Privacy Policy

This Privacy Policy ("Policy") describes how xd777 ("xd777", "we", "us", "our"), operating the online gaming platform accessible at xd777.cam, collects, processes, stores, shares and protects the personal data of users ("you", "your") who register on, access or otherwise use the Platform.

xd777 is committed to handling personal data responsibly and transparently. We collect only the information that is genuinely necessary to deliver a safe, functional gaming experience, comply with applicable anti-money laundering (AML) obligations, meet our responsible gambling commitments, and provide effective customer support.

This Policy applies to all users of the xd777 Platform, including users who access the Platform from Pakistan. It should be read together with the xd777 Terms & Conditions and Responsible Gambling Policy, which are incorporated by reference.

For the purposes of this Policy, the following terms have the meanings set out below:

xd777 collects Personal Data in the following categories, depending on how you interact with the Platform:

3.1 Registration & Account Data

• Full legal name, date of birth and gender;
• Email address and chosen username;
• Country of residence and, where provided, city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar);
• Account preferences and communication opt-in status.

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., CNIC, passport, driving licence);
• Proof of address documents (e.g., utility bill, bank statement);
• Proof of payment method ownership where required;
• Source of funds declaration for transactions above applicable thresholds.

3.3 Financial & Transaction Data

• Deposit and withdrawal records, including amounts in PKR or other currencies and timestamps;
• Payment method identifiers (e.g., masked account numbers associated with methods such as Easypaisa, JazzCash, Raast, or bank transfers via HBL, UBL, Meezan Bank or Bank Alfalah);
• Betting history, game activity logs and account balance records.

3.4 Technical & Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, browser type and version;
• Session timestamps, page views and navigation paths;
• Cookie identifiers and analytics identifiers.

3.5 Communications Data

• Live chat transcripts and email correspondence with our support team;
• Complaint records and dispute correspondence;
• Responsible gambling tool activation records and self-exclusion requests.

3.6 Data We Do Not Collect

xd777 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric identifiers, except where disclosure is strictly required for identity verification purposes under applicable AML regulations.

xd777 uses the personal data it collects for the following purposes:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except as strictly required by AML screening obligations.

xd777 processes personal data on one or more of the following lawful bases, depending on the purpose:

• Contract performance: Processing necessary to fulfil our contractual obligations to you, including operating your account, processing payments and providing the gaming service;
• Legal obligation: Processing required to comply with applicable AML, KYC, responsible gambling and other regulatory requirements;
• Legitimate interests: Processing necessary for our legitimate interests, including fraud detection, platform security, analytics and service improvement, where these interests are not overridden by your rights;
• Consent: Processing carried out on the basis of your freely given consent, including marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

xd777 does not sell, rent or trade personal data to any third party. We share personal data only in the following circumstances:

• Service Providers: We share data with trusted third-party processors who provide services on our behalf, including payment processing, identity verification, fraud detection, cloud hosting, customer support software and analytics. All processors are contractually bound to handle data securely and only for the purposes specified by xd777.
• Game Software Providers: Certain game-level data (e.g., bet placement, game outcome) may be transmitted to the game studio's platform for the purpose of game delivery and result verification. No more data is shared than is necessary for this purpose.
• Regulatory and Legal Authorities: We disclose personal data to competent authorities, law enforcement agencies or courts when required to do so by applicable law, court order or regulatory instruction.
• Business Transfers: In the event of a merger, acquisition or sale of substantially all assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

xd777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with applicable legal and regulatory retention requirements, and resolve disputes or enforce agreements.

Indicative retention periods are as follows:

• Account and registration data: Retained for the lifetime of the account and for a minimum of five (5) years following permanent account closure, in line with typical AML record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following completion of the business relationship, as required by applicable AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for up to three (3) years from the date of the last communication.
• Analytics and session data: Retained in anonymised or aggregated form for up to twenty-four (24) months.
• Marketing preferences: Retained until you withdraw consent or request deletion, whichever is earlier.

When data is no longer required, it is securely deleted or anonymised in a manner that prevents re-identification.

xd777 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• TLS encryption for all data transmitted between your device and the xd777 Platform;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment identifiers;
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need;
• Two-factor authentication requirements for administrative access to systems holding personal data;
• Regular internal security assessments and vulnerability monitoring;
• Contractual data processing agreements with all third-party service providers specifying mandatory security standards.

Notwithstanding the above, no internet transmission or electronic storage method is completely secure. xd777 cannot guarantee absolute security. In the event of a personal data breach that is likely to result in risk to your rights, we will notify affected users and relevant authorities in accordance with applicable law and without undue delay.

xd777 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, load-balancing cookies and security tokens. They cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — pages visited, session duration, error events and navigation paths — to help us improve performance and user experience. No personally identifiable information is included in analytics data.
• Preference Cookies: Store your language preference, UI settings and cookie consent choices between sessions.

xd777 does not deploy third-party advertising or retargeting cookies. You can manage or delete cookies at any time through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform but may affect some preference-based features.

Subject to applicable law and regulatory limitations (including AML record-keeping obligations), you have the following rights in relation to your personal data held by xd777:

To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within thirty (30) days. We may request identity verification before processing a rights request to protect against unauthorised access to account data.

xd777 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the operator's license jurisdiction. If we discover that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe that a minor in their care has accessed or registered on the xd777 Platform are encouraged to contact us immediately at [email protected] so that we can investigate and take appropriate action.

xd777 operates internationally. Your personal data may be transferred to and processed in countries other than Pakistan, including the jurisdiction in which xd777 holds its operating license and the jurisdictions in which our service providers are located.

Where personal data is transferred outside of your home jurisdiction, we ensure that appropriate safeguards are in place — including contractual data processing agreements, standard contractual clauses, or equivalent legal mechanisms — to provide a level of data protection consistent with applicable standards.

The xd777 Platform may contain references to, or interact with, third-party services such as payment processors, game studios and analytics providers. This Privacy Policy applies only to data processed by xd777 in connection with the Platform. Third-party services operate under their own privacy policies, which we encourage you to review independently.

xd777 is not responsible for the privacy practices of third-party services referenced on the Platform, including payment providers such as Easypaisa, JazzCash, Raast or any banking institution. Their privacy policies govern any personal data submitted directly to their platforms.

xd777 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered users through the Platform interface, via email, or by posting a revised version on this page with an updated effective date.

Your continued use of the xd777 Platform following the effective date of any updated Policy constitutes acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of any changes.

For questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the xd777 data team using the details below: