786xp Privacy Policy — How We Protect Your Data

1 Introduction

This Privacy Policy ("Policy") describes how 786xp ("786xp", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "Player", "User") who register for and use the 786xp online gaming platform at https://786xp.club.

786xp is committed to handling your personal data with integrity and transparency. We recognise that trust is the foundation of any relationship with our players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, and beyond — and we take that responsibility seriously.

This Policy applies to all personal data collected through the 786xp website, mobile web interface, customer support channels, and any other 786xp touchpoints. It should be read alongside the 786xp Terms & Conditions and Responsible Gaming Policy, all of which together govern your relationship with 786xp.

We may update this Policy from time to time. The most recent version is always available at https://786xp.club/privacy-policy, and the effective date is displayed at the top of this document. Material changes will be communicated to registered players via email prior to taking effect.

2 Personal Data We Collect

786xp collects the following categories of personal data in the course of operating the platform and providing services to players:

786xp does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond facial verification required for CNIC matching), or health data, except where explicitly required by law or responsible gaming obligations.

3 How We Collect Your Data

786xp collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide during account registration, KYC verification, deposit and withdrawal requests, bonus opt-ins, support interactions, and any correspondence with 786xp.
• Automated Collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools as you browse and interact with the 786xp platform.
• Third-Party Sources: Identity verification and fraud-screening data received from our licensed KYC partners when verifying your CNIC against official records. Payment verification data from JazzCash, EasyPaisa, and Raast relating to transaction confirmation and account ownership.
• Responsible Gaming Monitoring: Behavioural data generated through your gaming activity that is used by 786xp's responsible gaming systems to identify indicators of potential problem gambling and trigger appropriate safeguarding interventions.

4 Purpose & Legal Basis for Processing

786xp processes your personal data only where a lawful basis exists. The following table sets out our primary processing activities and their corresponding legal bases:

• Contract Performance: Processing necessary to create and manage your 786xp account, process PKR deposits and withdrawals, settle bets, administer bonuses, and provide customer support. Without this processing, 786xp cannot deliver its services to you.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, counter-terrorism financing (CTF) obligations, Know Your Customer (KYC) requirements, and any directions from competent regulatory or law enforcement authorities.
• Legitimate Interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, internal analytics to improve the 786xp platform, and resolving disputes. 786xp has assessed that these legitimate interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications — including SMS and email promotions about 786xp bonuses, PSL cricket betting specials, and new game launches — where you have provided explicit opt-in consent. You may withdraw this consent at any time.

5 Data Sharing & Disclosure

786xp does not sell, rent, or commercially exploit your personal data to or with any third party. We share your data only in the following limited circumstances and only to the minimum extent necessary:

• Payment Processors: JazzCash, EasyPaisa, Raast, and partner banks (HBL, UBL, MCB, Meezan Bank) receive the minimum transactional data required to process your PKR deposits and withdrawals.
• Identity Verification Partners: Licensed KYC and AML service providers receive your identity documents solely to perform regulatory-required verification checks. These partners are contractually bound to process your data only for this specific purpose.
• Game Providers: Third-party game studios whose titles are available on 786xp may receive anonymised session and wagering data necessary to resolve technical disputes or verify game outcomes. Personal identity data is not shared with game providers.
• Regulatory & Law Enforcement Authorities: 786xp will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by a valid legal obligation, court order, or regulatory direction, including in connection with AML/CTF investigations.
• Business Transfers: In the event that 786xp undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

6 Data Retention

786xp retains your personal data only for as long as is necessary for the purposes for which it was collected, subject to any applicable legal retention requirements. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your active 786xp account and for a minimum of five years following account closure, in compliance with AML and KYC regulatory requirements.
• Financial & Transaction Data: Retained for a minimum of five years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• Responsible Gaming Records: Self-exclusion records, cooling-off period logs, and responsible gaming intervention records are retained for a minimum of five years to ensure compliance and prevent circumvention of exclusion orders.
• Support Communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction for dispute resolution and quality assurance purposes.
• Technical & Log Data: Server logs and security event data are retained for up to twelve months, after which they are anonymised or deleted.
• Marketing Data: Marketing consent records and communication preferences are retained for as long as you maintain a 786xp account, and for two years following account closure or withdrawal of consent.

At the end of the applicable retention period, your personal data is securely deleted or irreversibly anonymised in accordance with 786xp's data destruction procedures.

7 Security Measures

786xp implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and 786xp servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial records.
• Bcrypt password hashing — your account password is never stored in a recoverable form.
• Multi-factor authentication options for player account access.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Strict role-based access controls ensuring that 786xp staff access only the minimum data required to perform their specific job function.
• Comprehensive security incident response procedures, including a commitment to notify affected players without undue delay in the event of a personal data breach that poses a risk to your rights and freedoms.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. 786xp takes all reasonable steps to protect your data but cannot provide an absolute guarantee of security.

8 Cookies & Tracking Technologies

786xp uses cookies and similar technologies on the 786xp platform. Cookies are small text files stored on your device that help 786xp deliver a functional, secure, and personalised experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the 786xp platform to function. These include session management cookies, security tokens, and load-balancing cookies. These cannot be disabled without materially impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and odds format preferences to improve your 786xp experience across sessions.
• Analytics Cookies: Used to collect anonymised, aggregated information about how players navigate and use the 786xp platform. This data helps us identify issues and improve features. 786xp uses first-party analytics only — we do not load Google Analytics or other third-party analytics scripts that track you across external sites.

786xp does not use advertising cookies, retargeting pixels, or any cross-site tracking technologies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using core 786xp features.

9 Your Privacy Rights

786xp respects your rights over your personal data. As a 786xp player, you hold the following rights, which you may exercise at any time by contacting 786xp support:

786xp will acknowledge your privacy rights request within two business days of receipt and will fulfil it within thirty days, subject to identity verification and any applicable legal exceptions. Where a request cannot be fulfilled in full — for example, where data must be retained to comply with AML regulations — 786xp will explain the specific reason in writing.

10 Children & Minors

786xp is strictly an adult platform. The 786xp platform is not directed at, and must not be used by, any individual under the age of 21 years. 786xp does not knowingly collect personal data from individuals under 21.

As part of the account registration and KYC process, 786xp verifies the age of all players using Pakistani CNIC documentation. Where 786xp discovers or reasonably suspects that a registered account belongs to an individual under 21, the account will be immediately suspended, all gaming activity on the account will be voided, any deposits will be returned to the originating payment method, and the data will be securely deleted in accordance with this Policy.

11 International Data Transfers

786xp's platform infrastructure may involve the transfer and processing of your personal data in jurisdictions outside Pakistan, including servers hosted in data centres located in other countries. Where such transfers occur, 786xp ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

These safeguards include contractual data processing agreements incorporating internationally recognised standard data protection clauses, and the selection of service providers and data centres operating under recognised security certifications. 786xp does not transfer your data to jurisdictions that do not provide adequate data protection standards without implementing additional protective measures.

12 Third-Party Services & Links

The 786xp platform integrates third-party game content from licensed game studios. While these integrations are designed to operate within the 786xp environment, 786xp is not responsible for the privacy practices of third-party game providers in relation to any data they may collect independently through their own game interfaces.

The 786xp platform does not contain links to external third-party websites. Any website claiming to be affiliated with 786xp that is not accessible via https://786xp.club is not an authorised 786xp property, and 786xp accepts no responsibility for the content or privacy practices of such sites. Players should exercise caution with any such sites and report them to 786xp support.

13 Changes to This Privacy Policy

786xp reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way 786xp processes your personal data or the rights available to you — 786xp will provide advance notice to all registered players via email to the address on file, not less than fourteen days prior to the updated Policy taking effect.

Minor updates — including clarifications of existing provisions, correction of typographical errors, and changes required to reflect updates in applicable law that do not materially alter your rights — may be made without advance notice and will take effect on the date they are published at https://786xp.club/privacy-policy.

The date of the most recent revision is displayed at the top of this document. Your continued use of 786xp following publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how 786xp has handled your personal data, please contact the 786xp Data Support team. Our team is available 24/7 via live chat on the 786xp platform, and you may also reach us in writing at:

[email protected]

786xp will acknowledge all formal privacy complaints within two business days and aims to resolve them fully within thirty days. Where a complaint is complex, we will keep you updated on progress at regular intervals.

If you are not satisfied with 786xp's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to the regulatory body overseeing 786xp's international gaming licence.