1xbeat Privacy
Policy

1. Introduction

1xbeat ("we", "us", "our") operates the online casino and sports betting platform accessible at 1xbeat.bio. This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by 1xbeat. It applies to all players who register an account, access the platform as a visitor, contact our support team, participate in promotions, or otherwise interact with any part of the 1xbeat service.

We understand that Pakistani players value their privacy and trust us to handle their personal information with the same care and professionalism they expect from their banking institutions. 1xbeat is committed to processing personal data transparently, lawfully and in accordance with internationally recognised data protection standards. We collect only the data that is genuinely necessary to provide and improve our services, fulfil our regulatory obligations and keep your account secure.

2. Data Controller

For the purposes of applicable data protection law, 1xbeat is the data controller responsible for the personal data collected through the 1xbeat platform. As data controller, 1xbeat determines the purposes for which, and the manner in which, your personal data is processed. Any questions or requests relating to your personal data should be directed to the 1xbeat Data Protection contact as set out in Section 15 of this policy.

1xbeat operates under an international gaming licence and is subject to the data protection obligations applicable within that licensing framework. Pakistani players interacting with the 1xbeat platform have their data processed by 1xbeat in its capacity as the primary data controller. Where third-party processors are engaged to assist in delivering services — such as payment processors, KYC verification providers and gaming software suppliers — they act only on 1xbeat's instructions and under appropriate data processing agreements.

3. Personal Data We Collect

1xbeat collects the minimum personal data necessary to operate the platform, verify player identities, process transactions and fulfil regulatory obligations. The categories of personal data we collect are set out below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health information. If any such data is inadvertently included in documents submitted for verification purposes, it will be processed solely for the purpose of identity verification and will not be used for any other purpose.

4. How We Collect Your Data

1xbeat collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering your 1xbeat account, completing your player profile, submitting KYC documents, making deposits or withdrawals, contacting support, or participating in surveys and promotions.
• Automated Technologies: Technical and usage data collected automatically when you access the 1xbeat platform, including data gathered via cookies, web beacons, server logs and similar tracking technologies. See Section 8 for full details on our cookie practices.
• Third-Party Sources: Identity and fraud-risk data received from KYC verification providers, payment processors such as JazzCash and EasyPaisa, and anti-money laundering screening services. This data supplements what you provide directly and is used solely for compliance and security purposes.
• Responsible Gaming Tools: Data generated when you interact with self-exclusion, deposit limit or session reminder settings within your account. This data is used exclusively to enforce the protective measures you have requested.

5. Purpose & Legal Basis for Processing

1xbeat processes your personal data only where a valid legal basis exists. The primary purposes for which we process personal data, and the corresponding legal basis for each, are set out below:

• Account Registration & Platform Access: Processing is necessary for the performance of our contract with you (i.e., providing access to the 1xbeat gaming platform). Without this data, we cannot create or maintain your account.
• Identity Verification (KYC): Processing is necessary to comply with our legal obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF) and responsible gaming regulations. Age verification to enforce the 21+ minimum age requirement falls within this category.
• Payment Processing: Processing of financial data is necessary for the performance of our contract with you and to comply with financial regulatory obligations. All PKR deposit and withdrawal transactions via JazzCash, EasyPaisa and partner banks require processing of relevant financial identifiers.
• Fraud Prevention & Security: Processing is in 1xbeat's and players' legitimate interests to detect, prevent and investigate fraudulent activity, account compromise, bonus abuse and other security threats to the platform.
• Responsible Gaming Compliance: Processing is necessary to fulfil legal obligations including enforcing self-exclusion elections, monitoring for problem gambling indicators and maintaining responsible gaming records as required under applicable licensing conditions.
• Marketing Communications: Where you have given explicit consent, we may use your email address or mobile number to send you information about 1xbeat promotions, PSL betting specials and personalised bonus offers. You may withdraw consent at any time via your account settings or by contacting support.
• Platform Improvement & Analytics: Processing of technical and usage data is in 1xbeat's legitimate interests to understand how players use the platform, identify performance issues and improve the overall user experience for players across Pakistan.
• Legal & Regulatory Compliance: Processing is necessary to comply with applicable laws, respond to regulatory enquiries, cooperate with law enforcement where required, and defend legal claims.

6. Data Sharing & Disclosure

1xbeat does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and other approved payment partners receive the financial and identity data necessary to process your deposits and withdrawals in PKR. These entities are subject to their own regulatory obligations and privacy standards.
• KYC & Identity Verification Providers: Third-party KYC service providers may receive copies of your identity documents (e.g. CNIC scans) and identity data to perform verification checks on 1xbeat's behalf. These providers operate as data processors under binding agreements with 1xbeat.
• Gaming Software Providers: Where games on the 1xbeat platform are supplied by third-party gaming studios, limited technical and session data may be shared with those providers to deliver the game experience and record RNG-determined outcomes. No financial or identity data is shared with gaming providers beyond what is technically necessary.
• Regulatory & Law Enforcement Authorities: 1xbeat may disclose personal data to regulators, gaming authorities, financial intelligence units or law enforcement agencies where we are required to do so by applicable law, court order or regulatory direction.
• Self-Exclusion Registries: Where required by our licensing framework or where you request cross-operator self-exclusion, limited identifying data may be shared with recognised self-exclusion schemes to give effect to your exclusion request across multiple platforms.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of 1xbeat's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained. Affected players will be notified in advance where practicable.

7. Data Retention

1xbeat retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting or reporting requirements. When data is no longer required for its original purpose and there is no overriding legal basis to retain it, we securely delete or anonymise it.

• Active Account Data: Personal data associated with an active 1xbeat account is retained for the lifetime of the account and for a minimum period of five (5) years following account closure, to comply with AML and gaming regulatory record-keeping obligations.
• Transaction Records: Financial transaction records, including PKR deposit and withdrawal histories, are retained for a minimum of seven (7) years from the date of each transaction in accordance with applicable financial record-keeping requirements.
• KYC & Identity Documents: Copies of identity documents (CNIC scans, utility bills, bank statements) are retained for the period required by applicable AML regulations, typically five (5) years from the date of verification or account closure, whichever is later.
• Responsible Gaming Records: Self-exclusion records and responsible gaming correspondence are retained for a minimum of five (5) years following the expiry of any exclusion period, to allow 1xbeat to enforce re-registration restrictions where applicable.
• Marketing Preferences: Records of marketing consent or opt-out are retained indefinitely to demonstrate compliance with applicable consent requirements, even after the underlying personal data has been deleted.
• Support Communications: Customer support transcripts and email correspondence are retained for three (3) years from the date of the interaction, or longer if related to an unresolved dispute or regulatory matter.

8. Cookies & Tracking Technologies

The 1xbeat platform uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, analyse usage patterns and improve the overall player experience. A cookie is a small text file stored on your device by your browser when you visit a website.

• Strictly Necessary Cookies: These cookies are essential for the 1xbeat platform to function. They enable you to log in securely, navigate between pages, and maintain your session state. These cookies cannot be disabled without preventing core platform functionality.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, currency display (PKR) and responsible gaming settings, so you do not need to re-enter them on each visit.
• Analytics Cookies: We use analytics tools to collect aggregated, anonymised data about how players use the 1xbeat platform — including which pages are most visited, how long sessions last and which features generate the most engagement. This data is used solely to improve the platform and cannot be used to identify individual players.
• Security Cookies: Certain cookies are used to detect and prevent fraudulent activity, including duplicate account creation and session hijacking attempts. These cookies process device fingerprint data and are essential to platform security.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 1xbeat platform and your ability to access some features. Your browser settings also allow you to receive notification before any cookie is placed, giving you the choice to accept or reject it on a case-by-case basis.

9. Data Security

1xbeat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security infrastructure is reviewed and updated regularly in line with industry best practices.

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 1xbeat platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Look for the padlock icon in your browser's address bar as confirmation that your connection is secure.
• Encrypted Data Storage: Personal data, financial records and identity documents stored on 1xbeat's servers are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data itself.
• Access Controls: Access to personal data within the 1xbeat organisation is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Two-Factor Authentication: Players are strongly encouraged to enable 2FA on their 1xbeat accounts using their Pakistani mobile number (Jazz, Telenor, Zong or Ufone) for SMS-based verification. This significantly reduces the risk of unauthorised account access even if login credentials are compromised.
• Penetration Testing & Audits: 1xbeat conducts regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in the platform's security posture.

10. International Data Transfers

As 1xbeat operates under an international gaming licence, some personal data processed on the platform may be transferred to, stored in, or processed by systems or personnel located outside Pakistan. Where such transfers occur — for example, when data is processed by our KYC provider, gaming software suppliers or cloud infrastructure partners — 1xbeat ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that which it receives within Pakistan.

Safeguards for international data transfers may include contractual data protection clauses, binding corporate rules, or adequacy decisions where applicable. By using the 1xbeat platform, you acknowledge that your personal data may be transferred and processed in this manner. If you have concerns about international transfers of your data, please contact the 1xbeat Data Protection contact listed in Section 15.

11. Your Data Rights

As a 1xbeat player, you hold meaningful rights over your personal data. 1xbeat is committed to facilitating the exercise of these rights promptly and without undue barriers. Your rights are described below. To exercise any of these rights, please contact us using the details in Section 15.