786xp Privacy Policy

1. Who We Are

786xp operates the online casino and sports betting platform accessible at 786xp.app and through associated mobile applications. For the purposes of this Privacy Policy, 786xp is the data controller responsible for personal information collected through the Platform. This Policy applies to all users who register an account, place a wager, access casino games, or otherwise interact with any 786xp service.

If you have questions about how 786xp handles your data or wish to exercise any of your data rights, please contact us using the details provided in Section 15 of this Policy.

2. Data We Collect

2.1 Information You Provide Directly

When you register for or use a 786xp account, we collect personal information you provide, including:

• Full legal name, date of birth, and gender.
• Email address and mobile phone number (including the number registered to your JazzCash or Easypaisa account).
• Residential address.
• Username and password (stored in hashed form — we do not store passwords in plaintext).
• Identity documents submitted for KYC verification, including National Identity Card (CNIC), passport, or other government-issued identification.
• Selfie photographs submitted for biometric identity matching during the KYC process.
• Payment information including mobile wallet details (JazzCash, Easypaisa), bank account details (HBL, UBL, Meezan Bank, Bank Alfalah), or cryptocurrency wallet addresses used for USDT TRC20 transactions.
• Communications with 786xp support, including live chat transcripts and email correspondence.

2.2 Data Collected Automatically

When you use the 786xp platform, we automatically collect certain technical and usage data, including:

• IP address, device type, operating system, and browser information.
• Session duration, pages visited, features accessed, and navigation patterns within the Platform.
• Betting and gaming activity, including wager amounts, game types accessed, session start and end times, and transaction history.
• Login timestamps, geographic location derived from IP address, and device identifiers.
• Cookie identifiers and similar tracking technologies (as described in Section 7).

3. How We Use Your Data

786xp uses the personal data we collect for the following purposes:

• Account Management: To create, manage, and maintain your 786xp account, including authentication and account security features such as two-factor authentication.
• Platform Operation: To process deposits and withdrawals, settle bets, deliver game results, apply bonuses, and operate all services offered on the Platform.
• KYC & Compliance: To verify your identity and age, comply with anti-money laundering obligations, detect and prevent fraud, and fulfil applicable regulatory requirements.
• Responsible Gaming: To monitor gaming behaviour, identify patterns associated with problem gambling, and administer responsible gaming tools including deposit limits, session controls, and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Security & Fraud Prevention: To detect, investigate, and prevent unauthorized access, suspicious transactions, collusion, bonus abuse, and other fraudulent or illegal activity.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the performance, features, and user experience of the 786xp Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have not opted out of receiving such communications.

4. Legal Basis for Processing

786xp processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and game operation.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification obligations, and fraud prevention requirements.
• Legitimate Interests: Processing for fraud detection, platform security, abuse prevention, and general platform improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional communications and non-essential analytics, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

786xp does not sell your personal data. We may share your personal information with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and USDT TRC20 gateway providers, to process deposits and withdrawals on your behalf.
• KYC Verification Providers: Third-party identity verification services used to authenticate CNIC documents and biometric selfie matching.
• Game Content Providers: Casino and sports data providers who supply game content and real-time sports data to the Platform. These providers may process limited technical session data to deliver their services.
• IT Infrastructure & Security Providers: Cloud hosting, CDN, and cybersecurity vendors who process data on our behalf under strict confidentiality agreements.
• Regulatory Authorities & Law Enforcement: Where legally required, 786xp may disclose personal data to government agencies, law enforcement bodies, or regulators upon receipt of a valid legal demand.
• Professional Advisors: Legal counsel, auditors, and accountants, under professional confidentiality obligations, where necessary for business operations.

All third-party service providers acting as data processors are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to 786xp.

6. KYC & Identity Verification Data

786xp is required by anti-money laundering and responsible gaming regulations to verify the identity and age of all users before processing withdrawals. KYC data — including CNIC scans, passport copies, and biometric selfie images — is treated with the highest level of security and access control within 786xp's infrastructure.

KYC documents are used solely for the purpose of identity verification and regulatory compliance. They are not used for profiling, advertising, or any purpose unrelated to account verification. Access to KYC documents is restricted to authorised compliance personnel and, where legally required, regulatory or law enforcement bodies.

KYC documents are retained for the period mandated by applicable anti-money laundering regulations, which typically requires retention for a minimum of five years following account closure. After this period, documents are securely deleted.

7. Cookies & Tracking Technologies

786xp uses the following categories of cookies and similar technologies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming configuration within your account.
• Analytical Cookies: Aggregate, anonymised data about how users navigate the Platform, which features are used, and where performance issues occur. This data helps us improve 786xp. No individual user is identified from analytical data.

786xp does not deploy third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in or using Platform services.

8. Data Retention

786xp retains personal data only for as long as necessary for the purposes for which it was collected, subject to the following principles:

• Account data is retained for the duration your 786xp account remains active and for a period of up to five years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC identity documents are retained for a minimum of five years post-account-closure as required by applicable regulations.
• Transaction records, including deposits, withdrawals, and bet history, are retained for the minimum period required by applicable financial record-keeping obligations.
• Support correspondence is retained for up to three years from the date of the last communication.
• Where you exercise your right to erasure (see Section 10), 786xp will delete or anonymise personal data that is not subject to mandatory retention requirements.

9. Security Measures

786xp implements a comprehensive set of technical and organisational security measures to protect your personal data, including:

• SSL/TLS encryption on all data transmitted between your device and 786xp servers.
• Encryption at rest for sensitive data fields including passwords (stored as salted hashes), KYC documents, and payment details.
• Role-based access controls ensuring that personnel can only access personal data necessary for their specific function.
• Real-time intrusion detection, anomaly monitoring, and fraud detection systems across all account and payment activity.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication available to all registered users for additional account protection.

Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 786xp will notify affected users without undue delay in accordance with applicable notification obligations.

10. Your Data Rights

Subject to applicable law and legitimate exceptions, you have the following rights with respect to your personal data held by 786xp:

• Right of Access: You may request a copy of the personal data 786xp holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal retention obligation applies.
• Right to Restriction: You may request that 786xp restrict processing of your data in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: You may request a machine-readable export of personal data you have provided to 786xp.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. Objection to marketing will be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact 786xp via the support email address listed in Section 15. We will respond to all valid requests within 30 days. We may need to verify your identity before processing your request.

11. Children & Minors

The 786xp Platform is strictly for individuals aged 18 and above. 786xp does not knowingly collect personal data from persons under 18 years of age. If we become aware that a user is under 18, the account will be immediately suspended, all data will be reviewed, and the account will be closed in accordance with our Terms & Conditions. If you believe a minor has registered on 786xp, please contact support immediately so we can investigate and take appropriate action.

12. Third-Party Services

The 786xp Platform integrates third-party services — including live casino game studios, slot providers, sports data aggregators, and payment processors — necessary to deliver the full range of Platform features. When you interact with content provided by these third parties (for example, a live casino stream from an external studio), that provider may process certain technical session data independently of 786xp, subject to their own privacy policies.

786xp is not responsible for the privacy practices of third-party providers operating within the Platform. All third-party providers are vetted for compliance with applicable data protection standards and are required to operate under data processing agreements consistent with this Policy.

13. International Data Transfers

786xp's infrastructure may involve the transfer of personal data to servers or service providers located outside Pakistan, including in jurisdictions with different data protection standards. Where such transfers occur, 786xp ensures that appropriate safeguards are in place — including contractual data protection clauses with service providers — to maintain a level of data protection consistent with this Policy and applicable data protection principles.

14. Amendments to This Policy

786xp may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. The "Last Updated" date at the top of this page will reflect the most recent revision. Material changes will be communicated to registered users via email notification or a prominent Platform notice prior to the change taking effect. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Privacy Policy.

15. Contact & Complaints

For any questions, requests, or complaints regarding this Privacy Policy or 786xp's data handling practices, please contact our support team:

• Live Chat: Available 24/7 from within your 786xp account dashboard.
• Email: [email protected]

786xp will acknowledge data-related requests within 5 business days and aim to resolve them fully within 30 days. Where a complaint cannot be resolved to your satisfaction, you retain the right to escalate the matter to a relevant data protection authority or independent dispute resolution body as applicable in your jurisdiction.