xd777 —
Privacy Policy

This Privacy Policy (hereinafter "the Policy") is issued by xd777 (hereinafter "xd777", "we", "us" or "the Platform") and applies to all personal data collected, processed, stored and used in connection with the xd777 website, mobile applications, account services, gaming products, payment facilities and all associated features of the xd777 platform (collectively, "the Services").

This Policy applies to all individuals who interact with xd777, including registered account holders, individuals who browse the xd777 platform without registering, and individuals who contact xd777 through any available support channel. In this Policy, "you", "your" or "the Player" refers to any such individual.

By registering an xd777 account or by accessing the xd777 platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the xd777 platform.

xd777 is the data controller in respect of all personal data collected through the xd777 platform. As data controller, xd777 is responsible for determining the purposes and means of processing your personal data, and for ensuring that such processing is conducted lawfully, fairly and transparently.

xd777 operates xd777.biz as an online casino and sports betting platform serving Pakistani players. All data processing activities undertaken by xd777 are carried out in accordance with the standards required by xd777's operating licence and applicable data protection frameworks.

Where xd777 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers or cloud infrastructure operators — those parties act as data processors under contractual obligations that require them to process data only as instructed by xd777 and to maintain appropriate security standards.

xd777 collects the following categories of personal data from Pakistani players and platform visitors. The specific data collected in each case depends on the nature of your interaction with the xd777 platform.

xd777 collects personal data through the following means:

Data you provide directly to xd777 when: creating an xd777 account (registration form); submitting KYC identity and address documents; initiating deposit or withdrawal transactions; contacting xd777's customer support via live chat or email; participating in promotions or completing surveys; or updating your account profile or settings through the xd777 dashboard.

Data collected automatically when you access the xd777 platform, including: technical device and browser data; IP address and approximate geographic location; session activity logs; pages visited and time spent on the xd777 platform; game session data and betting activity; and cookies and similar tracking technologies as detailed in Section 10.

xd777 may receive certain data about you from third parties in the course of operating the platform, including: identity verification agencies (CNIC validation and age verification); payment processors (JazzCash, EasyPaisa, banking partners) for transaction confirmation and fraud screening; fraud detection and anti-money laundering screening service providers; and analytics and technical services providers operating on xd777's behalf.

xd777 processes personal data for the following specific purposes, each supported by a lawful basis for processing:

• Account Registration & Management — To create and maintain your xd777 account, authenticate your identity at login and manage your account settings and preferences. Legal basis: Contract performance.
• KYC & Age Verification — To verify your identity, confirm you are aged 21 or over, and satisfy mandatory Know Your Customer obligations. Legal basis: Legal obligation & contract performance.
• Payment Processing — To process deposits and withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and other supported Pakistani payment methods. Legal basis: Contract performance.
• Gaming Services — To provide access to xd777's sports betting, live casino, slot and other gaming products; to record and settle bets; and to calculate and credit winnings. Legal basis: Contract performance.
• Fraud Prevention & Anti-Money Laundering — To detect, investigate and prevent fraudulent activity, account abuse, money laundering and other illicit conduct on the xd777 platform. Legal basis: Legal obligation & legitimate interests.
• Responsible Gaming — To monitor gaming patterns, apply deposit limits and self-exclusion decisions, and fulfil xd777's responsible gaming obligations. Legal basis: Legal obligation & legitimate interests.
• Customer Support — To respond to your enquiries, resolve disputes and manage complaints submitted through xd777's support channels. Legal basis: Contract performance & legitimate interests.
• Platform Improvement — To analyse usage patterns, improve the xd777 user interface and develop new features for Pakistani players. Legal basis: Legitimate interests.
• Promotional Communications — To send you relevant bonus offers, promotions and platform updates where you have consented to receive such communications. Legal basis: Consent (withdrawable at any time).
• Legal Compliance — To comply with applicable laws, regulatory requirements, court orders and lawful requests from competent authorities. Legal basis: Legal obligation.

xd777 does not sell your personal data to third parties. xd777 shares personal data only where necessary and only with the following categories of recipients, each bound by appropriate data protection obligations:

JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and other payment service providers receive the transaction and account information strictly necessary to process your deposits and withdrawals. These providers are bound by their own privacy and security obligations and by xd777's data processing agreements.

Third-party identity verification agencies receive your CNIC and related documentation to confirm your identity and age as part of the mandatory KYC process. These providers process your data only for the purpose of identity verification on xd777's behalf.

Third-party game studios whose titles appear in the xd777 casino may receive certain technical and session data necessary to deliver their games to your device. Game providers do not receive your financial or full identity data.

Specialised fraud detection and anti-money laundering screening services may process your account data to detect and prevent illicit activity on the xd777 platform. These providers act under strict data processing agreements.

Cloud hosting, database management, security monitoring and technical infrastructure providers that support xd777's platform operations may process personal data solely as instructed by xd777 for the purpose of platform delivery and maintenance.

xd777 will disclose personal data to law enforcement agencies, regulatory bodies, courts or other competent authorities where legally required to do so, or where xd777 determines in good faith that disclosure is necessary to protect the rights, safety or property of xd777, its players or the public.

xd777 operates an online platform that may, by its nature, involve the transfer of personal data across international borders — for example, where xd777's infrastructure or third-party service providers are located in different countries.

Where personal data collected from Pakistani players is transferred outside Pakistan to countries that may not maintain equivalent data protection standards, xd777 implements appropriate safeguards to ensure that your data remains protected to the standards described in this Policy. Such safeguards include contractual data processing agreements with all third-party recipients that impose binding data protection obligations equivalent to those xd777 applies itself.

By using the xd777 platform, you acknowledge that your data may be processed in countries outside Pakistan and consent to such transfers subject to the safeguards described in this section.

xd777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. The following general retention principles apply:

• Account Data: Retained for the duration of your active xd777 account plus a period of five (5) years following account closure, to satisfy regulatory, audit and anti-money laundering obligations.
• KYC Documents: Retained for a minimum of five (5) years following the conclusion of the business relationship with xd777, in compliance with anti-money laundering regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years, in line with standard financial record-keeping obligations applicable to gaming operators.
• Gaming History: Retained for a minimum of three (3) years following each recorded session, to support dispute resolution and responsible gaming monitoring.
• Support Communications: Retained for three (3) years from the date of each interaction, to support quality assurance and complaint handling.
• Technical & Log Data: Retained for twelve (12) months from the date of collection, unless longer retention is required for a specific security investigation.

At the end of the applicable retention period, xd777 will securely delete or permanently anonymise your personal data such that it can no longer be attributed to you as an individual.

xd777 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, loss, destruction or alteration. Key security measures include:

• Encryption in Transit: All data transmitted between your device and xd777's servers is protected by 256-bit SSL/TLS encryption. This applies to all pages of the xd777 platform, including the login page, account dashboard, deposit and withdrawal sections.
• Encryption at Rest: Sensitive personal data stored in xd777's databases — including identity documents, financial data and authentication credentials — is encrypted using AES-256 encryption at rest.
• Access Control: Access to personal data within xd777's systems is restricted on a strict need-to-know basis. Staff authorised to access personal data are subject to confidentiality obligations and receive regular data protection training.
• Infrastructure Security: xd777's technology infrastructure is hosted in secure, access-controlled environments with continuous intrusion detection, firewall protection and security monitoring.
• Vulnerability Management: xd777 conducts regular security assessments and penetration testing of its platform to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: xd777 maintains a documented data breach response plan. In the event of a data breach that poses risk to your rights and freedoms, xd777 will notify affected players and relevant authorities as required by applicable law.

xd777 uses cookies and similar tracking technologies on its platform to deliver functionality, analyse usage patterns and improve the experience for Pakistani players. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on xd777:

Essential cookies are necessary for the basic functioning of the xd777 platform and cannot be disabled without impairing your ability to use core features including login, gameplay and account management. Analytics cookies may be declined through your browser settings or cookie preference controls on the xd777 platform.

As a data subject, you hold the following rights in respect of your personal data held by xd777. These rights may be exercised by contacting xd777 through the channels specified in Section 15:

The xd777 platform is strictly intended for adults aged 21 years and above. xd777 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account or access real-money gaming services on xd777.

xd777 implements mandatory age verification through CNIC-based KYC to prevent underage access. If xd777 becomes aware that personal data has been collected from an individual under 21, that data will be deleted immediately, the associated account will be closed and all balances will be voided.

The xd777 platform may, from time to time, contain references or links to third-party services — for example, game studio websites or payment provider information pages. xd777 has no control over the privacy practices or data handling of any third-party website or service, and this Privacy Policy does not apply to those external entities.

xd777 encourages you to review the privacy policy of any third-party service you visit through a link on or from the xd777 platform. xd777 accepts no responsibility or liability for the data practices of third-party websites or services, regardless of how you reached them.

xd777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in xd777's data practices, applicable laws or operational requirements. The effective date displayed at the top of this page will be updated whenever a new version of the Policy takes effect.

Where changes to this Policy are material — meaning they meaningfully affect your rights or how xd777 processes your personal data — xd777 will provide advance notice to registered players via the email address on file or through a prominent notification displayed within the xd777 account dashboard.

Your continued use of the xd777 platform following notification of a material update to this Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you should discontinue use of the xd777 platform and may request account closure in accordance with Section 11 of the xd777 Terms & Conditions.

For all privacy-related enquiries, data rights requests, consent withdrawals or to report a data protection concern regarding xd777's handling of your personal data, please use the following contact channels:

• 24/7 Live Chat: Available within your xd777 account dashboard — fastest response for time-sensitive data concerns.
• Email: [email protected] — Please use the subject line "Privacy Request" or "Data Rights Request" for priority handling.
• FAQ: Common privacy and data questions are addressed in the xd777 FAQ section.

When submitting a data rights request, please provide: your full name as registered on your xd777 account; your registered Pakistani mobile number or email address; a clear description of your request; and, where relevant, any supporting documentation. xd777 will verify your identity before processing any data access, correction or deletion request.