Privacy Policy

This Privacy Policy ("Policy") describes how xs777 ("xs777", "we", "us" or "our") collects, processes, stores, and protects personal data provided by or obtained about individuals ("User", "you" or "your") who access or use the xs777 online gaming platform available at https://xs777.cam (the "Platform").

xs777 recognises that privacy is important to all users, particularly those in Pakistan where awareness of digital data rights is growing rapidly. We are committed to handling your personal data with transparency, care, and purpose limitation — collecting only what is genuinely necessary to operate the Platform, comply with applicable regulatory obligations, and provide you with a high-quality gaming experience.

By registering an account on xs777 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and request account closure through our support team.

This Policy should be read alongside our Terms & Conditions, which govern your general use of the Platform.

For the purposes of this Policy, the following terms have the meanings assigned below:

xs777 collects Personal Data across several categories, each serving a specific and documented purpose. We do not collect data beyond what is reasonably necessary to operate the Platform and meet applicable compliance obligations.

3.1 Registration and Identity Data

When you create an xs777 account, we collect the information you provide directly, including:

• Full legal name;
• Date of birth (for age verification purposes);
• Email address;
• Contact telephone number;
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, or Peshawar) and country;
• Username and encrypted password.

3.2 Verification and KYC Data

To comply with our anti-money laundering and age verification obligations, we may request and process:

• Copies of government-issued identification documents (e.g., CNIC, passport);
• Proof of address documents (e.g., utility bills, bank statements);
• Source of funds documentation where required by applicable regulations;
• Selfie or facial verification image where used for identity-matching purposes.

3.3 Financial and Transaction Data

We collect records of all financial transactions conducted through the Platform, including:

• Deposit and withdrawal amounts, dates, and methods;
• Payment method identifiers (e.g., partial account numbers, wallet identifiers);
• Currency and exchange-rate records where applicable;
• Bonus and promotional transaction history.

xs777 does not store full payment card numbers. All sensitive payment data is processed by our certified payment processors. References to Pakistani payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah are for contextual reference only and do not imply a formal data-sharing arrangement with those providers unless you initiate a transaction through them.

3.4 Gaming and Behavioural Data

We automatically record your activity on the Platform, including:

• Games played, bet amounts, game outcomes, and session durations;
• Responsible gambling tool usage (deposit limits, self-exclusion requests);
• Customer support interactions and chat transcripts;
• Promotional offer uptake and bonus activity.

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser version;
• Pages visited, time on site, and navigation paths;
• Referral source and session identifiers.

xs777 collects Personal Data through the following means:

• Direct provision: Information you submit when registering, completing KYC, making deposits or withdrawals, or contacting support;
• Automated collection: Technical data gathered automatically through cookies, log files, and tracking technologies when you access the Platform;
• Third-party sources: Identity verification agencies, fraud-prevention services, and payment processors who may provide supplementary data to help us validate your identity or assess risk;
• Public sources: Publicly available records used for fraud detection or compliance screening purposes.

xs777 processes your Personal Data for the following documented purposes:

xs777 processes your Personal Data under the following legal bases, consistent with internationally recognised data protection standards:

• Contractual necessity: Processing required to perform the contract between xs777 and you, including account creation, transaction processing, and service delivery;
• Legal obligation: Processing necessary to comply with applicable regulatory requirements, including KYC, AML, and CTF obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and internal analytics — where these interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time.

xs777 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in operating the Platform. These may include:

• Identity verification and KYC technology providers;
• Payment processing partners (who handle deposit and withdrawal transactions);
• Cloud hosting and infrastructure providers;
• Fraud detection and cybersecurity services;
• Customer support platform providers;
• Analytics and platform-performance tools.

All third-party processors are bound by data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to xs777.

7.2 Regulatory and Law Enforcement Bodies

xs777 may disclose your Personal Data to regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law, a lawful court order, or a valid regulatory demand. We will, where legally permissible, notify you of such a disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of xs777's business assets, your Personal Data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy terms applicable to the successor entity.

7.4 Responsible Gambling Partners

Where a user has enrolled in a cross-platform self-exclusion programme, xs777 may share minimal necessary data with the relevant responsible gambling scheme administrator to give effect to that exclusion.

xs777 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the functionality of the Platform. For full cookie management options, refer to the cookie settings panel accessible from the Platform footer.

xs777 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory obligations. Our standard retention periods are as follows:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure, or longer where required by AML or regulatory obligations in the operator's licensing jurisdiction;
• Transaction records: Retained for a minimum of five (5) years for financial audit and regulatory compliance purposes;
• Gaming activity logs: Retained for three (3) years for responsible gambling monitoring and dispute resolution;
• Customer support records: Retained for two (2) years following resolution of the relevant enquiry;
• Marketing consent records: Retained for the duration of your account plus one (1) year, or until consent is withdrawn, whichever is earlier;
• Technical and device data: Retained for up to twelve (12) months for security and platform optimisation purposes.

Following the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an individual.

xs777 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security) protocols;
• Encryption at rest: Sensitive data stored on our servers is encrypted using AES-256 encryption;
• Access controls: Personal Data is accessible only to authorised xs777 personnel on a strictly need-to-know basis, enforced through role-based access controls;
• Two-factor authentication: Available to all users for account login and recommended for all accounts holding a balance;
• Regular security audits: Our systems undergo periodic penetration testing and vulnerability assessments by qualified security professionals;
• Incident response: xs777 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify affected users and relevant authorities in accordance with applicable regulatory requirements.

While xs777 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

Subject to applicable law and xs777's regulatory obligations, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team using the details in Section 15.

xs777 will respond to valid data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, with notice provided to you. xs777 reserves the right to refuse requests that conflict with mandatory regulatory retention obligations or that cannot be verified as originating from the account holder.

The xs777 Platform is strictly intended for adults. We do not knowingly collect, process, or retain Personal Data belonging to individuals under the age of 18, or the higher minimum age required by the operator's licensing jurisdiction. Age verification is a mandatory component of our KYC process.

If xs777 becomes aware that Personal Data has been collected from a minor, that account will be immediately suspended, all associated data will be deleted in accordance with applicable law, and any funds held in that account will be handled in accordance with our responsible gambling and regulatory obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on xs777, please contact our support team immediately at the email address provided in Section 15.

xs777 operates internationally, and your Personal Data may be transferred to and processed in countries other than Pakistan. These countries may have data protection laws that differ from those in your country of residence.

Where such transfers occur, xs777 takes steps to ensure that appropriate safeguards are in place, including:

• Contractual clauses binding recipient entities to data protection standards consistent with this Policy;
• Transfers only to service providers operating in jurisdictions with recognised data protection frameworks where available;
• Ongoing assessment of third-party processor compliance with our data security requirements.

By using the xs777 Platform, you acknowledge that your Personal Data may be transferred outside Pakistan for processing. xs777 does not represent that such transfers are compliant with any specific Pakistani legislation governing cross-border data flows.

xs777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulations, or Platform functionality. When material changes are made, we will provide reasonable notice through the Platform interface or by email to your registered address.

The effective date at the top of this page will be updated whenever the Policy is revised. Your continued use of the Platform following any such update constitutes acceptance of the revised Policy. If you do not agree with the revised terms, you must cease using the Platform and request account closure.

We recommend reviewing this page periodically. Previous versions of this Policy are available upon request from our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the xs777 privacy and support team through the following channels:

xs777 aims to acknowledge all privacy-related requests within five (5) business days and to resolve them within thirty (30) calendar days. Support is provided in English, with Urdu-language assistance available during selected hours for users in Pakistan.