x786 Privacy Policy

This Privacy Policy ("Policy") is issued by x786 ("x786", "we", "us" or "our") and applies to all users ("User", "you" or "your") who access the x786 online gaming platform at https://x786.cam and any associated subdomains, mobile applications and related services (collectively, the "Platform").

x786 is committed to protecting the personal data of all users, including the Pakistani users for whom this English-language platform is primarily designed. This Policy explains what personal data we collect, the purposes for which we process it, the legal basis for that processing, how we protect your data, and the rights you hold under applicable data protection law.

By accessing the Platform, registering an account or using any x786 service, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into the x786 Terms & Conditions. If you do not agree to this Policy, you must immediately cease using the Platform.

Note for Pakistani Users: Pakistan does not currently have a comprehensive general data protection law equivalent to the EU GDPR. x786 nonetheless operates to an internationally recognized data protection standard as part of its licensing obligations. References to data subject rights in this Policy reflect the protections x786 voluntarily extends to all users regardless of jurisdiction, in addition to any rights mandated by applicable law.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

x786 collects personal data through multiple channels: directly from you when you register, deposit, wager or contact support; automatically through your use of the Platform; and, in limited cases, from third-party verification providers. We do not collect more data than is necessary for the purposes described in this Policy.

• Full legal name, date of birth and gender.
• Current residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar).
• Valid email address and contact phone number.
• Username and encrypted account password.
• Account registration date, IP address at registration and device type.

• Pakistani Computerised National Identity Card (CNIC) number and scanned document image.
• Passport (front and biographical data page) where CNIC is unavailable or supplementary verification is required.
• Proof of current residential address (e.g., utility bill, bank statement dated within 90 days).
• Liveness check / facial recognition image used solely for age and identity verification purposes.

• Deposit amounts, payment method references (e.g., masked account identifiers for Easypaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah — not full account numbers), transaction timestamps and transaction IDs.
• Withdrawal requests, processed amounts, payment method selected and processing status.
• PKR-denominated account balance records and transaction history.
• Cryptocurrency wallet addresses (BTC, USDT) where applicable, stored only as partial references.

• Game types accessed (sports betting, live casino, cricket markets, PSL/T20 fixture markets, etc.).
• Wager amounts, bet outcomes, session durations and total gaming activity.
• Responsible gambling tool settings (deposit limits, self-exclusion status, cooling-off periods).

• IP address, browser type, operating system and device identifiers.
• Pages visited, time spent on pages, click paths, search queries and referral source.
• Session login/logout timestamps and Platform error logs.
• Geolocation data (country and city level) derived from IP address.

• Content of live chat conversations, email correspondence and support tickets.
• Satisfaction survey responses and voluntary feedback submissions.

x786 processes personal data for specific, documented purposes. The following table summarizes the primary purposes for which your data is processed and the corresponding legal basis for that processing.

x786 processes personal data under the following legal bases, consistent with internationally recognized data protection standards applicable in our licensing jurisdiction:

• Contractual Necessity: Processing required to perform the contract between x786 and the User — including account registration, transaction processing, KYC verification and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and licensing regulations, including anti-money laundering (AML) and counter-terrorist financing (CTF) obligations.
• Legitimate Interests: Processing carried out for x786's legitimate business interests — including fraud prevention, platform security and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, certain non-essential cookies and optional analytics — carried out only where you have given free, specific, informed and unambiguous consent, which may be withdrawn at any time.

x786 does not sell, rent or trade your personal data to third parties for their independent marketing purposes. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

• KYC Verification Providers: Third-party identity verification services that process your CNIC, passport and liveness check data solely for the purpose of verifying your identity and age.
• Payment Processors: Financial intermediaries required to process deposits and withdrawals. Payment brand names referenced on the Platform (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) are contextual references only — none are affiliated with x786 or endorse gambling activities.
• Fraud Prevention & AML Screening Services: Services that cross-reference transaction and identity data against international sanction lists, politically exposed persons (PEP) databases and fraud risk registries.
• IT Infrastructure & Hosting Providers: Cloud hosting and infrastructure providers that store Platform data in secure, access-controlled data centers under binding data processing agreements.
• Customer Support Platforms: Live chat and helpdesk software providers that facilitate support interactions. These providers process only the communication data necessary to deliver support.
• Regulatory Authorities: x786's licensing authority and any other competent regulatory or law enforcement authority where disclosure is required by law or our operating license.
• Analytics Providers: Aggregated, anonymized usage data may be shared with analytics providers to improve Platform performance. No personally identifiable data is shared for analytics purposes.

x786 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience and analyze usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your login session, security tokens and account preferences. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your language preference (English), display settings and responsible gambling tool configurations so that these persist across sessions.
• Analytics Cookies: Collect aggregated, anonymized data about how users navigate the Platform — pages visited, time on page, navigation paths — to help x786 improve the user experience for Pakistani players. These are activated only with your consent.
• Marketing Cookies: Used only where you have opted in to marketing communications. Track promotional campaign effectiveness to ensure x786 serves relevant offers. You may opt out at any time through your Account preferences.

You can manage cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to use the Platform. x786 does not use cookies to track users across third-party websites unrelated to the Platform.

x786 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or our operating license. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your Account plus a minimum period following Account closure as required by our operating license (typically 5–7 years for AML and regulatory purposes).
• KYC Documents: Retained for the period mandated by our licensing authority following KYC completion or Account closure, typically a minimum of five (5) years.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable AML and financial record-keeping obligations.
• Support Communications: Retained for a minimum of three (3) years from the date of the last interaction, or longer where the communication relates to a dispute or regulatory matter.
• Marketing Consent Records: Retained for the period during which consent is active, plus a reasonable period to demonstrate compliance with opt-in requirements.
• Technical Logs: Server and access logs are retained for up to twelve (12) months from generation unless required for ongoing security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with x786's data deletion procedures.

x786 implements a range of technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, loss or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive personal data and KYC documents in access-controlled data centers.
• Two-factor authentication (2FA) available to all registered users.
• Role-based access controls limiting employee access to personal data strictly to those with a documented business need.
• Regular penetration testing, vulnerability scanning and security audits of Platform infrastructure.
• Formal data breach response procedures with defined escalation paths and regulatory notification timelines.

While x786 takes reasonable technical steps to protect your data, no method of electronic transmission or storage is entirely secure. Users are responsible for maintaining the confidentiality of their own account credentials and must notify [email protected] immediately upon suspecting unauthorized account access.

x786 recognizes and respects the data rights of all users. Subject to applicable law and our regulatory obligations (including AML/KYC retention requirements), you may exercise the following rights with respect to your personal data:

To exercise any of these rights, please submit your request in writing to [email protected]. x786 will acknowledge your request within five (5) business days and aim to respond substantively within thirty (30) days. Complex or high-volume requests may require an additional thirty (30) day extension; you will be notified if this applies.

Please note that certain rights are subject to limitations under applicable law. For example, x786 cannot erase personal data where retention is required by AML regulations or our operating license, and cannot restrict processing where this would prevent us from meeting legal obligations.

The x786 Platform is strictly intended for adults aged 18 years or older (or the higher minimum age required by the operator's license jurisdiction). x786 does not knowingly collect personal data from individuals under 18 years of age.

Age verification is conducted as part of the KYC process and is a mandatory condition of withdrawal. Where x786 has reasonable grounds to suspect that a registered user is under 18, the Account will be suspended immediately pending verification and all gaming activity during the period of suspected underage access may be voided.

If you believe that a minor has registered on the Platform or that x786 has inadvertently collected personal data from a person under 18, please contact [email protected] immediately. x786 will take prompt steps to delete such data upon verification of the report.

As x786 operates under an international licensing framework and uses global service providers for hosting, KYC verification, fraud prevention and customer support, your personal data may be transferred to and processed in countries outside your country of residence, including countries outside Pakistan.

Where personal data is transferred internationally, x786 implements appropriate safeguards to ensure that the data is protected to a standard consistent with x786's data protection commitments. Such safeguards may include contractual data protection clauses binding the recipient to x786's standards, or transfers to jurisdictions that provide adequate data protection under applicable international standards.

By using the Platform, you acknowledge and consent to the international transfer of your personal data as described in this Policy. If you have questions about the specific safeguards applied to international transfers, please contact us at [email protected].

x786 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements or Platform functionality. Where material changes are made, x786 will notify registered users via the email address associated with their Account, or via a prominent notice on the Platform, prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects when the most recent revision was made. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and may request Account closure.

For all privacy-related enquiries, data subject rights requests or concerns about x786's handling of your personal data, please contact our support team using the details below. All privacy enquiries will be treated with confidentiality and handled in accordance with this Policy.