Privacy Policy

Effective date: 1 July 2026.

This Privacy Policy explains how Royal X Casino ("we", "us", "our") collects, uses, stores, shares and protects the information of players who register on, download or use our mobile app and website. We take your privacy seriously — every design decision at Royal X Casino starts from a "collect the minimum, protect the maximum" principle, and this policy is written in plain English so anyone can understand what happens to their data.

1. Information we collect

Account information

When you register we collect your mobile phone number, a password hash, and any username you choose. Your phone number is your primary identifier — we never sell it or share it with marketers.

KYC information

Before your first withdrawal we collect a photo of the front of your CNIC and a live selfie. These are stored encrypted at rest and only accessed by our compliance team for verification and anti-fraud purposes.

Payment information

We store your JazzCash, EasyPaisa and bank details as encrypted tokens. We never store full card or wallet PINs — those are entered directly into your bank or wallet app.

Device information

Standard mobile device data: Android version, device model, IP address, app version, general geographic region (city-level, from IP), and crash logs. This helps us diagnose bugs and prevent fraud.

Gameplay information

Bets placed, games played, session duration, deposits and withdrawals — required by regulators and used to calculate cashback, loyalty points and VIP tier progression.

2. How we use your information

• Operate your account and process deposits and withdrawals.
• Prevent fraud, money laundering, multi-accounting and underage play.
• Send OTPs and important account or security notifications.
• Calculate bonuses, cashback and VIP tier eligibility.
• Improve the app based on aggregated, anonymised usage patterns.
• Provide customer support when you reach out via WhatsApp, email or in-app chat.
• Meet legal, tax and regulatory obligations.

3. Who we share information with

We share data only when it is strictly necessary:

• Payment providers — JazzCash, EasyPaisa, banks and USDT networks. Only the minimum required to route your money.
• KYC and fraud-prevention vendors — third-party identity-verification providers under strict data-processing agreements.
• Regulators and law enforcement — only when legally required by a valid order.
• Infrastructure vendors — cloud hosting, CDN, error-tracking, all bound by data-processing agreements.

We never sell your data. We do not run third-party advertising SDKs. We do not share your phone number with marketers.

4. Data security

• All traffic is 256-bit TLS 1.3 encrypted end-to-end.
• Balances are held in segregated accounts — never mixed with operating funds.
• Internal staff access follows zero-trust: role-based, MFA-enforced, fully audited.
• Passwords are hashed with Argon2id. We physically cannot see your password.
• KYC images are encrypted at rest and auto-deleted after regulatory retention windows expire.
• Independent third-party penetration tests run quarterly.

5. Your rights

• Access — request a copy of the data we hold on you.
• Correction — fix incorrect personal information.
• Deletion — close your account and delete personal data (subject to regulatory retention).
• Data portability — receive your data in a machine-readable format.
• Withdraw consent — opt out of marketing at any time from Profile → Notifications.

To exercise any right, email support@royalxcasinogamepk.net. We respond within 7 days.

6. Data retention

Active accounts: we keep your data as long as your account is open. Closed accounts: financial and KYC records are retained for 5 years to meet regulatory obligations, after which they are securely deleted. Anonymised gameplay statistics may be retained indefinitely for product analytics.

7. Cookies and tracking

The web version uses essential cookies for login sessions and anonymous first-party analytics. We do not use third-party ad trackers, remarketing pixels, or social-media beacons. The Android app uses standard OS-level analytics for crash reporting only.

8. Age restriction

Royal X Casino is strictly 18+. If we detect that a player is under 18, we immediately close the account, refund the current balance to the original deposit method, and delete personal data beyond what regulations require us to retain.

9. International transfers

Some of our infrastructure vendors are hosted outside Pakistan. All transfers are protected by contractual data-processing agreements and equivalent technical safeguards.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced inside the app and by push notification at least 14 days before they take effect.

11. Contact

Questions about this policy? Email support@royalxcasinogamepk.net or use the in-app live chat. Our Data Protection team responds within 48 hours.