xc444 Privacy Policy —
How We Collect & Protect Your Data

1 About This Policy

This Privacy Policy applies to all users of the xc444 platform, including the website, mobile browser version, and Android app. It explains how xc444 collects, processes, stores, and protects personal data in connection with your use of the platform.

By registering an account with xc444, you confirm that you have read and understood this Privacy Policy. You also consent to the collection and processing of your personal data as described here. If you do not agree, you should not register an account.

This policy is written in straightforward English with Pakistan players in mind. If you have any questions that are not answered here, the contact details in Section 13 are available to you at any time.

2 Data We Collect

xc444 collects personal data across several categories depending on how you interact with the platform. The main categories are described below.

xc444 does not knowingly collect sensitive personal data beyond what is strictly necessary for identity verification and fraud prevention.

3 How We Use Your Data

Data collected by xc444 is used for the following purposes:

• Account management: Creating and maintaining your account, verifying your identity, and processing your login credentials securely.
• Transaction processing: Handling deposits and withdrawals in PKR through supported methods including JazzCash, Easypaisa, Raast, and bank transfers.
• Fraud prevention and security: Detecting suspicious account activity, preventing multiple accounts, and protecting the platform from abuse.
• Responsible gaming: Monitoring gaming behaviour to support the responsible gaming tools available in your account, such as deposit limits and session reminders.
• Platform improvement: Analysing aggregated, anonymised usage patterns to improve navigation, game loading performance, and overall platform experience.
• Customer support: Responding to support queries, resolving disputes, and maintaining records of communications.
• Legal and regulatory compliance: Meeting obligations related to anti-money laundering (AML) checks, record-keeping requirements, and responding to lawful requests from authorities.

4 Legal Basis for Processing

xc444 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and xc444 — for example, processing a deposit or withdrawal, or verifying your account.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improving services — where these interests do not override your privacy rights.
• Legal obligation: Processing required to comply with applicable legal requirements, including AML regulations and identity verification obligations.
• Consent: Where you have given explicit consent, such as opting in to promotional communications.

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Payments & Financial Data

All financial transactions on xc444 are denominated in PKR. When you make a deposit or request a withdrawal through JazzCash, Easypaisa, Raast, bank transfer, or card, payment data is processed by the relevant payment provider.

xc444 does not store complete card numbers or mobile wallet PINs on its own servers. Payment data is handled by the payment processor directly through their own secured and encrypted systems. xc444 retains only the information necessary to maintain your transaction history and verify payment method ownership.

For withdrawal processing, xc444 may need to confirm that the payment method used for withdrawal matches the one used for deposit. This is a standard anti-fraud measure applied to all accounts regardless of withdrawal amount.

6 Sharing Your Data

xc444 does not sell or rent personal data to any third party. Data may be shared in the following circumstances and with the following categories of recipients:

• Payment processors: JazzCash, Easypaisa, Raast, bank networks, and card processors receive the data necessary to complete financial transactions you initiate.
• Game providers: Studios that supply games to the xc444 lobby — such as Pragmatic Play, Evolution, and Spribe — may receive your account ID and session data to load and run their games. These studios are contractually required to handle data in compliance with applicable standards.
• Identity verification providers: Third-party KYC services that assist with verifying identity documents when required before processing withdrawals.
• Fraud prevention services: Anti-fraud tools that analyse transaction and behavioural patterns to identify suspicious activity.
• Legal and regulatory authorities: Where required by law, court order, or regulatory requirement, xc444 may disclose account information to relevant authorities. This includes cooperation with investigations into financial crime.

All third-party service providers who receive personal data from xc444 are subject to contractual data protection obligations. They may only use data for the specific purpose for which it was shared.

7 Data Retention

xc444 retains personal data for as long as it is necessary for the purpose it was collected, or for as long as required by applicable legal and regulatory obligations.

• Active accounts: Data is retained for the lifetime of the account and for a period after account closure as required by anti-money laundering and record-keeping obligations.
• Transaction records: Financial transaction records are retained for a minimum of five years from the date of the transaction in line with standard AML record-keeping requirements.
• Identity verification documents: Copies of identity documents are retained for the period required by applicable regulations and then securely deleted.
• Support communications: Customer support records are retained for a reasonable period to allow follow-up on open cases and to maintain records of dispute resolutions.

When data is no longer required and no legal retention obligation applies, it is permanently deleted or anonymised.

8 Cookies & Tracking

xc444 uses cookies — small files stored on your device — for the following purposes:

• Session cookies: Keep you logged in during your session. These are deleted when you close your browser.
• Preference cookies: Remember your lobby preferences, such as your last-used game category or display settings.
• Performance cookies: Collect anonymised data about how pages are used — for example, which sections of the game lobby are most visited — to help improve the platform.
• Security cookies: Help detect and prevent fraudulent login attempts and bot activity.

xc444 does not use third-party advertising cookies or tracking pixels to build behavioural advertising profiles. The cookies on this platform are functional and performance-oriented.

Most browsers allow you to control cookie settings. Disabling session cookies will prevent you from staying logged in to your xc444 account. Disabling performance cookies will not affect your ability to use the platform but will reduce our ability to improve it based on usage data.

9 Account Security

xc444 uses SSL/TLS encryption on all platform connections, encrypted storage for personal data, and access controls limiting who within the organisation can view account information.

Your responsibility for account security includes:

• Keeping your password private and not sharing it with anyone
• Not allowing other people to use your account or device while logged in
• Logging out when using shared devices
• Enabling two-step verification in your account settings if available
• Contacting support immediately if you suspect unauthorised access

10 Your Rights

You have the following rights in relation to the personal data xc444 holds about you. To exercise any of these rights, contact support using the details in Section 13.

• Right of access: Request a copy of the personal data xc444 holds about your account.
• Right to rectification: Ask for correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected — subject to any legal retention obligations.
• Right to restrict processing: Ask xc444 to limit how it uses your data in certain circumstances — for example, while a dispute is being resolved.
• Right to data portability: Request your data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting prior processing.

xc444 will respond to data rights requests within a reasonable timeframe. Some requests may require identity verification before they can be processed to ensure the security of your account.

11 Children's Privacy

xc444 is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from anyone under 18. If xc444 discovers that an account belongs to a person under 18, the account will be immediately closed and any associated data will be deleted in accordance with applicable requirements.

If you believe a minor has registered on the xc444 platform, please contact support immediately using the details in Section 13.

For guidance on keeping young people away from online gaming platforms, visit our Responsible Gaming page, which includes information on parental controls and filtering tools.

12 Changes to This Policy

xc444 may update this Privacy Policy from time to time. When material changes are made, registered users will be notified through their registered contact method or via a notice displayed on the platform. The revised policy will be published on this page with an updated "last updated" date.

Continued use of the xc444 platform after any update to this Privacy Policy constitutes acceptance of the revised version. If you do not agree with updates to this policy, you should stop using the platform and contact support to close your account.

We recommend checking this page periodically so you are always aware of the current data handling practices for the platform.

13 Contact Us

For any questions about this Privacy Policy, to exercise a data right, or to report a privacy concern, you can reach xc444 through the following channels:

• Email: [email protected] — for privacy requests, mark the subject line "Privacy Request" so it reaches the right team promptly
• Live chat: Available in your account dashboard during platform operating hours

xc444 takes privacy requests seriously. We will acknowledge your request promptly and respond within a reasonable timeframe. Where identity verification is needed before we can process a data request, we will let you know what is required.