x11com Privacy Policy

This Privacy Policy ("Policy") is issued by x11com ("x11com", "we", "us", "our") and applies to all users of the x11com online casino and sports betting platform accessible at https://x11com.net (the "Platform"), including users based in Karachi, Lahore, Islamabad, Faisalabad, and throughout Pakistan.

This Policy explains in plain, straightforward English:

• What personal data x11com collects about you;
• Why we collect it and the legal basis on which we process it;
• How long we keep it and who we may share it with;
• The rights you have over your personal data and how to exercise them;
• How to contact us with privacy-related questions or requests.

By registering an account, making a deposit, or using any feature of the x11com Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, please do not use the Platform.

x11com collects personal data in several ways: directly from you when you register, deposit, or contact us; automatically when you use the Platform; and in some cases from third-party verification or payment service providers. The categories of data we collect include:

We do not collect special categories of sensitive personal data (such as health information, racial or ethnic origin, or political opinions) unless you voluntarily provide such information in the context of a responsible gaming self-exclusion request or a support query.

x11com uses your personal data only for the purposes for which it was collected, as described below. We do not use your data in ways that are incompatible with these stated purposes without first notifying you and, where required, obtaining your consent.

• Account Management: To create, maintain, and administer your x11com account, verify your identity, and process your login credentials securely.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, USDT, and Bitcoin, and to maintain accurate financial records.
• KYC & AML Compliance: To verify your identity and age (21+ requirement), screen against sanction lists, and comply with anti-money laundering obligations applicable to online gaming operators.
• Platform Personalisation: To remember your preferences, display relevant game recommendations, and customise your experience on the x11com Platform.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Responsible Gaming: To monitor gaming patterns, identify potential problem gambling behaviour, and apply responsible gaming tools (deposit limits, self-exclusion) where appropriate.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, account takeovers, bonus abuse, and other security threats to the Platform and its users.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from law enforcement authorities.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and updates about x11com. You may withdraw this consent at any time by updating your account preferences or contacting support.

x11com processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide the x11com Platform, manage your account, and process your transactions.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including KYC identity verification, AML transaction monitoring, and regulatory reporting requirements.
• Legitimate Interests: Processing is necessary for x11com's legitimate business interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your data protection rights.
• Consent: Where we send you direct marketing communications or use non-essential cookies, we do so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

x11com does not sell your personal data. We may share your data with the following categories of recipients only where strictly necessary and subject to appropriate contractual safeguards:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and cryptocurrency processors receive the minimum transactional data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening services that assist us in verifying your identity and screening against sanctions lists. These providers are bound by strict confidentiality and data processing agreements.
• Platform Technology Partners: Game providers, software vendors, and cloud infrastructure providers who process data on our behalf as data processors. All such partners are contractually required to process data only on x11com's instructions and to maintain appropriate security standards.
• Regulatory Authorities & Law Enforcement: Where x11com is legally required to disclose personal data to regulatory bodies, courts, or law enforcement agencies, we will comply with such lawful requests. Where legally permissible, we will notify you of such disclosure.
• Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations.

All third parties who receive personal data from x11com are required to implement appropriate technical and organisational measures to protect that data and to process it solely for the specified purpose. x11com remains responsible for ensuring that such third parties comply with applicable data protection standards.

x11com operates internationally, and your personal data may be transferred to, stored, and processed in countries outside Pakistan. Where such transfers occur, x11com ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by relevant data protection authorities;
• Transfer to countries that have been assessed as providing an adequate level of data protection;
• Binding corporate rules where applicable within our group structure.

If you wish to obtain further information about international transfer safeguards applicable to your personal data, please contact x11com's support team.

x11com uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website. We use the following types of cookies:

x11com does not use advertising or cross-site tracking cookies. You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including secure login.

x11com retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML and KYC regulatory requirements.
• Transaction and Financial Data: Retained for a minimum of 5 years from the date of the transaction for financial regulatory compliance purposes.
• Customer Support Communications: Retained for 3 years from the date of the communication, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and Usage Data: Retained for up to 24 months, after which it is aggregated and anonymised.
• Marketing Consent Records: Retained for as long as you remain subscribed and for 2 years following withdrawal of consent, as evidence of lawful processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by x11com:

• Right of Access: You may request a copy of all personal data x11com holds about you (commonly known as a Subject Access Request).
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to x11com's legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing of your data for direct marketing purposes. You may also object to processing based on legitimate interests, though this right is not absolute.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The x11com Platform is strictly intended for users who are 21 years of age or older. x11com does not knowingly collect personal data from anyone under the age of 21.

As part of our registration and KYC process, all users are required to confirm their date of birth and provide valid government-issued identification. Any account found to have been created by a person under the age of 21 will be immediately suspended, all funds will be withheld pending investigation, and the matter may be referred to the appropriate authorities.

If you have reason to believe that a minor has registered an account on the x11com Platform, please contact our support team immediately. x11com takes under-age gambling extremely seriously and will act promptly upon receiving any such report.

x11com implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• AES-256 Encryption at Rest: All personal and financial data stored on x11com's servers is encrypted using 256-bit Advanced Encryption Standard.
• TLS in Transit: All data transmitted between your device and x11com's servers is protected by TLS (Transport Layer Security), ensuring that your login credentials, payment details, and personal information cannot be intercepted.
• Two-Factor Authentication (2FA): x11com supports and strongly recommends 2FA for all accounts to provide an additional layer of protection against unauthorised access.
• Access Controls: Access to personal data within x11com is restricted on a strict need-to-know basis. Staff with access to personal data are subject to background checks, confidentiality agreements, and regular data protection training.
• Regular Security Audits: x11com's infrastructure and application security are subject to regular independent penetration testing and vulnerability assessments.
• Incident Response Plan: x11com maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.

While x11com takes all reasonable steps to secure your data, no online system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own account credentials and for notifying x11com immediately if you suspect any unauthorised access to your account.

The x11com Platform may contain links to third-party websites or services — for example, payment gateways or game provider portals — that are not operated by x11com. This Privacy Policy applies solely to the x11com Platform and does not extend to any third-party websites.

x11com is not responsible for the privacy practices or content of third-party websites. We strongly encourage you to review the privacy policy of any third-party site you visit via a link from the x11com Platform before providing any personal information on that site.

x11com reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The most current version of this Policy will always be available at https://x11com.net/privacy-policy and will display the effective date at the top of the page.

Where changes to this Policy are material — for example, changes that significantly affect how we use your personal data or your rights — x11com will notify you via email to your registered address or via a prominent notice on the Platform, at least 14 days before the changes take effect.

Your continued use of the x11com Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with a material change, you should close your account and cease using the Platform before the change takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by x11com, please contact us using the details below. Our support team handles all data protection enquiries with care and will respond within 30 calendar days.

When submitting a data request, please include your registered account username and a clear description of your request. For access or erasure requests, identity verification will be required before any data is disclosed or deleted.

Effective Date: 1 January 2026  |  Version: 2026.1  |  Operator: x11com  |  Platform: https://x11com.net