xx111 Privacy Policy – How We Protect Your Data in Pakistan

This Policy applies to all individuals who interact with xx111 in any of the following ways:

• Registered members with an active xx111 account
• Visitors who browse xx111.ws without registering
• Individuals who contact xx111 support by any channel (live chat, email)
• Former members whose accounts have been closed, for the duration of xx111's legally required data retention period

xx111 is a platform operated for Pakistani players. While this Policy is written in compliance with internationally recognised data protection principles including those reflected in GDPR frameworks, it is specifically written with Pakistani members in mind. All communications regarding your data rights under this Policy are conducted in English.

xx111 collects the minimum amount of personal data necessary to operate a safe, fair and compliant gaming and payments platform. The categories of data we collect are described below.

Data you provide directly at registration:

• Full legal name (as it appears on your CNIC)
• Date of birth
• Pakistani mobile number
• Email address
• Username and password (password stored in hashed, non-readable form)
• Preferred language and currency (PKR by default for all xx111 accounts)

Data collected during KYC verification:

• CNIC number and scanned copy (front and back)
• Selfie photograph holding your CNIC
• Payment method verification screenshots (e.g., Easypaisa or JazzCash account name confirmation)

Financial and transaction data:

• Deposit and withdrawal transaction records including amounts, timestamps, payment method references and status
• Game wager history, outcomes and balances
• Bonus claims and wagering progression records

Technical data collected automatically:

• IP address and approximate location (city/region level, not precise GPS)
• Device type, operating system and browser version
• Session timestamps and duration
• Pages visited within xx111.ws and interaction patterns
• Cookie identifiers (see Section 6)

xx111 collects personal data only where there is a clear and lawful reason to do so. The table below summarises the main purposes for data collection and the legal basis under which each type of processing is carried out.

xx111 does not use your personal data for automated individual decision-making or profiling in ways that produce significant legal effects — for example, we do not use algorithms to automatically deny withdrawals without human review. Responsible gaming alerts generated by our systems are always reviewed by a human member of the xx111 team before any action is taken on an account.

xx111 takes the security of your personal data seriously and applies multiple layers of protection to ensure it remains safe from unauthorised access, disclosure, alteration or destruction.

Encryption in transit: All data transmitted between your browser or app and xx111's servers is protected by 256-bit SSL/TLS encryption — the same standard used by banking institutions. This means that even if data were intercepted during transmission, it would be completely unreadable without xx111's private key.

Encryption at rest: Sensitive stored data — including KYC documents, CNIC information and account credentials — is encrypted at rest on xx111's servers. Passwords are never stored in readable form; they are stored as one-way cryptographic hashes.

Access controls: xx111 staff access to personal data is restricted on a need-to-know basis. The support team sees only the data necessary to handle your query. Financial data and KYC documents are accessible only to specifically authorised compliance personnel. All staff access is logged and audited.

Two-factor security for withdrawals: Every withdrawal request on xx111 triggers an OTP (one-time password) sent to your registered Pakistani mobile number. This ensures that even if your account credentials were somehow compromised, an unauthorised person cannot withdraw funds without access to your physical SIM card.

xx111 does not sell, rent or trade your personal data to any third party. We share data only in the following specific and limited circumstances:

• Payment processors: When you make a deposit or withdrawal, the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, your bank or card network) receives the transaction details necessary to complete that payment. These processors have their own privacy policies and are independently responsible for their data handling. xx111 does not pass payment processor data to any other party.
• Identity verification providers: xx111 uses a third-party KYC verification service to confirm CNIC validity. Your KYC documents are transmitted securely to this service solely for the purpose of identity confirmation. This provider is contractually prohibited from using your data for any other purpose.
• Fraud prevention and security services: Anonymised or aggregated technical data (such as IP addresses and device fingerprints) may be shared with security service providers to detect and prevent fraud, account takeovers and platform abuse. These providers do not receive your name, CNIC or financial data.
• Legal and regulatory requirements: If xx111 receives a lawful, properly authorised request from a court, regulator or law enforcement body, we may be required to disclose specific data. xx111 will not voluntarily disclose data beyond what is specifically required by the legal order.

xx111 requires all third parties that process your personal data on our behalf to handle it securely, use it only for the stated purpose, and not share it further without prior written authorisation from xx111.

xx111 uses cookies and similar technologies on xx111.ws to improve your experience, keep you securely logged in across sessions, and understand how the platform is being used so we can improve it. Here is a straightforward breakdown of what xx111 uses and why.

• Essential cookies: Required for xx111 to function. These include session cookies that keep you logged in, security tokens that protect your account, and cookies that remember your language and region preferences. These cannot be disabled — without them, xx111 will not work correctly.
• Functional cookies: Remember your preferences within xx111, such as your last game selection or preferred bet level in fishing games. These improve your experience but are not strictly necessary.
• Analytics cookies: Collect anonymised data about how members use xx111 — which pages are visited most, where players encounter difficulties, and how features are used. This data helps xx111's development team identify and fix problems. No personally identifying information is included in analytics data.

You can control cookie settings through your browser preferences. Note that disabling essential cookies will prevent xx111 from functioning correctly. Most modern browsers (Chrome, Samsung Internet, Safari) provide clear options to manage cookie permissions — refer to your browser's help documentation for instructions specific to your device.

xx111 respects your right to understand and control the personal information held about you. The following rights are available to all xx111 members. To exercise any of these rights, contact the xx111 support team at support@xx111.ws or via live chat.

xx111 will respond to all verified data rights requests within 14 days. In complex cases where additional time is required, we will acknowledge your request within 5 days and provide a timeline for full resolution. There is no charge for submitting a data rights request.

xx111 does not retain personal data indefinitely. Retention periods are set based on the purpose of the data and any applicable legal requirements. Here is how long xx111 typically retains different categories of data:

• Active account data (name, contact details, preferences): Retained for the lifetime of your xx111 account plus the mandatory post-closure period.
• Financial transaction records (deposits, withdrawals, wager history): Retained for a minimum of 5 years from the date of each transaction, in accordance with financial compliance obligations.
• KYC documents (CNIC copies, selfies): Retained for 5 years from account closure date, after which they are securely deleted.
• Support and communication records: Retained for 2 years from the date of the interaction.
• Technical and session logs: Retained for 12 months, after which they are either deleted or fully anonymised.
• Marketing consent records: Retained for as long as your consent is active, and for 3 years after you withdraw consent (to demonstrate we had valid permission for prior communications).

When the applicable retention period ends, xx111 permanently and securely deletes the relevant data — or anonymises it in a way that means it can no longer be linked to you as an individual.

xx111 is strictly an 18+ platform and does not knowingly collect or process personal data from anyone under the age of 18. If xx111 discovers or reasonably suspects that an account belongs to a minor, the account will be immediately suspended, all data will be deleted as soon as legally permissible, and any deposits made will be returned to the payment method used.

Age verification through CNIC is a mandatory step in the xx111 KYC process specifically to prevent access by under-18s. If a parent or guardian believes their child has registered on xx111, they should contact support@xx111.ws immediately with details so the account can be identified and closed without delay.

xx111 may update this Privacy Policy from time to time. When material changes are made — changes that affect how we use your data or the rights available to you — registered members will be notified by email to the address on their xx111 account at least 14 days before the new Policy takes effect.

The updated Policy will be published on this page with a revised "Last Updated" date. For minor changes (such as wording clarifications that do not alter the substance of our data practices), we may update the page without formal notification but will always update the version date. We recommend bookmarking this page and reviewing it periodically.

For any questions about this Privacy Policy, to exercise a data right, or to raise a privacy concern, please contact xx111 using the details below. All privacy-related queries receive dedicated handling separate from standard support queries.

• Email: support@xx111.ws — use the subject line "Privacy Request" so your query is routed to the correct team
• Live Chat: Available 24/7 at xx111.ws — mention that your query is privacy-related when you start the chat

xx111 aims to acknowledge all privacy requests within 3 business days and to fully resolve them within 14 calendar days. For complex requests involving large volumes of data or legal review, we will inform you of the extended timeline within the initial acknowledgement.