xp7777 Privacy Policy

1 Introduction

This Privacy Policy describes how xp7777 ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the xp7777 online casino and sports betting platform available at xp7777.org and any associated mobile interface (collectively, the "Platform").

xp7777 is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation and the requirements of our international gaming regulatory licence. We recognise that Pakistani players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This policy should be read in conjunction with the xp7777 Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference into the overall legal framework governing your relationship with xp7777.

2 Data We Collect

2.1 Registration and Identity Data

When you register an xp7777 account, we collect the following personal information:

• Full legal name as it appears on your Pakistani CNIC or passport;
• Date of birth (for age verification — all players must be 21 or older);
• Pakistani CNIC number or passport number (collected during KYC verification);
• Residential address;
• Email address;
• Pakistani mobile phone number.

2.2 Financial and Transaction Data

To process PKR deposits and withdrawals, xp7777 collects:

• JazzCash or EasyPaisa mobile wallet number;
• Bank account details (account title, IBAN, bank name) where bank transfer methods such as HBL, UBL, Meezan Bank, or Bank Alfalah are used;
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references;
• Account balance history for compliance and audit purposes.

2.3 Technical and Usage Data

xp7777 automatically collects certain technical information when you access the Platform:

• IP address and approximate geographic location derived from it;
• Device type, operating system, and browser version;
• Pages visited, games played, session duration, and navigation patterns;
• Login timestamps and session activity logs;
• Betting and gaming history including stake amounts, game selections, and outcomes.

2.4 Communications Data

When you contact xp7777 customer support, participate in promotions, or respond to surveys, we collect records of those communications, including chat transcripts, email correspondence, and any attachments or documents you submit.

3 How We Collect Your Data

xp7777 collects your personal data through the following means:

• Direct submission: Information you provide when registering your account, completing KYC verification, making a deposit or withdrawal, or contacting our support team;
• Automated technologies: Data collected automatically via cookies, server logs, and Platform analytics tools when you browse or interact with xp7777.org;
• Third-party payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other Pakistani banking partners when you initiate a deposit or withdrawal;
• Identity verification providers: Where xp7777 uses a third-party KYC verification service to cross-reference the identity documents you submit against authoritative data sources;
• Fraud prevention and AML screening services: Risk signals and screening results received from compliance service providers used to detect suspicious activity on your account.

4 How We Use Your Data

xp7777 uses the personal data it collects for the following purposes:

• Creating, maintaining, and administering your xp7777 player account;
• Verifying your identity and age (21+ requirement) in accordance with our KYC obligations;
• Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, and Pakistani bank transfer methods;
• Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited conduct as described in our Terms & Conditions;
• Monitoring your gaming activity to identify potential problem gambling behaviour and to administer responsible gaming interventions where appropriate;
• Communicating with you regarding your account, transactions, promotions, and any changes to our policies;
• Responding to customer support enquiries and resolving disputes;
• Complying with our obligations under applicable anti-money laundering, counter-terrorism financing, and gaming regulatory requirements;
• Improving and optimising the Platform through analysis of aggregated usage data;
• Sending you promotional communications regarding xp7777 offers, bonuses, and new features — subject to your communication preferences.

5 Legal Basis for Processing

xp7777 processes your personal data on the following legal grounds depending on the specific processing activity:

• Contract performance: Processing necessary to open and operate your xp7777 account, process transactions, and deliver the services you have requested;
• Legal obligation: Processing required to comply with anti-money laundering legislation, gaming regulatory requirements, tax reporting obligations, and lawful requests from regulatory or law enforcement authorities;
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your rights and freedoms;
• Consent: Processing for direct marketing communications, where your explicit opt-in consent has been obtained. You may withdraw this consent at any time via your account communication preferences or by contacting support.

6 Sharing Your Data

xp7777 does not sell your personal data. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this policy:

• Pakistani payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other banking partners, solely for the purpose of processing your PKR transactions;
• KYC and identity verification providers: Third-party services used to verify your CNIC or passport details during account registration and ongoing compliance reviews;
• AML and fraud screening services: Compliance technology providers used to screen transactions and account activity against financial crime risk databases;
• Game content providers: Licensed game studios whose software is integrated into the xp7777 Platform may receive anonymised session data required for game delivery and technical support;
• Regulatory and law enforcement authorities: Where xp7777 is legally required to disclose player information to gaming regulators, financial intelligence units, or law enforcement agencies, such disclosure will be made without prior notice to the player where required by law;
• Professional advisers: Legal, accounting, and audit firms engaged by xp7777 under binding confidentiality obligations where access to player data is necessary for the performance of their professional services.

7 International Data Transfers

As an internationally licensed online gaming platform, xp7777 may transfer your personal data to servers or service providers located outside of Pakistan. Where such transfers occur, xp7777 implements appropriate contractual safeguards to ensure that your data receives a level of protection equivalent to that provided under the data protection standards applicable to xp7777's regulatory jurisdiction.

Specifically, international transfers of personal data are conducted only where:

• The recipient country has been assessed as providing an adequate level of data protection;
• Standard contractual data protection clauses are in place between xp7777 and the recipient entity; or
• The transfer is necessary for the performance of a contract between you and xp7777, such as processing a cross-border payment transaction.

8 Data Retention

xp7777 retains your personal data for the following periods:

• Active account data: Retained for the duration of your registered account and for a period of five (5) years following account closure, in order to satisfy anti-money laundering record-keeping obligations;
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, as required by gaming regulatory and AML compliance standards;
• Transaction records: Retained for five (5) years from the date of each transaction for financial audit and AML compliance purposes;
• Customer support communications: Retained for two (2) years from the date of the communication or the resolution of any associated dispute, whichever is later;
• Technical and usage logs: Retained for thirteen (13) months for security monitoring and fraud prevention purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.

9 Your Privacy Rights

As a registered xp7777 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14.

xp7777 will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it within the initial thirty-day period.

10 Cookies and Tracking Technologies

xp7777 uses cookies and similar tracking technologies on the Platform to deliver a functional, personalised, and secure experience. The following categories of cookies are used:

• Essential cookies: Required for core Platform functionality including session management, authentication, and security. These cookies cannot be disabled without affecting the usability of the Platform;
• Functional cookies: Remember your preferences such as language settings and display options to personalise your experience across sessions;
• Analytics cookies: Used by xp7777 to understand how players navigate the Platform, which features are most used, and where technical improvements are needed. Analytics data is aggregated and does not identify individual players;
• Security and fraud prevention cookies: Used to detect and prevent bot activity, account takeover attempts, and other suspicious behaviour on the Platform.

You may manage your cookie preferences through your browser settings. Please be aware that disabling essential cookies will impair the functionality of the xp7777 Platform, including your ability to log in and manage your account.

11 Security Measures

xp7777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and xp7777 servers;
• Encrypted storage of sensitive personal and financial data at rest;
• OTP (one-time password) device verification for login and high-value transactions;
• Role-based access controls limiting xp7777 staff access to personal data on a strict need-to-know basis;
• Regular independent penetration testing and security auditing of the Platform infrastructure;
• Continuous real-time monitoring of Platform systems for anomalous activity indicative of a security incident.

While xp7777 takes all reasonable and industry-standard steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights and freedoms, xp7777 will notify you promptly in accordance with applicable regulatory obligations.

12 Minors and Age Policy

The xp7777 Platform is strictly for individuals aged 21 years and above. xp7777 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and xp7777 may request additional documentary evidence of age at any time.

Where xp7777 identifies or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be closed, and any funds held will be handled in accordance with applicable regulatory requirements and our Terms & Conditions.

13 Changes to This Privacy Policy

xp7777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the features available on the Platform. All amendments will be published on this page with a revised "Last Updated" date at the top of the policy.

Where an amendment materially affects how xp7777 processes your personal data, we will notify you by email to the address registered on your account at least seven (7) days before the change takes effect. Continued use of the xp7777 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how xp7777 protects your data. Previous versions of this policy are available upon request by contacting our Data Protection Officer.

14 Contact and Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way xp7777 handles your personal data, or if you wish to exercise any of your data rights described in Section 9, please contact us through the following channels:

• Data Protection Email: [email protected] — please include "Privacy Request" in your subject line
• Live Chat: Available 24/7 from within your logged-in xp7777 account dashboard
• Response Commitment: xp7777 targets a response to all privacy-related correspondence within 30 calendar days of receipt

If you are not satisfied with xp7777's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction in which xp7777 holds its gaming regulatory licence.