xhopex Privacy Policy – How We Protect Your Personal Data in Pakistan

xhopex operates as an online gaming and sports betting platform serving Pakistani players at xhopex.net. For the purposes of data protection, xhopex is the data controller — meaning we are the organisation that determines why and how your personal information is processed.

This policy covers all personal data collected through the xhopex website, any mobile-optimised version of the platform, customer support channels including live chat and email, and any other service operated under the xhopex brand. If you have any questions about our data practices, our support team is available around the clock at support@xhopex.net.

By creating an account on xhopex or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information in the manner described here. You must be at least 18 years of age to use xhopex services.

xhopex only collects information that is genuinely necessary to provide you with a safe, functional, and compliant gaming experience. We do not collect data for its own sake. Below is a breakdown of the categories of personal data we process and why each is needed.

When you contact our support team by live chat or email, we retain a record of that interaction. This is used to resolve your issue accurately, ensure consistent service quality, and provide evidence in the event of a dispute about what was discussed.

Every use of your personal data by xhopex has a specific purpose. We do not use your data for anything that is not listed below, and we do not use it for purposes you have not been informed about.

• Operating your account: Creating, maintaining, and closing your xhopex account; verifying your identity; managing your PKR wallet balance; processing deposits and withdrawals.
• Delivering the gaming service: Enabling you to access games, place bets, receive winnings, and participate in promotions. Recording game rounds and bet outcomes accurately for your account history.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, multiple accounts, bonus abuse, and any other activity that may harm you, other players, or the integrity of xhopex.
• Regulatory compliance: Fulfilling anti-money-laundering (AML) requirements, know-your-customer (KYC) obligations, and any other legal requirements applicable to our operations. Retaining transaction records as required by applicable regulations.
• Customer support: Responding to your queries, resolving complaints, and providing assistance with account matters in both Urdu and English.
• Responsible gaming monitoring: Monitoring your gameplay patterns to identify potential signs of problem gambling and to deliver appropriate interventions or information in accordance with our responsible gaming commitments.
• Service improvement: Analysing how the platform is used in aggregate to improve the user interface, game selection, and overall player experience. This analysis uses anonymised or aggregated data wherever possible.
• Marketing communications (with consent only): Sending you information about promotions, bonuses, and new features on xhopex, but only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time by contacting support or updating your account preferences.

xhopex does not use your personal data for profiling that produces significant automated decisions about you without human review. Where automated processes are used (such as fraud detection algorithms), any decision that materially affects your account will be reviewed by a human member of our team upon request.

xhopex processes your personal data on the following legal bases, depending on the specific purpose of the processing:

• Contract performance: Most processing is necessary to provide the gaming service you have signed up for — operating your account, processing transactions, and delivering games. Without this processing, we could not offer you the xhopex service.
• Legal obligation: Certain processing — particularly identity verification, AML record-keeping, and age verification — is required by law. xhopex must conduct these activities regardless of individual preferences.
• Legitimate interests: Security monitoring, fraud detection, and service improvement are carried out on the basis of our legitimate interest in maintaining a safe and well-functioning platform. These interests are balanced against your privacy rights and do not override them.
• Consent: Marketing communications and non-essential cookies are processed only where you have given explicit consent. You may withdraw consent for these purposes at any time without affecting the operation of your account.

xhopex does not sell your personal data to any third party. Full stop. Your information is not traded, rented, or provided to advertisers, data brokers, or marketing companies. The only circumstances in which xhopex shares your personal data with other parties are:

Service Providers

We use trusted third-party service providers to help operate the platform. These include payment processors (such as the technology partners behind Easypaisa and JazzCash integrations), identity verification services, cloud infrastructure providers, and customer support software. These providers only access your data to the extent necessary to perform their specific service for xhopex and are contractually bound to protect it.

Legal & Regulatory Requirements

xhopex may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so. We will not disclose information beyond what is legally required and, where permitted, will notify you of such a request.

Business Transfers

In the unlikely event that xhopex undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and your rights over your data will be preserved.

xhopex uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device when you visit a website. It allows the site to remember certain information about your visit — such as whether you are logged in — between page loads and sessions.

We use the following types of cookies on xhopex:

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies may affect your experience on xhopex but will not prevent you from using core features. To opt out of marketing cookies, contact our support team or adjust your account marketing preferences.

Data security is one of the areas where xhopex invests the most heavily. Pakistani players trust us with sensitive personal and financial information, and we treat that trust as a serious obligation. The security measures we have in place include:

All data transmitted between your device and xhopex servers is encrypted using SSL/TLS. Payment details are handled by PCI-DSS-compliant processors. Internal access to your personal data is restricted to xhopex staff members who need it to perform specific functions, and all staff with data access undergo data protection training.

In the unlikely event of a data breach that poses a risk to your rights, xhopex will notify affected members as quickly as possible and take immediate steps to contain the breach and prevent recurrence. We will also notify the relevant authorities where required by applicable law.

xhopex retains your personal data only for as long as it is needed to fulfil the purpose for which it was collected, or for as long as required by applicable law and regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus five years after account closure, to meet anti-money-laundering and KYC obligations.
• Transaction records: Kept for a minimum of five years from the date of each transaction, as required for financial compliance purposes.
• Support communications: Retained for three years from the date of the interaction, to enable dispute resolution and quality review.
• Technical and usage logs: Typically retained for 12 months in identifiable form, after which they may be aggregated and anonymised for analytical purposes.
• Marketing preferences and consent records: Retained for as long as your account is active and for two years after you withdraw consent, to demonstrate that consent was validly obtained.

When personal data is no longer needed and the relevant retention period has expired, xhopex deletes or anonymises it in a secure manner. If you request account deletion before a statutory retention period has expired, we will close your account but retain the minimum data required by law until that period ends, after which it will be permanently deleted.

You have a number of rights over your personal data held by xhopex. We take these rights seriously and will respond to any request within 30 days. To exercise any of the rights below, contact us at support@xhopex.net with the subject line "Data Rights Request" and a description of what you are requesting.

We will handle all data rights requests promptly and without charge in most cases. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or decline, but we will explain our reasoning in writing.

xhopex is strictly an adults-only platform. You must be at least 18 years of age to register an account or use any xhopex services. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has created an account on xhopex, please contact us immediately at support@xhopex.net so that we can investigate and close the account promptly.

Age verification is a mandatory step in the xhopex registration process, and we conduct additional checks on accounts where there is any reason to suspect the member may be underage. The protection of minors is one of our most fundamental responsibilities and we take it without exception.

xhopex reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. When we make material changes, we will notify registered members via email and by displaying a prominent notice on the platform for at least 14 days before the changes take effect.

The "Last Updated" date shown at the top of this page indicates when the current version was published. We recommend reviewing this policy periodically. Your continued use of xhopex after a revised policy takes effect constitutes your acceptance of the updated version. If you do not accept the revised terms, you must stop using the platform and contact us to request account closure.

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how xhopex handles your personal information, please get in touch with us. We treat every privacy-related query seriously and aim to respond within 48 hours in most cases.

If you are not satisfied with how xhopex handles your privacy complaint after following our internal process, you have the right to escalate the matter to an appropriate data protection or consumer protection authority in your jurisdiction.