At xp78, your privacy matters as much as your gameplay. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a player on the xp78 platform. We believe in full transparency — no hidden clauses, no vague language.
These are the core pillars of how xp78 approaches player data. The full legal detail is in the sections below — but here is the plain-English summary every player should know.
xp78 only collects the personal data that is strictly necessary to operate your account, process transactions, verify your identity, and comply with applicable regulations. We do not collect data for its own sake.
All data transmitted between your browser or device and the xp78 platform is protected using industry-standard TLS encryption. Sensitive stored data — including financial records and identity documents — is encrypted at rest.
xp78 does not sell your personal data to advertisers or unaffiliated third parties. Data is shared only with trusted service providers — such as KYC verification and payment processors — under strict confidentiality agreements.
As a registered xp78 player, you have the right to access, correct, or request deletion of your personal data at any time. You can also opt out of marketing communications directly from your account settings or by contacting support.
xp78 retains your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Once retention periods expire, data is securely deleted or anonymised.
In the unlikely event of a data breach that affects your personal information, xp78 will notify impacted players promptly and take immediate corrective action. We maintain an internal incident response plan at all times.
This Privacy Policy ("Policy") describes how xp78 ("xp78", "we", "us", "our") collects, uses, stores, and protects the personal information of users ("you", "Player", "User") who access or register on the xp78 online gaming platform at xp78.net ("Platform"). This Policy applies to all services offered by xp78, including sports betting, cricket wagering, live casino, slot games, fishing games, and any promotional or support services.
By creating an xp78 account or continuing to use any part of the xp78 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the platform and contact xp78 support to close your account.
Plain-English Summary: This policy tells you what data xp78 collects about you, why we collect it, who we share it with, how long we keep it, and how you can control or delete it. We are committed to being fully transparent — if anything is unclear, reach out to us at [email protected].
This Policy should be read together with xp78's Terms and Conditions, which govern the overall relationship between xp78 and its registered players. The Terms and Conditions are available at xp78.net/terms-conditions.
xp78 is an online gaming and sports betting platform accessible at xp78.net, serving players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, and beyond. xp78 operates under international gaming regulations and is the data controller responsible for the personal information collected through the platform.
As the data controller, xp78 determines the purposes and means by which your personal data is processed. Where xp78 engages third-party service providers to process data on its behalf — such as payment processors, KYC verification providers, or fraud detection services — those parties act as data processors under agreements that bind them to appropriate data protection standards.
For all privacy-related enquiries, data access requests, and complaints, you may contact xp78 directly using the details provided in Section 14 of this Policy.
xp78 collects personal data through several channels: directly from you during registration and use of the platform, automatically through your device and browser, and from third-party verification providers. The categories of data collected are described below.
3.1 — Registration & Identity Data
3.2 — Identity Verification (KYC) Data
3.3 — Financial & Transaction Data
3.4 — Gaming & Betting Activity Data
3.5 — Technical & Device Data
3.6 — Communication Data
Sensitive Data Note: xp78 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes (e.g. CNIC scan). Such data, where collected incidentally, is handled with heightened care and is not used for profiling purposes.
xp78 uses your personal data for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation & management | Registration data, identity data |
| Identity verification (KYC / AML) | KYC documents, CNIC, payment method proof |
| Processing deposits & withdrawals | Financial data, payment method references |
| Delivering gaming & betting services | Gaming activity data, session data |
| Fraud prevention & security | Technical data, transaction data, IP address |
| Responsible gaming tools | Gaming history, deposit data, session data |
| Customer support | Communication data, account data |
| Marketing & promotions (with consent) | Email, mobile number, preference data |
| Platform analytics & improvement | Technical data, gaming activity (aggregated) |
| Legal & regulatory compliance | All categories as required by applicable law |
xp78 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where explicitly permitted by applicable law and where you have been informed in advance.
xp78 processes your personal data on one or more of the following legal bases, depending on the purpose of the processing:
xp78 does not sell your personal data to third parties. However, we do share data with carefully selected third-party service providers and, where legally required, with regulatory or law enforcement authorities. All data sharing is governed by strict contractual protections.
Categories of third parties with whom xp78 may share your data:
No Sale of Data: xp78 strictly does not sell, rent, or lease your personal data to marketing agencies, data brokers, or any unaffiliated commercial third party. If this policy is ever updated to include such sharing, you will be notified in advance and given the option to opt out.
xp78 retains personal data for the periods described below. Retention periods are determined by the purpose for which the data was collected and by applicable legal and regulatory obligations.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure |
| KYC / identity verification documents | Duration of account + 5 years after closure |
| Financial transaction records | 7 years (AML regulatory requirement) |
| Gaming activity history | Duration of account + 3 years after closure |
| Support communications | 3 years from date of communication |
| Marketing preference records | Until opt-out, then 1 year (evidence of consent) |
| Technical / log data | 12 months from collection |
| Self-exclusion records | Minimum 7 years from exclusion date |
Upon expiry of the applicable retention period, xp78 will securely delete or irreversibly anonymise your personal data. Anonymised data — which can no longer be linked to your identity — may be retained for statistical and analytical purposes indefinitely.
xp78 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:
Your Responsibility: xp78's security measures protect the platform end, but your account security also depends on you. Use a strong, unique password for your xp78 account, never share your credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.
xp78 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver a personalised experience. A cookie is a small text file placed on your device by a website you visit. Cookies do not contain executable code and cannot access other data on your device.
Types of cookies used by xp78:
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to xp78. For analytics cookies, you may opt out without affecting platform access.
As a user of the xp78 platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact xp78 support in writing at [email protected]. xp78 will respond to verified requests within a reasonable timeframe.
Marketing Opt-Out: To stop receiving promotional emails or SMS from xp78, you can click "unsubscribe" in any marketing email, update your notification preferences in your account settings, or contact [email protected]. Please allow up to 5 business days for opt-out requests to take effect across all channels.
xp78 services are strictly for individuals aged 21 years and above. xp78 does not knowingly collect or process personal data from any person under the age of 21. Age verification is a mandatory step in the xp78 registration and KYC process.
If xp78 becomes aware that a registered account belongs to a person under 21, that account will be immediately suspended, all associated data will be handled in accordance with applicable child protection principles, and any balances or winnings will be voided and forfeited.
21+ Strictly Enforced: If you are a parent or guardian and believe that a minor has registered on xp78 using false information, please contact xp78 immediately at [email protected] so that the account can be closed and all associated data reviewed. Underage gambling is illegal and harmful.
xp78 operates under international gaming regulations and may store or process your personal data on servers located outside of Pakistan. Where your data is transferred internationally, xp78 takes appropriate steps to ensure that the transfer is conducted in a manner that maintains a standard of data protection equivalent to that described in this Policy.
Safeguards used by xp78 for international transfers include contractual data processing agreements with third-party service providers that incorporate internationally recognised data protection clauses. xp78 does not transfer your data to jurisdictions that do not offer an adequate level of data protection without implementing appropriate safeguards.
For further information about the specific safeguards in place for any particular data transfer, please contact xp78 support at [email protected].
xp78 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, xp78 will notify registered players via email or a prominent notice on the xp78 platform prior to the changes taking effect. The revised Policy will be published at xp78.net/privacy-policy with an updated effective date.
Your continued use of the xp78 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, please stop using xp78 and contact support to request account closure. xp78 recommends reviewing this Policy periodically to stay informed of how your data is managed.
For all privacy-related enquiries, data access requests, opt-out requests, or complaints regarding xp78's handling of your personal data, please contact the xp78 Privacy & Data team through the following channel:
xp78 Privacy & Support Team
Email: [email protected]
Support Hours: 24 hours a day, 7 days a week
Languages: English & Urdu
Website: xp78.net
xp78 endeavours to respond to all privacy-related requests within 30 days of receipt. For complex requests, this period may be extended by up to a further 60 days, in which case you will be notified of the extension and the reason for the delay. xp78 will never ask for your account password when responding to support or privacy enquiries — do not share your password with anyone.
Now that you understand how xp78 protects your privacy, log in and enjoy cricket betting, slots, live casino, and more — all in PKR with instant JazzCash and EasyPaisa deposits.
All xp78 services are strictly for players aged 21 and above. Gambling involves financial risk — please play responsibly. If you need support, visit our Responsible Gaming page.