Privacy Policy — x7777

This Privacy Policy ("Policy") describes how x7777 ("x7777", "we", "us", "our") collects, uses, stores, and discloses personal information relating to individuals ("you", "your", "User") who access or use the x7777 online gaming and sports betting platform available at x7777.games ("Platform").

x7777 is Pakistan's premier online gaming destination, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We offer cricket betting, live casino games, slots, bingo, and fishing games — all denominated in PKR and accessible via JazzCash, EasyPaisa, and major Pakistani bank transfers. In providing these services, x7777 necessarily processes certain personal data about our players, and we take that responsibility seriously.

This Policy is incorporated by reference into x7777's Terms & Conditions. By registering an account or using the x7777 Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein. If you do not agree with this Policy, you must not use the x7777 Platform.

For the purposes of applicable data protection legislation, x7777 acts as the data controller in respect of the personal data processed in connection with the Platform and the provision of gaming services to Users.

x7777 operates under an internationally recognised gaming licence. The x7777 Platform is operated and maintained by the x7777 gaming group, which holds responsibility for all data processing activities described in this Policy.

For all data protection enquiries, access requests, or complaints, Users should contact x7777's designated data protection contact at: [email protected]. x7777 aims to acknowledge all data protection correspondence within 5 business days of receipt.

x7777 collects personal data across several categories, depending on how you interact with the Platform. The categories of personal data x7777 may collect and process are set out in the table below:

x7777 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

You provide data directly to x7777 when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact x7777 support, participate in a promotion, or respond to a survey. This is the primary source of identity, contact, financial, and KYC data.

4.2 Automated Collection

When you access the x7777 Platform, our servers and analytics systems automatically record technical and usage data, including your IP address, device type, browser version, pages viewed, and the sequence of actions taken during your session. This data is collected via server logs, session tracking scripts, and cookies — as described further in Section 9 of this Policy.

4.3 Third-Party Sources

In certain circumstances, x7777 may receive or verify personal data from third parties, including:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) — to confirm transaction status and account ownership;
• Identity verification service providers — to validate CNIC authenticity and confirm that a User meets the 21+ age requirement;
• Fraud prevention and AML screening services — to fulfil x7777's regulatory obligations under its international gaming licence;
• Responsible gaming self-exclusion registers — to check whether a User has voluntarily excluded themselves from online gaming platforms.

x7777 processes personal data only where there is a valid legal basis for doing so. The primary purposes for which x7777 processes personal data, and the corresponding legal basis for each, are set out below:

• Account Registration & Management: Processing is necessary for the performance of the contract between you and x7777 — specifically, to create and maintain your x7777 account and provide access to gaming services.
• Payment Processing: Processing is necessary for the performance of the contract — to receive PKR deposits via JazzCash and EasyPaisa and to process withdrawal requests to your nominated payment account.
• KYC & Age Verification: Processing is necessary for compliance with x7777's legal obligations under its gaming licence, including confirming that all Users are at least 21 years of age and verifying User identity for anti-money laundering purposes.
• Fraud Prevention & Platform Security: Processing is necessary for x7777's legitimate interests in protecting the integrity of the Platform, preventing fraudulent activity, and safeguarding the interests of genuine Users.
• Responsible Gaming: Processing is necessary for compliance with x7777's regulatory obligations and for x7777's legitimate interest in identifying and supporting Users who may be at risk of problem gambling behaviour.
• Customer Support: Processing is necessary for the performance of the contract — to respond to your enquiries, resolve disputes, and provide technical assistance.
• Marketing Communications: Where you have opted in to receive promotional communications from x7777, processing is based on your consent. You may withdraw consent at any time by updating your communication preferences in Account Settings or by contacting x7777 support.
• Legal Compliance: Processing is necessary for x7777 to comply with applicable laws and regulatory requirements, including record-keeping obligations under gaming and financial regulations.

x7777 may share your personal data with the following categories of third parties:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners receive the minimum data necessary to process your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and age verification services receive identity document data and liveness check results for the sole purpose of verifying your identity and age on behalf of x7777.
• Gaming Software Providers: Game content providers may receive anonymised session and gameplay data to support technical performance, fairness audits, and RNG certification — but not your personally identifiable information.
• Regulatory Authorities: x7777's gaming licence regulator and relevant financial intelligence units may require x7777 to disclose player data in the course of regulatory oversight, audit, or investigation. x7777 is obligated to comply with such requests.
• Fraud Prevention & AML Partners: Specialist fraud detection and anti-money laundering screening services receive limited data for the purpose of screening transactions and account activity against known risk indicators.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers operate under strict data processing agreements with x7777 and may access data only as necessary to provide their contracted services.
• Legal Advisors: Where x7777 is involved in legal proceedings or requires legal advice, personal data may be disclosed to x7777's legal counsel under obligations of professional confidentiality.

All third parties with whom x7777 shares personal data are required to process that data in accordance with x7777's instructions, applicable data protection law, and their contractual obligations to x7777.

x7777 is an internationally operated gaming platform. In the course of providing services to Pakistani players, your personal data may be transferred to, stored in, or processed in countries outside Pakistan, including jurisdictions in which x7777's infrastructure, gaming software providers, or KYC partners are located.

Where personal data is transferred internationally, x7777 takes appropriate measures to ensure that the transfer is lawful and that your data receives an equivalent level of protection as it would under applicable Pakistani data protection standards. Such measures may include:

• Contractual data transfer clauses with recipient organisations that impose data protection obligations consistent with x7777's own standards;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by relevant regulatory bodies;
• Binding corporate rules or equivalent intra-group data transfer mechanisms where data is transferred within the x7777 corporate group.

If you would like further information about the safeguards x7777 applies to international data transfers, please contact x7777 support at [email protected].

x7777 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, x7777 will securely delete or irreversibly anonymise your personal data in accordance with x7777's data destruction procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

x7777 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session continuity, and gather usage analytics that help us improve our services for Pakistani players. The categories of cookies x7777 uses are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the x7777 Platform to function correctly. They enable core features such as account login session management, secure payment flows, and fraud detection checks. These cookies cannot be disabled without significantly impairing Platform functionality.

9.2 Performance & Analytics Cookies

These cookies collect anonymised information about how visitors use the x7777 Platform — which pages are visited most frequently, how long Users spend on each section, and where navigation errors occur. This data helps x7777 continually improve the Platform experience.

9.3 Functional Cookies

These cookies remember your preferences on the x7777 Platform, such as your chosen language (English or Urdu), display settings, and any responsible gaming limits you have configured. Disabling these cookies may result in a less personalised experience.

9.4 Managing Cookies

You may control or delete cookies through your browser settings at any time. Most modern browsers allow you to refuse new cookies, delete existing cookies, or be alerted when a cookie is being set. Please note that disabling strictly necessary cookies will prevent you from logging in to your x7777 Account or making financial transactions on the Platform.

Subject to applicable law, you have the following rights in respect of your personal data held by x7777. To exercise any of these rights, please contact x7777 at [email protected] with your full name, registered email address, and a description of your request. x7777 will respond within 30 days of receiving a complete request.

• Right of Access: You have the right to request a copy of the personal data x7777 holds about you, together with information about how that data is being processed.
• Right to Rectification: If any personal data x7777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that x7777 delete your personal data. This right is subject to overriding legal and regulatory retention obligations — x7777 cannot delete data that we are legally required to retain.
• Right to Restrict Processing: You may request that x7777 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or while a complaint is under investigation.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where x7777 relies on legitimate interests as the legal basis. x7777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where x7777 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

x7777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS Encryption in Transit: All data transmitted between your device and x7777's servers is encrypted using Transport Layer Security (TLS) protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Password Hashing: x7777 account passwords are stored using secure, computationally expensive one-way hashing algorithms. x7777 never stores your password in plain text and cannot retrieve it — only reset it via your registered mobile number.
• Access Controls: Access to personal data within x7777's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Regular Security Audits: x7777 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the Platform before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, x7777 will notify affected Users and relevant regulatory authorities within the timeframes required by applicable law.

While x7777 takes all reasonable steps to protect your data, no online system can be guaranteed 100% secure. You also play an important role in protecting your x7777 account — please maintain a strong, unique password and never share your login credentials with any third party.

x7777 uses CNIC-based age verification as part of the KYC process to confirm that all registered Users meet the minimum age requirement of 21 years. If a User provides false information about their age during registration, x7777 reserves the right to void all bets, forfeit all balances, and permanently close the account upon discovery.

If you are a parent or guardian and believe that your child has registered an x7777 account without your knowledge, please contact x7777 immediately at [email protected] so that the account can be closed and any personal data securely deleted.

x7777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or x7777's data processing practices. When material changes are made, x7777 will:

• Post the updated Policy on this page with a revised effective date;
• Display a prominent notice on the x7777 Platform informing logged-in Users of the update;
• Where the changes are significant, send a notification to the email address registered on your account.

Your continued use of the x7777 Platform following the publication of any amended Privacy Policy constitutes your acceptance of the revised terms. x7777 recommends that you review this Policy periodically to stay informed of how your data is being handled.

Previous versions of this Privacy Policy are available upon request by contacting x7777 support. The current version, as indicated by the effective date at the top of this page, always supersedes all prior versions.

If you have any questions, concerns, or requests relating to this Privacy Policy or x7777's data processing practices, please contact x7777's data protection team through any of the following channels:

• Email: [email protected] — data rights requests and privacy complaints are handled within 30 days of receipt.
• Live Chat: Available 24/7 on the x7777 Platform in English and Urdu — best for general privacy queries or account-specific questions.

If you are dissatisfied with x7777's response to a privacy complaint, you may escalate the matter to x7777's compliance team by emailing the same address and marking your correspondence "Privacy Escalation — Compliance Review". x7777 will acknowledge escalated complaints within 5 business days and aim to resolve them within 14 business days.