Introduction
This Privacy Policy describes how x888 — the online casino and sports betting platform available at https://x888.cash — collects, uses, stores, and protects the personal information of its registered users and website visitors. It applies to all interactions you have with x888, whether through the website, any mobile-optimised interface, or via our customer support channels.
We've written this policy in plain, readable English because we believe you have every right to understand exactly what happens to your data. We haven't hidden uncomfortable practices behind complicated legal language — what you read here reflects what we actually do.
By creating an account on x888 or by continuing to use the platform after this policy has been brought to your attention, you acknowledge that you have read and understood its contents. If you disagree with any part of this policy, please contact us before continuing to use x888 — we'd rather address your concerns directly than lose your trust.
This policy tells you exactly what x888 knows about you, why we have it, and what you can do about it. We collect only what we genuinely need to run the platform and comply with the law — nothing more.
Data Controller
For the purposes of applicable data protection law, x888 is the data controller responsible for the personal information collected through this platform. As the data controller, x888 determines the purposes for which personal data is processed and the manner in which that processing takes place.
All data protection enquiries, subject access requests, and requests to exercise your data rights should be directed to the x888 Data Protection contact:
Response within 72 hours
Live chat 24/7 on the platform
What Personal Data We Collect
x888 collects personal data in the following categories. We do not collect any category of data that is not described here, and we do not retain data beyond the periods set out in Section 8.
3.1 Registration Data
When you create an x888 account, we collect your full name, date of birth, email address, mobile phone number, and the country of residence you declare during sign-up. This information is required to create and maintain your account.
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering requirements and to verify that you meet the minimum age of 18, x888 may request identity documents including a valid CNIC (Computerised National Identity Card), passport, or other government-issued photo identification. Proof of address and proof of payment method may also be requested before your first withdrawal is processed.
3.3 Financial and Transaction Data
x888 records all deposit and withdrawal transactions associated with your account, including the amount, date, time, payment method used, and the transaction reference number. We do not store full card numbers — payment card processing is handled by PCI-compliant third-party processors.
3.4 Gaming Activity Data
x888 maintains a complete record of your gaming and betting activity on the platform — including games played, bets placed, stakes wagered, and outcomes. This data is used to provide the service, resolve disputes, support responsible gaming monitoring, and fulfil regulatory requirements.
3.5 Technical and Device Data
When you access x888, we automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, and session timestamps. This data is used for security, fraud detection, and platform performance monitoring.
3.6 Communications Data
If you contact x888 support via live chat, email, or any other channel, we retain records of that communication including the content of messages, the date and time, and any attachments. This helps us maintain a complete support history and ensures accountability in our service.
x888 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in identity documents submitted for KYC purposes.
How We Use Your Personal Data
x888 uses your personal data for the following purposes. Where a legal basis applies, it is noted alongside the purpose:
| Purpose | Description | Legal Basis |
|---|---|---|
| Account management | Creating, maintaining, and securing your x888 account | Contract performance |
| Payment processing | Processing PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card | Contract performance |
| Identity verification | Confirming your age (18+) and identity to meet AML obligations | Legal obligation |
| Fraud & security | Detecting and preventing fraud, multi-accounting, and prohibited conduct | Legitimate interest |
| Responsible gaming | Monitoring activity patterns to identify potential problem gambling indicators | Legal obligation / legitimate interest |
| Customer support | Resolving queries, complaints, and disputes | Contract performance |
| Platform improvement | Analysing usage data to improve features, performance, and game selection | Legitimate interest |
| Marketing | Sending promotional communications about x888 offers (only with consent) | Consent |
| Regulatory compliance | Meeting record-keeping and reporting obligations under applicable law | Legal obligation |
x888 does not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without human review. Automated systems are used for fraud scoring and responsible gaming alerts, but account actions based on these signals are reviewed by a human team member before being applied.
Legal Basis for Processing
x888 processes your personal data on one or more of the following legal grounds, depending on the specific purpose:
- Contract performance — processing that is necessary to provide the services you've signed up for, including running your account, processing transactions, and resolving disputes.
- Legal obligation — processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and financial reporting obligations.
- Legitimate interest — processing that serves x888's legitimate business interests where those interests are not overridden by your rights. Examples include fraud prevention, platform security, and service improvement analytics.
- Consent — where you have provided explicit, freely given consent for a specific processing activity, such as receiving promotional emails or allowing non-essential cookies. You may withdraw this consent at any time.
Who We Share Your Data With
x888 does not sell your personal data to third parties. We share data only where it is necessary to operate the platform, comply with legal requirements, or protect against fraud. The categories of recipients are as follows:
6.1 Payment Processors
To process your PKR deposits and withdrawals, x888 shares necessary transaction data with payment service providers including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, and card payment processors (Visa/Mastercard acquiring banks). Each of these providers operates under their own privacy policies and is bound by contractual data protection obligations with x888.
6.2 Game and Technology Providers
x888's live casino, slots, and crash games are powered by third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, and others. These providers may receive technical identifiers and game session data necessary to deliver the games. They do not receive your full identity details unless required for regulatory reasons.
6.3 Identity Verification Services
To assist with KYC verification, x888 may use third-party identity verification services. These providers process your submitted identity documents for the purpose of verification only and are not permitted to use your data for any other purpose.
6.4 Fraud Prevention and Security
x888 uses third-party fraud detection and cybersecurity services. These services may process IP addresses, device fingerprints, and behavioural signals to identify suspicious activity. Data shared with these providers is limited to what is necessary for fraud and security assessment.
6.5 Regulatory and Legal Authorities
x888 may be required to disclose your personal data to government agencies, financial regulators, tax authorities, or law enforcement bodies where required or permitted by applicable law. This includes, but is not limited to, responses to court orders, anti-money laundering reporting obligations, and cooperation with fraud investigations. x888 will not notify you of such disclosures where doing so would be prohibited by law or would interfere with a law enforcement process.
x888 never sells your data to advertisers, data brokers, or unrelated third parties for their own marketing purposes. This is a firm commitment — not a qualified statement.
Payments and Financial Data
All financial transactions on x888 are denominated in Pakistani Rupees (PKR). x888 does not store complete payment card numbers — full card data is processed directly by PCI DSS-compliant card processors and is never stored on x888 servers.
For mobile wallet transactions via Easypaisa, JazzCash, NayaPay, and SadaPay, x888 retains the mobile number associated with the wallet, the transaction amount, timestamp, and a transaction reference number. This data is retained as part of the financial record for your account and is necessary for dispute resolution and regulatory compliance.
Bank IBFT transactions are processed through standard interbank transfer infrastructure. x888 retains the account title, bank name, and transaction reference — not the full account number. This minimum data set is retained as required by financial compliance obligations.
If you believe there has been an unauthorised transaction on your x888 account, you should contact x888 support immediately at support@x888.cash. x888 will investigate and, where appropriate, liaise with the relevant payment provider to resolve the issue.
Data Retention
x888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory requirements, and to resolve potential disputes. The general retention periods that apply to the main data categories are set out below:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | Legal / AML compliance |
| KYC identity documents | Duration of account + 5 years | AML / regulatory requirement |
| Transaction records | 7 years from transaction date | Financial regulations |
| Gaming activity logs | 5 years from date of activity | Dispute resolution / regulatory |
| Support communications | 3 years from last interaction | Service quality / disputes |
| Technical / device data | 13 months | Security monitoring |
| Marketing consent records | Until consent withdrawn + 1 year | Compliance with consent obligations |
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised aggregate data (for example, platform usage statistics) may be retained indefinitely as it cannot be used to identify you.
Data Security
x888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- TLS/SSL encryption on all data transmitted between your device and x888 servers.
- Encryption at rest for sensitive personal data stored in our databases.
- Access controls — only authorised x888 personnel with a legitimate need to access specific data categories are granted permission to do so. Access logs are maintained.
- Two-factor authentication available for player accounts — we strongly recommend enabling this in your account security settings.
- Regular security audits conducted by third-party cybersecurity specialists.
- Penetration testing carried out periodically to identify and remediate vulnerabilities.
- Incident response procedures — in the event of a data breach that poses a risk to your rights, x888 will notify affected players and relevant authorities as required by applicable law.
Despite these measures, no online platform can guarantee absolute security. You also have a role to play — keeping your password confidential, not sharing your login credentials, and contacting x888 immediately if you suspect unauthorised access to your account.
Enable two-factor authentication in your x888 account settings. It takes under a minute to set up and significantly reduces the risk of your account being accessed without your knowledge.
Cookies and Tracking Technologies
x888 uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored on your device that helps the platform function correctly, remember your preferences, and analyse how the site is used. The types of cookies we use are categorised below:
| Category | Purpose | Can You Opt Out? |
|---|---|---|
| Session management, login authentication, security tokens, load balancing. Required for the platform to function. | No — these are necessary for the site to work. | |
| Aggregate usage statistics — page views, session duration, navigation paths. Helps us improve the platform. | Yes — opt out in account settings or via browser. | |
| Tracking for personalised promotional communications. Only active with your explicit consent. | Yes — withdraw consent at any time in account settings. |
You can also manage cookies at the browser level. Most modern browsers allow you to view, block, or delete cookies through the browser's settings or privacy panel. Note that blocking essential cookies will prevent the x888 platform from functioning correctly — you will not be able to log in or place bets if these cookies are blocked.
x888 does not use cookies to serve third-party advertising across the internet. Tracking is limited to activity on the x888 platform itself.
Your Data Rights
As a registered user of x888, you have the following rights in relation to your personal data. To exercise any of these rights, contact x888 at privacy@x888.cash — we aim to respond to all data rights requests within 30 days.
Where x888 processes your data based on consent (for example, for marketing emails), you can withdraw that consent at any time via the unsubscribe link in any email, or through the notification preferences in your x888 account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Children's Privacy
x888 is strictly an 18+ platform. The service is not directed at, and is not intended for, anyone under the age of 18. x888 does not knowingly collect personal data from individuals under 18.
If x888 becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be closed, and any deposits will be returned to the originating payment method where technically possible. If you believe a minor has created an account on x888, please contact support@x888.cash immediately.
x888 operates robust age verification procedures — including KYC document checks — as part of its registration and withdrawal processes to prevent underage access to the platform.
International Data Transfers
x888's technology infrastructure and some of its third-party service providers may be located in countries outside Pakistan. Where your personal data is transferred internationally — for example, to game studio servers in Europe, or to cloud infrastructure providers operating globally — x888 ensures that appropriate safeguards are in place.
These safeguards include contractual data processing agreements with all third-party processors, requiring them to maintain data protection standards at least equivalent to those applied by x888 directly. In all cases, international data transfers are governed by the terms of those agreements and applicable law.
If you would like more information about the specific safeguards applied to any international transfer of your data, please contact privacy@x888.cash.
Updates to This Policy
x888 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, the updated policy will be published on this page with a revised "Last updated" date. For significant changes, registered users will be notified by email or via an in-platform notification.
We encourage you to review this policy periodically. Continued use of x888 after a policy update has been communicated constitutes your acknowledgment of the updated version. If you disagree with any changes, please contact us — we're open to discussing your concerns before you decide whether to continue using the platform.
Contact Us About Privacy
For any questions, concerns, or requests relating to this Privacy Policy or to how x888 handles your personal data, please use one of the contact methods below. We aim to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within 30 days.
- Data Protection enquiries: privacy@x888.cash
- General support: support@x888.cash
- Live chat: Available 24/7 on the x888 platform
This Privacy Policy was last reviewed and updated in June 2025. For previous versions, contact x888 support.
If you feel your data rights have not been properly addressed after contacting x888, you may have the right to complain to the relevant data protection authority in your jurisdiction. Details of the applicable authority will be included in x888's response to any unresolved complaint.