x1111 Privacy Policy —
How We Protect Your Personal Data

01 Who We Are

The data controller for the personal information processed through the x1111 platform is the entity operating x1111 under an internationally recognised gaming license. The platform is accessible at x1111.bio and provides online casino, sports betting, crash games, and live dealer services to registered players across Pakistan, including users in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities nationwide.

Throughout this Privacy Policy, "x1111", "we", "us", and "our" refer to the data controller. "Player", "you", and "your" refer to any individual who accesses or registers on the x1111 platform.

02 Data We Collect

x1111 collects personal data through several channels: directly from you during account registration and ongoing use of the platform, automatically through your interaction with our website and services, and from third-party sources involved in identity verification and payment processing.

03 How We Use Your Data

x1111 processes your personal data for the following specific purposes:

• Account Registration & Management: To create and maintain your x1111 account, verify your identity under KYC regulations, and manage your account settings and preferences.
• Service Delivery: To provide you with access to casino games, sports betting markets, crash titles, live dealer products, and all associated platform features.
• Transaction Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, card payments, and cryptocurrency; and to process withdrawal requests to your designated payment method.
• Regulatory & Licensing Compliance: To satisfy our obligations under our international gaming license, including KYC verification, AML (anti-money laundering) monitoring, transaction record-keeping, and reporting to regulatory authorities where legally required.
• Responsible Gaming: To administer deposit limits, loss limits, session time reminders, cooling-off periods, and self-exclusion requests that you set on your x1111 account.
• Fraud Prevention & Security: To detect and prevent fraud, collusion, bonus abuse, unauthorised account access, and any other prohibited conduct as defined in our Terms and Conditions.
• Communication: To send you transactional notifications (deposit confirmations, withdrawal approvals, security alerts), account-related communications, and — where you have opted in — promotional offers and platform updates.
• Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving platform performance, game selection, user experience, and network optimisation — particularly for Pakistani mobile network conditions common in cities like Karachi and Lahore.

04 Legal Bases for Processing

x1111 processes personal data based on the following legal grounds:

1. Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions agreed upon when you register an x1111 account — including account management, service delivery, and transaction processing.
2. Legal Obligation: Processing required to comply with our licensing obligations, including KYC verification, AML monitoring, regulatory reporting, and responsible gaming enforcement.
3. Legitimate Interests: Processing carried out for our legitimate business interests — including fraud prevention, platform security, service improvement, and direct marketing to existing customers — where those interests are not overridden by your data protection rights.
4. Consent: Where we rely on your consent for specific processing activities — such as sending promotional communications — you have the right to withdraw that consent at any time through your x1111 account settings or by contacting support.

05 Data Sharing & Third Parties

x1111 shares personal data only in the following specific circumstances and never sells data to third parties for their marketing purposes:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, card processing networks, and cryptocurrency exchanges receive the data necessary to process your specific transactions and nothing more.
• KYC & Identity Verification Providers: Third-party identity verification services receive your KYC documents for the sole purpose of confirming your identity under our licensing obligations.
• Gaming License Regulator: Our licensing authority has the right to audit x1111's player records. Data disclosed to the regulator is subject to the regulator's own confidentiality and data protection obligations.
• Game Providers: Slot studios, live dealer operators, and crash game providers receive limited technical data necessary to deliver their games within the x1111 platform. They do not receive your financial or identity data.
• Law Enforcement & Legal Process: x1111 will disclose personal data if required to do so by a valid legal order, court order, or regulatory mandate from a competent jurisdiction.
• Service Infrastructure: Cloud hosting providers, CDN operators, and database management services that host x1111's infrastructure have access to encrypted data but are contractually bound by strict confidentiality and data security obligations.

06 Cookies & Tracking Technologies

6.1 What Cookies We Use

x1111 uses cookies and similar technologies to deliver platform functionality, maintain session state, remember login preferences, and analyse aggregate usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for basic platform operation, including session management, login authentication, and security. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences, such as language, display settings, and recently played games. Disabling these cookies may degrade your experience but will not prevent platform access.
• Analytics Cookies: Collect anonymised data about how players interact with the x1111 platform — page views, session duration, navigation paths. This data is used exclusively for platform optimisation and is not shared with external advertising networks.

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent the x1111 platform from functioning correctly. x1111 does not use third-party advertising cookies or tracking pixels from external advertising networks.

07 Data Retention

x1111 retains personal data for as long as your account remains active, plus an additional retention period following account closure as required by our licensing and legal obligations. Specific retention periods are as follows:

• Account Data: Retained for the duration of the active account plus a minimum of five (5) years following account closure, as mandated by our licensing framework for regulatory audit purposes.
• Transaction Records: Financial transaction data is retained for a minimum of seven (7) years from the date of the transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for the duration of the account plus five (5) years, after which they are securely destroyed.
• Support Communications: Live chat logs, support tickets, and email correspondence are retained for three (3) years from the date of the last communication in that thread.
• Technical Logs: Server access logs and IP address records are retained for twelve (12) months from the date of collection.

08 Data Security

x1111 employs comprehensive technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• All data transmitted between your device and the x1111 platform is protected by 256-bit SSL/TLS encryption.
• Data at rest on x1111 servers is encrypted using AES-256 encryption.
• Passwords are stored using one-way cryptographic hashing — x1111 staff cannot view or retrieve your plaintext password.
• Two-factor authentication (2FA) is available for all accounts and strongly recommended.
• Access to personal data within x1111's organisation is restricted on a role-based access control model. Only authorised personnel with a genuine business need can access player data.
• Regular penetration testing and security audits are conducted by independent third parties.
• Automatic session timeout applies to idle sessions to prevent unauthorised access on shared or unattended devices.

09 Your Data Rights

As a registered x1111 player, you have the following rights regarding your personal data, which may be exercised by contacting x1111 support or through your account settings:

• Right of Access: You may request a copy of the personal data x1111 holds about you. We will respond to access requests within thirty (30) days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Certain data corrections (e.g., registered name) may require re-verification.
• Right to Erasure: You may request deletion of your personal data, subject to our licensing-mandated retention obligations described in Section 7. Where retention is legally required, we will inform you of the specific retention period that applies.
• Right to Restrict Processing: You may request that x1111 restrict the processing of your data in specific circumstances — for example, while the accuracy of your data is being verified.
• Right to Data Portability: Where technically feasible, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to the processing of your data where it is based on our legitimate interests, and we will assess whether our interests override your objection.

To exercise any of these rights, contact x1111 support via live chat or email at [email protected]. x1111 may require identity verification before processing a data rights request to prevent unauthorised access to another player's data.

10 Children & Minors

11 Changes to This Privacy Policy

x1111 reserves the right to update this Privacy Policy at any time. Material changes — those that significantly affect how your personal data is processed or your rights — will be communicated to registered players via email or in-platform notification at least fourteen (14) days before the effective date of the change.

Non-material changes (formatting, clarifications that do not alter the substance of the policy) may be made without prior notification. The "Effective Date" at the top of this page will always reflect the date of the most recent version.

Continued use of the x1111 platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any update, you should close your account and withdraw your remaining balance before the updated policy takes effect.

12 Contact & Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by x1111, please contact us via the following channels:

• Live Chat: Available 24/7 within the x1111 platform. Average response time: 3–5 minutes.
• Email: [email protected] — formal data requests and privacy complaints will receive a substantive response within five (5) business days.

Data rights requests are handled by a dedicated member of the x1111 compliance team and are logged for audit purposes. x1111 takes all data-related complaints seriously and will investigate and respond within the timeframes stated above.