At xz888, protecting the personal data of our users is a fundamental responsibility — not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how we use it and what rights you hold over your own information. Please read it carefully alongside our Terms & Conditions.
Six principles that govern how xz888 handles your personal information — before you read the full policy.
All data transmitted to and from xz888 is protected using HTTPS/TLS encryption. Data at rest is stored using industry-standard security controls.
xz888 does not sell, rent or trade your personal data to third-party marketers. Your information is used solely to operate and improve the platform.
We tell you exactly what data we collect, why we collect it and who we share it with — with no hidden clauses or ambiguous wording.
You have the right to access, correct, restrict and request deletion of your personal data, subject to our legal retention obligations.
We use only strictly necessary and analytical cookies. No cross-site tracking cookies or invasive advertising pixels are deployed without your awareness.
We retain personal data only for as long as necessary to fulfil its stated purpose or comply with legal obligations. Data is securely deleted thereafter.
This Privacy Policy ("Policy") is issued by xz888 ("xz888", "we", "us" or "our") and governs the collection, processing, storage and disclosure of personal data relating to users ("you", "your" or "User") of the xz888 online gaming information platform accessible at https://xz888.cam and any associated subdomains or mobile versions (collectively, the "Platform").
xz888 is an English-language informational platform designed for online gaming enthusiasts in Pakistan. We do not operate a casino, accept wagers or process financial transactions directly. Where personal data is processed, it is done lawfully, fairly and transparently in accordance with applicable data protection principles.
This Policy should be read in conjunction with our Terms & Conditions. By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform.
Our Commitment: xz888 takes data privacy seriously. We process only the minimum personal data necessary for the purposes described in this Policy. We do not sell your data and we do not use it for purposes beyond those disclosed here.
The following definitions apply throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, email address, IP address, device identifiers and usage behaviour. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. xz888 is the Data Controller for data processed through this Platform. |
| "Data Processor" | A third party that processes personal data on behalf of xz888, strictly under our instructions and in accordance with this Policy. |
| "Cookie" | A small text file placed on your device by the Platform to retain session or preference information. |
| "KYC" | Know Your Customer — identity and age verification process required by operators or applicable regulations. |
| "Sensitive Data" | A special category of personal data including biometric data, identity documents (such as CNIC or passport), financial information and health-related data, which requires heightened protection. |
xz888 acts as the Data Controller for all personal data collected directly through the Platform. For the purposes of this Policy, you may contact the Data Controller using the details provided in Section 16.
Where xz888 facilitates access to third-party Operator platforms, those Operators act as independent Data Controllers in respect of any personal data you submit directly to their platforms. xz888 has no control over, and accepts no responsibility for, the data practices of any third-party Operator. You should review each Operator's privacy policy independently before providing personal data.
Pakistani Users: Pakistan does not currently have a comprehensive personal data protection law equivalent to the GDPR. xz888 nonetheless applies robust data protection standards in the spirit of internationally recognised privacy principles. Users should be aware that cross-border data transfers may occur where our infrastructure or service providers are located outside Pakistan.
xz888 collects personal data through several channels. The categories of data we may collect are described below.
When you register an Account or interact with the Platform, you may provide:
When you access the Platform, certain technical data is collected automatically through server logs, cookies and similar technologies:
Where KYC verification is required — either by xz888 or by an Operator accessed through our Platform — you may be asked to provide:
Security Warning: Identity documents must only ever be submitted through the Platform's secure HTTPS portal. Never send CNIC copies, passport scans or bank details via email, WhatsApp, SMS or any unencrypted communication channel. xz888 will never request sensitive documents outside of the secure verification flow.
Where payment processing occurs through third-party providers (such as those associated with familiar Pakistan payment channels including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — listed for contextual reference only), xz888 does not directly store full payment card numbers or full banking credentials. Payment data is processed by PCI-DSS compliant third-party payment processors under their own privacy policies.
xz888 processes personal data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity:
| Legal Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing required to perform our obligations under the Terms & Conditions accepted by you, including Account management, support provision and feature delivery. |
| Consent | Where you have given clear, freely given and specific consent — for example, to receive marketing communications or to accept non-essential cookies. |
| Legitimate Interests | Where xz888 has a legitimate business interest that is not overridden by your rights — such as fraud prevention, platform security and general analytics. |
| Legal Obligation | Where processing is necessary to comply with a legal obligation, such as AML controls, KYC requirements or a court order. |
Personal data collected through the Platform is used for the following purposes:
xz888 does not use your personal data to make automated decisions that produce legal or significant effects without appropriate safeguards.
xz888 does not sell, rent or trade your personal data. We may share data with the following categories of recipient, only to the extent strictly necessary:
We engage trusted third-party service providers who process data on our behalf under binding contractual obligations, including:
Where you access a third-party Operator platform via xz888, limited referral data may be shared with that Operator to facilitate account registration and KYC processes. The Operator then becomes an independent Data Controller for your data. xz888 is not responsible for the Operator's data practices.
xz888 may disclose personal data to law enforcement agencies, regulatory bodies, courts or other authorities where required to do so by applicable law, court order or where disclosure is necessary to protect the rights, safety or property of xz888, its users or the public.
In the event of a merger, acquisition, restructuring or sale of assets, personal data held by xz888 may be transferred to the acquiring entity. Users will be notified of any such transfer and the applicable privacy policy of the successor entity.
xz888 operates with infrastructure and service providers that may be located outside Pakistan. When personal data is transferred internationally, xz888 takes reasonable steps to ensure that appropriate safeguards are in place, including but not limited to:
By using the Platform, you acknowledge that your data may be processed outside Pakistan. xz888 will always endeavour to ensure that any international transfer is conducted with appropriate protections in place.
xz888 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations. Specific retention guidelines are set out below:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of active account + 5 years post-closure | Legal obligation / contractual necessity |
| KYC / identity documents | Minimum 5 years from submission (AML requirements) | Legal obligation |
| Transaction records | 7 years from the date of transaction | Legal obligation / audit purposes |
| Support communications | 3 years from the date of last interaction | Legitimate interest / dispute resolution |
| Technical / server logs | Up to 12 months | Legitimate interest / security |
| Analytics data (aggregated) | Up to 26 months | Legitimate interest / platform improvement |
| Marketing consent records | Until consent is withdrawn + 3 years | Consent / legal compliance |
Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised, unless further retention is required by law or legitimate business purpose.
xz888 uses cookies and similar technologies to operate the Platform effectively, enhance the user experience and gather aggregated analytical insights.
Cookies are small text files stored on your device when you visit a website. They allow the Platform to remember your preferences, maintain session state and analyse usage patterns. Cookies do not execute code or transmit viruses.
| Category | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Maintain session state, login authentication and security tokens. Cannot be disabled as they are essential to core Platform function. | Yes |
| Functional | Remember user language preferences, saved settings and layout choices to personalise the experience. | Optional |
| Analytical | Collect aggregated, anonymised usage data (pages visited, time on site, bounce rate) to help improve Platform performance and content quality. | Optional |
| Marketing | Track user behaviour for advertising targeting purposes. xz888 currently does not deploy invasive marketing or cross-site tracking cookies. | Not deployed |
You can control and delete cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block all cookies or selectively block third-party cookies. Disabling strictly necessary cookies may impair the functionality of the Platform. Please consult your browser's help documentation for guidance on cookie management.
The xz888 Platform is intended exclusively for adults aged 18 years or older — or the higher minimum age required by the relevant Operator's license jurisdiction. We do not knowingly collect or process personal data from individuals under the applicable minimum age.
If xz888 becomes aware that personal data has been collected from a minor in contravention of this Policy, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Platform, please contact us using the details in Section 16.
xz888 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, accidental loss or destruction. Our security framework includes:
While xz888 maintains robust security measures, no system is entirely immune to breach. In the event of a data breach that is likely to result in a risk to your rights, xz888 will notify affected users in accordance with applicable legal requirements.
User Responsibility: You are responsible for maintaining the security of your Account credentials. Do not share your password with anyone. Use a strong, unique password for your xz888 Account. Enable two-factor authentication where available.
Depending on your jurisdiction, you may have the following rights in relation to your personal data held by xz888. To exercise any of these rights, please contact us using the details in Section 16.
Request a copy of the personal data xz888 holds about you and information about how it is used.
Request correction of inaccurate or incomplete personal data held about you.
Request deletion of your personal data, subject to legal retention requirements and legitimate interests.
Request that we limit processing of your data in certain circumstances — for example, while accuracy is disputed.
Receive your personal data in a structured, machine-readable format for transfer to another controller where technically feasible.
Object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless compelling grounds exist.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Not to be subject to solely automated decisions that produce significant effects, without appropriate human review and safeguards.
xz888 will respond to data rights requests within a reasonable timeframe and no later than 30 days of receipt. We may request verification of your identity before processing a request to protect against unauthorised access to another person's data.
Please note that certain rights may be limited where retention is required by law — for example, AML-mandated KYC document retention cannot be overridden by an erasure request during the legally required retention window.
The xz888 Platform may contain references to, or links facilitating access to, third-party Operator platforms. xz888 does not control those platforms and is not responsible for their data practices, privacy policies or security measures. When you leave the xz888 Platform and access a third-party site, that site's privacy policy governs the collection and use of your data.
We strongly recommend reviewing the privacy policy of any Operator platform before registering an Account or submitting personal data. The inclusion of a reference to a third-party platform on xz888 does not constitute endorsement of that platform's privacy practices.
xz888 reserves the right to amend this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. Where changes are material — particularly those affecting your rights or the categories of data collected — xz888 will provide advance notice via a prominent Platform notification.
Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should discontinue use of the Platform and may request Account closure in accordance with our Terms & Conditions.
We encourage you to review this Policy periodically to stay informed about how your personal data is being protected.
If you have any questions about this Privacy Policy, wish to exercise your data rights or wish to raise a privacy complaint, please contact xz888 using the details below.
Privacy Enquiries — Email:
Response Time: We aim to respond to all privacy enquiries within 5 business days, and to formal data rights requests within 30 calendar days.
Language: English (primary); Urdu assistance available on request.
Complaints: If you are dissatisfied with our response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. xz888 will cooperate fully with any such investigation.
Never send sensitive documents (CNIC, passport, bank statements) via unsecured email. Identity verification documents must be submitted exclusively through the Operator's secure HTTPS verification portal. This instruction applies regardless of any communication channel xz888 uses to contact you.
Our support team is available 24/7. If you have concerns about how your data is handled, or wish to exercise any rights described above, get in touch.
Return to Homepage Learn About xz888