x8888 Privacy Policy — Your Data, Protected

x8888 is an online casino and sports betting platform operated under an international gaming license and accessible at x8888.bio. For the purposes of this Privacy Policy, x8888 acts as the data controller in respect of all personal information collected from players who register, deposit, wager, or otherwise interact with the x8888 platform.

References to "x8888," "we," "us," or "our" throughout this Privacy Policy refer to the x8888 platform operator and its licensed affiliated entities responsible for data processing activities described herein.

If you have any questions about how x8888 processes your personal data, or if you wish to exercise any of your data subject rights described in Section 10 of this Policy, you may contact our Data Protection team at any time:

• Email: [email protected]
• Live Chat: Available 24/7 inside your x8888 account dashboard

x8888 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from trusted third-party service providers. The categories of personal data we collect are described in the table below.

x8888 does not collect sensitive personal data such as biometric data, racial or ethnic origin, religious beliefs, health information, or political opinions, except where a player voluntarily discloses such information in the context of a responsible gaming self-assessment or support interaction. Any such disclosure is treated with the highest level of confidentiality and processed only to provide the requested support.

x8888 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases on which x8888 relies are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, game delivery, and withdrawal execution.
• Legal Obligation: Processing required to comply with x8888's international gaming license conditions, including KYC identity verification, age verification, anti-money laundering (AML) screening, and responsible gaming monitoring obligations.
• Legitimate Interests: Processing undertaken for x8888's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, abuse detection, and internal analytics to improve our services.
• Consent: Processing of data for marketing communications (promotional emails, SMS bonus alerts) where you have provided clear, freely given, informed, and specific consent at registration or via your account marketing preferences settings. You may withdraw this consent at any time.

Where processing is based on legitimate interests, x8888 has conducted a balancing assessment to confirm that those interests do not unfairly override your fundamental privacy rights. Copies of these assessments are available on request via [email protected].

x8888 uses the personal data collected from players for the following specific purposes, each linked to a legal basis identified in Section 3:

• Account Creation & Management: To create your x8888 account, maintain accurate account records, enable secure login, and process account-level requests including password resets and contact detail updates. (Contractual Necessity)
• Payment Processing: To execute PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank, and to maintain accurate financial transaction records. (Contractual Necessity)
• Identity & Age Verification (KYC): To verify that you are who you claim to be, that you are at least 21+ years of age, and that your payment methods are legitimately yours. This is a mandatory licensing obligation. (Legal Obligation)
• Fraud & AML Detection: To monitor transactions and betting patterns for indicators of fraud, money laundering, account takeover, or other prohibited activities. Suspicious activity is reported to relevant authorities as required by our licensing obligations. (Legal Obligation / Legitimate Interests)
• Responsible Gaming Monitoring: To track your gaming activity against the deposit, loss, and session limits you have set, and to identify patterns that may indicate problem gambling behaviour warranting proactive outreach. (Legal Obligation / Legitimate Interests)
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain records of support interactions. (Contractual Necessity / Legitimate Interests)
• Promotional Communications: To send you bonus offers, PSL odds updates, cricket betting promotions, and platform announcements where you have consented to receive marketing from x8888. (Consent)
• Platform Improvement: To analyse aggregated, anonymised usage data to improve game selection, interface design, payment flow, and overall platform performance for Pakistani players. (Legitimate Interests)
• Legal Compliance: To respond to lawful requests from regulatory authorities, law enforcement agencies, or courts in connection with our licensing obligations. (Legal Obligation)

x8888 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share player data only in the limited circumstances described below, and only with parties bound by confidentiality obligations and data processing agreements:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive the minimum financial and identity data necessary to execute your deposit and withdrawal transactions. These providers operate under their own privacy policies and are independently regulated financial institutions.
• KYC & Identity Verification Providers: x8888 uses licensed third-party KYC providers to automate identity document verification, age verification, and sanctions screening. These providers process your identity documents solely for verification purposes and are contractually prohibited from retaining or using your data for any other purpose.
• Fraud Prevention & AML Services: Aggregated transaction data and device fingerprint information may be shared with fraud detection and AML screening services to protect the integrity of the x8888 platform and its players.
• Gaming License Authority: x8888 is required under the conditions of its international gaming license to share certain player activity data, including KYC records and responsible gaming intervention logs, with the licensing authority upon request.
• IT Infrastructure Providers: x8888 uses cloud hosting and data centre providers to store and process platform data. These providers are contractually bound to process data solely on x8888's instructions and to implement appropriate technical security measures.
• Legal & Regulatory Disclosure: x8888 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of x8888, its players, or the public.

All third-party data processors engaged by x8888 are subject to formal Data Processing Agreements that require them to maintain confidentiality, implement appropriate security measures, and process player data only as instructed by x8888.

x8888 uses cookies and similar tracking technologies (pixel tags, local storage) to operate the platform securely, remember your preferences, and — with your consent — to understand how players use the site so we can improve it. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function. These enable secure login sessions, maintain your account state during gameplay, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how players navigate the x8888 platform — which games are most popular, where players encounter errors, and how long sessions last. This data is used solely to improve platform performance. Requires your consent.
• Functionality Cookies: Remember your language preference, display settings, and last visited game category to personalise your x8888 experience across sessions. Requires your consent.
• Marketing Cookies: Used to measure the effectiveness of x8888 promotional campaigns and to ensure that players are not shown irrelevant or repetitive marketing. x8888 does not use cross-site tracking cookies that follow players across third-party websites. Requires your consent.

You can manage your cookie preferences at any time via your browser settings. Please note that disabling cookies beyond strictly necessary ones may limit some x8888 platform features. Clearing cookies will log you out of your current session.

x8888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for satisfying legal, regulatory, accounting, and licensing obligations. The key retention periods applied by x8888 are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data that cannot identify any individual player may be retained indefinitely for statistical and platform improvement purposes.

x8888 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in Transit: All data exchanged between your device and x8888 servers is encrypted using TLS 1.3 / 256-bit SSL. The padlock icon in your browser confirms this protection is active during your session.
• Encryption at Rest: Personal data and financial records stored on x8888 servers are encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data using a hardware security module (HSM).
• Access Controls: Access to personal player data is restricted to x8888 staff and contractors who require it to perform their specific job functions. All access is logged, role-based, and subject to regular access review audits.
• Two-Factor Authentication: x8888 supports and encourages two-factor authentication (2FA) for all player accounts to prevent unauthorised account access even in the event of credential compromise.
• Penetration Testing: x8888 conducts regular third-party penetration testing and vulnerability assessments to proactively identify and remediate security weaknesses in the platform infrastructure.
• Incident Response: x8888 maintains a formal data breach incident response procedure. In the event of a breach that poses a risk to player rights, affected players will be notified without undue delay, together with the relevant licensing authority.

As an internationally licensed online gaming platform, x8888 may transfer your personal data to, and process it in, countries other than your country of residence — including the jurisdiction in which x8888's licensing authority is based and the locations of our cloud infrastructure providers.

Where x8888 transfers personal data internationally, we take steps to ensure that an adequate level of data protection is maintained, including:

• Transferring only to countries with an established legal framework for data protection, or to recipients who have implemented equivalent contractual safeguards.
• Executing Standard Contractual Clauses (SCCs) or equivalent data transfer agreements with all international data processors that receive your personal data.
• Conducting transfer impact assessments to evaluate the risk of transfers to specific jurisdictions and implementing supplementary technical safeguards (such as end-to-end encryption) where required.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact x8888 at [email protected].

As a player on x8888, you have the following rights in relation to your personal data. x8888 will respond to all valid data subject requests within 30 calendar days of receipt. All requests should be submitted to [email protected] with the subject line "Data Rights Request."

• Right of Access: You may request a copy of all personal data x8888 holds about you, together with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Many contact details can be updated directly within your x8888 account settings without needing to submit a formal request.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note that x8888 may be required to retain certain data for the periods specified in Section 7 to comply with licensing and legal obligations, which may limit the scope of erasure requests.
• Right to Restriction of Processing: You may request that x8888 temporarily halt processing of your personal data while a rectification or erasure request is being assessed, or where you have objected to processing under legitimate interests and that objection is under review.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider, where the processing was based on your consent or on contractual necessity.
• Right to Object: You may object at any time to processing of your personal data based on legitimate interests, including for direct marketing purposes. Marketing opt-outs take effect within 72 hours of receipt.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your account marketing preferences or contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

x8888 is an adult gaming platform. Access to and use of the x8888 platform is strictly prohibited for individuals under the age of 21. 21+

x8888 does not knowingly collect, process, or retain personal data from individuals under the age of 21. All registration processes include mandatory age declaration and are subject to automated and manual age verification checks as part of the KYC process.

If x8888 becomes aware — through any means — that an account has been registered by or on behalf of a person under the age of 21, the following actions will be taken immediately:

• The account will be permanently suspended and blocked from re-registration.
• All personal data associated with the account will be deleted from x8888 systems within 72 hours, subject to any mandatory reporting obligations under applicable law.
• Any deposits made to the account will be refunded to the originating payment method where technically possible. Any winnings generated will be forfeited.
• The matter will be reported to x8888's international licensing authority in accordance with licensing conditions.

Parents and guardians who believe a minor may have accessed x8888 are encouraged to contact us immediately at [email protected]. We take all such reports seriously and will act promptly. x8888 also recommends the use of parental control software to prevent minors from accessing online gambling platforms.

With your consent, x8888 may send you promotional communications including bonus offer notifications, PSL and cricket betting promotions, new game launch announcements, and VIP loyalty programme updates. We communicate via email and SMS to the contact details registered on your account.

You control your marketing preferences at all times:

• Opt-In: Marketing consent is captured at registration or via the marketing preferences section of your x8888 account settings. Consent is always freely given, specific, and separate from acceptance of the Terms & Conditions — you can create an account and play on x8888 without consenting to receive marketing communications.
• Opt-Out: You may withdraw marketing consent at any time by updating your preferences in your account dashboard, clicking the unsubscribe link in any marketing email, or contacting live chat support. Opt-outs are processed within 72 hours. You may continue to receive service-critical communications (withdrawal confirmations, security alerts, KYC requests) regardless of your marketing opt-out status, as these are sent on the basis of contractual necessity rather than consent.

x8888 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, applicable law, or licensing requirements. The date of the most recent revision is displayed at the top of this page.

For material amendments — changes that meaningfully affect how your personal data is collected, used, or shared — x8888 will notify all registered players via the email address on their account at least fourteen (14) days before the revised Policy takes effect. This advance notice period gives you the opportunity to review the changes and, if you do not accept them, to close your account before the new Policy applies to your data.

Your continued use of the x8888 platform after the effective date of any Privacy Policy amendment constitutes your acknowledgement of the updated practices described in the revised Policy. We encourage you to bookmark this page and review it periodically, particularly before making deposits or withdrawals.

If you have any questions, concerns, or complaints about how x8888 handles your personal data, or if you wish to exercise any of the data rights described in Section 10, please contact us through one of the following channels:

• Live Chat: 24/7 inside your x8888 account dashboard — average first response under 10 minutes.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing. Responses within 24 hours for general queries; data subject requests responded to within 30 days.

If you are not satisfied with x8888's response to your privacy complaint after following our internal resolution process, you have the right to escalate your complaint to x8888's international gaming licensing authority, which exercises oversight of x8888's data protection practices as part of its licensing conditions. Contact details for the licensing authority are available from the x8888 support team upon request.