xr786 Privacy
Policy

This Privacy Policy ("Policy") explains how xr786 ("we", "us", "our") collects, processes, stores, and protects personal data belonging to individuals ("you", "Player") who access or use the xr786 online casino and sports betting platform, available at xr786.net.

This Policy applies to all services provided by xr786, including but not limited to:

• Account registration and identity verification (KYC)
• Cricket betting and sports wagering
• Casino games, slots, dice, and lottery titles
• PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20
• Customer support communications
• Promotional and marketing communications (where opted in)

By registering an account on xr786, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the xr786 platform.

xr786 acts as the Data Controller in respect of all personal data collected through the xr786 platform. As Data Controller, xr786 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, access requests, and complaints should be directed to the xr786 Data Protection contact point:

• Email: [email protected]
• Subject Line: DATA PROTECTION REQUEST
• Response Time: Within 30 calendar days of receipt

xr786 collects the following categories of personal data from players:

xr786 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for CNIC-based age and identity verification.

xr786 collects personal data through the following channels:

• Direct Registration: Information you provide when creating your xr786 account, including name, mobile number, date of birth, and payment method details.
• KYC Verification: Identity documents (CNIC) submitted by you directly through the xr786 verification portal when completing account verification or requesting your first withdrawal.
• Automated Technical Collection: Technical data such as IP address, device identifiers, and browser information collected automatically when you access the xr786 platform. This data is collected via server logs and first-party cookies.
• Transaction Processing: Financial data generated when you make deposits or withdrawals through JazzCash, EasyPaisa, HBL, UBL, SadaPay, or USDT TRC20. This data is received from our payment processing partners solely for the purpose of completing your transaction.
• Customer Support Interactions: Data you voluntarily provide when contacting xr786 support via email or live chat, including the content of your messages and any attachments.
• Cookies & Analytics: Usage and behavioural data collected through first-party cookies as described in Clause 9 of this Policy.

xr786 processes your personal data only where a valid legal basis exists under applicable international data protection standards. The primary legal bases xr786 relies upon are:

• Contractual Necessity: Processing required to perform the contract between xr786 and the Player — i.e., operating your account, processing PKR bets, and paying out winnings.
• Legal Obligation: Processing required to comply with applicable AML (Anti-Money Laundering), KYC, and responsible gaming obligations under xr786's international gaming compliance framework.
• Legitimate Interests: Processing carried out for xr786's legitimate business interests, including fraud detection, platform security, and customer service improvements — provided such interests are not overridden by your data protection rights.
• Consent: Processing of personal data for marketing communications, where you have explicitly opted in to receive such communications from xr786. Consent can be withdrawn at any time as described in Clause 13.

xr786 uses collected personal data for the following specific purposes:

1. Account Operation: To create, maintain, and manage your xr786 player account, including processing logins, updating account settings, and maintaining your PKR wallet balance.
2. Age & Identity Verification: To verify that all players are at least 21 years of age before granting full access to gambling features, in accordance with xr786's strict 21+ policy.
3. Payment Processing: To execute deposits and withdrawals in PKR through your chosen payment method, and to maintain accurate transaction records for accounting and AML purposes.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and any other conduct prohibited under xr786's Terms & Conditions.
5. Responsible Gaming: To monitor betting patterns and account activity for signs of problem gambling, and to administer any responsible gaming tools — such as deposit limits, cooling-off periods, or self-exclusion — requested by the Player.
6. Customer Support: To respond to your enquiries, process complaints, and resolve disputes relating to your xr786 account or any game/betting outcome.
7. Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the xr786 platform, game selection, and user experience for Pakistani players.
8. Marketing (Consent-Based): To send promotional offers, PSL cricket betting bonuses, and seasonal promotions to players who have opted in to receive xr786 marketing communications.

xr786 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 network operators receive only the financial data necessary to process your specific transaction. These processors operate under their own privacy policies and are independently responsible for the data they hold.
• KYC & Identity Verification Partners: Third-party identity verification providers may receive your CNIC data and personal details solely for the purpose of completing account verification in compliance with international gaming standards.
• Gaming Software Providers: Game studios and RNG certification bodies may receive anonymised session data (no personally identifiable information) for the purpose of game performance monitoring and RTP certification.
• Regulatory & Law Enforcement Authorities: xr786 will disclose personal data to competent authorities where required by law, court order, or where disclosure is necessary to prevent fraud, money laundering, or serious criminal activity.
• Professional Advisers: Legal counsel, auditors, and compliance consultants acting under strict confidentiality obligations who require access to data in order to provide professional services to xr786.

All third-party service providers engaged by xr786 are required to handle personal data in a manner consistent with this Privacy Policy and applicable data protection standards. xr786 does not permit third-party providers to use player data for their own independent marketing or commercial purposes.

xr786 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with xr786 plus a minimum of 5 years following account closure, in compliance with AML record-keeping requirements.
• KYC Documentation: CNIC scans and identity verification documents are retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction Records: All PKR deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years for AML and financial compliance purposes.
• Support Communications: Customer support logs and complaint records are retained for 3 years from the date of the final communication, in case of future disputes.
• Technical & Log Data: Server logs, IP records, and session data are retained for 12 months for security and fraud investigation purposes.
• Marketing Data: Data processed for marketing purposes is retained until you withdraw consent or opt out, after which it is deleted within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in a manner that prevents reconstruction of the original data.

xr786 uses cookies and similar tracking technologies on the xr786 platform. The following types of cookies are used:

xr786 does not use third-party advertising cookies or retargeting pixels. You can manage your cookie preferences through the xr786 cookie preference centre accessible from the platform footer. Disabling essential cookies will prevent the xr786 platform from functioning correctly.

xr786 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All personal data stored in xr786 databases is encrypted using AES-256 encryption at rest. All data transmitted between your device and xr786 servers is protected using TLS 1.3.
• Access Controls: Access to personal data within xr786's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role.
• Two-Factor Authentication: xr786 offers and strongly encourages 2FA via registered Pakistani mobile number for all player accounts.
• Regular Security Audits: xr786 conducts periodic internal and external security reviews of its data processing infrastructure to identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, xr786 will notify affected players without undue delay and will take immediate steps to contain the breach and minimise harm.

As an xr786 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact xr786 at [email protected] with the subject line "DATA PROTECTION REQUEST":

• Right of Access: You have the right to request a copy of all personal data xr786 holds about you. xr786 will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data xr786 holds about you is inaccurate or incomplete, you have the right to request correction. This includes updating your contact details, correcting name spellings, or amending outdated payment method records.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that xr786 cannot delete data it is legally required to retain under AML and gaming compliance obligations (see Clause 8).
• Right to Restrict Processing: You may request that xr786 restricts processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of personal data you have provided to xr786, which you may transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data where xr786 relies on legitimate interests as the legal basis. xr786 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

xr786 enforces a mandatory 21+ age verification policy across all platform services, including cricket betting, casino games, slots, lottery, and dice. Age verification is completed via CNIC submission, and any account found to belong to a player under 21 years of age will be immediately suspended and all associated data will be securely deleted, subject to any mandatory reporting obligations.

If you believe that a minor has registered on xr786 using false identity information, please contact us immediately at [email protected]. xr786 will investigate all such reports with urgency and take appropriate action without delay.

xr786 sends promotional communications — including PKR bonus offers, PSL cricket betting promotions, free bet notifications, and seasonal casino campaigns — only to players who have explicitly opted in to receive such communications at the time of registration or subsequently through their account settings.

Marketing communications are delivered via:

• Email to your registered email address
• SMS to your registered Pakistani mobile number
• Push notifications through the xr786 platform (if notifications are enabled on your device)

To opt out of all xr786 marketing communications, you may:

• Click the "Unsubscribe" link at the bottom of any xr786 marketing email
• Update your notification preferences in your xr786 account settings under "Communication Preferences"
• Contact xr786 support at [email protected] with the subject line "MARKETING OPT OUT"

Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect essential transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, or KYC request emails — these are sent regardless of marketing preferences as they are necessary for the operation of your account.

xr786 reserves the right to update or amend this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised Policy on the xr786 platform at xr786.net/privacy-policy. The "Last Updated" date at the top of this Policy will be revised accordingly.

Where changes to this Policy are material — meaning they significantly affect your rights or the way xr786 processes your personal data — xr786 will notify registered players via:

• A prominent notice on the xr786 platform homepage and login page
• An email notification to your registered email address
• An SMS alert to your registered Pakistani mobile number (for major changes only)

Your continued use of the xr786 platform following notification of any changes to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any amended terms, you should cease using xr786 services and contact support to initiate account closure. xr786 encourages all players to review this Policy periodically to stay informed about how their data is being protected.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way xr786 handles your personal data, please contact our Data Protection team in the first instance:

• Email: [email protected]
• Subject Line: DATA PROTECTION REQUEST or PRIVACY COMPLAINT
• Response Time: Within 30 calendar days of receipt
• Support Hours: 24/7 (PKT, UTC+5)

xr786 takes all privacy complaints seriously. Upon receipt of a complaint, xr786 will:

1. Acknowledge receipt of your complaint within 3 business days
2. Assign a dedicated case reference number to your complaint
3. Investigate the matter thoroughly and fairly
4. Provide a full written response within 30 calendar days
5. Where a complaint is upheld, take immediate corrective action and notify you of the steps taken

If you are not satisfied with xr786's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or the international gaming compliance body under whose standards xr786 operates. xr786 will cooperate fully with any such authority in the resolution of your complaint.