Privacy Policy — xo786 Platform

This Privacy Policy ("Policy") is issued by xo786 ("xo786", "we", "us", "our") and applies to all users ("User", "you") of the website located at https://xo786.cam and all associated pages, content and features (the "Platform").

xo786 is an English-language online gaming information platform. We are committed to safeguarding the privacy and personal data of every individual who visits or uses the Platform. This Policy explains — in transparent, straightforward terms — what personal data we collect, why we collect it, how it is used, who may receive it, how long we keep it, and what rights you hold in respect of your data.

This Policy should be read alongside our Terms & Conditions, which together constitute the complete agreement governing your use of the Platform. By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, the following definitions apply:

xo786 may collect the following categories of personal data, depending on how you interact with the Platform:

xo786 does not currently collect: financial data (card numbers, bank account details), government-issued identity documents, location data beyond general IP-based geo-approximation, or sensitive categories of personal data (health, biometric, political or religious data).

xo786 collects personal data through the following means:

• Direct interaction: When you contact us by email with an enquiry, request or complaint, we collect the personal data you provide in that communication.
• Automated technologies: When you access the Platform, technical and usage data are collected automatically through server logs, cookies and analytics software. This includes IP address, browser type and page-visit data.
• Cookies and similar technologies: Cookies placed on your device collect session identifiers, preference signals and anonymised usage statistics. See Section 9 for full cookie details.
• Third-party analytics: We may use third-party analytics tools (such as aggregated web analytics services) that collect anonymised usage data to help us understand how the Platform is used and improve its performance. These tools process data under their own privacy policies.

xo786 does not purchase personal data lists, scrape data from third parties or collect personal data without a clear, stated purpose.

Personal data collected by xo786 is used solely for the following purposes:

1. Platform operation and delivery: To serve web pages, maintain session continuity and ensure the Platform functions correctly across devices and browsers.
2. Analytics and improvement: To understand aggregate usage patterns, identify content that is most useful to Pakistani users, and improve the quality, accuracy and structure of our informational content.
3. Communication management: To receive, process and respond to enquiries submitted via email. We retain correspondence records for a reasonable period to maintain continuity in our responses.
4. Security and fraud prevention: To identify, investigate and prevent unauthorised access, abuse, spam and malicious activity directed at the Platform.
5. Legal compliance: To comply with any applicable legal obligations, including responding to lawful requests from competent authorities.

xo786 does not use personal data for: direct marketing to individual users, profiling for advertising purposes, automated decision-making that has legal or significant effects on individuals, or any purpose incompatible with those stated above without first obtaining your consent.

Where data-protection frameworks require a defined legal basis for processing personal data, xo786 relies on the following grounds:

• Legitimate interests: The processing of technical and usage data for Platform operation, security monitoring and aggregate analytics is carried out on the basis of xo786's legitimate interest in maintaining a functioning, secure and high-quality informational platform. This interest does not override your privacy rights given the non-sensitive nature of the data and the reasonable expectation of data collection when visiting any website.
• Contractual necessity: Where you initiate contact or engage with Platform features that require data collection, processing that data is necessary to respond to your request.
• Legal obligation: Where applicable law requires retention or disclosure of certain data, processing is carried out to fulfil that obligation.
• Consent: Where we seek consent for optional data processing activities (such as non-essential cookies), we will obtain that consent through a clear, affirmative action. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

xo786 does not sell, rent or trade your personal data to any third party for commercial or marketing purposes. We may share data only in the following limited and specific circumstances:

• Service providers (Data Processors): We may engage trusted third-party service providers — such as web hosting providers, server infrastructure operators and analytics platforms — who process personal data on our behalf under written data-processing agreements and appropriate technical safeguards.
• Legal compliance and law enforcement: We may disclose personal data to competent authorities, regulators or law enforcement agencies where required by applicable law, court order or regulatory direction, or where we believe disclosure is necessary to protect the rights, property or safety of xo786 or its users.
• Business transfers: In the event of a merger, acquisition, restructuring or sale of all or part of xo786's business assets, personal data held may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy.

In all cases of data sharing, xo786 takes reasonable steps to ensure that recipient parties handle personal data responsibly and in accordance with applicable law.

xo786 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Technical and usage data: Retained in aggregated or anonymised form for ongoing analytics. Raw server log data is retained for a limited operational period (typically up to 12 months) before deletion or anonymisation.
• Communication data: Email correspondence is retained for as long as is reasonably necessary to manage the ongoing relationship or resolve any outstanding queries — typically up to 24 months from the date of last contact, unless a longer period is required by law.
• Cookie data: Session cookies expire when you close your browser. Persistent analytics cookies are retained for the period specified by the analytics provider, subject to your consent and browser settings.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

xo786 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your web browser when you visit a website.

We use the following categories of cookies:

You can manage, restrict or delete cookies at any time through your browser settings. Note that disabling essential cookies may prevent certain features of the Platform from functioning correctly. xo786 does not use advertising or targeting cookies to serve personalised adverts.

xo786 applies reasonable and proportionate technical and organisational security measures to protect personal data from unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS/SSL encryption: All data transmitted between your browser and the Platform is encrypted using industry-standard 256-bit TLS (Transport Layer Security). The padlock icon in your browser address bar confirms this connection is active.
• Access controls: Access to personal data within xo786's systems is restricted to authorised personnel who require it to perform their operational responsibilities.
• Infrastructure security: Platform infrastructure is hosted on reputable cloud or managed hosting providers that maintain their own security certifications and controls.
• Regular review: Security measures are reviewed periodically and updated in response to emerging threats and industry best practices.

Despite these measures, no method of electronic transmission or storage is completely secure. xo786 cannot guarantee absolute security of personal data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate steps to notify affected users in accordance with applicable law.

Subject to applicable data-protection law, you hold the following rights in respect of your personal data held by xo786. To exercise any of these rights, please contact us at the email address set out in Section 15.

We will endeavour to respond to all rights requests within 30 days. Where requests are complex or numerous, this period may be extended by a further 30 days, of which you will be notified. We will not charge a fee for processing reasonable rights requests.

The Platform is intended solely for adults aged 18 or over — or the higher minimum age required by the applicable operator or license jurisdiction. xo786 does not knowingly collect personal data from persons under the age of 18.

If you believe that a person under the age of 18 has provided personal data to xo786, please notify us immediately at the contact details in Section 15. We will take prompt steps to delete such data from our systems.

Parents and guardians are encouraged to monitor and supervise the online activities of minors under their care and to use available parental control tools to prevent minors from accessing age-restricted content.

The Platform may be accessed by users from Pakistan and other jurisdictions globally. Personal data collected through the Platform may be processed on servers located outside Pakistan. Where such international transfers occur, xo786 takes reasonable steps to ensure that the receiving entity applies appropriate data-protection standards comparable to those applied by xo786.

xo786 does not specifically assert that its data-processing arrangements comply with any particular national or regional data-protection framework (such as GDPR or PDPA). Pakistani users should note that data-protection legislation in Pakistan is still developing and may not provide the same level of protection available in some other jurisdictions.

If you have concerns about international data transfers in respect of your personal data, please contact us using the details in Section 15.

xo786 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. Amendments will take effect from the date of publication on this page.

The "Last Updated" date at the top of this Policy will be revised whenever a material change is made. We encourage you to review this Policy periodically. Continued use of the Platform following the publication of amendments constitutes your acceptance of the revised Policy.

For significant changes that may affect your rights or how your personal data is processed, we will endeavour to provide a more prominent notice on the Platform, though we cannot guarantee prior notification in all cases.

If you have questions, concerns or requests relating to this Privacy Policy or your personal data, please contact xo786 using the details below. Email addresses are displayed as plain text only and are not clickable links.