Privacy Policy

Last updated: September 1, 2026

This Privacy Policy explains how Legit TV Player (“App”, “we”, “our”, or “us”) collects, uses, stores, and protects user information. The App is owned and operated by XAVI HOLDINGS, Owner: AGHA SHAHZAIB KHAN.

1. Company Information

Company: XAVI HOLDINGS
Owner: AGHA SHAHZAIB KHAN
Address: Building # 11-C, Lane 7, Ittehad Commercial DHA Phase-6, Karachi South, Karachi South, Pakistan
Email: legittvplayer@gmail.com
Support Phone: +92 313 0689093

2. What the App Does

Legit TV Player is a media player application that allows users to add and play their own IPTV playlist or provider links.

Legit TV Player does not host, sell, provide, or distribute TV channels, movies, series, IPTV subscriptions, or other media content. Users are responsible for adding and using playlist URLs, provider credentials, and media sources that they are legally authorized to access.

3. Information We Collect

We may collect, process, or store the following information when necessary to provide and operate the App:

• Android device identifier: the App may access an Android-generated device identifier, such as Android ID, for App functionality, device identification, activation, security, and generation of App-specific identifiers.
• App-generated MAC identifier: using Android-generated device information, the App generates an App-specific identifier that may be formatted to resemble a MAC address and may be displayed or referred to as a “MAC” or “MAC address” within the App, backend systems, or support systems. This is an App-generated identifier and is not the device's actual hardware MAC address or Wi-Fi MAC address.
• Device Key: the App also generates a separate Device Key used for device identification, activation, registration, licensing, subscription management, account access control, security, fraud prevention, and support.
• Device and App information: device type, operating system information, App version, and similar technical information needed to operate and support the App.
• Playlist information: playlist name, provider URL, source type, username, and password when entered or provided by the user.
• Account and subscription information: user ID, subscription or trial status, expiry date, authentication token, and related account information where applicable.
• Local App data: cached categories, channels, movies, series, favourites, recently watched items, subtitle settings, playback settings, parental control settings, and other App preferences.
• Technical information: network status, error information, and basic diagnostic information required to troubleshoot and maintain App functionality.

Android Identifier, App-Generated MAC Identifier, and Device Key

For device activation, registration, licensing, subscription management, account access control, fraud prevention, security, and support, Legit TV Player may access an Android-generated device identifier, such as Android ID.

Using Android-generated device information, Legit TV Player generates two separate App-specific identifiers:

• App-Generated MAC Identifier: The App generates an identifier that is formatted to resemble a MAC address, such as groups of characters separated by colons. This identifier may be displayed or referred to within the App, our backend systems, or support systems as a “MAC” or “MAC address.”
• Device Key: The App also generates a separate Device Key used for device identification, activation, registration, licensing, subscription management, account access control, security, fraud prevention, and support.

The App-Generated MAC Identifier is not the device's actual hardware MAC address or Wi-Fi MAC address.

The term “MAC” or “MAC address,” when displayed by Legit TV Player in connection with device activation or identification, refers to the App-generated identifier described above and does not mean that Legit TV Player has accessed or collected the device's physical network-interface MAC address.

The App-Generated MAC Identifier and Device Key may be transmitted to and stored by our backend systems when necessary to provide device registration, activation, licensing, subscription management, account access control, security, fraud prevention, and support.

Legit TV Player does not collect the device's actual hardware MAC address, Wi-Fi MAC address, SIM serial number, IMEI, IMSI, or other hardware network identifiers.

4. How We Use Information

We may use collected or processed information to:

• Register and identify an App installation or device.
• Generate the App-Generated MAC Identifier.
• Generate the separate Device Key.
• Activate the App and manage device access.
• Check subscription or trial status.
• Manage licensing and account access.
• Help prevent fraud, abuse, duplicate activations, or unauthorized access.
• Add, update, delete, and load user playlists.
• Retrieve and sync playlist categories, live channels, movies, series, EPG information, and related metadata.
• Play media from the user's selected IPTV provider or media source.
• Save user preferences such as player choice, subtitle settings, favourites, recently watched items, parental control settings, and playback settings.
• Provide customer support and troubleshooting.
• Maintain the security, reliability, and functionality of the App.

5. Playlist Credentials

When a user adds an IPTV playlist or provider account, the App may process information such as the provider URL, username, password, playlist name, or other credentials required to access that provider.

These credentials are used only to connect to the provider selected by the user and to provide the requested App functionality.

Users should only enter credentials and playlist information that they are authorized to use and should only use providers they trust.

6. Local Storage and Caching

Legit TV Player may store playlist catalog information and App preferences locally on the user's device using technologies such as SQLite or other local storage mechanisms.

Locally stored information may include:

• Playlist categories.
• Live channel information.
• Movie and series information.
• EPG or program information.
• Favourites.
• Recently watched items.
• Subtitle preferences.
• Playback settings.
• Player preferences.
• Parental control settings and PIN.
• Authentication or session information where required.

Local caching improves App performance and can reduce repeated downloads from the user's selected playlist provider.

Locally stored information may remain on the device until the playlist is removed or replaced, the user clears the App's data, the App removes cached information, parental controls are reset, or the App is uninstalled.

7. Parental Controls

Legit TV Player may provide optional parental control features that allow users to restrict access to certain content, categories, or App features using a PIN or similar access-control mechanism.

Parental control settings and the associated PIN are stored locally on the user's device for the purpose of providing parental control functionality. These settings and the parental-control PIN are not transmitted to our backend server.

Legit TV Player does not use parental control information or the parental-control PIN for advertising, marketing, profiling, or tracking purposes.

Parental controls are provided as a user-controlled access restriction feature. Legit TV Player does not provide or control the media content available through user-added playlists.

Because channels, movies, series, categories, ratings, descriptions, and other media metadata may be supplied by third-party playlist providers selected by the user, Legit TV Player cannot guarantee the accuracy, completeness, or suitability of content classifications, ratings, categories, or metadata supplied by those providers.

Users, parents, or guardians are responsible for configuring parental controls according to their preferences and for determining whether content available through their selected third-party provider is appropriate.

8. Sharing and Transmission of Information

We do not sell users' personal information.

Limited information may be transmitted or shared when necessary to provide App functionality, including:

• Our backend systems: information may be transmitted to our backend systems to register or activate an App installation, process the App-Generated MAC Identifier and Device Key, manage playlists, verify subscription or trial status, manage access, prevent abuse, maintain security, and provide support.
• User-selected IPTV providers: when a user adds a playlist or provider, the App may communicate directly with that provider's server to retrieve playlist data, EPG information, channel information, images, posters, metadata, subtitles, or media playback URLs.
• Service providers and technical services: information may be processed by services or software components used to provide networking, media playback, security, hosting, diagnostics, updates, or other App functionality.
• Legal requirements: we may disclose information when required by applicable law, regulation, legal process, or when reasonably necessary to protect our rights, users, systems, safety, or security.

9. Third-Party Playlist and Content Providers

Playlist URLs, media streams, channel information, logos, posters, EPG information, subtitles, movies, series, content ratings, categories, and related metadata may come from third-party providers selected and configured by the user.

Legit TV Player does not control these third-party providers and is not responsible for their privacy practices, security, availability, legality, accuracy, quality, content, or content classifications.

Users should review the privacy policies and terms of any third-party service they choose to use with Legit TV Player.

10. Android Permissions

Depending on the App version, Android version, and device, Legit TV Player may use permissions or system capabilities including:

• Internet access: used to communicate with our backend systems, user-selected playlist providers, metadata services, and media streams.
• Network state: used to determine network connectivity and handle connection or streaming errors.
• App installation/update functionality: where applicable and permitted by Android, the App may request the ability to initiate an App update installation. Installation remains subject to Android security controls and user authorization.

Legit TV Player does not request access to the device's actual hardware MAC address or Wi-Fi MAC address for the purpose of generating its App-Generated MAC Identifier or Device Key.

11. Security

We use reasonable technical and organizational measures designed to protect information processed by Legit TV Player against unauthorized access, misuse, loss, alteration, or disclosure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure. Users should protect their devices, parental-control PINs, account information, and playlist credentials and should only add playlist credentials from providers they trust.

12. Data Retention

We retain user, device, activation, subscription, App-Generated MAC Identifier, Device Key, and related information only for as long as reasonably necessary to operate the App, provide subscriptions or trials, provide customer support, maintain security, prevent fraud or abuse, resolve disputes, and comply with applicable legal obligations.

Locally cached playlist information, preferences, and parental-control settings may remain on the user's device until they are replaced, reset, removed, cleared, or the App is uninstalled.

13. Data Deletion Requests

Users may request deletion of information associated with their App installation, device registration, or account by contacting: legittvplayer@gmail.com.

To help us identify the appropriate record, users may provide their App-Generated MAC Identifier, Device Key, user ID, registered account information, or other information displayed by Legit TV Player for account or device identification.

If the App displays an identifier as a “MAC” or “MAC address,” users may provide that value when submitting a deletion or support request. This value is the App-Generated MAC Identifier described in this Privacy Policy and is not the device's actual hardware MAC address or Wi-Fi MAC address.

Information stored only locally on the user's device, such as certain cached data, preferences, or parental-control settings, can generally be removed by clearing the App's data, resetting the relevant setting, or uninstalling the App.

After receiving and verifying a valid deletion request, we will delete or anonymize associated information within a reasonable period, except where retention is reasonably necessary or required for legal compliance, security, fraud prevention, abuse prevention, or dispute resolution.

14. Children's Privacy

Legit TV Player is not specifically designed for or directed at children under the age of 13. The availability of parental control functionality does not mean that the App is intended specifically for children.

We do not knowingly collect personal information from children under 13. If you believe that a child has provided personal information through the App, please contact us so that we can review and, where appropriate, delete the information.

15. International Users

Information may be processed or stored in countries where our servers, technical service providers, or user-selected playlist providers operate.

These countries may have data protection laws that differ from those applicable in the user's country or region.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Legit TV Player, our practices, legal requirements, or technical functionality.

When this Privacy Policy is updated, the revised version will be posted on this page and the “Last updated” date will be changed accordingly.

17. Contact Us

If you have questions about this Privacy Policy, privacy practices, support, or data deletion requests, contact us at:

Company: XAVI HOLDINGS
Email: legittvplayer@gmail.com
Phone: +92 313 0689093
Address: Building # 11-C, Lane 7, Ittehad Commercial DHA Phase-6, Karachi South, Karachi South, Pakistan