xbet Privacy Policy – How We Protect Pakistani Players' Data

xbet operates the online betting and casino platform at xbet-bangla.net and all associated mobile-optimised versions of the service. For the purposes of this Privacy Policy, xbet is the data controller — meaning we are the entity that decides why and how your personal data is processed.

If you have any question about how xbet handles your personal information, the right place to start is our support team. You can reach us at support@xbet-bangla.net or through the live chat feature available directly on the platform. We aim to respond to all privacy-related queries within five working days.

This Privacy Policy applies to all registered xbet players, prospective players who have started but not completed registration, and visitors to the xbet website who interact with features that involve data collection (such as the live chat or contact form). It applies regardless of the device you use to access xbet — desktop, smartphone or tablet.

xbet collects different categories of personal data depending on your relationship with the platform. Here is a breakdown of what we collect and when:

xbet collects your personal data through the following channels:

• Directly from you: When you fill in registration forms, submit KYC documents, make deposits or withdrawals, contact support or respond to promotions.
• Automatically through the platform: When you visit xbet, our servers and analytics systems record technical and behavioural data about your session — including your IP address, device fingerprint, which pages you visit and for how long, and what bets you place. This happens whether or not you are logged into an account.
• From payment processors: When you make a deposit or request a withdrawal, the payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, a bank or a card network) confirms transaction details to xbet. This includes confirmation of the payer's identity, the transaction amount and the payment method reference.
• From identity verification providers: During KYC, xbet may use a third-party identity verification service to check the authenticity of documents you submit. This service returns a verification result to xbet but does not store your documents independently.
• From cookies and similar technologies: See Section 9 for a full explanation of how xbet uses cookies and tracking technologies on its platform.

xbet uses personal data only for legitimate, defined purposes. We do not collect data speculatively or for purposes that are unrelated to operating the platform and serving you as a player. Here are the specific purposes for which your data is used:

• Account creation and management: To open your xbet account, verify your identity, maintain your account balance and process your betting activity accurately.
• Payment processing: To process deposits in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and cards, and to process withdrawal requests to verified payment methods.
• Identity verification (KYC): To confirm that you are who you say you are, that you are 18 or over, and that your payment methods belong to you. This is required under our gaming licence conditions.
• Fraud prevention and security: To detect and investigate suspicious account activity, unauthorised access attempts, multi-accounting, bonus abuse and potential money laundering. xbet is legally required to maintain these controls.
• Customer support: To respond to your queries, resolve complaints, investigate disputed bets and manage your account on your request.
• Responsible gaming: To identify patterns of play that may indicate problem gambling and to apply the tools and protections described in the Responsible Gaming policy — including enforcing self-exclusion requests.
• Regulatory compliance: To fulfil our obligations under applicable gaming and financial regulations, including responding to lawful requests from regulatory and law enforcement authorities.
• Platform improvement: To analyse aggregated behavioural data (at a population level, not individually identifiable) to improve the xbet platform, fix bugs and optimise the user experience for Pakistani players.
• Marketing communications: To send you information about xbet promotions, new features and special offers — but only if you have not opted out of marketing. See Section 10 for how to opt out.

xbet processes your personal data on the following legal bases, depending on the specific purpose:

• Contract performance: Most of our data processing is necessary to fulfil the contract between you and xbet — operating your account, processing bets and handling deposits and withdrawals. Without this processing, the service cannot function.
• Legal obligation: Gaming regulations and anti-money-laundering laws require us to verify identities, retain transaction records for specified periods, screen players against sanctions lists and report suspicious transactions to relevant authorities. This processing is not optional for xbet.
• Legitimate interests: xbet has a legitimate interest in protecting the integrity of the platform — detecting fraud, preventing multi-accounting, identifying bonus abuse and maintaining platform security. These interests are balanced against your privacy rights; we do not conduct surveillance that goes beyond what is reasonably necessary for platform security.
• Consent: For marketing communications and for certain uses of non-essential cookies, we rely on your consent. You can withdraw consent at any time — see Section 10 for the steps to do so.

xbet does not sell your personal data to third parties. We do share data with specific categories of trusted partners and authorities, strictly on a need-to-know basis:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-connected banks and card networks receive the minimum data required to process your transaction — typically your account identifier, the transaction amount and a reference number.
• Identity verification providers: Third-party KYC providers process your identification documents to confirm authenticity. They operate under strict data processing agreements with xbet and are prohibited from using your data for any purpose other than the verification service.
• Game providers: When you play casino games, fishing games or virtual sports on xbet, the game provider's platform records your game session data (stakes, outcomes, session duration). This is necessary for game integrity and RTP auditing. Game providers are contractually prohibited from using this data for their own marketing or from selling it.
• Regulatory and law enforcement authorities: xbet may be legally required to disclose player data to gaming regulators, financial intelligence units or law enforcement agencies in response to lawful requests. We will inform you of such disclosures where we are legally permitted to do so.
• IT and platform infrastructure providers: Cloud hosting, cybersecurity and analytics infrastructure providers may process data on xbet's behalf. All such providers operate under data processing agreements that restrict their use of data to the contracted service only.
• Responsible gambling organisations: Where a player requests self-exclusion across multiple operators via a multi-operator exclusion scheme, xbet may share limited data with that scheme to implement the exclusion effectively.

xbet's primary platform infrastructure is hosted in data centres that are operated to international security standards. Some of the third-party service providers we work with — particularly game studios and platform technology partners — may be based in or operate infrastructure in countries outside Pakistan. When your data is transferred to such locations, xbet ensures that appropriate safeguards are in place.

These safeguards include:

• Contractual clauses requiring recipient organisations to apply data protection standards equivalent to those we apply.
• Technical controls including encryption of data in transit and at rest.
• Regular security assessments of third-party providers who handle player data.

xbet retains personal data for only as long as necessary for the purposes for which it was collected, or for as long as required by applicable law or regulation. The following retention periods apply:

• Account data and transaction records: Retained for a minimum of five years after account closure. This is required under anti-money-laundering regulations applicable to licensed gaming operators.
• KYC documents: Retained for a minimum of five years after account closure, or longer if required by a regulatory investigation that is still open at the time of closure.
• Betting records: Retained for a minimum of five years for regulatory compliance and a further period as needed to resolve any outstanding dispute or investigation.
• Support communications: Retained for three years after the communication, or for the duration of any unresolved dispute relating to that communication.
• Marketing opt-in records: Retained until you withdraw consent, plus a further period to demonstrate compliance with consent requirements.
• Technical and session logs: Retained for up to 12 months for security and fraud detection purposes, then deleted or anonymised.

When the applicable retention period expires, xbet securely deletes or anonymises the relevant data so that it can no longer be linked to you as an individual.

xbet uses cookies and similar technologies on its platform. A cookie is a small text file placed on your device by a website when you visit it. Cookies serve a range of purposes, from keeping you logged in to helping us understand how Pakistani players use the platform so we can improve it.

xbet uses the following categories of cookies:

• Essential cookies: These are required for the platform to function. They keep you logged in during your session, remember your language preference and maintain your bet slip. These cookies cannot be disabled without breaking core platform features.
• Analytics cookies: These help us understand how the xbet platform is used — which pages are most visited, where players navigate from and to, and how long sessions last. This data is aggregated and used to improve the platform. We use analytics provided by reputable providers operating under data processing agreements with xbet.
• Functional cookies: These remember your preferences across sessions — such as your preferred deposit method or default odds format — so you don't have to reset them every time you log in.
• Marketing cookies: These track whether you clicked an advertisement before visiting xbet, so we can measure the effectiveness of our promotional campaigns. They do not share your betting data with advertisers.

As an xbet player, you have a number of rights with respect to your personal data. These rights are available to all Pakistani players regardless of the volume of activity on their account. To exercise any of these rights, contact us at support@xbet-bangla.net with your registered phone number or email address and the specific right you wish to exercise. We will respond within five working days.

xbet takes the security of Pakistani players' personal data seriously and applies a range of technical and organisational measures to protect it from unauthorised access, loss, disclosure or alteration. These measures include:

• 256-bit SSL encryption on all data transmitted between your device and xbet servers. This is the same encryption standard used by major Pakistani banks for online banking.
• Segregated data storage: Player financial data, KYC documents and account credentials are stored in systems that are logically and physically separated from xbet's general operational systems. Access is restricted to specific staff roles with a documented need to access the data.
• Access controls and audit logs: Internal access to player data is role-restricted and logged. Any unusual internal access pattern triggers an automated security alert.
• Regular security testing: xbet conducts regular penetration testing and vulnerability assessments on its platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Incident response: xbet maintains a data breach response procedure. If a breach occurs that affects your personal data in a way that creates a risk to your rights, we will notify affected players and relevant authorities within the timeframes required by applicable law.

Despite these measures, no internet-connected system can guarantee absolute security. You have a role to play too — maintaining a strong, unique password for your xbet account, not sharing your credentials and enabling two-factor authentication where available significantly reduces the risk of unauthorised access.

If you have any question, concern or request relating to this Privacy Policy or to how xbet handles your personal data, please contact us:

• Email: support@xbet-bangla.net
• Live chat: Available on the xbet platform 24 hours a day, 7 days a week
• Response time: Privacy-related queries are responded to within five working days

xbet reviews this Privacy Policy periodically and updates it when required — for example, when we add new features that involve new data processing activities, or when applicable regulations change. The date of the most recent revision is shown at the top of this document. When we make significant changes to the policy, we will notify registered players by email and/or by posting a notice on the platform.

Your continued use of xbet after a privacy policy update constitutes acceptance of the revised policy. If you do not agree with changes to the policy, you may close your account by contacting support — though xbet is legally required to retain transaction and identity records for the periods described in Section 8 regardless of account closure.