xp777 Privacy Policy – How We Handle Your Data

1. Introduction

This Privacy Policy ("Policy") describes how xp777 ("xp777", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "your") of the xp777 online gaming and sports betting platform accessible at xp777.co (the "Platform").

xp777 is committed to protecting your privacy and handling your personal data with care, transparency, and respect. We process personal data only for the purposes described in this Policy and only to the extent necessary to deliver, secure, and improve the xp777 Platform and its services.

By registering for an xp777 account or using any xp777 service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy is incorporated into and should be read alongside the xp777 Terms & Conditions, available at /terms-conditions.

2. Data Controller

For the purposes of this Policy, xp777 acts as the data controller in respect of personal data collected through the Platform. As data controller, xp777 determines the purposes and means of processing your personal data.

xp777 may engage third-party service providers who process personal data on our behalf as data processors. Such processors are contractually bound to process data only on xp777's instructions and in accordance with this Policy and applicable data protection law.

3. Personal Data We Collect

3.1 Registration & Identity Data

When you create an xp777 account, we collect your full legal name, date of birth, Pakistani mobile number, email address, and a chosen username and password. For identity verification (KYC), we may collect copies of your Computerised National Identity Card (CNIC), passport, or other government-issued identity documents, together with supporting documentation such as proof of address.

3.2 Financial & Transaction Data

We collect records of all deposits and withdrawals processed through your xp777 account, including transaction amounts in PKR, timestamps, and the payment method used (including JazzCash wallet identifiers, Easypaisa account references, bank account details, and card details where applicable). Full payment card numbers are never stored on xp777 systems — card processing is handled by PCI-DSS compliant payment processors.

3.3 Gaming & Betting Activity Data

We maintain records of all betting and gaming activity on your account, including bets placed, game rounds played, outcomes, wagering history, and responsible gaming settings you have configured. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.4 Technical & Usage Data

When you access the xp777 Platform, we automatically collect technical data including your IP address, device type and identifiers, operating system, browser type and version, session start and end timestamps, pages visited, and click and navigation data. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

3.5 Communications Data

We retain records of communications between you and xp777, including live chat transcripts, email correspondence, and support ticket records. These records are maintained for quality assurance, dispute resolution, and regulatory purposes.

4. How We Collect Your Data

xp777 collects personal data through the following channels:

• Directly from you — through account registration forms, KYC document submissions, deposit and withdrawal requests, support communications, and your use of Platform features.
• Automatically — through cookies, web beacons, server logs, and similar technologies when you access and use the xp777 Platform.
• From third parties — from identity verification providers, payment processors (including JazzCash and Easypaisa), fraud prevention services, and where you have given consent, from social login providers.

5. Legal Basis for Processing

xp777 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our obligations under the xp777 Terms & Conditions, including account management, payment processing, and bet settlement.
• Legal obligation — processing required to comply with applicable anti-money laundering regulations, identity verification requirements, and regulatory reporting obligations.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights.
• Consent — processing for direct marketing communications and non-essential cookies, where you have given specific, informed, and freely given consent. You may withdraw consent at any time.

6. How We Use Your Personal Data

xp777 uses your personal data for the following purposes:

• To create, manage, and secure your xp777 account.
• To process deposits and withdrawals in PKR through your chosen payment methods.
• To verify your identity and age in accordance with KYC requirements, including confirming you are 18 years or older.
• To settle bets, resolve disputes, and maintain accurate betting and gaming records.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities on the Platform.
• To monitor for responsible gaming concerns and to apply responsible gaming restrictions where appropriate.
• To provide customer support and respond to your enquiries and complaints.
• To send you account-related notifications, security alerts, and service updates.
• Where you have consented, to send you promotional communications about xp777 offers and new features.
• To comply with legal and regulatory obligations applicable to xp777.
• To analyse platform usage patterns and improve the xp777 user experience.

7. Data Sharing & Disclosure

7.1 xp777 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only as described in this Policy.

7.2 We share personal data with the following categories of third parties where necessary to deliver our services:

• Payment processors — including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard acquiring banks, Skrill, and Neteller, solely for the purpose of processing your transactions.
• Identity verification providers — third-party KYC service providers who verify your identity documents and conduct age and address verification checks.
• Fraud prevention & security providers — services that assist xp777 in detecting fraudulent activity, multi-accounting, and other security threats.
• IT infrastructure providers — cloud hosting and data centre providers who store Platform data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities — where disclosure is required by applicable law, court order, or regulatory directive.

7.3 All third-party data processors engaged by xp777 are subject to contractual obligations that require them to process your personal data only on xp777's instructions and in accordance with applicable data protection law.

8. International Data Transfers

8.1 xp777 is an internationally operated platform. Your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, xp777 ensures that appropriate safeguards are in place to protect your personal data, consistent with applicable data protection standards.

8.2 International transfers are made to service providers located in jurisdictions with recognised data protection frameworks, or pursuant to contractual arrangements that impose data protection obligations equivalent to those applicable under this Policy.

9. Data Retention

9.1 xp777 retains your personal data for as long as your account remains active and for such additional period as is required by applicable law or legitimate business purposes following account closure.

9.2 Transaction records, betting history, and identity verification documents are typically retained for a minimum of five (5) years following account closure to meet anti-money laundering record-keeping requirements. After this retention period, data is securely deleted or anonymised.

9.3 Where you request account closure and data deletion, xp777 will process your request subject to the retention obligations described above. Data that must be retained by law cannot be deleted upon request but will be restricted from active processing.

10. Security Measures

xp777 implements technical and organisational security measures commensurate with the risk associated with processing your personal data, including:

• TLS 1.2/1.3 encryption for all data transmitted between your device and the xp777 Platform.
• AES-256 encryption for sensitive personal data stored on xp777 systems.
• Role-based access controls limiting personal data access to authorised xp777 personnel on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication available on all xp777 user accounts.
• Real-time fraud and anomaly detection monitoring on all account activity.

Notwithstanding the above measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your xp777 account credentials. If you suspect unauthorised access to your account, contact xp777 support immediately.

11. Cookies & Similar Technologies

11.1 xp777 uses cookies, web beacons, and similar tracking technologies to maintain your login session, store your language and display preferences, measure platform usage and performance, and where you have consented, to deliver relevant promotional content.

11.2 The following categories of cookies are used on the xp777 Platform:

• Strictly necessary cookies — required for the Platform to function and cannot be disabled. These include session authentication cookies.
• Analytics cookies — used to measure and analyse Platform usage patterns to improve performance and user experience. These are set only where you have consented.
• Marketing cookies — used to deliver relevant promotional content. These are set only where you have given explicit consent.

11.3 You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the xp777 Platform.

12. Your Privacy Rights

Subject to applicable law and legal retention obligations, you have the following rights in respect of your personal data held by xp777:

• Right of access — to request a copy of the personal data xp777 holds about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of your personal data where processing is no longer necessary, subject to legal retention requirements.
• Right to restriction — to request that processing of your personal data be restricted in certain circumstances.
• Right to object — to object to processing carried out on the basis of legitimate interests.
• Right to withdraw consent — to withdraw consent for marketing communications or non-essential cookies at any time, without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact xp777 support in writing at [email protected]. xp777 will respond to verifiable requests within thirty (30) calendar days. We may require identity verification before processing requests to protect against unauthorised disclosure.

13. Children & Minors

The xp777 Platform is strictly for users aged 18 years and older. xp777 does not knowingly collect personal data from any person under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and have reason to believe that a person under 18 in your care has registered for an xp777 account, please contact [email protected] immediately.

14. Marketing Communications

14.1 xp777 may send you promotional communications about platform offers, new games, sports betting promotions, and other xp777 features where you have opted in to receive such communications during account registration or subsequently through your account settings.

14.2 You may opt out of marketing communications at any time by updating your preferences in your xp777 account settings, or by contacting xp777 support at [email protected] with an unsubscribe request. Opting out of marketing communications will not affect transactional or account-related notifications, which are sent as part of the xp777 service.

15. Updates to This Policy

xp777 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to account holders via email or in-platform notification prior to the change taking effect.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the xp777 Platform following notification of a policy update constitutes your acceptance of the revised Policy.

16. Contact Us

For privacy-related queries, requests to exercise your data rights, or concerns about how xp777 processes your personal data, please contact us at: