Privacy Policy – x4444 Online Betting Platform Pakistan

1 Who We Are

This Privacy Policy applies to x4444, an online betting and gaming platform operated under the domain x4444.biz. When this policy refers to "x4444", "we", "us", or "our", it means the operator of x4444.biz and all services available through it.

x4444 is the data controller for all personal information collected through the platform. This means x4444 determines the purposes for which your personal data is collected and the manner in which it is processed. x4444 is responsible for ensuring that processing activities comply with applicable data protection law.

This policy applies to all persons who access, register on, or interact with x4444 in any capacity, including visitors who browse the platform without registering. By using x4444, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

2 What Personal Data We Collect

x4444 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and occasionally from third-party verification providers. The categories of data we collect are as follows:

2.1 Registration & Account Data

• Full legal name as it appears on your CNIC
• Date of birth
• Pakistani mobile number (used for account verification and two-factor authentication)
• Email address
• Residential address
• Username and encrypted password
• Security questions and answers (where set)

2.2 Identity Verification (KYC) Data

• Copy of your CNIC (front and back)
• Proof of address (utility bill or bank statement, dated within 90 days)
• Selfie or photograph for liveness verification
• Proof of payment method ownership where requested

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment methods used
• Easypaisa or JazzCash mobile wallet identifiers (masked after verification)
• Bank account details provided for IBFT transfers
• Masked card numbers for Visa/Mastercard transactions
• Betting and gaming transaction history

2.4 Platform Usage Data (Collected Automatically)

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser information
• Pages visited, time spent on each section, and interaction patterns
• Bet placement history, markets accessed, and game sessions
• Session timestamps and login/logout records
• Error logs and crash reports from the x4444 app or mobile site

2.5 Communication Data

• Messages sent to x4444 support via live chat or email, including their content
• Records of notifications sent to you and your response to them
• Responses to surveys or feedback forms (where participated in voluntarily)

3 Why We Collect and Use Your Data

x4444 processes your personal data for the following specific purposes:

x4444 does not use your personal data for any purpose not listed above without first obtaining your explicit consent or updating this Privacy Policy with appropriate notice. Automated decision-making that significantly affects you (such as account suspension for fraud detection) is always subject to a human review process that you can request to be initiated.

4 Legal Bases for Processing

x4444 processes your personal data under the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to deliver the services you have signed up for — running your account, settling bets, processing payments, and providing customer support.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, tax reporting obligations, and any other applicable legal requirement.
• Legitimate interest: Processing that serves genuine business needs that do not override your rights — such as fraud prevention, security monitoring, responsible gaming intervention, and aggregated platform analytics.
• Consent: Processing that requires your opt-in — specifically, sending marketing emails, promotional SMS messages, or push notifications about x4444 products and offers. You can withdraw consent for marketing at any time without affecting your access to x4444's services.

5 How and With Whom We Share Your Data

x4444 does not sell your personal data to any party. Data is shared only in the circumstances described below, and all third parties who receive your data are required to handle it under strict data processing agreements that bind them to equivalent protection standards.

5.1 Payment Processors

When you make a deposit or withdrawal, transaction information is shared with the relevant payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or card network). These parties receive only the information necessary to process the specific transaction.

5.2 Identity Verification Providers

x4444 uses accredited third-party identity verification services to process KYC documents. These services receive your CNIC and supporting documents solely for the purpose of verifying your identity. They do not retain or use your data for any other purpose.

5.3 Technology & Infrastructure Providers

x4444 uses cloud hosting and technology infrastructure providers to operate the platform. These providers may technically process data stored on x4444's servers as part of providing infrastructure services. They act as data processors under x4444's instructions and do not have independent access to your personal data.

5.4 Regulatory & Law Enforcement Authorities

x4444 will disclose personal data to regulators, law enforcement agencies, or financial intelligence units where required by law, regulation, or a valid legal order. x4444 will notify you of any disclosure to law enforcement unless prohibited from doing so by the relevant authority.

5.5 Fraud Prevention & Security

In cases where fraudulent activity is detected or suspected, x4444 may share relevant data with fraud prevention agencies, industry fraud databases, or other gaming operators through legitimate data-sharing agreements to prevent further harm.

6 Cookies and Tracking Technologies

x4444 uses cookies and similar tracking technologies to operate the platform effectively, improve the user experience, and understand how members interact with the site. Below is a breakdown of the categories of cookies used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens, and cookies that remember your language and region settings. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Used to understand which pages are visited most frequently, how long members spend on each section, and where technical errors occur. Data collected through these cookies is aggregated and anonymised — individual users are not identifiable from analytics reports.
• Functional cookies: Remember your preferences such as preferred sports or game categories, notification settings, and display preferences. These are not required but improve your experience significantly.
• Marketing cookies: Used only where you have opted in to personalised marketing. These help x4444 show you promotions that are relevant to the games and sports you actually use, rather than generic advertising.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use x4444. For other cookie categories, you can opt out without affecting core functionality. Note that the x4444 Android app uses equivalent device-based tracking technologies rather than browser cookies.

7 Data Security

x4444 implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• Transport encryption: All data in transit between your device and x4444 servers is encrypted using TLS 1.2 or higher. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Data-at-rest encryption: Sensitive stored data — including identity documents, payment references, and CNIC images — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within x4444's systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and regularly audited. No single employee has unrestricted access to the full database.
• Password security: Account passwords are hashed using a strong one-way hashing algorithm before storage. x4444 staff cannot see your password in plain text. If you forget your password, it is reset — not retrieved.
• Two-factor authentication (2FA): Available to all x4444 members and strongly recommended. 2FA adds a second verification step using your registered mobile number, significantly reducing the risk of unauthorised account access.
• Penetration testing: x4444's infrastructure undergoes regular third-party security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that poses a risk to your personal information, x4444 will notify affected members within 72 hours of becoming aware of the breach, and will provide clear guidance on recommended steps to protect yourself.

While x4444 takes every reasonable step to protect your data, no online system is completely immune to risk. You play an important role in keeping your account secure by using a strong, unique password, enabling 2FA, and never sharing your login credentials with anyone.

8 How Long We Keep Your Data

x4444 retains your personal data only for as long as it is necessary for the purposes described in this policy or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account being active plus a minimum of five years after the account is closed, to meet AML and financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years after the account is closed, as required by anti-money-laundering regulations.
• Transaction records: Betting history, deposit records, and withdrawal records are retained for a minimum of five years from the date of the transaction.
• Support communications: Live chat and email correspondence is retained for three years from the date of the interaction.
• Marketing consent records: Records of your opt-in consent for marketing communications are retained for as long as you remain subscribed, plus one year after unsubscription to demonstrate compliance.
• Anonymised analytics data: Anonymised usage data from which you cannot be identified may be retained indefinitely for platform improvement purposes.

Once the applicable retention period expires and there is no ongoing legal requirement to retain your data, x4444 will securely delete or anonymise it. You can request early deletion of certain categories of your data under the rights described in Section 9, subject to our legal retention obligations.

9 Your Rights Over Your Personal Data

As an x4444 member you have the following rights in relation to your personal data. Most requests are processed within 30 days. All requests should be sent to support@x4444.biz with the subject line "Privacy Request" and a brief description of what you are asking for.

10 Children and Underage Users

x4444 is an adult platform. The minimum age to register and use any x4444 product is 18 years. x4444 does not knowingly collect personal data from anyone under the age of 18.

If x4444 discovers or has reasonable grounds to believe that a registered member is under 18, the account will be immediately suspended. Any deposits made will be returned (subject to verification of the payment method). All winnings generated while the account was active will be forfeited. The situation will be reviewed in accordance with x4444's responsible gaming obligations.

If you are a parent or guardian and have reason to believe that a person under 18 has registered on x4444, please contact us immediately at support@x4444.biz. We take these reports seriously and will act promptly upon receiving credible information.

11 International Data Transfers

x4444 primarily stores and processes data within secure data centre facilities. In some cases — for example, when using global cloud infrastructure or third-party verification services — your personal data may be processed in countries outside Pakistan.

Where data is transferred internationally, x4444 ensures appropriate safeguards are in place, including:

• Data processing agreements with all recipients that require equivalent data protection standards.
• Use of recognised transfer mechanisms where required by applicable data protection law.
• Restricting the scope of transferred data to only what is necessary for the specific processing purpose.

If you would like details about specific international transfers involving your personal data, please contact us at support@x4444.biz.

12 Changes to This Privacy Policy

x4444 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. The date of the most recent update is shown at the top of this page.

Where a change is material — meaning it significantly affects how we collect or use your personal data, or affects your rights — x4444 will notify you by email (where we hold a verified email address) and by a prominent notice on the platform at least 14 days before the change takes effect.

Minor updates — such as correcting typos, clarifying existing practices without changing their substance, or reflecting updated contact details — may be made without prior notice and will take effect on the date shown.

Your continued use of x4444 following a material update indicates your acceptance of the revised Privacy Policy. If you do not accept the changes, you should stop using x4444 and may request account closure and data deletion in accordance with Section 9.

13 How to Contact Us About Privacy

If you have any question, concern, or request relating to this Privacy Policy or how x4444 handles your personal data, please get in touch through one of the following channels:

• Email (preferred for data requests): support@x4444.biz — please use the subject line "Privacy Request" so your message reaches the right team quickly.
• Live Chat: Available 24/7 directly on the x4444 platform. For general privacy questions, our support team can help in real time.

x4444 aims to acknowledge all privacy-related requests within 48 hours and to provide a full response within 30 days. If your request is complex or involves a large volume of data, we may extend this to 60 days and will let you know within the initial 30-day window.

If you are not satisfied with x4444's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.