1. Who We Are
This Privacy Policy applies to x333 (referred to throughout as "x333", "we", "us", or "our"), the online betting and casino platform operating at x333.plus. x333 serves Pakistani players across sports betting, live casino, jackpot slots, baccarat, roulette, esports betting, and all related services.
x333 acts as the data controller for all personal information collected from players on the x333 platform. This means x333 determines how and why your personal data is processed. If you have any questions about this policy or how x333 handles your data, please contact us at support@x333.plus.
2. Personal Data We Collect at x333
x333 collects personal data through several channels — directly from you when you register and use the platform, automatically as you navigate the site, and in some cases from third parties during our verification processes. We collect only what is necessary to provide a safe, legal, and high-quality experience for Pakistani players.
Registration & Account Data
- Full legal name (as it appears on your CNIC)
- Pakistani mobile phone number
- Email address
- Date of birth
- Account username and encrypted password
- Preferred language (English or Urdu)
Identity Verification (KYC) Data
x333 is required by anti-money laundering (AML) and know-your-customer (KYC) regulations to verify the identity of players before processing withdrawals above certain thresholds. For this purpose, we may collect:
- Copy of CNIC (front and back)
- Proof of address (utility bill or bank statement)
- Proof of payment method ownership (screenshot of registered mobile wallet or bank account)
- Selfie photograph for identity confirmation
Transaction & Financial Data
- Deposit and withdrawal amounts in PKR
- Payment method type (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard)
- Mobile wallet account number or masked card number (x333 does not store full card numbers)
- Transaction timestamps and references
Betting & Gaming Activity Data
- Bets placed (sport, event, market, amount, odds)
- Casino game sessions (game title, stakes, results, duration)
- Bonus claims and wagering progress
- Responsible gaming tool settings and usage
Technical & Device Data
- IP address
- Device type, model and operating system
- Browser type and version
- Session duration and page navigation patterns
- Geolocation data (country/city level, not precise GPS)
3. How x333 Uses Your Personal Data
x333 uses the personal data we collect for specific, defined purposes. We do not use your data for anything beyond what is described below without your explicit consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Registration data, device data | Contract performance |
| Processing deposits & withdrawals in PKR | Transaction data, payment method data | Contract performance |
| Identity verification (KYC/AML) | KYC documents, selfie | Legal obligation |
| Fraud detection & security | IP, device, transaction patterns | Legitimate interest |
| Responsible gaming monitoring | Gaming activity, RG tool settings | Legal obligation + legitimate interest |
| Customer support | Account data, communication history | Contract performance |
| Platform improvement & analytics | Technical data, navigation patterns | Legitimate interest |
| Marketing communications | Contact details, game preferences | Consent (opt-in only) |
4. Legal Basis for Processing
x333 processes personal data only where we have a valid legal basis to do so. The four bases we rely on are explained below:
- Contract performance: Processing necessary to fulfil our obligations to you as an x333 player — running your account, processing your bets, and paying your winnings.
- Legal obligation: Processing required to comply with AML regulations, KYC requirements, and other applicable laws. x333 cannot operate a legitimate platform without meeting these obligations.
- Legitimate interest: Processing for purposes that benefit x333 and our players, such as fraud prevention, platform security, and service improvement — provided these don't override your fundamental privacy rights.
- Consent: Processing that we will only do with your explicit agreement, such as sending you marketing emails or SMS promotions about x333 offers. You can withdraw consent at any time.
5. Data Sharing with Third Parties
x333 does not sell, rent, or trade your personal data. We share data only where it is strictly necessary to operate the platform, comply with legal requirements, or protect the safety and integrity of x333 and its players.
Categories of Third Parties We May Share Data With
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the transaction data necessary to process your PKR deposits and withdrawals. These parties are contractually bound to use your data only for that purpose.
- Game providers: Live casino studios (including Evolution Gaming) and RNG game developers receive a session token and game stake data to operate game sessions. They do not receive your full account or identity data.
- Identity verification services: Where x333 uses a third-party KYC service to assist with document verification, your submitted documents are processed under strict data processing agreements. KYC partners do not retain documents beyond what the verification process requires.
- Analytics providers: Aggregated, anonymised usage data may be processed by analytics tools to help x333 understand how Pakistani players use the platform and identify areas for improvement. This data cannot be used to identify individual players.
- Regulatory and law enforcement authorities: x333 will share data when legally required to do so — for example, in response to a court order, a regulatory investigation, or an AML reporting obligation. We do not volunteer data to authorities beyond legal requirements.
6. Payment Data & PKR Transactions
x333 handles payment data with particular care given its sensitivity. Here is specifically how your PKR transaction information is managed at x333:
- x333 does not store full bank card numbers. Card details are tokenised through our payment processor — x333 retains only a masked reference.
- Mobile wallet account numbers (Easypaisa, JazzCash, NayaPay, SadaPay) are stored in encrypted form and accessed only for the purpose of processing your requested transactions.
- x333's payment systems are PCI DSS compliant where applicable to card processing.
- All PKR transaction records are maintained for regulatory compliance purposes for a minimum of five years following account closure, as required by applicable AML regulations.
- x333 conducts automated monitoring of transaction patterns as part of its AML programme. Unusual patterns may trigger a manual review. Where AML checks are triggered, your withdrawal may be temporarily held while the review is completed. x333 will communicate with you directly about any such hold.
7. Cookies & Tracking Technologies
x333 uses cookies and similar technologies on its platform. A cookie is a small text file stored on your device when you visit a website. Cookies help x333 remember your preferences, keep you logged in securely, and understand how Pakistani players use our platform.
Types of Cookies x333 Uses
- Strictly necessary cookies: These are required for x333 to function. They maintain your login session, remember your language preference, and ensure security features work correctly. These cookies cannot be disabled without breaking the platform's core functions.
- Performance & analytics cookies: These help x333 understand how players navigate the platform — which pages are visited most, how long sessions last, and where errors occur. The data is aggregated and anonymised. These cookies are disabled by default and require your consent.
- Functional cookies: These remember choices you've made — such as your preferred game lobby view or responsible gaming settings — to provide a personalised experience on x333. These require consent.
- Marketing cookies: These track your interaction with x333 promotions and help us show you relevant offers. These cookies are disabled by default and require your explicit opt-in consent.
You can manage your cookie preferences at any time through the cookie settings panel accessible from the footer of every x333 page. Most browsers also allow you to block or delete cookies through browser settings — note that blocking strictly necessary cookies will affect your ability to use x333.
8. How Long We Keep Your Data
x333 retains personal data only for as long as it is necessary for the purpose it was collected, or as required by law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | AML / regulatory compliance |
| KYC documents (CNIC, proof of address) | Duration of account + 5 years | Legal obligation |
| PKR transaction records | 5 years from transaction date | AML / financial regulation |
| Betting & gaming history | Duration of account + 2 years | Dispute resolution, responsible gaming |
| Customer support communications | 3 years from last contact | Dispute resolution |
| Technical/device logs | 13 months | Security, fraud prevention |
| Marketing consent records | Until consent withdrawn + 3 years | Consent management compliance |
When your data reaches the end of its retention period and there is no outstanding legal or regulatory reason to retain it, x333 will securely delete or anonymise it.
9. Security Measures
x333 implements multiple layers of security to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key technical and organisational measures include:
- 256-bit TLS/SSL encryption on all data in transit between your device and x333's servers.
- AES-256 encryption for sensitive data at rest in x333's databases, including payment details and identity documents.
- Role-based access controls ensuring that only authorised staff with a documented business need can access personal player data.
- All internal access to player data is logged with timestamps and user identifiers, and logs are reviewed regularly for anomalies.
- Multi-factor authentication (MFA) available for all x333 player accounts and required for all internal staff access to data systems.
- Regular penetration testing and vulnerability assessments by x333's security team.
- Staff training on data protection and information security practices, conducted at onboarding and annually thereafter.
- An incident response plan that is tested regularly, ensuring that any data security incident can be contained and communicated to affected players promptly.
10. Your Data Rights
As an x333 player, you have the following rights regarding your personal data. These rights apply regardless of where you are located in Pakistan, and x333 will respond to all valid requests within 30 days.
Right of Access
You can request a copy of all personal data x333 holds about you. We'll provide it in a clear, readable format within 30 days.
Right to Rectification
If any data x333 holds about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
Right to Erasure
You can request deletion of your personal data where x333 no longer has a legal basis to retain it. Note that regulatory retention obligations may prevent full deletion in some cases.
Right to Restrict Processing
In certain circumstances you can request that x333 limits how we use your data while a concern or dispute is being resolved.
Right to Data Portability
You can request your data in a machine-readable format (CSV or JSON) to transfer to another service where technically feasible.
Right to Object
You can object to processing based on legitimate interest or for direct marketing purposes. x333 will stop that processing unless we can demonstrate a compelling legitimate ground.
To exercise any of these rights, please contact x333's data team at support@x333.plus with the subject line "Data Rights Request". Include your registered email address and a description of your request. We may ask you to verify your identity before processing the request.
11. Children's Privacy
x333 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an age declaration and we conduct age verification checks as part of our KYC process.
If x333 becomes aware that a person under 18 has registered an account or provided personal data, we will immediately suspend the account, delete the data as far as legally permissible, and return any deposits. Parents or guardians who believe a minor has created an x333 account should contact us immediately at support@x333.plus.
12. Marketing Communications
x333 may send you promotional communications about bonuses, new games, special events, and x333 platform updates — but only with your explicit consent. During registration, you will be given the option to opt in to receiving marketing communications via email and/or SMS.
You can withdraw your marketing consent at any time by:
- Clicking the "Unsubscribe" link in any x333 marketing email.
- Replying STOP to any x333 promotional SMS.
- Updating your communication preferences in your x333 account settings.
- Emailing support@x333.plus with the request to be removed from marketing lists.
Withdrawing marketing consent does not affect your ability to use x333. You will still receive essential transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are not marketing and do not require consent.
13. Changes to This Privacy Policy
x333 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make significant changes — such as a new category of data collection or a new type of third-party sharing — x333 will notify registered Pakistani players by email at least 14 days before the changes take effect.
The date of last revision is always shown at the top of this document. Minor clarifications that do not materially affect your privacy rights may be made without prior notice. We encourage you to review this policy periodically to stay informed about how x333 protects your data.
14. Contact x333 About Privacy
If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, please contact x333's data protection team directly. We take every privacy enquiry seriously and aim to provide a substantive response within 5 business days.
Email: support@x333.plus
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Languages: English and Urdu
Response time: Within 5 business days
For general support questions unrelated to privacy, our 24/7 live chat team is available from within your x333 account after login.