Privacy Policy —
How x111x Handles Your Data

1 Introduction

This Privacy Policy ("Policy") sets out how x111x ("x111x", "we", "us", "our") collects, uses, stores, discloses and protects the personal information of individuals ("User", "you", "your") who access or use the x111x online gaming information platform at x111x.cam (the "Platform").

x111x is committed to protecting your privacy and handling your personal data with integrity. This Policy is intended to be transparent, readable and genuinely useful — not a legal boilerplate that obscures more than it explains.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform immediately.

2 Definitions

• "Personal Data" means any information that directly identifies or could reasonably be used to identify a living individual, including name, email address, IP address, device identifiers and financial account references.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer and deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, x111x.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller.
• "Cookies" means small text files placed on your device by a website to store information about your visit and preferences.
• "KYC" means Know Your Customer — the identity verification process required to comply with anti-money laundering obligations.
• "Third-Party Operator" means an external gaming entity referenced on the Platform but not controlled by x111x. x111x is not responsible for the data practices of Third-Party Operators.

3 Data Controller

x111x acts as the Data Controller for Personal Data collected through the Platform. This means x111x determines what data is collected, why it is collected and how it is used, stored and shared.

For all data protection enquiries, requests or complaints, please contact us using the details set out in Section 16 (Contact Us) of this Policy.

4 Personal Data We Collect

x111x collects Personal Data through several channels. The categories of data collected and how they are gathered are summarised below.

4.1 Data You Provide Directly

• Registration Data: When you create an account, we collect your chosen username, email address, date of birth and, where required, identity verification documents (e.g., CNIC for Pakistani users).
• Communication Data: If you contact us via email or our support channels, we retain the content of your communications, your contact details and the date and time of the interaction.
• KYC Documentation: Where identity verification is required, we may collect government-issued ID, proof of address and, in some cases, a photograph. This is retained only for as long as necessary and in accordance with regulatory requirements.

4.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type and screen resolution.
• Usage Data: Pages visited, time spent on each page, links clicked, referral source and session duration.
• Cookie Data: Preference data, session tokens and analytics identifiers. See Section 10 (Cookies & Tracking) for full details.

4.3 Data from Third Parties

In limited circumstances, we may receive Personal Data about you from third-party verification services, fraud detection providers or payment processors in connection with account verification or compliance obligations. We do not purchase marketing data from third-party brokers.

5 Legal Basis for Processing

x111x processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted when registering — including account creation, service delivery and support.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, regulatory reporting and responding to lawful authority requests.
• Legitimate Interests: Processing necessary for our legitimate interests, including platform security, fraud prevention, service improvement and responsible gambling monitoring — where those interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent to process your data (for example, for optional marketing communications), you may withdraw that consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of prior processing.

6 How We Use Your Personal Data

x111x uses Personal Data for the following purposes:

• To create and manage your x111x account and verify your identity.
• To deliver the services, content and features available on the Platform.
• To process and respond to your support communications and enquiries.
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
• To detect, investigate and prevent fraud, abuse or unauthorised access to accounts.
• To monitor and enforce responsible gambling commitments, including processing self-exclusion requests.
• To analyse Platform usage in aggregate form and improve the user experience.
• To send service-related communications (e.g., account security alerts, policy change notices). We do not send unsolicited marketing emails unless you have expressly opted in.
• To enforce our Terms & Conditions and other applicable policies.
• To comply with lawful requests from courts, regulators or law enforcement authorities.

7 Data Sharing & Disclosure

x111x does not sell, rent or trade your Personal Data to unaffiliated third parties. We may share your data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process Personal Data on our behalf under written data processing agreements. These providers may include cloud hosting providers, analytics platforms, identity verification services and email delivery systems. They are permitted to use your data only as instructed by x111x and must maintain appropriate security standards.

7.2 Legal and Regulatory Authorities

We may disclose Personal Data to competent courts, law enforcement agencies or regulatory authorities where required to do so by law, court order or in connection with legal proceedings. We will notify you of such disclosures where we are legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets or restructuring of x111x, Personal Data held by us may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy. Users will be notified of any such transfer where practicable.

7.4 With Your Consent

We may share your Personal Data with third parties for purposes not described in this Policy where you have given your explicit prior consent to that specific sharing.

8 Data Retention

x111x retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes and to enforce our agreements.

As a general guide to retention periods (note that specific legal requirements may extend these):

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to satisfy regulatory and AML obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification, in line with standard AML compliance periods.
• Communication Records: Retained for up to three (3) years from the date of the communication, unless a longer period is required by law or ongoing dispute resolution.
• Technical and Usage Data: Typically retained in identifiable form for up to twenty-four (24) months, after which it is anonymised or deleted.
• Cookie Data: Session cookies expire at the end of your browsing session. Persistent cookies expire at the intervals described in Section 10.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identified individual.

9 Security Measures

x111x implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. Our security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (HTTPS).
• Encryption at Rest: Sensitive data stored in our databases is encrypted at rest using industry-standard algorithms.
• Access Controls: Personal Data is accessible only to authorised personnel with a legitimate need. Access is governed by role-based permissions and multi-factor authentication requirements.
• Audit Logging: System access and data operations are logged for security monitoring and incident response purposes.
• Vendor Due Diligence: Third-party service providers who process Personal Data on our behalf are assessed for their security posture before engagement and are required to maintain appropriate protections contractually.

No security system is impenetrable. While we take every reasonable precaution, x111x cannot guarantee the absolute security of data transmitted over the internet. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

10 Cookies & Tracking Technologies

x111x uses cookies and similar tracking technologies to operate the Platform, remember your preferences and collect aggregate usage statistics. We do not use cookies to build advertising profiles or track your behaviour across unaffiliated third-party websites.

10.1 Types of Cookies We Use

10.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies and receive a warning before a cookie is stored. Disabling strictly necessary cookies will impair Platform functionality. Detailed instructions for managing cookies are available in your browser's help documentation.

Please note that x111x does not currently respond to browser Do Not Track (DNT) signals, as no industry-wide standard for DNT has been established.

11 International Data Transfers

x111x may process or store your Personal Data in countries other than Pakistan, including countries where the applicable data protection laws differ from those in Pakistan. Where Personal Data is transferred internationally, we take appropriate safeguards to ensure that your data receives a level of protection consistent with this Policy.

Safeguards may include contractual clauses (such as standard contractual clauses approved by relevant data protection authorities), reliance on adequacy decisions, or other appropriate mechanisms as permitted by applicable law.

By using the Platform, you acknowledge and consent to your Personal Data being transferred to and processed in other countries as described in this Policy.

12 Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your Personal Data held by x111x. To exercise any of these rights, please contact us at [email protected].

• Right of Access: You have the right to request a copy of the Personal Data x111x holds about you and information about how it is processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right may be limited where we are legally required to retain data (e.g., AML obligations).
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while a correction request is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data where we rely on legitimate interests as the legal basis, including profiling based on those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to Lodge a Complaint: If you believe x111x has not handled your Personal Data in compliance with applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

13 Children's Privacy

The x111x Platform is strictly intended for adults aged 18 or above — or the higher minimum age required by the relevant operator's licensing jurisdiction. x111x does not knowingly collect Personal Data from individuals under this minimum age.

If we become aware that we have inadvertently collected Personal Data from a minor, we will take immediate steps to delete that information from our records and to close the associated account. Parents or guardians who believe a minor may have provided Personal Data to x111x are encouraged to contact us at [email protected] so we can investigate and act promptly.

We recommend that parents and guardians use parental control software and have open conversations with young people about the risks associated with online gaming platforms.

14 Third-Party Platforms & External References

The Platform may contain contextual references to third-party gaming operators, payment providers (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) and other external entities. These references are included for informational context only and do not constitute endorsement of, or affiliation with, those entities.

x111x does not control the data practices of any third-party platform or provider. If you visit any external platform or engage with any third-party service referenced on x111x, that platform's own privacy policy governs how your data is collected and used. x111x accepts no responsibility or liability for the privacy practices of any third party.

We strongly encourage you to review the privacy policy of any third-party platform before registering, depositing or sharing your personal information with them.

15 Amendments to This Policy

x111x reserves the right to update or revise this Privacy Policy at any time. When changes are made, the "Last Updated" date at the top of this page will be updated accordingly. Where changes are material, we will take reasonable steps to notify you — such as placing a prominent notice on the Platform homepage.

Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, please stop using the Platform and contact us to request deletion of your account and associated Personal Data.

We recommend that you review this Policy periodically to stay informed about how we protect your information. Previous versions of this Policy are available on request by contacting [email protected].

16 Contact Us — Data & Privacy Enquiries

For any question, request or complaint relating to this Privacy Policy or the handling of your Personal Data, please contact x111x using the details below. We take all data protection enquiries seriously and will respond within the timeframes set out in Section 12.

For general platform queries, please also visit our FAQ page. For responsible gambling support tools, visit our Responsible Gambling page. For a full understanding of your rights and obligations when using the Platform, please read our Terms & Conditions.