xs777 Privacy
Policy

This Privacy Policy ("Policy") describes how xs777 ("xs777," "we," "us," "our") collects, uses, stores, discloses, and protects the personal information of all individuals who visit, register, or use any part of the xs777 online gaming platform, accessible at xs777.bid and associated sub-domains ("the Platform").

xs777 is committed to protecting the privacy of all players, particularly those based in Pakistan, where we serve players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond. xs777 understands that privacy is not merely a legal requirement — it is the foundation of the trust that Pakistani players place in us when they share their personal information, deposit their money, and engage with our gaming products.

By creating an xs777 account, accessing the Platform, or using any xs777 service, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection, processing, and use of your personal data as described herein. If you do not agree with any aspect of this Policy, please do not use the xs777 Platform.

This Privacy Policy should be read alongside the xs777 Terms & Conditions, which govern your overall relationship with xs777, and our Responsible Gaming policy.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is xs777, the operator of the xs777 gaming platform. xs777 determines the purposes and means of processing personal data collected through the Platform and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

xs777 may engage authorised third-party data processors to carry out specific processing activities on our behalf. Such processors act only on xs777's documented instructions and are contractually bound to maintain the same standards of data protection as xs777 itself. xs777 remains responsible for the actions of its data processors with respect to your personal data.

For all data protection queries, rights requests, or privacy complaints, players may contact xs777 at [email protected].

xs777 collects the following categories of personal data from players:

xs777 does not collect sensitive personal data categories (such as health data, religious beliefs, or political opinions) unless specifically required to do so under applicable law or regulation, and in such cases only with your explicit consent.

4.1 Direct Collection

xs777 collects personal data directly from you when you: register an xs777 account; complete KYC identity verification; make a deposit or withdrawal; contact xs777 customer support; respond to a promotional offer; participate in an xs777 survey or competition; or update your account profile information.

4.2 Automated Collection

xs777 automatically collects technical and usage data when you access the Platform, including through cookies, web beacons, pixel tags, and similar tracking technologies. This automated collection begins as soon as you first visit xs777.bid and continues throughout each session. See Section 10 of this Policy for detailed information on xs777's use of cookies.

4.3 Third-Party Sources

xs777 may receive personal data about you from third-party sources, including:

• Identity verification service providers conducting KYC checks on xs777's behalf;
• Payment processors and financial institutions including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, in connection with deposit and withdrawal transactions;
• Fraud prevention and AML screening services;
• Publicly available data sources where relevant to fraud prevention or regulatory compliance.

xs777 uses your personal data for the following purposes:

• Account Registration and Management: To create, verify, and maintain your xs777 account, including processing your login credentials, managing your PKR balance, and maintaining your gaming and transaction history.
• Service Delivery: To provide access to xs777's gaming products including live baccarat, slot games, cricket sportsbook, Vivo Live tables, and all other platform features.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, and bank transfer, and to execute withdrawal requests to your nominated payment method in Pakistani rupees.
• Identity Verification and KYC: To verify your identity, age (21+), and address as required by applicable regulatory and licensing obligations.
• Fraud Prevention and AML: To detect, investigate, and prevent fraud, money laundering, and other financial crime through automated screening and manual review processes.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling, to enforce self-imposed limits and exclusions, and to proactively contact players showing signs of gambling harm.
• Customer Support: To respond to your support queries, complaints, and account-related requests via live chat, email, and other communication channels.
• Platform Improvement: To analyse usage patterns and technical data to improve the xs777 platform, fix errors, and develop new features relevant to Pakistani players.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and licensing conditions.
• Marketing (opt-in only): To send you promotional offers, bonus notifications, and gaming updates where you have consented to receive such communications.

xs777 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil xs777's obligations under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML obligations, and tax reporting requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as marketing communications, where you have provided explicit, freely given, and withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

xs777 does not sell your personal data. xs777 shares your personal data only in the following limited circumstances:

7.1 Service Providers

xs777 shares personal data with authorised third-party service providers who assist in delivering the xs777 platform and services. These include: payment processors (JazzCash, EasyPaisa, bank partners); identity verification and KYC providers; game software studios (whose game platforms receive only anonymised or pseudonymised session identifiers); customer support platform providers; and fraud prevention and AML screening services. All service providers are contractually bound to process data only on xs777's instructions and to maintain appropriate security measures.

7.2 Regulatory and Legal Authorities

xs777 may disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or government bodies when required to do so by applicable law, court order, regulatory instruction, or licensing obligation. xs777 will, where permitted by law, notify affected players of such disclosures.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of xs777's business, personal data held by xs777 may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the acquiring entity will be bound to honour this Privacy Policy or provide a materially equivalent policy.

7.4 With Your Consent

xs777 may share your personal data with other third parties where you have provided specific, informed consent to such sharing. You may withdraw such consent at any time.

xs777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the full duration of your xs777 account relationship plus such additional period as required by applicable law.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with applicable AML and financial record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later.
• Customer Support Communications: Retained for three (3) years from the date of each interaction, unless the subject matter of the communication requires longer retention.
• Technical and Usage Logs: Retained for twelve (12) months from collection, unless the data is required for an active security investigation or legal matter.
• Self-Excluded Player Records: Retained for the duration of the self-exclusion period plus five (5) years following its conclusion, to prevent re-registration during the exclusion window.

At the end of applicable retention periods, xs777 will securely delete or anonymise personal data such that it can no longer be attributed to an identifiable individual.

xs777 implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your browser or device and xs777 servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. The xs777.bid domain enforces HTTPS across all pages.
• Encryption at Rest: Sensitive personal data, including financial information and identity documents, is encrypted when stored on xs777 servers.
• Access Controls: Access to personal data within xs777's systems is restricted to personnel who require access to fulfil their specific job function. All access is logged and periodically audited.
• Payment Security: xs777 processes all PKR transactions through PCI-DSS compliant payment infrastructure. xs777 does not store full JazzCash account numbers or bank card details on its own servers.
• Penetration Testing: xs777 conducts periodic security testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: xs777 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, xs777 will notify affected players and relevant authorities within the timeframes required by applicable law.

While xs777 takes all reasonable steps to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your xs777 login credentials and for notifying xs777 immediately if you suspect unauthorised account access.

xs777 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by the xs777 website when you visit. Cookies enable xs777 to recognise your device, maintain your logged-in session, remember your preferences, and analyse Platform usage patterns.

Types of Cookies Used by xs777

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your xs777 login state and cookies that handle payment session security. These cannot be disabled without breaking Platform functionality.
• Performance Cookies: Collect anonymised data about how visitors use the xs777 Platform — which pages are most visited, how long sessions last, and where errors occur. This data helps xs777 improve platform performance.
• Functional Cookies: Remember your preferences, such as preferred game lobby view, language settings, and responsible gaming limit settings.
• Analytics Cookies: Enable xs777 to understand aggregate usage patterns across the Platform using tools that process data in anonymised form. These cookies do not identify you personally.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect Platform functionality. xs777 does not use tracking cookies to serve third-party advertising on other websites.

xs777 respects your data rights. Subject to applicable law and the specific circumstances of your request, you have the following rights with respect to your personal data held by xs777:

To exercise any of the above rights, contact xs777 at [email protected] with a clear description of your request. xs777 will respond within thirty (30) days and may request identity verification before processing rights requests to ensure your data is not disclosed to an unauthorised third party.

xs777 sends marketing communications — including promotional SMS messages, email newsletters, and in-platform notifications about bonuses and special offers — only to players who have opted in to receive such communications. Opt-in consent is collected during account registration and can be updated at any time through your xs777 account settings.

You may opt out of xs777 marketing communications at any time by: updating your communication preferences in your xs777 account dashboard; clicking the unsubscribe link in any xs777 marketing email; replying STOP to any xs777 marketing SMS; or contacting xs777 support and requesting to be removed from marketing lists. Opting out of marketing communications will not affect your ability to access xs777 services or receive essential account and transaction notifications.

xs777 does not share your contact information with third-party marketing companies. All xs777 marketing is sent directly by xs777 or by authorised marketing service providers acting on xs777's explicit instructions using your data solely for xs777 marketing purposes.

xs777 does not knowingly collect personal data from individuals under the age of 21. The xs777 Platform is strictly intended for adults aged 21 and above. xs777 enforces mandatory age verification for all account holders and reserves the right to request government-issued documentation to confirm age at any stage of the account lifecycle.

If xs777 becomes aware that it has inadvertently collected personal data from an individual under 21 years of age, xs777 will immediately suspend the associated account, delete the personal data, and refund any net real-money balance after deducting any applicable bonus credits. xs777 will not retain personal data of underage individuals beyond what is necessary for the immediate account closure and refund process.

xs777 operates a platform serving Pakistani players, with data processing infrastructure that may involve servers and service providers located in multiple jurisdictions. When xs777 transfers personal data outside of Pakistan to fulfil service delivery obligations — for example, to cloud hosting providers, identity verification services, or gaming software studios — xs777 ensures that such transfers are made with appropriate safeguards in place.

Safeguards for international transfers include: contractual clauses that bind data recipients to equivalent data protection standards; transfers only to recipients in jurisdictions that provide adequate data protection as determined by applicable regulatory frameworks; and technical measures such as encryption that protect data in transit across jurisdictions.

xs777 does not transfer personal data to jurisdictions that xs777 considers to provide inadequate data protection without implementing compensating safeguards sufficient to address the risks of such transfer.

xs777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform services. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Where changes to this Privacy Policy are material — meaning they significantly affect how xs777 processes your personal data or your rights in relation to that data — xs777 will provide advance notice to registered players via their registered phone number or email address at least fourteen (14) days before the changes take effect. Minor clarifications and updates that do not materially affect player rights may be made without advance notice.

Continued use of the xs777 Platform following the effective date of any amendment to this Policy constitutes your acceptance of the updated terms. If you do not accept the amended Policy, you should close your xs777 account before the effective date of the amendment.

For all privacy-related queries, data rights requests, or complaints regarding xs777's handling of your personal data, please contact the xs777 Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the xs777 Platform (accessible after login)
• Subject Line (for email queries): Use "Privacy Request — [Your Account Username]" to ensure your query is directed to the correct team

xs777 will acknowledge all privacy-related requests within seventy-two (72) hours of receipt and will aim to fully resolve the matter within thirty (30) days. Where a request requires additional time due to its complexity or volume, xs777 will notify you of the extended timeline within the initial thirty-day period.

If you are dissatisfied with xs777's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction or to seek other legal remedies as available under applicable law.