x1111 Privacy Policy — Your Data, Your Rights, Our Commitment

1. Who We Are

This Privacy Policy applies to x1111 ("the Platform", "we", "us", "our") and governs the collection, use, storage, and protection of personal data belonging to all registered players and visitors ("you", "your") who interact with the x1111 platform at x1111.biz.

x1111 is an online gaming and sports betting platform purpose-built for Pakistani players. We are the data controller in respect of personal data collected through your use of x1111. This means we determine the purposes and means by which your personal data is processed, and we are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

This Privacy Policy explains your rights and our obligations in plain, readable language. We have deliberately avoided the kind of dense legal language that makes privacy policies unreadable — because we believe you have a genuine right to understand what happens to your data when you use x1111.

2. What Data We Collect

x1111 collects personal data in two broad categories: data you provide directly during registration and use of the platform, and data generated automatically as a result of your activity on x1111.

2.1 Data You Provide Directly

• Registration data: Your full name, Pakistani mobile number, email address (if provided), date of birth, and chosen username and password.
• Identity verification (KYC) data: CNIC number, CNIC front and back images, selfie or video verification, and proof of address where required.
• Payment data: Easypaisa account details, JazzCash MSISDN, NayaPay or SadaPay account identifiers, bank account details for IBFT, and masked card numbers for Visa/Mastercard transactions.
• Support communications: The content of any messages you send to x1111's customer support team, whether by live chat or email.
• Responsible gaming data: Deposit limit settings, self-exclusion records, and cooling-off period requests that you initiate through your account.

2.2 Data Collected Automatically

• Device and connection data: IP address, device type, operating system version, mobile network carrier, and browser or app version.
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and in-game actions within x1111's products.
• Transaction data: Complete records of all deposits, withdrawals, bets, game results, bonus activations, and account balance changes.
• Cookie and tracking data: Session identifiers, analytical cookies, and fraud detection signals as described in the Cookies section below.

3. How We Collect Your Data

x1111 collects personal data through the following channels:

• Registration and account forms: When you create your x1111 account, you provide your core identity and contact information directly through the registration form.
• KYC verification process: When you submit identity documents to complete account verification before your first withdrawal, these are collected through our secure document upload system.
• Payment transactions: When you make a deposit or request a withdrawal, relevant payment identifiers are captured through our integrated payment provider connections.
• Platform activity: Your gameplay, betting activity, and session behaviour are recorded automatically by x1111's platform systems as part of normal platform operation.
• Customer support interactions: When you contact x1111 support by live chat or email, the content and metadata of those interactions are stored as part of your account record.
• Cookies and device signals: x1111 uses cookies and similar technologies to maintain your session, detect fraud, and understand how the platform is being used, as detailed in Section 7.

4. Why We Use Your Data — Legal Basis

x1111 processes your personal data only where we have a lawful basis to do so. The primary legal bases we rely on are: contractual necessity (processing required to deliver the platform services you have signed up for), legal obligation (processing required to comply with anti-money laundering, fraud prevention, and responsible gaming laws), legitimate interests (processing for fraud prevention, platform security, and improving x1111's services), and consent (for marketing communications, where we ask separately).

4.1 Contractual Necessity

To operate your x1111 account, process your deposits and withdrawals, settle bets, credit bonuses, and provide customer support — we must process your personal data. Without this, we cannot deliver the services you registered for.

4.2 Legal Obligations

x1111 is required to verify player identities to comply with anti-money laundering (AML) regulations, to maintain transaction records for regulatory audit purposes, and to apply responsible gaming measures including age verification and self-exclusion enforcement. These obligations exist independently of our agreement with you and cannot be waived.

4.3 Legitimate Interests

x1111 processes certain data — including device fingerprints, IP addresses, and betting pattern analysis — to detect and prevent fraud, protect the integrity of betting markets, and identify accounts operating in breach of our Terms and Conditions. We also use aggregated, anonymised analytics data to understand how players use x1111 and to improve the platform experience.

4.4 Consent-Based Processing

Where x1111 sends marketing communications — including promotional emails about bonuses, new games, PSL season offers, and other x1111 events — this is based on your consent, which you can withdraw at any time without affecting your platform access.

5. Sharing Your Data

x1111 does not sell, rent, or trade your personal information. We share data only in the specific circumstances described below, and only to the minimum extent necessary for each purpose.

5.1 Payment Processors

To process your deposits and withdrawals, x1111 shares necessary payment identifiers with our integrated payment providers — Easypaisa, JazzCash, NayaPay, SadaPay, partner banks for IBFT, and Visa/Mastercard processing networks. Each of these providers handles data under their own privacy policies and security standards, which are reviewed by x1111 as part of our due diligence process.

5.2 Identity Verification Partners

x1111 uses specialist KYC (Know Your Customer) verification services to authenticate player identity documents and cross-reference CNIC details. These partners process identity data solely for verification purposes and are contractually prohibited from retaining or using the data for any other purpose.

5.3 Legal and Regulatory Authorities

x1111 will share player data with law enforcement, financial regulators, or other competent authorities when required to do so by applicable law — including in response to court orders, regulatory investigations, or AML reporting obligations. x1111 will notify affected players of such disclosure where it is legally permissible to do so.

5.4 Fraud Prevention Services

x1111 shares device fingerprint data, IP addresses, and certain behavioural signals with fraud prevention databases to identify known fraudulent actors and protect the platform's player community from account takeover and financial fraud.

6. Payment Data Security

The security of your financial data deserves specific attention because it is the area Pakistani players most reasonably worry about. Here is exactly how x1111 handles payment-related information.

When you make a deposit using Easypaisa or JazzCash, you are redirected to the relevant payment provider's interface for PIN or MPIN entry. x1111 never sees your Easypaisa PIN or JazzCash MPIN at any point in the process. The payment confirmation that returns to x1111 is a transaction reference only — the authentication itself happens entirely within the payment provider's secure environment.

For bank transfers (IBFT), x1111 stores your bank account number and IBAN in encrypted form to facilitate withdrawal processing. For Visa/Mastercard transactions, only the last four digits and expiry date are retained by x1111 for reference purposes — full card numbers are never stored on x1111 infrastructure.

All payment data at rest is encrypted using industry-standard AES-256 encryption. All payment data in transit is protected by TLS 1.3. Access to payment data within x1111's systems is restricted to authorised personnel on a strict need-to-know basis, with all access logged and audited.

7. Cookies and Tracking Technologies

x1111 uses cookies and similar technologies to operate the platform, maintain your login session, detect fraudulent activity, and understand how players interact with the site. Below is a plain explanation of what each type of cookie does.

7.1 Strictly Necessary Cookies

These cookies are essential for the x1111 platform to function. They include your session authentication cookie (which keeps you logged in while you browse between pages), CSRF protection tokens (which prevent cross-site request forgery attacks), and load balancing cookies (which ensure your requests are handled consistently by the same server). These cookies cannot be disabled without breaking basic platform functionality.

7.2 Analytical Cookies

x1111 uses first-party analytical cookies to understand aggregate patterns in how players use the platform — which pages receive the most traffic, where players encounter navigation difficulties, how long sessions typically last, and which games are most popular. This data is used in anonymised, aggregated form only and is never linked back to individual player identities for analytical purposes.

7.3 Fraud Detection Signals

x1111 uses device fingerprinting technology — which analyses a combination of your device's technical characteristics including screen resolution, installed fonts, browser plugins, and hardware identifiers — to detect multiple accounts from the same device and identify accounts associated with known fraudulent activity. This is a legitimate interest processing activity that protects the entire x1111 player community.

7.4 Your Cookie Choices

Strictly necessary and fraud detection cookies cannot be disabled as they are essential for platform security and operation. Analytical cookies can be declined without affecting your ability to use x1111. You can manage your cookie preferences through your browser settings or by contacting support@x1111.biz.

8. Data Security Measures

x1111 applies a layered security approach to protect player data. The measures in place include:

• TLS 1.3 encryption on all data in transit between your device and x1111's servers — this applies to every page, every API call, and every payment transaction.
• AES-256 encryption for all sensitive data at rest, including identity documents, payment details, and personal records.
• Strict access controls — x1111 staff can only access player data where their role specifically requires it, and all such access is logged and reviewed.
• Regular security audits — x1111's infrastructure undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems that monitor for unusual access patterns and automatically flag potential security incidents for investigation.
• Two-factor authentication available to all players and mandatory for x1111 staff accounts with access to player data systems.

Despite these measures, no online platform can guarantee absolute security — the internet inherently involves risk. x1111 commits to promptly notifying affected players in the event of a data breach that could affect their personal or financial information, and to taking all reasonable steps to contain and remediate any security incident.

9. How Long We Keep Your Data

x1111 retains personal data only for as long as it is needed for the purposes for which it was collected, or as required by applicable legal obligations. The specific retention periods are:

• Account data (name, contact details, username): Retained for the life of your account, plus 5 years after closure to meet anti-money laundering record-keeping requirements.
• Identity verification documents (CNIC images, selfies): Retained for 5 years from the date of verification, as required by KYC regulations.
• Transaction records (deposits, withdrawals, bets, game results): Retained for 7 years to comply with financial record-keeping obligations.
• Customer support communications: Retained for 3 years after the closure of the relevant support ticket.
• Marketing consent records: Retained for as long as you remain opted in, plus 2 years after opt-out to demonstrate consent compliance.
• Analytical cookie data: Aggregated and anonymised within 90 days of collection.

When data reaches the end of its retention period, it is securely deleted from x1111's systems and backup infrastructure within 30 days. Certain anonymised, aggregated data may be retained indefinitely as it can no longer be linked to any individual.

10. Your Privacy Rights

As a player on x1111, you hold the following rights in relation to your personal data. You can exercise any of these rights by emailing support@x1111.biz with the subject line "Privacy Request".

11. Children's Privacy

x1111 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 18. The registration process includes date of birth collection precisely to enable age verification, and x1111 conducts additional verification where there is any doubt about a player's age.

If x1111 becomes aware that a person under 18 has registered an account, the account will be immediately closed, all funds will be returned to the payment source, and the data will be securely deleted. If you believe a minor has registered at x1111, please contact us immediately at support@x1111.biz.

12. Marketing Communications

x1111 may contact you with promotional communications about bonuses, new game launches, PSL and cricket betting offers, VIP Club tier upgrades, and other platform news. These communications are sent by email and, where you have consented, by SMS to your registered Pakistani mobile number.

Marketing communications from x1111 are always clearly identified as marketing. Every email and SMS includes a clear opt-out mechanism. You can also unsubscribe at any time by:

• Clicking the unsubscribe link at the bottom of any x1111 marketing email.
• Replying STOP to any x1111 marketing SMS.
• Updating your communication preferences in your x1111 account settings under "Notifications".
• Emailing support@x1111.biz with subject line "Unsubscribe from Marketing".

Opting out of marketing has no effect on your account access, VIP tier, ongoing bonuses, or any other aspect of your x1111 experience. You will continue to receive non-marketing communications — account security alerts, withdrawal confirmations, KYC status updates — regardless of your marketing preference.

13. Third-Party Links

x1111 does not include external links to third-party websites within the platform. This Privacy Policy applies exclusively to data processed by x1111. If you independently navigate to third-party websites, their own privacy policies apply and x1111 has no responsibility for how those sites handle your data.

14. Changes to This Privacy Policy

x1111 will update this Privacy Policy from time to time to reflect changes in our data practices, new services, or evolving legal requirements. When material changes are made — meaning changes that significantly affect how we collect or use your personal data — we will notify all registered players via email at least 14 days before the changes take effect.

For minor or non-material updates (such as corrections of typographical errors or clarifications that do not change the substance of how we process data), x1111 may update the policy immediately. The "Last updated" date at the top of this page always reflects the date of the most recent version.

We encourage you to review this Privacy Policy periodically. Continued use of x1111 after a policy update constitutes your acknowledgement of the updated terms.

15. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to report a potential privacy concern, please contact our Data Privacy team. We aim to respond to all privacy enquiries within 5 business days, and to complete substantive requests (such as data access or deletion) within 30 days.