Privacy Policy — xc444

This Privacy Policy ("Policy") sets out the basis on which xc444 ("we", "us", "our", "Platform") collects, processes, stores and shares personal data obtained from users ("you", "your", "User") who access or use the xc444 website at xc444.cam and all associated services (the "Services").

xc444 is an English-language online gaming information and entertainment platform serving players across Pakistan. We handle personal data responsibly and in accordance with applicable data protection principles. We do not hold any data processing authorisation issued by Pakistani authorities, nor do we operate under the jurisdiction of the Personal Data Protection Bill (Pakistan). Our data handling practices are governed by the laws of the jurisdiction in which we are licensed and operate.

By accessing the platform, creating an account or using any of our Services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not accept this Policy, you must not use the Services.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, either alone or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means xc444, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third party that processes personal data on behalf of xc444 under a written data processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "Cookie" means a small text file placed on your device by the platform for functional, analytical or security purposes.
• "KYC Data" means identity verification documents and information collected as part of the Know Your Customer process, including CNIC, passport images and proof-of-address documents.
• "Special Category Data" means personal data relating to health, biometric identification or other particularly sensitive categories, which is processed only to the extent required for identity verification or responsible gambling compliance.

xc444 collects personal data in the following categories, depending on how you interact with the platform:

3.1 Registration & Account Data

• Full legal name, date of birth and gender
• Email address and telephone number
• Username and encrypted password
• Country of residence and correspondence address
• Account preferences and communication opt-in status

3.2 Identity Verification (KYC) Data

• Copy of a valid government-issued photo ID — CNIC, passport or national identity card
• Proof of address document — utility bill or bank statement
• Selfie or liveness verification image submitted through the secure HTTPS portal
• Source-of-funds documentation where required by AML obligations

3.3 Transaction & Financial Data

• Deposit and withdrawal records including amounts, timestamps and payment method references
• Account balance history
• Bonus and wagering activity logs
• Payment method identifiers (partial card numbers, e-wallet account references) — full card numbers are never stored on xc444 servers

3.4 Technical & Usage Data

• IP address, device type, operating system and browser information
• Session duration, pages visited and features accessed
• Game history and betting activity logs
• Error logs and crash reports

3.5 Communication Data

• Contents of support tickets, live-chat transcripts and email correspondence
• Survey responses and feedback submissions

We process your personal data only where we have a valid lawful basis to do so. The applicable bases are set out in the table below:

xc444 uses personal data for the following purposes:

• Account management: To create, maintain and administer your xc444 account, including processing login sessions, updating account settings and managing preferences.
• Service delivery: To provide access to gaming products, sports betting markets, live-casino content and platform features, and to process all associated transactions.
• Identity verification: To fulfil KYC obligations, confirm eligibility (including minimum age requirements of 18+), and prevent underage access to the platform.
• Payment processing: To facilitate deposits, process withdrawal requests, and maintain accurate financial records associated with your account.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, unauthorised account access and other forms of abuse.
• Responsible gambling: To monitor usage patterns that may indicate problem gambling behaviour and to apply account restrictions where required, including self-exclusion enforcement.
• Customer support: To respond to your queries, resolve disputes and manage support ticket communications.
• Marketing (with consent): To send you relevant promotional offers, game recommendations and platform updates — only where you have given explicit opt-in consent.
• Legal compliance: To meet obligations under applicable anti-money laundering, counter-terrorism financing and other regulatory frameworks.
• Analytics: To analyse platform usage, improve user experience and optimise performance, using aggregated or anonymised data wherever possible.

xc444 does not sell, rent or trade your personal data to any third party for commercial purposes. We may share personal data only in the following limited circumstances:

• Service Providers & Data Processors: We engage vetted third-party processors to assist with identity verification, payment processing, fraud detection, analytics and customer support infrastructure. All processors operate under written data processing agreements and are contractually prohibited from using your data for any purpose other than the specific service they provide.
• Regulatory and Legal Obligations: We may disclose personal data to competent authorities, regulators or law enforcement bodies where required by applicable law, court order or regulatory directive. Such disclosures are made to the minimum extent necessary.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets involving xc444, user personal data may be transferred to the successor entity. You will be notified of any such transfer and your rights under this Policy will be maintained.
• Responsible Gambling Schemes: Where required by our licensing obligations, anonymised or pseudonymised data may be shared with approved self-exclusion registers or responsible gambling oversight bodies.

xc444 operates internationally and your personal data may be processed in countries outside your country of residence, including countries that may not have data protection laws equivalent to those in your home jurisdiction.

Where personal data is transferred internationally, we take appropriate safeguards to ensure that your data receives a level of protection consistent with the standards described in this Policy. These safeguards may include standard contractual clauses, adequacy decisions by applicable supervisory authorities, or other recognised transfer mechanisms.

By using the xc444 platform, you acknowledge and consent to the international transfer of your personal data on the basis described above.

xc444 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention principles we apply are set out below:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

xc444 uses cookies and similar technologies (including local storage and session identifiers) to operate and improve the platform. We do not use tracking technologies for cross-site advertising or to build advertising profiles.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies and CSRF protection identifiers. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options and responsible gambling tool configurations across sessions.
• Analytical Cookies: Collect anonymised data about how users navigate the platform to help us identify performance issues and improve the user experience. No individual user is identified from analytical cookie data.
• Security Cookies: Used to detect and prevent fraud, unauthorised access attempts and bot activity.

9.2 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent the platform from functioning correctly and may make it impossible to log in or process transactions. For analytical and functional cookies, you may adjust preferences through the cookie management panel displayed upon your first visit to xc444.cam.

Subject to applicable data protection law and the limitations described below, you may exercise the following rights in relation to your personal data held by xc444:

• Right of Access: You may request a copy of the personal data we hold about you. We will respond within a reasonable timeframe and provide the information in a clear, structured format.
• Right of Rectification: If you believe any personal data we hold is inaccurate or incomplete, you may request that it be corrected. For account data, you may be able to update certain fields directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires retention. Note that KYC and AML data must be retained for the statutory minimum periods described in Section 8.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to us directly, where technically feasible.
• Right to Object: You may object to the processing of your personal data where it is carried out on the basis of legitimate interests, including profiling for responsible gambling purposes. xc444 will assess the objection and respond within a reasonable timeframe.
• Right to Withdraw Consent: Where processing is based on consent — for example, marketing communications — you may withdraw consent at any time without affecting the lawfulness of prior processing. Withdrawal can be made via the unsubscribe link in any marketing email or by contacting support.
• Right to Restrict Processing: In certain circumstances you may request that processing be temporarily restricted, for example while a rectification request is under review.

To exercise any of the above rights, contact our support team using the details in Section 15. We may need to verify your identity before processing a data rights request. We will not charge a fee for standard requests unless they are manifestly unfounded, repetitive or excessive.

xc444 is strictly an adults-only platform. Access to our Services is prohibited for individuals under the age of 18, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect or process personal data from individuals who are under the applicable minimum age.

Age verification is a mandatory part of the KYC process. Where we have reason to believe that an account has been registered by or on behalf of a minor, the account will be immediately suspended, all associated balances will be frozen pending investigation, and the matter may be referred to relevant authorities.

If you have reason to believe that a minor has accessed or registered on xc444, please contact our support team immediately so the matter can be investigated and addressed without delay.

xc444 implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and xc444 servers
• Encrypted storage of passwords using industry-standard hashing algorithms — plaintext passwords are never stored
• Role-based access controls limiting internal data access to personnel who require it to perform their specific job functions
• Two-factor authentication (2FA) availability for all user accounts
• Regular security audits, vulnerability assessments and penetration testing
• Incident response procedures to detect, contain and respond to data breaches

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that presents a significant risk to your rights and freedoms, we will notify affected users without undue delay and take all reasonable steps to mitigate the impact.

The xc444 platform integrates third-party services — including game content providers, identity verification engines and payment processing infrastructure — in order to deliver its Services. These third parties may process limited personal data on our behalf as data processors, strictly under written agreements and for defined purposes only.

xc444 does not control the privacy practices of third-party websites that may be referenced in support documentation or that users navigate to independently. This Policy applies only to data processing carried out directly by xc444. We encourage users to review the privacy policies of any third-party service they interact with separately from xc444.

xc444 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, new sharing arrangements or significant alterations to user rights — we will provide reasonable advance notice to registered users via email or a prominent on-platform notification.

The "Last Updated" date at the top of this page will be revised with each update. The most current version of this Policy will always be available at xc444.cam/privacy-policy. Continued use of the platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree to the revised terms, you should cease using the Services and contact us to request account closure.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the xc444 Data Support Team. Our team is available 24 hours a day, 7 days a week in English. Urdu-language assistance is available on request.

Do not include your password, full payment card details or any authentication credentials in support communications. xc444 staff will never ask for these.