x444 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to x444.online and all services operated under the x444 brand. For the purposes of this policy, x444 acts as the data controller — meaning we determine how and why your personal data is processed when you use the platform.

x444 is an online gaming platform built specifically for players in Pakistan. We operate entirely in PKR and provide a range of games including live casino, slots, poker, card games, crash games, and sports-style betting formats. All data processing described in this policy relates to our services and the accounts registered on x444.online.

By registering an account on x444 or continuing to use the platform, you acknowledge that you have read this Privacy Policy and understand how your data is processed. This policy should be read alongside our Terms and Conditions.

x444 collects personal data in several ways — directly from you when you register or contact support, automatically when you use the platform, and from third-party payment processors and fraud-detection services. Here is a clear breakdown:

Data you provide directly to x444:

• Full name, date of birth, and gender (required for age verification and account setup)
• Email address and mobile phone number (required for login and communications)
• Identity documents: Pakistani CNIC (front and back), passport, or other valid government-issued ID submitted during KYC verification
• Proof of address: utility bill, bank statement, or similar document dated within three months
• Payment method details: your Easypaisa or JazzCash mobile wallet number, NayaPay or SadaPay account reference, or bank account details for IBFT. x444 does not store full card numbers for Visa or Mastercard — this is handled by our certified payment processor
• Communications you send to x444 support via Live Chat, WhatsApp, Telegram, or email

Data collected automatically when you use x444:

• IP address and approximate geolocation derived from it
• Device information: device type, operating system version, browser type and version
• Session data: pages visited, time spent, navigation paths, login and logout timestamps
• Game activity: games played, bet amounts, win/loss outcomes, session duration per game, bonus usage
• Cookies and similar tracking technologies (see Section 7 for full details)

x444 only collects data that is necessary for the legitimate purposes described in this policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or biometric data beyond identity document images required for verification.

x444 uses your personal data for the following specific purposes — nothing more. Each use is tied to a genuine operational need or legal obligation:

• Account creation and management: Your name, email, mobile number, and date of birth are needed to create and maintain your x444 account and ensure only you can access it.
• Age and identity verification (KYC): x444 is legally and ethically required to verify that every player is 18 or over and is who they claim to be. Identity documents are used solely for this purpose.
• Payment processing: Your payment wallet details are used to process deposits and withdrawals in PKR. x444 retains transaction records as required by anti-money laundering (AML) regulations.
• Fraud detection and prevention: IP addresses, device fingerprints, and behavioural patterns are analysed to detect suspicious activity, multi-accounting, bonus abuse, and potential money laundering.
• Responsible gaming: Your gaming activity data — session duration, bet sizes, loss patterns — is monitored to identify players who may be showing signs of problem gambling, so we can proactively offer support tools.
• Customer support: When you contact x444 support, we need access to your account history to assist you effectively. Support communications are retained for quality assurance and dispute resolution.
• Platform improvement: Aggregated and anonymised usage data helps x444 identify which features work well and which need improvement, without identifying individual players.
• Promotions and communications: If you have opted in to marketing communications, x444 will send you relevant bonus offers and platform updates. You can opt out at any time from your account settings or by contacting support.

x444 processes your personal data under the following legal bases, depending on the purpose:

• Contract performance: Processing your identity data, payment information, and account activity is necessary to provide the service you have contracted with x444 by accepting the Terms and Conditions.
• Legal obligation: KYC verification, AML transaction monitoring, and data retention for financial records are required by applicable law. x444 cannot waive these obligations.
• Legitimate interests: Fraud prevention, responsible gaming monitoring, platform security, and customer support quality assurance are carried out under x444's legitimate interest in operating a safe and fair platform.
• Consent: Marketing communications, non-essential cookies, and personalisation features are processed only where you have given clear, freely revocable consent. You may withdraw consent at any time.

Where x444 relies on legitimate interests as the legal basis, we have assessed that those interests do not override your privacy rights, given the nature of the data involved and the safeguards we apply.

x444 does not sell your personal data to any third party, full stop. We share data only where it is necessary to provide the service, comply with legal obligations, or protect the integrity of the platform. The categories of recipients are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank IBFT partners receive the minimum data necessary to process your transaction — typically your wallet number or account reference and the transaction amount.
• Identity verification providers: Certified third-party KYC services may receive your identity document images and personal details to perform verification checks. These providers are contractually bound to process data only for KYC purposes.
• Fraud detection services: Anonymised technical data (IP, device fingerprint, behavioural signals) may be shared with fraud analytics providers to identify patterns of abuse across the industry.
• Game software providers: Your player ID and gameplay data are shared with the game studio whose title you are playing to generate game outcomes and maintain session integrity. Studio partners do not receive your identity or payment details.
• Legal and regulatory authorities: x444 will disclose data to law enforcement or regulatory bodies where required by law, court order, or where disclosure is necessary to prevent serious harm.
• Business continuity: In the event of a merger, acquisition, or sale of x444's business, player data may be transferred to the acquiring entity under strict confidentiality obligations and subject to this Privacy Policy.

All financial transactions on x444 are conducted in Pakistani Rupees (PKR). The way x444 handles payment data differs slightly by method:

• Easypaisa and JazzCash: x444 stores only your registered mobile wallet number — the same number you use to log in. No PINs or full account credentials are ever stored by x444.
• NayaPay and SadaPay: Your linked NayaPay or SadaPay account reference is stored for withdrawal routing. Transaction confirmations are stored as part of your financial record.
• IBFT Bank Transfer: Your bank account number and bank name are stored for withdrawal processing and are retained as part of your financial transaction record.
• Visa and Mastercard: Full card details are handled exclusively by our PCI-DSS compliant payment gateway. x444 stores only a tokenised reference and the last four digits of the card for display purposes. x444 never has access to your full card number, CVV, or expiry date in plain text.

x444 retains complete transaction histories — deposits, withdrawals, bet records, and bonus activity — for a minimum of seven years as required by applicable anti-money laundering regulations. This retention applies even after an account is closed.

x444 uses cookies and similar technologies (local storage, session storage, pixel tags) to operate the platform, maintain your login session, prevent fraud, and improve your experience. Here is a breakdown of the cookies x444 uses:

You can manage cookie preferences in your browser settings at any time. Disabling essential cookies will prevent you from logging into x444. Analytics and functional cookies can be disabled without affecting core gameplay. For detailed cookie management instructions for your specific browser, consult your browser's help documentation.

x444 takes data security seriously and implements technical and organisational measures appropriate to the sensitivity of the data we hold. These include:

• TLS/SSL encryption: All data transmitted between your browser or device and x444's servers is encrypted using industry-standard TLS protocols. You should always see HTTPS and a padlock icon in your browser when using x444.
• Encryption at rest: Sensitive data including identity documents, financial records, and account credentials is encrypted in our databases using AES-256 or equivalent encryption.
• Access controls: Only authorised x444 staff with a legitimate business need can access player personal data. All access is logged, and access rights are reviewed regularly.
• Two-factor authentication: x444 supports two-factor authentication for player accounts. We strongly encourage all players to enable this from their account security settings.
• Penetration testing and vulnerability scanning: x444's platform is regularly tested for security vulnerabilities by qualified security professionals.
• Incident response: In the unlikely event of a data breach affecting personal data, x444 has a documented incident response plan. Where required by law, affected players and relevant authorities will be notified promptly.

x444 retains personal data only for as long as it is needed for the purpose it was collected, or as required by law. The main retention periods are:

• Active account data: Retained for the duration of your x444 account plus a period of one year after closure to handle any pending disputes or support requests.
• Financial and transaction records: Retained for a minimum of seven years after each transaction date as required by anti-money laundering regulations. This includes deposit and withdrawal records, bonus history, and bet records.
• Identity verification documents: Retained for five years after account closure or the last transaction, whichever is later, in line with KYC regulatory requirements.
• Customer support communications: Retained for two years for quality assurance and dispute resolution purposes.
• Technical logs (IP, session): Retained for 12 months on a rolling basis.
• Marketing preferences and consent records: Retained for the duration of your x444 account plus one year to demonstrate consent compliance.

After the applicable retention period expires, x444 securely deletes or anonymises the data so it can no longer be linked to your identity. Where anonymisation is used, the resulting data may be used indefinitely for statistical or research purposes without identifying any individual.

x444 respects your right to control your personal data. The rights available to you are:

To exercise any of these rights, contact x444 at support@x444.online or via Live Chat. x444 will verify your identity before processing any request that involves access to or modification of personal data. All requests are responded to within 72 hours of receipt, with full resolution within 30 days where possible.

x444 is strictly an 18+ platform. x444 does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on x444 or provided us with personal data, please contact us immediately at support@x444.online. x444 will investigate and, where confirmed, delete the account and all associated data promptly.

x444 uses age verification as part of the registration process and may request identity documents to confirm a player's date of birth. Any account where the player cannot confirm they are 18 or over will be closed pending satisfactory verification. Funds deposited by an underage account will be returned to the original payment method.

x444 may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we communicate our approach to data privacy. When we make material changes to the policy, we will notify registered players via email or via a notice on the x444 platform at least 14 days before the changes take effect.

Minor changes — such as clarifications that do not materially affect your rights, or corrections to typographical errors — may be made without individual notification. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Continued use of x444 following notification of a material change constitutes your acceptance of the updated Privacy Policy. If you disagree with any material change, you should stop using x444 and contact support to close your account and request data deletion where applicable.