1. Who We Are
x1bet operates the online betting and gaming platform at x1bet.cash. For the purposes of this Privacy Policy, x1bet is the data controller — meaning we determine the purposes and means of processing your personal data when you use our platform.
Our platform is designed for players in Pakistan, and this policy reflects the reality of how Pakistani players interact with x1bet — primarily through mobile devices, using Pakistani payment methods such as Easypaisa and JazzCash, and with a strong interest in cricket, PSL, and local gaming content.
If you have any questions about how x1bet handles your personal data, you can contact our Data Protection team at any time at support@x1bet.cash. We aim to respond to all data-related enquiries within 72 hours.
2. What Personal Data x1bet Collects
x1bet only collects data that is necessary for operating the platform, processing your transactions, verifying your identity, and complying with our legal obligations. We do not collect data for the sake of it. Here is a breakdown of what we collect:
Identity and contact data:
- Full legal name (as per your CNIC or passport)
- Date of birth (for age verification — you must be 18+)
- Pakistani mobile number
- Email address
- Residential address in Pakistan
- National Identity Card (CNIC) number, where identity verification is required
Financial data:
- Easypaisa and JazzCash account details linked to deposits and withdrawals
- Bank account details (for IBFT transfers)
- Visa/Mastercard details (tokenised — full card numbers are never stored on x1bet servers)
- Deposit and withdrawal history in PKR
- Transaction dates, amounts, and reference numbers
Account and activity data:
- x1bet username and account ID
- Betting history — sports, poker, slots, casino
- Bonus usage and wagering records
- Session duration and activity logs
- Login timestamps and logout records
Technical data:
- IP address at time of registration and login
- Device type, operating system, and browser version
- Mobile network operator (for Pakistani users)
- Cookies and session identifiers (see Section 10)
Communications data:
- Records of all support interactions via live chat and email
- Complaint records and resolution history
- Marketing preferences (opt-in and opt-out records)
3. How x1bet Collects Your Data
x1bet collects personal data through the following methods:
Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or set responsible gaming limits, you provide data to us directly. We only ask for information that is relevant to the task you are completing.
Automatically through your use of the platform: When you use x1bet — browsing the sportsbook, placing bets, playing poker or slots — our systems automatically log technical data including your IP address, device information, and session activity. This logging is necessary for security monitoring, fraud detection, and platform performance.
From payment processors: When you initiate a deposit or withdrawal, our payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors, and Visa/Mastercard networks) return transaction confirmation data to x1bet. This is used solely for reconciling your account balance and maintaining accurate financial records.
From identity verification services: Where x1bet initiates a formal identity verification — typically for withdrawals above Rs 50,000 — a third-party KYC (Know Your Customer) service may be used to verify CNIC data. This is a legal compliance requirement under anti-money-laundering regulations.
We do not purchase data lists or receive personal data from third-party marketing companies. Every piece of data x1bet holds about you came from your direct interaction with x1bet or from the payment and verification processes necessary to operate your account.
4. Why x1bet Uses Your Personal Data
x1bet uses your personal data for the following purposes, each of which is described with the specific data categories involved:
Operating your account: We use your name, mobile number, email, and account details to create and maintain your x1bet account, authenticate logins, process bets, and display your bet history and balance. This is the core purpose for which the data was collected.
Processing PKR payments: Your mobile wallet details, bank account information, and transaction history are used to process deposits and withdrawals in Pakistani Rupees. This includes communicating with Easypaisa, JazzCash, and other payment processors to confirm payment status.
Age and identity verification: We use your date of birth and, where required, your CNIC to verify that you are at least 18 years old and that your account belongs to a real person in Pakistan. This is both a legal requirement and a responsible gaming obligation.
Security and fraud prevention: IP addresses, device data, and login records are used to detect and prevent unauthorised access, multiple account creation, bonus abuse, and financial fraud. Unusual activity triggers automated alerts which may result in a temporary account hold pending investigation.
Responsible gaming monitoring: x1bet analyses betting patterns, session lengths, and deposit frequency to identify players who may be developing problematic gambling behaviours. This analysis is used internally — never shared externally — and may result in x1bet proactively reaching out to offer responsible gaming support.
Legal and regulatory compliance: Pakistani and international anti-money-laundering (AML) regulations require x1bet to retain financial transaction records, conduct identity verification above defined thresholds, and report suspicious transaction patterns to relevant authorities. Your data is processed to fulfil these obligations.
Customer support: When you contact x1bet via live chat or email, records of that communication are stored to enable effective support, resolve disputes, and improve our service quality over time.
Platform improvement: Anonymised and aggregated usage data is used to understand how Pakistani players use x1bet — which sports are most popular, where the interface causes friction, which features are used most. This data does not identify individuals.
Marketing (with your consent): If you have opted in to marketing communications, we use your email or mobile number to send information about promotions, bonuses, and new features. You can opt out at any time by clicking unsubscribe in any email or by contacting support.
5. Legal Basis for Processing
x1bet processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contract performance: Processing necessary to create and maintain your x1bet account, process your bets, and handle your PKR payments. Without this processing, we cannot provide the service.
- Legal obligation: Processing required to comply with anti-money-laundering laws, age verification requirements, and financial reporting obligations.
- Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where x1bet's legitimate business interests are balanced against your privacy rights.
- Consent: Marketing communications and optional analytics cookies are only processed where you have provided explicit consent. You can withdraw this consent at any time without affecting your account or your ability to use x1bet.
Note for Pakistani players: x1bet's privacy practices are designed to align with international data protection standards even where Pakistani domestic law does not require specific compliance. We believe this approach is the right one for our players, regardless of legal minimums.
6. PKR Payment Data and Financial Information
Because x1bet handles real money in Pakistani Rupees, we take the security and privacy of payment data with particular seriousness. Here is exactly how financial data flows through x1bet:
Easypaisa and JazzCash: When you initiate a deposit via Easypaisa or JazzCash, you are redirected to or interact with the respective payment interface. Your mobile wallet PIN and authentication are handled entirely by Easypaisa or JazzCash — x1bet never sees or stores your wallet PIN. x1bet receives only a transaction confirmation reference and the amount credited.
Card payments (Visa/Mastercard): Card transactions are handled by a PCI-DSS compliant payment processor. Card numbers are tokenised at the point of entry — the actual 16-digit card number is never transmitted to or stored on x1bet servers. x1bet stores only the last four digits of your card number and the card type for reference purposes.
Bank transfers (IBFT): Your bank account number is stored in encrypted form for the purpose of processing your withdrawal. It is not used for any purpose other than sending your withdrawal to the correct account.
Financial record retention: All transaction records are retained for a minimum of 5 years from the transaction date, in compliance with AML record-keeping requirements. After this period, financial records are deleted unless an ongoing legal matter requires their continued retention.
No sale of financial data: x1bet does not sell, rent, or share your financial data with any third party for commercial purposes under any circumstances. Payment data is used solely for the processing of your transactions and AML compliance.
7. When and With Whom x1bet Shares Data
x1bet is not in the business of selling or trading personal data. The circumstances under which your data may be shared with third parties are limited and specific:
Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and card networks receive the minimum data necessary to process your transaction. Each processor operates under their own privacy policy and their own regulatory obligations.
Identity verification providers: Where KYC verification is required, a specialised third-party verification service may process your identity document data. These providers are bound by confidentiality agreements and may not use your data for any purpose other than the verification task.
Legal and regulatory authorities: If x1bet is required by law — through a court order, regulatory requirement, or AML reporting obligation — to disclose information about a specific account, we will comply with that requirement. We will notify you of such disclosure where we are legally permitted to do so.
Fraud prevention services: Anonymised risk signals (not personally identifiable data) may be shared with industry fraud prevention networks to protect the integrity of the broader online gaming ecosystem.
Professional advisers: x1bet's legal, accounting, and auditing advisers may access specific account data in the course of their professional engagement with x1bet. All such advisers are bound by professional confidentiality obligations.
Business transfer: In the unlikely event that x1bet's business is sold or merged, player data would transfer to the acquiring entity as part of the business assets. You would be notified in advance and given the option to close your account and withdraw your balance before the transfer occurs.
8. How Long x1bet Keeps Your Data
x1bet retains personal data only as long as necessary for the purpose for which it was collected, or as required by law. The following retention periods apply:
- Active account data: Retained for the duration of your account and for 5 years after account closure.
- Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by AML regulations.
- Identity verification documents: Retained for 5 years from the date of verification or from account closure, whichever is later.
- Customer support records: Retained for 3 years from the date of the last interaction.
- Marketing consent records: Retained until you withdraw your consent, plus 12 months for legal documentation purposes.
- Technical logs (IP, device data): Retained for 12 months from the date of each session, unless flagged for security investigation.
- Cookies: Session cookies expire when you close your browser. Persistent cookies expire according to the schedule in Section 10.
After the applicable retention period, data is securely deleted or anonymised so that it can no longer be linked to you personally. Anonymised data may be retained indefinitely for platform analytics purposes.
9. How x1bet Protects Your Data
Data security is infrastructure at x1bet — not a marketing talking point. The following technical and organisational measures are in place to protect your personal data:
- 256-bit SSL/TLS encryption on all connections between your device and x1bet servers. All data in transit is encrypted.
- Encryption at rest for particularly sensitive data categories including financial records and identity documents.
- Access controls: x1bet staff access to player data is strictly role-based. Only staff whose job function requires access to specific data categories can access them. All access is logged.
- Tokenisation: Payment card numbers are tokenised by PCI-DSS compliant processors before being stored. Full card numbers never exist on x1bet infrastructure.
- Regular security audits: x1bet undergoes periodic independent security assessments to identify and address vulnerabilities.
- Two-factor authentication: Available for player accounts to add an additional layer of login security beyond the password.
- Incident response: In the event of a data breach, x1bet has a documented incident response process. Affected users will be notified within 72 hours of confirmed breach discovery where there is a risk to their rights or interests.
Your role in security: x1bet's security measures protect data on our side. On your side, using a strong unique password for your x1bet account, not sharing your login credentials, and enabling two-factor authentication all significantly reduce your exposure to unauthorised access.
10. Cookies and Tracking Technologies
x1bet uses cookies — small text files stored in your browser — and similar tracking technologies to operate the platform and improve your experience. Here is a breakdown of the cookie categories used:
| Cookie Type |
Purpose |
Duration |
Can You Opt Out? |
| Essential |
Keep you logged in, maintain bet slip contents, process payments securely |
Session (deleted on browser close) |
NO — Platform cannot function without these |
| Functional |
Remember your preferences (odds format, language, dark mode) |
30 days |
OPTIONAL |
| Analytics |
Understand page performance, user navigation paths, error rates |
90 days |
YES — Opt out via cookie settings |
| Security |
Detect fraud, unusual login behaviour, and multiple account attempts |
12 months |
NO — Required for platform security |
You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent x1bet from functioning properly. Blocking analytics cookies will not affect your ability to use the platform.
x1bet does not use advertising cookies or tracking pixels for third-party ad networks. No behavioural advertising data about your x1bet activity is shared with advertising platforms.
11. Your Rights Over Your Personal Data
As an x1bet player, you have the following rights over your personal data. x1bet is committed to honouring these rights within the timeframes described below:
1
Right of Access
You have the right to request a copy of all personal data x1bet holds about you. We will provide this within 30 days of a verified request.
2
Right to Rectification
If any data x1bet holds about you is inaccurate or incomplete, you have the right to have it corrected. Contact support to update your details.
3
Right to Erasure
You may request deletion of your personal data. Note that we are legally required to retain financial and identity records for 5 years — this data cannot be deleted before that period expires.
4
Right to Restrict Processing
You can request that x1bet limits how it uses your data while a correction or erasure request is being processed.
5
Right to Data Portability
You can request your account and activity data in a structured, machine-readable format. This right applies to data you provided and that was processed based on your consent.
6
Right to Object to Marketing
You can opt out of marketing communications at any time by clicking unsubscribe in any email or by contacting support. This does not affect service emails about your account.
To exercise any of the above rights, contact support@x1bet.cash with the subject line "Data Rights Request". x1bet will verify your identity before processing the request. We will respond within 30 days.
12. Children's Privacy
x1bet is strictly for adults aged 18 and over. x1bet does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or use x1bet in any way.
If x1bet discovers or has reason to believe that an account belongs to a person under 18, we will immediately suspend the account, void all bets placed on that account, return the deposited funds to the original payment source, and permanently close the account.
If you are a parent or guardian and believe your child has registered on x1bet, please contact us immediately at support@x1bet.cash. We will investigate and act promptly.
x1bet uses age verification at registration and may request identity documentation where we have doubt about a player's age. Age verification is not optional — it is a fundamental legal and ethical requirement that x1bet takes seriously.
13. Responsible Gaming and Your Data
x1bet analyses player activity data for the specific purpose of identifying potentially problematic gambling behaviours. This is done because we genuinely care about our players' wellbeing, not just as a compliance exercise.
The responsible gaming analysis x1bet conducts includes reviewing deposit frequency, bet sizes relative to account history, session lengths, and self-reported information. This analysis is conducted internally by x1bet's responsible gaming team and is never shared with third parties, advertisers, or other players.
If you choose to set deposit limits, session limits, or to self-exclude through x1bet's responsible gaming tools, that information is stored securely and is treated as particularly sensitive data. Self-exclusion records are retained even after account closure to prevent re-registration during the exclusion period.
For more information about x1bet's responsible gaming tools and how your data is used to support your wellbeing, please visit our Responsible Gaming page.
14. Changes to This Privacy Policy
x1bet may update this Privacy Policy from time to time to reflect changes in our data practices, changes in Pakistani law, or improvements in how we explain our approach to privacy. The effective date at the top of this policy always shows when the current version was last updated.
Where changes are material — meaning they affect how we collect, use, or share your data in a way that could affect your interests — x1bet will notify you by email or through an in-platform notification at least 7 days before the changes take effect. You will be given the option to close your account if you do not accept the changes.
Minor changes — such as clarifications of existing practices, corrections of typographical errors, or updates to contact details — may be made without advance notice. The updated policy will always be available at x1bet.cash/privacy-policy.
Continuing to use x1bet after the effective date of any updated policy constitutes your acceptance of the revised terms.
15. Contact Us and Raising a Privacy Complaint
If you have any questions about this Privacy Policy, how x1bet handles your data, or if you wish to exercise any of your data rights, please contact us through the following channels:
- Email: support@x1bet.cash — Subject: "Privacy Policy Enquiry" or "Data Rights Request"
- Live Chat: Available 24/7 from any page on x1bet when you are logged in. Average response time under 3 minutes.
x1bet will acknowledge data-related enquiries within 72 hours and resolve them within 30 days. For complex requests that require additional time, x1bet will notify you before the 30-day deadline and provide an estimated completion date.
Privacy complaints: If you are unhappy with how x1bet has handled your personal data, please first raise the matter with x1bet through the channels above, using the subject line "Privacy Complaint". We will investigate and respond within 10 business days. If you remain unsatisfied after x1bet's response, you have the right to escalate your complaint to the relevant regulatory authority in your jurisdiction.
