xd777 Privacy Policy

1 Introduction

xd777 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all registered players, including players based in Pakistan and other jurisdictions who access xd777.app. This Privacy Policy describes how we collect, use, store, disclose, and protect personal information in connection with the operation of our online casino and sports betting platform.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, all of which govern your use of xd777. Capitalised terms used in this Policy that are not defined herein have the meaning given to them in our Terms and Conditions.

2 Data Controller

For the purposes of this Privacy Policy, xd777 acts as the data controller in respect of personal data collected and processed in connection with the operation of the Platform. As data controller, xd777 determines the purposes for which and the means by which personal data is processed.

Questions or requests relating to the processing of your personal data may be directed to our support team via the contact details set out in Section 14 of this Policy.

3 Personal Data We Collect

xd777 collects personal data across the following categories. We limit our data collection to what is necessary for the specific purpose for which it is collected.

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where voluntarily provided by a player in a responsible gaming context (for example, disclosing a gambling problem to our support team).

4 How We Collect Personal Data

xd777 collects personal data through the following means:

• Registration: Data you provide when creating your xd777 account, including name, date of birth, mobile number, and email address.
• KYC Submission: Identity documents and payment method verification materials you upload in response to our KYC requirements.
• Transactions: Data generated when you make deposits or withdrawals via JazzCash, Easypaisa, HBL, UBL, or other supported payment methods.
• Gameplay: Data generated as a result of your use of our sportsbook, live casino, or slot games, including bet amounts, game selections, and session timing.
• Technical Collection: Data collected automatically by our platform systems when you access xd777.app, including IP address, browser fingerprint, and device identifiers.
• Communications: Data you provide when contacting xd777 customer support via live chat, email, or any other support channel.
• Cookies: Data collected via cookies and similar tracking technologies as described in Section 9 of this Policy.

5 Purposes & Legal Basis for Processing

xd777 processes personal data for the following purposes and on the following legal bases:

• Account Operation (Contractual Necessity): To create, manage, and operate your xd777 player account, process deposits and withdrawals, and provide access to games and betting services.
• KYC and Compliance (Legal Obligation): To verify your identity and age, comply with anti-money laundering (AML) obligations, and prevent underage gambling, fraud, and financial crime.
• Security and Fraud Prevention (Legitimate Interest): To protect the integrity of the Platform, detect and prevent fraudulent activity, and safeguard the interests of registered players.
• Customer Support (Contractual Necessity / Legitimate Interest): To respond to your support enquiries, investigate complaints, and resolve disputes.
• Responsible Gaming (Legal Obligation / Legitimate Interest): To monitor gameplay for indicators of problem gambling and to administer responsible gaming tools including deposit limits and self-exclusion.
• Platform Analytics (Legitimate Interest): To understand how the Platform is used and to improve its performance, content, and user experience.
• Marketing Communications (Consent): To send you information about bonuses, promotions, and new games on xd777, where you have consented to receive such communications.

6 Data Sharing & Disclosure

xd777 does not sell personal data to third parties. We may share your personal data with the following categories of recipient, strictly for the purposes described in this Policy:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers, for the purpose of processing deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification services engaged to carry out KYC checks on our behalf. These providers are bound by confidentiality and data processing obligations.
• IT and Platform Infrastructure Providers: Service providers who host, maintain, and support the xd777 technical platform infrastructure. All such providers are contractually bound to process data only on xd777's instructions.
• Regulatory and Law Enforcement Authorities: Where xd777 is required by applicable law, court order, or regulatory authority to disclose personal data, we will do so in compliance with that obligation.
• Fraud Prevention Agencies: Where there is reasonable suspicion of fraud, money laundering, or other financial crime, xd777 may share relevant data with fraud prevention agencies or law enforcement.

Where data is shared with third-party processors, xd777 ensures that appropriate contractual safeguards are in place governing the processing of that data.

7 Data Retention

xd777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, and audit obligations. The following indicative retention periods apply:

• Account and KYC data: Retained for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Customer support communications: Retained for three years from the date of the communication, or longer where relevant to an open dispute or legal proceeding.
• Technical and usage data: Retained for up to 24 months in identifiable form, after which it is aggregated or anonymised.
• Marketing consent records: Retained for as long as your account is active plus three years following account closure.

Where your personal data is no longer required for any purpose, xd777 will securely delete or anonymise it in accordance with our internal data destruction procedures.

8 Data Security

8.1 xd777 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data including KYC documents and financial details, access controls limiting data access to authorised personnel only, and regular security assessments of the Platform.

8.2 Payment card and mobile wallet data is processed by certified payment processors and is not stored in full on xd777's own servers. xd777 retains only the reference information necessary to process refunds and reconcile transactions.

8.3 Notwithstanding the security measures xd777 employs, no method of electronic transmission or storage is 100% secure. You acknowledge that any transmission of personal data to xd777 is at your own risk, and you are responsible for maintaining the security of your account credentials.

8.4 In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected individuals, xd777 will take appropriate steps to notify affected parties and, where required, relevant authorities, in accordance with applicable law.

9 Cookies & Tracking Technologies

9.1 What Are Cookies. Cookies are small text files placed on your device by websites you visit. xd777 uses cookies and similar technologies (including session tokens and local storage) to operate the Platform, maintain your login session, remember your preferences, and collect analytics data about how the Platform is used.

9.2 Types of Cookies We Use.

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state while you use xd777. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as language and display preferences.
• Analytics Cookies: Used to collect aggregated, anonymised data about Platform usage, including page views, session duration, and navigation paths. This data is used to improve the Platform.

9.3 Managing Cookies. You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may limit your ability to use some features of xd777. xd777 does not currently operate a granular cookie consent mechanism; by continuing to use the Platform you consent to the use of cookies as described in this section.

10 Your Data Rights

Subject to applicable law, you have the following rights in respect of personal data held by xd777:

• Right of Access: You may request a copy of the personal data xd777 holds about you.
• Right of Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for xd777 to retain it, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that xd777 restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy.
• Right to Data Portability: You may request that xd777 provide your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact xd777 customer support. We will respond to verifiable data rights requests within 30 days. We may require identity verification before processing a data rights request to protect against unauthorised access.

11 Marketing Communications

xd777 may send you promotional communications about bonuses, new games, PSL cricket betting promotions, and other offers on the Platform, where you have provided consent to receive such communications at the time of registration or through your account settings.

You may opt out of marketing communications at any time by updating your communication preferences in your xd777 account settings or by contacting customer support. Opting out of marketing communications will not affect the delivery of transactional messages, including deposit confirmations, withdrawal notifications, and security alerts.

12 Minors

xd777 does not knowingly collect personal data from persons under the age of 18. Our registration process requires users to confirm that they are aged 18 or over, and KYC verification includes age confirmation. If xd777 becomes aware that personal data has been collected from a person under 18, that account will be immediately closed, the personal data will be securely deleted, and any balance will be voided in accordance with our Terms and Conditions.

If you believe that a minor has created an xd777 account, please contact our support team immediately so that we can take appropriate action.

13 Changes to This Privacy Policy

xd777 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable legal requirements. The Last Updated date at the head of this document will be revised to reflect any changes. Where a material change is made to this Policy, xd777 will endeavour to notify registered players via their registered email address or via an in-platform notification.

Your continued use of xd777 following notification of a change to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the updated Policy, you must stop using xd777 and may request account closure in accordance with our Terms and Conditions.

14 Contact

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy concern, please contact xd777 via:

• Email: [email protected]
• Live Chat: Available 24/7 on xd777.app

We aim to respond to all privacy-related enquiries within 30 days of receipt. For complex requests, we may require additional time and will notify you accordingly.

xd777 takes all privacy concerns seriously. Where a concern cannot be resolved through our internal process, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.