At 1xbat we take your privacy seriously. This policy explains clearly what personal data we collect when you use our platform, why we collect it, how it is stored and protected, and what rights you have over it. Reading this policy takes about five minutes and it covers everything you should know.
1xbat is committed to protecting the personal data of every Pakistani player on our platform. We do not sell your data, we do not share it with advertisers and we only collect what we genuinely need to run a safe, fair and enjoyable platform. This policy is written in plain English so you can actually understand it — no legal jargon where it can be avoided.
Every connection between your device and 1xbat is encrypted using industry-standard 256-bit SSL. Your login, payment details and personal information cannot be intercepted in transit.
1xbat does not sell, rent or trade your personal information to any third party for marketing or commercial purposes — full stop. Your data stays within the 1xbat ecosystem.
Pakistani players have the right to access, correct, export or delete their personal data at any time. Submit a request via live chat or email and we will respond within 30 days.
1xbat only collects personal data that has a specific, stated purpose. We do not build data profiles beyond what is necessary for account management, payments and fraud prevention.
This Privacy Policy applies to all personal data collected by 1xbat — the online gaming and sports betting platform accessible at 1xbat-khelo.com — when you register an account, make a deposit or withdrawal, place a bet, play a casino game, use customer support or browse the website in any capacity. "Personal data" means any information that identifies you or could reasonably be used to identify you, either alone or in combination with other information.
By using the 1xbat platform you acknowledge that you have read this Privacy Policy and that you understand how your data will be handled. This policy should be read alongside the Terms and Conditions and Responsible Gaming policy, both of which form part of the agreement between you and 1xbat. Where any inconsistency exists between this policy and any other document, this Privacy Policy governs in matters relating to your personal data.
1xbat is the data controller for all personal data it collects directly from Pakistani players. Where third-party service providers process data on our behalf, they do so only under our instructions and under strict confidentiality obligations. They cannot use your data for their own independent purposes.
1xbat collects several categories of personal data depending on how you interact with our platform. The table below summarises each category and the primary purpose for which it is collected.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC or passport number | Age & identity verification (KYC) |
| Contact Data | Mobile number, email address (if provided) | Account communication, support |
| Financial Data | Easypaisa / JazzCash account numbers, transaction records | Deposit and withdrawal processing |
| Technical Data | IP address, device type, browser, OS version | Fraud prevention, platform security |
| Usage Data | Pages visited, games played, bets placed, session duration | Platform improvement, personalisation |
| Communications Data | Chat transcripts, support ticket content | Customer service, dispute resolution |
| Verification Documents | CNIC photo, utility bill, bank statement | Regulatory KYC compliance |
We do not collect sensitive personal data such as biometric data, health information, political opinions or religious beliefs. Where you voluntarily provide information beyond what is required — for instance, in a customer support conversation — it is treated with the same level of protection as all other personal data and retained only for as long as necessary to resolve the matter.
On 1xbat, your mobile number is your primary account identifier. It is used to authenticate logins, send transactional notifications and process payments via Easypaisa and JazzCash. You can update your registered mobile number by contacting support with appropriate verification.
1xbat uses your personal data only for purposes that are directly connected to operating a safe, fair and enjoyable platform for Pakistani players. We do not use your data for purposes unrelated to providing our services. The main uses are explained below.
1xbat processes your personal data under one or more of the following legal bases:
Most of the data we process is necessary to provide the services described in our Terms and Conditions. Without your name, mobile number and payment information, it is simply not possible to run an account or process a withdrawal.
Fraud prevention, account security monitoring and platform improvement are carried out on the basis of our legitimate interest in operating a safe, stable platform — balanced against your privacy rights.
Marketing communications and non-essential cookies are only sent or placed with your express opt-in consent. You can withdraw this consent at any time without affecting the operation of your 1xbat account.
Certain processing — particularly KYC identity verification and the retention of transaction records — is required to meet regulatory obligations. We cannot waive these requirements even at a player's request.
1xbat does not sell, rent, trade or disclose your personal data to third parties for their own commercial use. Full stop. Data is shared only in the following specific, limited circumstances:
1xbat never sells player data to advertisers, data brokers or marketing companies. We do not share your personal details with other players under any circumstances. We do not allow any party we share data with to use it for purposes beyond the specific, stated reason for sharing.
Payment data receives the highest level of protection on 1xbat. When you deposit or withdraw using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, the transaction is processed by the payment provider directly using their own secure infrastructure. 1xbat does not store your full mobile wallet number or complete bank account details on our servers in a manner that could enable unauthorised transactions.
What 1xbat retains is a transaction record — the amount, date, direction (deposit or withdrawal) and a masked reference to the payment method used. This record is necessary for account balance management, dispute resolution and regulatory compliance. Transaction records are retained for the period required by applicable financial regulations, after which they are securely deleted.
For Visa and Mastercard transactions, card data is handled entirely by our PCI-DSS compliant payment gateway. 1xbat never sees your full card number — only the last four digits and expiry date are stored as a reference. Your bank account details used for IBFT transfers are stored in encrypted form and used only to process withdrawals to your verified account.
1xbat implements a layered security framework to protect your personal data from unauthorised access, alteration, disclosure or destruction. The measures in place include:
All data exchanged between your device and 1xbat is encrypted in transit. This includes login credentials, payment details and personal data submitted in forms.
Personal data stored on 1xbat servers is encrypted at rest. Access to production data is restricted to authorised personnel on a strict need-to-know basis.
2FA is available for all 1xbat accounts. We strongly recommend enabling it. A compromised password alone cannot grant access to a 2FA-protected account.
Our security team monitors platform activity around the clock for anomalous patterns that could indicate unauthorised access or fraud attempts.
Internal access to personal data is role-restricted. Only staff whose job requires access to specific data categories can view them, and all access is logged.
1xbat conducts periodic internal security reviews and engages independent security assessors to test our systems and identify potential vulnerabilities.
In the unlikely event of a personal data breach that poses a risk to your rights, 1xbat will notify affected players without undue delay and will take immediate remediation steps. We will also notify relevant regulatory authorities where required. The notification will explain what data was involved, what we are doing about it and what steps you can take to protect yourself.
1xbat uses cookies and similar technologies on its website. Cookies are small text files stored on your device by your browser. They help the platform work correctly, remember your preferences and — where you have consented — understand how players navigate the site.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Keeps you logged in, secures your session, remembers your language preference | No – required for platform to work | |
| Remembers your game preferences, last-used payment method, display settings | Yes – via cookie settings | |
| Anonymised data on page visits and feature usage to improve the platform | Yes – via cookie settings | |
| Only active with your explicit opt-in; used to personalise bonus offers shown to you | Yes – opt-out at any time |
You can manage your cookie preferences at any time through your browser settings or through the cookie preference centre accessible from the footer of the 1xbat website. Disabling non-essential cookies will not affect your ability to bet, deposit or withdraw on 1xbat — it only affects personalisation and analytics features.
1xbat retains personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable legal and regulatory obligations. The general retention periods that apply to the main categories of data are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years | Regulatory KYC obligations |
| Transaction Records | 7 years from transaction date | Financial regulation compliance |
| KYC Documents | Duration of account + 5 years | Anti-money-laundering requirements |
| Support Communications | 3 years from last interaction | Dispute resolution evidence |
| Usage & Technical Data | 13 months rolling | Platform security & analytics |
| Marketing Preferences | Until opt-out + 1 year | Audit trail for consent |
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised and aggregated data — which cannot identify you — may be retained indefinitely for statistical purposes.
As a 1xbat player, you have the following rights regarding your personal data. These are real rights you can exercise at any time by contacting our support team:
Request a copy of all personal data 1xbat holds about you. We will provide this within 30 days of a verified request.
If any personal data we hold about you is inaccurate or outdated, you have the right to request that we correct it promptly.
Request deletion of your personal data where there is no legal requirement for us to retain it. Note that some data must be kept under financial regulations.
Request that we restrict how we use your data — for example, while a dispute about accuracy is being resolved — without requiring full deletion.
Request your personal data in a structured, machine-readable format so you can transfer it to another service if you choose to do so.
Object to processing carried out on the basis of legitimate interest or for direct marketing purposes. Marketing opt-outs take effect immediately.
To exercise any of these rights, contact 1xbat support via live chat or email at support@1xbat-khelo.com. We will acknowledge your request within five business days and aim to fulfil it within 30 days. Some requests may require identity verification before we can process them — this is to protect your data, not to delay your request.
1xbat is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an age declaration and, where prompted by KYC requirements, identity document verification. If we become aware that personal data has been collected from a person under 18, we will immediately close the account, delete all associated data and return any balance to the payment source.
If you are a parent or guardian and believe that a minor in your care has registered on 1xbat, please contact our support team immediately at support@1xbat-khelo.com. We will investigate and act within 24 hours of a verified report. For more information on the tools 1xbat provides to prevent underage access, visit our Responsible Gaming page.
1xbat may update this Privacy Policy periodically to reflect changes in our data practices, new platform features, changes to payment methods or updates to applicable regulations. When a material change is made, we will notify registered players via the mobile number on file and by posting a notice on the 1xbat platform at least seven days before the change takes effect.
The effective date at the top of this page will be updated with each revision. We encourage you to review this page occasionally to stay informed. Your continued use of 1xbat after any updated Privacy Policy takes effect constitutes acceptance of the revised terms. If you do not agree with the changes, you are free to close your account before the effective date and request deletion of your personal data subject to any applicable legal retention requirements.
If you have any questions about this Privacy Policy, want to exercise your data rights or have a concern about how your personal data has been handled, please get in touch with us. We take privacy complaints seriously and aim to resolve every concern fairly and promptly.
Available 24/7 on the 1xbat platform. The fastest route to raise a privacy concern or make a data access request in real time.
Send your request or complaint to support@1xbat-khelo.com with "Privacy Request" in the subject line. We respond within five business days.
If you are unsatisfied with how 1xbat has handled your personal data and our response to your complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction. We are committed to cooperating fully with any such investigation.