section 8 of this policy.
• If a payment dispute or chargeback is raised, the relevant transaction data may be shared with the payment provider and their dispute resolution process.

06 Sharing and Disclosure

x99 does not sell, rent or trade your personal data to any third party. Personal data may be shared in the following limited circumstances only:

• Payment providers: JazzCash, Easypaisa, Raast, banks and card networks receive the transaction data necessary to process your PKR deposits and withdrawals. Each provider operates under their own privacy and data security standards.
• Identity verification services: Where a third-party KYC provider is used to verify your CNIC or other identity documents, your data is shared with that provider solely for the purpose of completing verification. The provider is bound by a data processing agreement with x99.
• Technology and hosting providers: x99 uses third-party infrastructure providers for hosting, data storage and platform delivery. These providers process data on x99's instructions and are contractually prohibited from using your data for their own purposes.
• Fraud detection services: Aggregate and anonymised data may be shared with fraud detection partners to identify and prevent suspicious activity across the platform.
• Legal obligations: x99 may disclose personal data where required to do so by applicable law, court order or the valid request of a competent authority. x99 will take reasonable steps to notify affected users where it is legally permitted to do so.

In all cases where personal data is shared with a third party, x99 maintains appropriate contractual protections to ensure that data is handled responsibly and only used for the specific purpose for which it was shared.

07 Cookies and Tracking Technologies

x99 uses cookies — small text files stored on your device — and similar technologies to make the platform work correctly and to understand how it is being used. The types of cookies x99 uses are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Preference cookies: Remember settings you have applied — such as your preferred language or notification preferences — so you do not have to re-enter them on every visit.
• Analytics cookies: Collect aggregate, anonymised data about how players navigate the platform — which pages are visited most, where players drop off, and how different features are used. This information is used to improve the platform experience. No individual player is identified through analytics cookies.

x99 does not use third-party advertising cookies or tracking technologies that follow you across other websites. You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to use key platform features including login.

08 Data Retention

x99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required to comply with applicable legal obligations. The general retention principles x99 applies are:

• Active accounts: Personal data associated with an active x99 account is retained for the full duration of the account's existence plus a reasonable post-closure period.
• Closed accounts: Following account closure, basic identity and transaction records are retained for a minimum of five years to satisfy financial record-keeping obligations. Data that is no longer required is securely deleted or anonymised at the end of this period.
• Support communications: Records of support interactions are retained for up to three years from the date of the most recent communication, or longer where an unresolved dispute exists.
• Technical and session data: Log data and session records are typically retained for 90 days before being deleted or anonymised, unless specific records are needed as part of a fraud investigation or security review.

When personal data is no longer required, x99 either securely deletes it or anonymises it so that it can no longer be linked back to an individual. Anonymised data may be retained indefinitely for aggregate analytics purposes.

09 Security Measures

x99 takes the security of your personal data seriously and applies a range of technical and organisational measures to protect it against unauthorised access, loss, misuse or alteration. These measures include:

• TLS encryption for all data transmitted between your device and x99 servers, including login sessions, deposit flows and withdrawal requests.
• Encrypted storage of sensitive account and payment-related data at rest.
• Access controls that restrict internal access to personal data on a need-to-know basis. x99 staff do not have routine access to player financial data or full identity records.
• Regular security reviews and monitoring of platform infrastructure to detect and respond to potential threats.
• Two-factor authentication options available to players for additional account security.

While x99 applies robust security measures, no digital platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their x99 account, to keep their login credentials confidential, and to contact x99 support immediately if they suspect unauthorised access to their account.

10 Your Rights Over Your Data

As an x99 account holder, you have a number of rights in relation to the personal data we hold about you. These rights can be exercised by contacting x99 support at any time:

x99 aims to respond to all data rights requests within 30 days of receipt. Where a request is complex or there are a large number of requests, we may extend this period by up to a further 30 days and will notify you accordingly. All requests are handled free of charge unless they are manifestly unfounded or excessive.

11 Children and Minors

x99 is strictly an adults-only platform. Registration and use of the x99 platform is limited to individuals aged 18 and above. x99 does not knowingly collect, store or process the personal data of anyone under the age of 18.

If x99 becomes aware that personal data belonging to a person under the age of 18 has been collected — for example, through identity verification revealing an incorrect date of birth — the account will be closed immediately, the data will be deleted in accordance with our retention policy, and any balance will be returned after verification of the deposit source.

If you are a parent or guardian and believe that a minor in your care has registered an x99 account, please contact x99 support immediately so that the account can be closed and the data handled appropriately.

12 Policy Updates

x99 may update this Privacy Policy from time to time to reflect changes in the way the platform operates, changes in applicable law, or improvements in our data handling practices. The "Last Updated" date shown at the top of this page will always reflect when the most recent changes were made.

Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — x99 will notify registered account holders via email or an in-platform notification before the changes take effect. For minor or clarificatory changes, the updated policy will be published on this page without advance notice.

Continued use of x99 following an update to this Privacy Policy constitutes acceptance of the revised version. If you do not agree with an update, you should contact x99 support to close your account before the revised policy takes effect.

13 Contact Us

If you have a question about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data is being handled, please contact the x99 support team. We are available 24 hours a day, seven days a week.

x99 aims to acknowledge all privacy-related queries within 24 hours and resolve them within the timeframes described in Section 10 of this policy. For complex data requests, you will be kept informed of progress throughout the process.

Contact x99 support: [email protected]

For related legal information, see our Terms and Conditions and Responsible Gaming pages.