Privacy Policy – How 111x Protects Your Data in Pakistan

This Privacy Policy describes how 111x (accessible at 111x.onl) collects, uses, stores and protects personal information provided by users of the platform. It applies to all 111x products and services, including cricket betting, esports betting, live casino, Andar Bahar, the Aviator game and the VIP Club programme.

When we say "personal information" or "personal data" in this document, we mean any information that can identify you as an individual — your name, phone number, CNIC number, payment details, device identifiers and so on. Information that cannot be linked back to a specific person — for example, anonymised usage statistics — falls outside the scope of this policy.

By creating an account on 111x or by continuing to use the platform after being presented with this policy, you confirm that you have read and understood how your data is handled. If you do not agree with any part of this policy, please do not use the 111x platform. You may contact us with any questions before registering — our details are in Section 13.

111x collects personal data through three channels: information you provide directly when registering or using the platform, information collected automatically when you use the platform, and information we may receive from payment processors and identity verification services.

Information you provide directly:

• Full name and date of birth (required for account registration and age verification).
• Mobile phone number (used as your primary account identifier and for 2FA).
• CNIC number (requested when identity verification is triggered — not collected from all users at registration).
• Payment method details: Easypaisa / JazzCash account number, NayaPay / SadaPay handle, bank account number or card details as applicable. Full card numbers are never stored by 111x — they are passed directly to our PCI-compliant payment processor.
• Communications you send to 111x support via live chat, email or WhatsApp.

Information collected automatically:

• Device type, operating system, browser version and screen resolution.
• IP address and approximate geographic location (city-level, not precise GPS).
• Pages visited, features used, session duration and navigation patterns within the 111x platform.
• Bets placed, games played, deposit and withdrawal history (required to operate your account and settle bets).
• Cookie and session identifiers — see Section 4 for the full cookies explanation.

Everything 111x does with your data has a specific, defined purpose. We do not collect data speculatively or store information we have no clear use for. The table below sets out our main purposes and the legal basis for each:

111x does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you without the opportunity for human review.

111x uses cookies and similar technologies — including local storage and session tokens — to operate the platform correctly and to understand how users are interacting with it. Cookies are small text files stored on your device by your browser.

We use the following categories of cookies:

• Essential cookies: Required for the platform to function. These include your login session token, account region settings and CSRF protection tokens. You cannot opt out of essential cookies without disabling the platform entirely.
• Functional cookies: Remember your preferences — for example, your preferred language, the last game you played, and notification settings. These make your 111x experience smoother across sessions.
• Analytics cookies: Collect anonymised data on how pages are used — which features are accessed, where users drop off, and how performance varies across device types. This data is aggregated and cannot be used to identify individual users. We use this data internally to improve the platform.
• Marketing / attribution cookies: If you arrived at 111x through a promotional campaign or affiliate link, these cookies help us track which promotion brought you to the platform. They do not track your browsing on other websites.

111x does not sell or trade your personal data. We share your data only in the following specific circumstances and only to the minimum extent necessary for each purpose:

• Payment processors: Your payment details are passed to regulated payment processors (including those handling Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card transactions) to execute deposits and withdrawals. These providers are contractually obligated to protect your data and may not use it for any other purpose.
• Identity verification providers: When we are required to verify your identity — typically for higher withdrawal amounts or if a compliance flag is triggered — we may share your CNIC details and a photograph with a regulated identity verification service provider.
• Fraud prevention and AML: We may share limited transaction data with fraud detection services to identify and prevent money laundering, match-fixing activity and unauthorised account access.
• Legal and regulatory requirements: If required by law, court order or a regulatory body with jurisdiction over 111x's operations, we may be obligated to disclose certain account data. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the unlikely event of a merger, acquisition or sale of 111x assets, your personal data may be transferred to the acquiring entity. You will be notified of such a transfer before it takes place.

All third parties that 111x shares data with are bound by data processing agreements requiring them to maintain confidentiality and security standards equivalent to our own. We do not permit third parties to use your data for their own marketing purposes.

Protecting the personal data of 111x users is a core infrastructure priority, not an afterthought. The security measures we have in place include:

• TLS 1.3 / 256-bit SSL encryption on all data in transit between your device and 111x servers.
• AES-256 encryption for all sensitive data at rest in our databases, including payment identifiers and identity documents.
• Two-factor authentication (2FA) available to all 111x users and mandatory for certain account actions including large withdrawals and contact detail changes.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Support agents can view only the data necessary to resolve a specific query. Payment details are not visible to support staff.
• Regular security audits: 111x conducts periodic penetration testing and third-party security reviews of our platform infrastructure.
• Incident response: In the event of a data breach affecting your personal information, 111x will notify affected users within 72 hours of discovery, clearly explaining what data was affected and what steps are being taken.

111x retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. Our standard retention periods are:

• Active account data (name, contact details, account preferences): Retained for the lifetime of your account plus 2 years after account closure.
• Transaction and bet history: Retained for 7 years after the date of the transaction, in line with standard financial record-keeping requirements.
• Identity verification documents (CNIC copies, verification photographs): Retained for 5 years after account closure or the last verified transaction, whichever is later.
• Customer support communications: Retained for 3 years from the date of the conversation unless there is an ongoing or unresolved dispute, in which case records are retained until final resolution.
• Marketing consent records: Retained until you withdraw consent and for 2 years thereafter as evidence of your original consent.

When data reaches the end of its retention period, it is securely deleted or anonymised so it can no longer be linked to you as an individual.

As a 111x user, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@111x.onl with the subject line "Data Rights Request" along with your registered account phone number.

• Right to access: Request a copy of all personal data we hold about you. We will provide this in a readable format within 5 working days.
• Right to rectification: If any of your personal data held by 111x is inaccurate or incomplete, you can request that we correct it. Most contact and account details can be updated directly from your account settings without contacting support.
• Right to erasure: You can request that we delete your personal data. We will process deletion requests within 30 days. Note that we may be required to retain certain transaction records for legal and regulatory reasons even after a deletion request — we will explain exactly what is retained and why if this applies.
• Right to restrict processing: In certain circumstances, you can request that we pause processing your data while a complaint or query is being resolved, rather than deleting it immediately.
• Right to data portability: You can request your personal data in a structured, machine-readable format (CSV or JSON) so it can be transferred to another service if needed.
• Right to withdraw consent: Where we process your data on the basis of consent (for example, marketing communications), you can withdraw that consent at any time without affecting the lawfulness of previous processing. See Section 10 for marketing opt-out details.
• Right to object: You can object to processing carried out on the basis of legitimate interest, including profiling for responsible gaming monitoring. We will assess each objection individually.

111x is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. Age verification checks are embedded in our registration process, and additional verification may be requested at any time during the account lifecycle.

If 111x discovers that a user is under 18, the account will be immediately closed, all bets and activity voided, and the account balance returned to the original deposit method. Any personal data held for that account will be deleted within 30 days of discovery except where retention is required to evidence the closure.

If you believe that someone under 18 has created an account on 111x, please contact us at support@111x.onl immediately. We take the protection of minors very seriously and act on all such reports without delay.

With your consent, 111x may send you promotional communications about new features, upcoming cricket and esports events, exclusive promotions and VIP Club benefits. These may be sent via SMS, WhatsApp message or push notification to your registered device.

You can opt out of marketing communications at any time by:

• Updating your communication preferences in your 111x account settings under "Notifications".
• Replying "STOP" to any SMS or WhatsApp promotional message from 111x.
• Emailing support@111x.onl with the subject line "Unsubscribe from Marketing".

Opting out of marketing communications does not affect transactional messages — we will still send you essential account notifications such as deposit confirmations, withdrawal status updates and security alerts. These cannot be opted out of while your account remains active as they are necessary to operate the account.

The 111x platform does not contain links to external third-party websites. However, the platform integrates with third-party services to deliver core functionality — including payment processing, identity verification, live game streaming and fraud detection. These integrations are governed by separate data processing agreements as described in Section 5.

If you access 111x through a link shared in a social media platform, messaging app or third-party website, please be aware that the privacy practices of those external services are entirely independent of this policy. 111x is not responsible for data practices outside its own platform.

111x reviews this Privacy Policy periodically and will update it when our data practices change or when required by new legal or regulatory obligations. The "Last Updated" date shown at the top of this page reflects when the most recent substantive revision was made.

When we make material changes to this policy — changes that significantly affect how your data is used or what rights you have — we will notify active users via SMS or in-app notification at least 7 days before the updated policy takes effect. For non-material clarifications and corrections, we will update the page without individual notification but will update the revision date.

Continued use of the 111x platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you disagree with a change, you should close your account and withdraw your balance before the new policy takes effect, then contact us to exercise your right to erasure.

For any question, concern or request relating to how 111x handles your personal data, you can reach us through the following channels:

• Email: support@111x.onl — use the subject line "Privacy Query" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 directly from the 111x platform. Click the chat icon at the bottom of any page when logged in. Typical response time under 3 minutes.
• WhatsApp: Available for registered players after login — the number is displayed in your account settings.

We aim to acknowledge all privacy-related requests within 24 hours and to provide a full response within 5 working days for access requests and within 30 days for erasure and rectification requests. Where a request requires additional time due to complexity, we will notify you within the initial 5-day window and provide an updated timeline.

111x takes all privacy queries seriously. Our customer support team includes members trained specifically in data rights handling, and Urdu-speaking agents are available for users who prefer to communicate in Urdu.